Courseiva
Software Troubleshooting →mediumMultiple Choice

220-1102 Software Troubleshooting Practice Question

A user reports that after installing a Windows Update, the system blue screens with 'SYSTEM_SERVICE_EXCEPTION'. The user can boot into Safe Mode. Which step should the technician take first?

⚠ Common exam trap

The trap here is that candidates often jump to System File Checker (SFC) or chkdsk as generic troubleshooting steps for blue screens, but the question specifically states the error occurred after an update and Safe Mode works, making update removal the most direct and efficient first step.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Uninstall the most recent update

The correct first step is to uninstall the most recent Windows Update because the blue screen error 'SYSTEM_SERVICE_EXCEPTION' occurred immediately after the update was installed, and the system can boot into Safe Mode. Safe Mode loads only essential drivers and services, bypassing the problematic update, which allows you to remove it via Control Panel > Programs > View Installed Updates. This directly addresses the root cause—a faulty or incompatible update—without risking data loss or unnecessary system changes.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Run System File Checker (sfc /scannow)

    Why it's wrong here

    SFC /scannow verifies and repairs protected Windows system files by comparing them against cached copies in the WinSxS store. A blue screen immediately after a Windows update is far more likely due to a faulty update payload, driver incompatibility, or post-update corruption, not necessarily missing or corrupted system files. SFC is useful if file corruption is suspected, but it would not remove or roll back the update; it also requires time and may need a reboot. Since the update is the known recent variable, directly addressing it is more logical than scanning the file store.

  • ✓

    Uninstall the most recent update

    Why this is correct

    Because the blue screen began immediately after the update installation, the update itself is the highest-probability cause; uninstalling it is the quickest, most direct test of that hypothesis. In Safe Mode, the Windows Update uninstaller (either via Settings > Update & Security > Windows Update > Update history, or the Control Panel Programs and Features view) can remove the recent update without loading normal startup processes that might also crash. If the system stabilizes after removal, it confirms the update was the culprit, and the specific update can then be hidden or blocked while awaiting a patched release. This targeted action avoids the collateral changes of System Restore and the unrelated diagnostics of file or disk checks.

  • ✗

    Perform a system restore

    Why it's wrong here

    System Restore reverts the entire Windows registry, drivers, and system files to a previous restore point, potentially rolling back unrelated configuration changes and installed applications. While it could remove the problematic update if a restore point predates it, it is a broader, more time-consuming action that may also affect user settings or recent software installations. Uninstalling just the specific update is a more targeted, faster fix that directly isolates the update as the cause without collateral changes. Therefore, System Restore is a valid fallback but not the optimal first response.

  • ✗

    Run chkdsk /f

    Why it's wrong here

    CHKDSK /F checks the file system structure and fixes disk errors such as bad sectors or corrupted metadata, requiring a volume scan that can take significant time. A blue screen immediately following a Windows update is almost never caused by file system corruption, because updates are written to existing NTFS volumes that were already functioning; the failure is more likely introduced by the update's new binaries or driver calls. Running CHKDSK first would delay the targeted resolution and address the wrong subsystem. It could be a last resort after uninstalling the update proves ineffective and if disk-related symptoms (e.g., I/O errors) appear.

About these practice questions

One of 925 original 220-1102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 220-1102 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1102 exam.