Courseiva

CCNA Troubleshooting Questions

60 questions · Troubleshooting topic · All types, answers revealed

Practice these questionsExam hubAll questions
1
MCQeasy

A server administrator notices that a recently installed PCIe network card is not being recognized by the operating system. The server is running Windows Server 2019. The administrator has verified that the card is securely seated and that the slot is enabled in the BIOS. Which of the following should the administrator try FIRST to resolve the issue?

A.Check the Hardware Compatibility List (HCL) for Windows Server 2019.
B.Replace the network card with a known-good card.
C.Reseat the network card in a different PCIe slot.
D.Update the server BIOS to the latest version.
AnswerA

Ensuring the hardware is on the HCL verifies driver support, which is the most logical first step before further hardware or software changes.

Why this answer

Option B is correct because the first step when a newly installed device is not recognized should be to verify hardware compatibility with the operating system (checking the Hardware Compatibility List). This ensures the device has supported drivers. Options A and C are physical steps that have already been considered (secure seating, slot enabled), and D (updating BIOS) is a later step after confirming compatibility.

Practice this question →
2
MCQhard

A database server running on a Linux VM has started experiencing periodic crashes. The VM is hosted on an ESXi hypervisor. The system logs show entries: 'kernel: Out of memory: Kill process 12345 (mysqld) score 700 or sacrifice child'. The VM has 16GB RAM allocated and no memory overcommitment on the host. The DBA reports that the database workload hasn't increased. Which of the following actions should be taken FIRST to diagnose the issue?

A.Add a memory reservation for the VM in ESXi.
B.Check the host's memory utilization for ballooning or swapping.
C.Analyze the database query cache hit ratio and slow query logs.
D.Increase the VM's RAM allocation to 32GB.
AnswerB

Host memory pressure can force balloon driver activity or swapping, causing the VM to see less available RAM and triggering OOM. This is the correct first diagnostic step.

Why this answer

Option C is correct because the OOM killer being invoked in a VM with stable workload suggests possible host-level memory constraints (e.g., ballooning, swapping) affecting the VM. Checking the host's memory utilization helps confirm whether the hypervisor is under memory pressure and causing the VM to think it's out of memory. Options A and D are configuration changes that might alleviate symptoms but don't diagnose root cause.

B addresses database tuning, which is not indicated when the system reports OOM.

Practice this question →
3
MCQhard

A virtualization administrator notices that a critical VM on an ESXi host has high CPU Ready time (%RDY) according to performance charts. The VM has 8 vCPUs assigned, and the host has two physical CPUs with 8 cores each. Other VMs on the host are performing normally. Which of the following actions would MOST likely resolve the high CPU Ready time for this VM?

A.Increase the number of physical cores in the host by adding another CPU.
B.Enable CPU affinity to pin the VM to specific physical cores.
C.Reduce the number of vCPUs assigned to the VM to 4.
D.Migrate the VM to another host with more available CPU capacity.
AnswerD

High CPU Ready time indicates the VM is waiting for physical CPU resources. Migrating to a less contended host resolves the issue without changing the VM's configuration.

Why this answer

Option D is correct because high CPU Ready time indicates the VM is waiting for physical CPU resources. Migrating to a less contended host allows the VM to receive adequate CPU scheduling without waiting. Option A is wrong because adding physical cores is a hardware change that may not be immediately feasible and does not address the root cause; the current host may have sufficient capacity if the VM's vCPU count is appropriate.

Option B is wrong because while CPU pinning can reduce overhead, it may not resolve contention if the host is oversubscribed; also, pinning can lead to other issues. Option C is wrong because reducing vCPUs might help if the VM is not using all vCPUs efficiently, but it could also hurt performance if the workload genuinely needs 8 vCPUs; migration is a less intrusive first step and often the recommended action in such scenarios.

Practice this question →
4
MCQhard

A virtualized server running multiple VMs experiences a sudden performance degradation during peak hours. Storage latency spikes and CPU ready time increases significantly. The hypervisor shows high memory overcommitment but no swapping. Which action would most likely resolve the issue without adding hardware?

