easyMultiple Choice
FC0-U71 Practice Question: Refer to the exhibit
Exhibit
Event ID 41: Kernel-Power The system has rebooted without cleanly shutting down first.
Refer to the exhibit. What does this event log entry indicate?
⚠ Common exam trap
CompTIA often tests the distinction between 'unexpected' and 'planned' shutdowns by using event ID 41 versus event ID 1074, where candidates may confuse a scheduled restart (which logs a clean shutdown) with an unexpected power loss.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A power outage or unexpected shutdown occurred
The event log entry indicates a system shutdown that was not expected or planned, as shown by the 'unexpected' keyword and the event ID 41 in the System log, which corresponds to the Kernel-Power source. This typically occurs when the system loses power or crashes without a clean shutdown process, such as during a power outage or hardware failure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A virus infected the system
Why it's wrong here
Virus infection is recorded by antimalware products under their own event sources and IDs, not the system log entry shown. It tempts because unexpected shutdowns can result from malware, but the exhibit's source and event code indicate a normal system operation.
- ✗
A software update was installed
Why it's wrong here
Software update installation is logged by Windows Update or the installer service with distinct event IDs, not the entry shown. It tempts because updates often trigger restarts, but the exhibit's specific source and code identify the logged action directly.
- ✓
A power outage or unexpected shutdown occurred
Why this is correct
The logged event ID and message record an unplanned termination, showing services stopping without a clean shutdown sequence. This pattern, typically paired with unexpected-shutdown or kernel-power entries, indicates the machine lost power rather than restarting normally.
- ✗
A scheduled restart took place
Why it's wrong here
A scheduled restart is logged by the Task Scheduler or Windows Update service, not by the shutdown/restart event codes shown in the exhibit. It tempts because restarts do generate event entries, but the specific source and event ID in the exhibit identify a different cause.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.