220-1102 Software Troubleshooting Practice Question
A technician is supporting a field engineer tablet. The immediate goal is to identify the faulting module after an application crash. Which tool, control, or procedure is the best fit?
⚠ Common exam trap
The trap here is that candidates see 'Event Viewer' (Option A) and assume it is sufficient, but the question specifies 'application crash' and 'faulting module,' which requires the specific Application log subcomponent, not the entire console.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Event Viewer application log
The Event Viewer application log (Option C) is the best tool for identifying the faulting module after an application crash because it records detailed error events, including the specific module (e.g., DLL or executable) that caused the failure, along with exception codes and stack traces. This allows the technician to pinpoint the exact faulty component without relying on guesswork or system-wide restoration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Event Viewer
Why it's wrong here
Simply launching Event Viewer without navigating to the specific Application log is insufficient because the tool aggregates multiple distinct logs: System (driver/hardware), Security (authentication), Setup (Windows installation), and Forwarded Events (centralized collection). For a tablet application issue, the error details reside exclusively in Application, and a generic view might show unrelated system notifications while obscuring the critical app error, leading to wasted effort.
- ✗
Local Users and Groups
Why it's wrong here
Local Users and Groups (lusrmgr.msc) is an administrative console for managing user accounts, password policies, and group memberships, which primarily addresses authorization and access-control problems. A failing application on a field engineer's tablet is unlikely to be solved or diagnosed by altering local accounts unless the issue is specifically a missing privilege, but even then it does not expose the application's error log or crash details, so it is a tangential consideration at best.
- ✓
Event Viewer application log
Why this is correct
The Application log in Event Viewer is the definitive source for application-level failures, recording crash events, hang reports, and .NET errors with specific exception codes and faulting module names. For a field engineer diagnosing a malfunctioning tablet application, this log directly reveals the underlying cause and timestamp, making it the correct primary diagnostic tool rather than a generic system-wide utility.
- ✗
System Restore
Why it's wrong here
System Restore is a recovery mechanism that reverts the Windows system state—including registry, drivers, and installed applications—to a previous restore point, but it does not provide any diagnostic insight into why an application is currently failing. A field engineer needs to first identify the error through logs; using System Restore blindly could remove recent legitimate changes and still fail if the root cause is a corrupted application configuration or a persistent malware infection.
Go deeper
Related to this question
Learn chapter
Troubleshoot: Application Crashes
Key term
Application crash
An application crash is when a software program stops working unexpectedly and either closes, freezes, or becomes unresponsive.
Key term
Event
An event is any identifiable occurrence or action in a computer system, network, or application that can be logged, monitored, or analyzed for security or operational purposes.
About these practice questions
One of 925 original 220-1102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1102 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1102 exam.