A.Reduce the number of vCPUs assigned to each VM
B.Increase memory reservation for all VMs
C.Migrate one or more VMs to another host
D.Enable transparent page sharing
AnswerC

Moving VMs to another host spreads the workload, decreasing CPU contention and storage I/O load on the original host.

Why this answer

Option B is correct because migrating VMs reduces resource contention on the host, lowering CPU ready time and potentially alleviating storage I/O pressure. Option A would only address memory pressure, not CPU ready. Option C is already enabled by default and would not resolve high ready time.

Option D might help CPU contention but could degrade application performance and does not address storage latency directly.

Practice this question →
5
MCQhard

A server in a virtualized environment is experiencing VM performance degradation. The host server has adequate resources. The hypervisor logs show excessive 'ready' time for the CPU. Which of the following is the BEST action to resolve this issue?

A.Disable hyper-threading on the host
B.Increase the number of vCPUs for the VM
C.Reduce the number of VMs on the host
D.Migrate the VM to a different host
AnswerC

Correct. Reducing the number of VMs decreases CPU contention and lowers ready time, improving performance.

Why this answer

Reducing the number of VMs on the host reduces contention for CPU resources, decreasing ready time.

Practice this question →
6
MCQhard

A server administrator is troubleshooting a performance issue on a VMware vSphere host. The host has multiple VMs, and one VM is experiencing high latency on its virtual disk. The administrator checks the datastore and sees it is a RAID 5 array of 4 SAS drives with 50% utilization. Latency for the VM's virtual disk is reported as 200ms. Which action would most likely improve performance?

A.Add a second disk to the RAID 5 array (convert to RAID 6).
B.Migrate the VM to a different datastore with SSD storage.
C.Increase the VM's memory allocation.
D.Change the virtual disk type from thin to thick.
AnswerB

SSD storage provides much lower latency than SAS spinning disks, directly addressing the high latency.

Why this answer

High latency on a heavily utilized RAID 5 array of spinning disks suggests an I/O bottleneck. Migrating to SSD storage would significantly reduce latency. Option A addresses memory, not disk; B might help with allocation but not latency; C might increase capacity but not improve latency (RAID 6 has more overhead).

Practice this question →
7
MCQmedium

After a thunderstorm, a server in a remote office is reachable via remote console but has no network connectivity. The network switch port shows a steady link light, but the server's NIC shows no link light. Which of the following is the MOST likely cause?

A.TCP/IP stack corruption.
B.Switch port is administratively disabled.
C.Incorrect VLAN assignment on the switch port.
D.The NIC hardware has failed.
AnswerD

A failed NIC would not establish a link, explaining why the switch sees a link but the server does not—the fault lies between the server's NIC port and the cable.

Why this answer

Option C is correct. A lack of link light on the server's NIC while the switch has a link indicates a physical failure between the NIC and the cable, such as a damaged NIC. Option A would result in no link on the switch as well.

Option B would still allow the NIC to establish link. Option D would not affect link lights.

Practice this question →
8
PBQeasy

A small business relies on a single Dell PowerEdge T340 tower server running Windows Server 2019 as its primary domain controller and file server. The server is situated in a locked, air-conditioned IT closet and is protected by an online surge protector. During a severe thunderstorm last evening, the building experienced a momentary power loss. This morning, the administrator found the server completely powered off. When the power button is pressed, the front panel diagnostic LEDs briefly illuminate, and all internal cooling fans start spinning for about two to three seconds, but then the server abruptly powers down. There are no audible beep codes, and the monitor never receives a video signal. The administrator has already verified the power cable is firmly seated in both the server and the surge protector, swapped the power cable with a known-good one, and tested the surge protector with another device, which powered on normally. No spare parts are immediately available, and server downtime must be kept to a minimum. What should the administrator do FIRST to diagnose and resolve the problem?

A.Replace the power supply with a compatible, known-good unit.
B.Swap the motherboard with an identical one from a spare parts inventory.
C.Connect the server directly to a different power outlet, bypassing the surge protector.
D.Remove the server's RAM modules and reinstall them one at a time, testing after each.
AnswerA

Why this answer

Option B is correct: the brief fan spin with immediate shutdown and absence of POST is a classic sign of a failing power supply that cannot maintain output under load. After a power surge, the power supply is the most probable damaged component. Option A is wrong because motherboard failure would typically produce beep codes or consistent power without POST, and swapping it is high-effort without first testing the power supply.

Option C is wrong because RAM issues usually generate beep codes or a continuous power-on state with no boot, not the described brief spin-down. Option D is wrong because the administrator already confirmed other devices work on the same circuit, ruling out a supply-side issue.

Practice this question →
9
PBQmedium

A database administrator notices that the primary SQL Server instance has been experiencing severe performance degradation over the past hour. The server is a virtual machine with 8 vCPUs and 64 GB of RAM, and it normally operates with around 40% CPU utilization. Currently, Task Manager shows 100% CPU usage, with the sqlservr.exe process consuming nearly all cycles. The database response times have increased tenfold, and some queries are timing out. There are no scheduled maintenance jobs running, and the transaction log backup completed successfully earlier. The DBA checks active sessions and finds one long-running ad-hoc query from a new reporting tool that was deployed this morning. The query is performing a cross join on two large tables with missing WHERE clauses, causing a Cartesian product. Ending the session will roll back the query and free resources.

A.Increase the virtual machine's memory allocation from 64 GB to 128 GB to reduce paging.
B.Immediately add more vCPUs to the virtual machine to handle the increased load.
C.Identify and kill the offending long-running query using the SQL Server management tools.
D.Restart the SQL Server service to clear all active connections and start fresh.
AnswerC

Why this answer

Option A is the correct immediate action. Identifying and terminating the specific offending query is the fastest way to restore normal operation without disrupting other database activities. Option B (adding vCPUs) is not a quick fix and doesn't address the root cause.

Option C (restarting the SQL service) will disconnect all users and cause unnecessary downtime. Option D (increasing the VM's memory) won't help a CPU-bound problem caused by an inefficient query.

Practice this question →
10
MCQhard

A server that uses iSCSI storage has suddenly lost connectivity to all LUNs. The network team confirms no changes have been made. Which of the following is the FIRST step in troubleshooting this issue?

A.Check the VLAN configuration on the switch.
B.Replace the network cables to the storage array.
C.Verify the status of the iSCSI initiator service on the server.
D.Reconfigure the IP address of the server.
AnswerC

A stopped or failed initiator service would immediately sever all iSCSI connections, making this the logical first check.

Why this answer

Option A is correct because the iSCSI initiator service must be running to connect to targets; verifying its status is a quick, non-disruptive first check on the local server. Option B: replacing cables is premature when there are no network changes and problem is confined to this server. Option C: changing the IP address would likely break other services.

Option D: VLAN issues would normally affect multiple devices and are less likely if the network team reports no changes.

Practice this question →
11
MCQeasy

After a power outage, a server fails to boot and displays a "Missing operating system" error. The server uses RAID 1 for the OS disk. The administrator verifies both drives are present in the RAID configuration utility but one drive is marked as failed. What should the administrator do FIRST?

A.Boot from a Windows recovery media and run chkdsk
B.Check the boot order in BIOS/UEFI
C.Reseat the failed drive and attempt to boot
D.Replace the failed drive and rebuild the array
AnswerB

Power loss can reset BIOS settings; verifying the boot order ensures the system looks for the OS on the correct drive.

Why this answer

Option C is correct because the system may be trying to boot from an incorrect device, especially after a power event may have reset BIOS settings. Option A is a later step if the array is truly broken. Option B is not the first step because the array itself may be bootable.

Option D is unlikely to restore a failed drive.

Practice this question →
12
MCQeasy

A server in the datacenter fails to power on after a scheduled power maintenance. The facility team confirms that power is being supplied to the rack. The server's front panel LED is not illuminated. Which of the following should the administrator check FIRST?

A.Reseat the CPU and memory modules.
B.Verify that the power cable is securely connected to the server and the PDU.
C.Replace the power supply unit.
D.Update the server's BIOS firmware.
AnswerB

Checking physical power connections is the most logical first step in a no-power situation, as cables can become loose during maintenance activities.

Why this answer

Option C is correct because, when a server shows no signs of power (no LED), the first and simplest check is to ensure the power cable is securely connected at both ends. Option A is premature; replacing the power supply should only be attempted after ruling out simple physical connections. Option B is unrelated to a no-power scenario.

Option D would not cause a complete lack of power.

Practice this question →
13
MCQeasy

A server administrator is troubleshooting an issue where a database server's performance degrades every night at 2 AM. Resource monitor shows high disk I/O and CPU usage during that time. There are no scheduled tasks on the server. Which of the following should the administrator investigate FIRST?

A.Network congestion from backups
B.Disk defragmentation tasks
C.A cron job misconfiguration
D.Scheduled antivirus scans on the server
AnswerD

Many antivirus solutions have a default scan schedule; even without local tasks, managed scans can run at 2 AM and heavily use disk and CPU.

Why this answer

Option A is correct because centrally managed antivirus software may perform scans at a default time, causing high resource usage. Option B would result in network utilization, not local disk I/O. Option C is possible but typically scheduled and would appear in the task scheduler.

Option D contradicts the statement that no scheduled tasks exist.

Practice this question →
14
MCQhard

A server uses NIC teaming with LACP (802.3ad) for load balancing and failover. After replacing a failed switch with a new switch of the same model, the server loses network connectivity. The switch ports show no activity. Which of the following is the MOST likely cause?

A.The switch ports are not configured as access ports.
B.The new switch has a different firmware version.
C.The server's NIC teaming mode is set to active/passive.
D.LACP is not enabled on the switch ports.
AnswerD

LACP requires configuration on the switch; default is no LACP, so the switch does not negotiate the port-channel, leading to no connectivity.

Why this answer

LACP must be explicitly enabled and configured on switch ports to form a port-channel (Option D). New switches ship with default configurations that do not include LACP. The server's NIC teaming mode (Option A) was previously working, so it is likely correct.

Access port configuration (Option B) would affect VLAN membership but not completely drop traffic. Firmware differences (Option C) rarely cause total loss of connectivity without other configuration mismatches.

Practice this question →
15
MCQmedium

After installing additional RAM modules in a server, the BIOS displays only a portion of the installed memory. The modules are identical in speed and size but from different manufacturers. Which of the following is the BEST initial troubleshooting step?

A.Replace the motherboard.
B.Run memtest86 immediately.
C.Reseat all memory modules and ensure proper slot population.
D.Update the server BIOS firmware.
AnswerC

This addresses the most common cause of unrecognized memory: poor connections or incorrect order of slots.

Why this answer

Reseating memory and checking population order (Option C) are the first steps because improper seating or incorrect slot placement can cause the BIOS to not recognize all modules. Updating BIOS (Option A) might help if a compatibility issue exists, but physical inspection should come first. Replacing the motherboard (Option B) is too extreme.

Running memtest86 (Option D) is useful but should follow physical checks.

Practice this question →
16
MCQmedium

Refer to the exhibit. What is the most likely cause of this error?

A.The boot order is set incorrectly
B.The hard drive data cable is loose
C.The boot sector is corrupted
D.The hard drive has failed
AnswerA

If the BIOS is set to boot from a non-bootable device (e.g., network or USB) before the hard drive, it will fail with this error. Correcting the boot order resolves it.

Why this answer

The error 'Boot device not found' with 'Hard Disk: (3F0)' indicates the BIOS cannot find a bootable device. The most common cause is an incorrect boot order, where the system is trying to boot from a non-bootable device before the hard drive. A corrupt boot sector would give a different error (e.g., 'Missing operating system').

A loose cable could cause the drive not to be detected at all, but often the system would show no hard drive in BIOS. A failed drive would typically be detected but unbootable.

Practice this question →
17
MCQmedium

A technician is troubleshooting a server that fails to boot. The server displays a 'Boot Device Not Found' error. The technician verifies that the hard drives are spinning and appear in the RAID controller's BIOS. What should the technician check next?

A.Boot order in BIOS
B.Operating system files
C.SATA cable connections
D.RAID array status
AnswerA

If the boot order is set to a non-bootable device or the wrong disk, the server will not find the boot device even though drives are present.

Why this answer

Option B is correct because boot order is a common cause of 'Boot Device Not Found' when drives are detected. Option A is wrong because if drives are spinning and detected, cables are likely fine. Option C is wrong because missing OS files typically produce a different error.

Option D is wrong because the array status is already verified as healthy.

Practice this question →
18
MCQhard

A server running a critical database application crashes and fails to boot with the error message 'Operating System not found.' The server is equipped with a hardware RAID 5 array consisting of three identical disks. A technician suspects a disk failure. What is the MOST likely cause of this error?

A.A single disk has experienced a complete failure.
B.The boot sector on the disk is corrupted.
C.The RAID controller firmware is corrupted.
D.Two or more disks have failed.
AnswerD

RAID 5 cannot survive a second disk failure; the array goes offline, making the OS inaccessible.

Why this answer

Option D is correct because RAID 5 can tolerate a single disk failure and continue operating in a degraded state. The 'Operating System not found' message indicates the RAID array is offline or the boot volume is inaccessible, which most commonly happens when two or more disks fail simultaneously, exceeding the redundancy of RAID 5. Option A would not cause this error; a single failure would allow the OS to boot.

Option C is less common and might produce different errors. Option B could happen but is normally a second-order effect.

Practice this question →
19
MCQeasy

A server administrator notices that a database server is responding slowly to queries. The CPU utilization is at 30%, memory at 40%, and disk latency is normal. Which of the following should the administrator check NEXT?

A.Network bandwidth utilization
B.Power supply status
C.Database index fragmentation
D.Operating system patch level
AnswerA

Correct. High network utilization can cause slow query responses, so checking bandwidth is a logical next step.

Why this answer

Network bandwidth utilization should be checked next because high network usage can cause slow responses even when CPU, memory, and disk are fine.

Practice this question →
20
MCQmedium

A technician is troubleshooting a server that is experiencing high disk I/O wait times. The disk queue length is consistently above 10. Which of the following is the MOST likely cause?

A.Insufficient RAM
B.Disk fragmentation
C.Slow network link
D.Overloaded CPU
AnswerA

Correct. When RAM is low, the system uses the disk as virtual memory, increasing I/O wait and queue length.

Why this answer

Insufficient RAM can cause excessive paging to disk, leading to high disk I/O wait times and long queue lengths.

Practice this question →
21
MCQhard

A database server with 64 GB of RAM and RAID 5 storage is experiencing intermittent performance degradation. System monitoring shows constant 95% memory utilization, high disk queue length, and frequent page faults. The server is running a critical application that cannot be restarted during business hours. Which action will provide the BEST permanent resolution?

A.Replace the RAID 5 array with RAID 10
B.Move the page file to a dedicated SSD
C.Increase the size of the page file
D.Add more physical RAM
AnswerD

More RAM directly alleviates memory pressure, reduces page faults, and eliminates the need for excessive paging.

Why this answer

High memory utilization combined with frequent page faults indicates a memory bottleneck. Adding physical RAM eliminates the need for paging, permanently resolving the root cause. Increasing or moving the page file only mitigates the symptoms, while replacing RAID 5 with RAID 10 improves disk performance but does not address the underlying memory shortage.

Practice this question →
22
PBQmedium

A medium-size enterprise runs a vSphere 7.0 cluster with two hosts (HostA and HostB) for production VMs. Each host has two 10GbE uplinks (vmnic0 and vmnic1) connected to separate physical switches (SW1 and SW2) for redundancy. A single vSphere standard switch (vSwitch0) uses both uplinks with teaming policy set to 'Route based on originating virtual port ID,' 'Network failure detection: Link status only,' and 'Notify switches: Yes.' Lately, several VMs running on HostA experience intermittent network disconnections lasting 20–30 seconds, while VMs on HostB are unaffected. The administrator checks vCenter events and sees repeated messages: 'Lost uplink redundancy on vSwitch0. vmnic0 is down.' followed seconds later by 'Uplink redundancy restored. vmnic0 is up.' The physical switch SW1's log shows the port for vmnic0 transitions through spanning-tree listening and learning states each time this occurs, taking about 15 seconds. The link is a trunk allowing all necessary VLANs, with no errors or security violations. The network team has already swapped the fiber cable and SFP+ transceiver for vmnic0 without improvement. The VMs affected are those whose virtual ports are pinned to vmnic0 by the load-balancing policy; VMs pinned to vmnic1 never experience disconnections. The administrator has also rebooted HostA and updated the NIC firmware, but the flapping continues. What should the administrator do to permanently resolve the intermittent connectivity?

A.Disable the 'Notify switches' option on the vSwitch teaming configuration to avoid unnecessary RARP broadcasts.
B.Reconfigure the physical switch port for vmnic0 to an access port instead of a trunk to simplify spanning-tree operations.
C.Enable spanning-tree PortFast on the SW1 and SW2 ports connected to the hosts so the ports bypass the listening/learning states.
D.Change the NIC teaming load balancing policy to 'Route based on IP hash' to distribute traffic across both uplinks more evenly.
AnswerC

Why this answer

Option C is correct because the symptoms as confirmed by the switch log show that each link flap triggers spanning-tree recalculation, causing the port to cycle through listening and learning states before forwarding resumes. Enabling PortFast on switch ports that are connected to end devices (like ESXi hosts) allows immediate forwarding. Option A is wrong because changing to access mode would break multiple VLANs and still face STP delays.

Option B is wrong because disabling notify switches might worsen MAC table inconsistencies. Option D is wrong because changing load balancing does not stop the flapping or STP convergence; the issue is at layer 2.

Practice this question →
23
MCQmedium

A server administrator is troubleshooting a physical server that randomly crashes once or twice a week. The administrator has already verified that the power supply is functioning correctly and has checked the event logs for critical errors. According to standard troubleshooting methodology, what should the administrator do next?

A.Check network cables and switch connections.
B.Run memory diagnostics (e.g., MemTest86) to test RAM.
C.Reinstall the operating system.
D.Replace the CPU with a known good one.
AnswerB

Random crashes are often caused by faulty memory; running diagnostics is a low-impact step to isolate the issue.

Why this answer

Option B is correct because random crashes often indicate a memory issue, and running memory diagnostics is a logical next step after verifying power and logs. Option A is premature because replacing the CPU is more invasive and less likely to resolve random crashes. Option C is a last resort after hardware issues are ruled out.

Option D is irrelevant to random crashes.

Practice this question →
24
MCQhard

Refer to the exhibit. A technician receives an alert from the monitoring system showing the error in the exhibit. The server is still online, but performance has degraded. Which of the following is the MOST likely cause and appropriate action?

A.The SATA controller driver is corrupted; reinstall the driver
B.The disk has a bad sector; run CHKDSK and monitor
C.The hard disk drive is failing; back up data and replace the drive
D.The disk is experiencing high I/O; upgrade to SSD
AnswerC

Controller errors on \Device\Harddisk0 typically mean the drive is failing. Backing up and replacing is the best course.

Why this answer

Event ID 11 from Disk source indicates a controller error, often due to a failing disk or cable. The most likely cause is a failing hard drive. Backing up and replacing the drive is the appropriate action.

Bad sectors might be the symptom but replacing is safer. Driver corruption is less likely; high I/O wouldn't cause a controller error.

Practice this question →
25
MCQhard

A RAID 5 array is degraded due to a failed disk. What is the best practice for recovery?

A.Replace the failed disk and restore from backup
B.Replace the failed disk and allow the array to rebuild automatically
C.Replace the failed disk and perform a manual rebuild from backup
D.Delete the logical drive and recreate the array
AnswerB

RAID 5 can rebuild using parity; replacing the disk triggers automatic rebuild, preserving data and uptime.

Why this answer

Option C is correct because replacing the failed disk and allowing automatic rebuild utilizes the array's redundancy and minimizes downtime. Option A destroys the existing configuration. Option B and D are unnecessary if the array can rebuild.

Practice this question →
26
MCQmedium

An administrator notices that a Linux server's /var/log/messages file is filled with repeated "eth0: link up" and "eth0: link down" entries every few seconds. The server is connected to a managed switch. Which of the following is the most likely cause?

A.The switch port is configured for auto-negotiation while the NIC is set to 1000/full
B.The NIC driver is outdated
C.Spanning Tree Protocol is blocking the port
D.The switch port is experiencing a flapping MAC address
AnswerD

MAC flapping causes the switch to detect constant changes, resulting in the physical link going up and down rapidly.

Why this answer

Option D is correct because MAC address flapping on a switch port causes the link state to repeatedly change. Option A would cause performance issues but not constant link state changes. Option B might cause instability but is not the typical cause of flapping.

Option C would block traffic but not cause the physical link to go up and down.

Practice this question →
27
MCQmedium

A server configured with RAID 5 has two failed drives. The array is offline and critical data is inaccessible. The administrator has replacement drives available. What should the administrator do to restore the data and array with minimal data loss?

A.Reconfigure the RAID to RAID 0 using the remaining good drives.
B.Replace both failed drives and initiate a full array rebuild.
C.Replace both failed drives and restore from backup.
D.Replace one failed drive, allow rebuild, then replace the second.
AnswerC

Dual drive failure in RAID 5 results in data loss; restoration from backup is required to recover data, and then the array can be recreated.

Why this answer

Option A is correct. RAID 5 can survive a single drive failure, but with two failed drives, the array is completely broken and cannot be rebuilt. Restoring from backup is the only reliable method to recover the data.

Options B and C incorrectly assume the array can still rebuild, and option D would worsen data integrity.

Practice this question →
28
MCQeasy

A server administrator is troubleshooting a network connectivity issue on a server that has recently been moved to a different rack. The server can ping its own IP address but cannot ping the default gateway. Which of the following is the MOST likely cause?

A.Faulty Ethernet cable or incorrect patch panel port
B.Incorrect DNS server configuration
C.Incorrect subnet mask
D.Duplicate IP address on the network
AnswerA

A physical connectivity issue at layer 1 can prevent the server from reaching the gateway while still allowing the NIC to respond to its own IP.

Why this answer

Option A is correct because being able to ping self but not gateway suggests a layer 1 or 2 issue like a faulty patch cable. Option B is wrong because DNS would affect name resolution, not ping. Option C is wrong because incorrect subnet mask would affect self-ping or gateway detection.

Option D is wrong because duplicate IP would cause intermittent issues or conflict messages.

Practice this question →
29
Multi-Selectmedium

A server administrator is troubleshooting a network connectivity issue where a newly installed server cannot communicate with other devices on the same subnet. The server has a static IP address configured. Other devices on the same switch can communicate. Which TWO of the following could be the cause of the issue? (Select TWO)

Select 2 answers
A.The DNS server address is incorrect.
B.The server's default gateway is incorrectly set.
C.The switch port is configured with port security and has learned a different MAC address.
D.Incorrect subnet mask configured on the server.
E.The DHCP server has exhausted its scope.
AnswersC, D

Port security limits allowed MAC addresses; if the port sees the new server's MAC, it may block the frames if the maximum is exceeded or the address is not authorized.

Why this answer

Options A and B are correct. An incorrect subnet mask (A) would cause the server to misinterpret which IPs are local, preventing communication with devices on the same subnet. Port security on the switch (B) could block traffic if the learned MAC address does not match.

Option C (default gateway) is irrelevant for same-subnet communication. Option D (DNS) affects name resolution, not basic IP connectivity. Option E (DHCP) is not used since the server has a static IP.

Practice this question →
30
MCQhard

A technician is troubleshooting a server that fails to boot after a scheduled power outage. The server is connected to a UPS. Upon pressing the power button, the server powers on briefly (fans spin, lights flash) and then shuts down after 2 seconds. The POST does not complete. The server has a dual power supply with each connected to a separate PDU. Which of the following is the MOST likely cause?

A.The UPS battery is depleted
B.One of the power supplies has failed
C.A short circuit in the motherboard
D.The CMOS battery is dead
AnswerC

A short circuit causes the power supply to detect overcurrent and shut down immediately, resulting in a brief power-on and then shutdown.

Why this answer

Option C is correct because immediate power-off after a brief spin-up is a classic symptom of a short circuit, often on the motherboard. Option A is wrong because a failed power supply would typically prevent any power-on or cause beep codes, not a brief power-on. Option B is wrong because the UPS battery condition would not cause this behavior if the server is receiving utility power; also the server is receiving power momentarily.

Option D is wrong because a dead CMOS battery would cause date/time loss but not prevent boot completely.

Practice this question →
31
MCQhard

Refer to the exhibit. The Print Spooler service on a critical Windows Server 2019 fails to start at every boot. The server was recently updated with the latest cumulative patch. Which of the following is the MOST likely cause?

A.The system drive has insufficient free space
B.A service on which the Print Spooler depends is not starting
C.A recent printer driver update is corrupted
D.The password for the service account has expired
AnswerB

Timeouts during service startup are often caused by a stalled or disabled dependency service, especially after OS updates.

Why this answer

Event ID 7000 with a timeout error strongly suggests a dependency service is not starting correctly. The Print Spooler depends on the Remote Procedure Call (RPC) service among others; a recent patch may have altered the startup configuration of a dependency. The Print Spooler runs under the LocalSystem account, so password expiration is not a factor.

A corrupt driver usually causes the service to crash after starting, not a timeout. Insufficient disk space would generate a different error.

Practice this question →
32
MCQeasy

A server fails to boot after installing new memory. The POST beep code indicates a memory error. What is the most likely cause?

A.The new memory is incompatible with the server
B.The memory module is not seated properly
C.The BIOS is not updated to support the new memory
D.The memory is installed in the wrong slot
AnswerA

Incompatibility (wrong type, speed, or rank) is a frequent cause of POST memory errors. The server's memory controller may fail to initialize the module.

Why this answer

The POST memory error most commonly indicates an incompatible or improperly seated memory module. Incompatible memory (e.g., wrong type, speed, or rank) is a frequent issue when adding memory to servers. Option B is less common because most servers auto-detect slots.

Option C is not required for basic memory compatibility. Option D would cause system instability, not a specific memory error.

Practice this question →
33
MCQmedium

Refer to the exhibit. A server administrator receives reports that an internal web server is inaccessible. After connecting locally, the administrator runs a command and receives the following output. Which of the following commands would best resolve the issue?

A.Disable SELinux and restart the httpd service
B.Run `yum update httpd` to update the application
C.Edit the configuration file to correct the typo on line 15
D.Install the mod_ssl module and restart httpd
AnswerD

The 'Invalid command' error for SSLCertificateFile means mod_ssl is not installed; installing it will provide the directive.

Why this answer

Option C is correct because the error indicates the mod_ssl module is missing; installing it provides the SSLCertificateFile directive. Option A updates the package but does not add missing modules. Option B would not help because the directive is spelled correctly.

Option D is unrelated to the module error.

Practice this question →
34
MCQeasy

Refer to the exhibit. A Windows file server at a branch office lost network connectivity after a scheduled reboot. The administrator logs in via the console and runs `ipconfig /all`, which shows the output in the exhibit. The server should have a static IP of 10.0.0.50. What should the administrator do to restore connectivity?

A.Disable IPv6 on the network adapter.
B.The DHCP server is unreachable; check DHCP server availability.
C.Release and renew the DHCP lease.
D.Set a static IP configuration as intended.
AnswerD

Because the server is intended to use a static IP, the administrator must manually configure the IP, subnet mask, and gateway to restore connectivity.

Why this answer

Option A is correct. The exhibit shows an APIPA address (169.254.x.x), which indicates the server obtained an automatic private address because it could not reach a DHCP server. However, since the server is supposed to use a static IP, the administrator should directly configure the static IP settings.

Option B would fail because no DHCP server is reachable. Option C is true but not the correct solution for a server that needs a static IP. Option D is unrelated to the IPv4 configuration issue.

Practice this question →
35
MCQmedium

A server cannot connect to a specific network share. The administrator can successfully ping the server's IP address from the client. Which of the following is MOST likely causing the issue?

A.Incorrect subnet mask
B.Duplicate IP address on the network
C.DNS server is misconfigured
D.Host-based firewall blocking file sharing ports
AnswerD

Correct — Firewalls often allow ICMP but block TCP/UDP ports used by SMB/CIFS, so ping succeeds but share access fails.

Why this answer

Option C is correct because Windows Firewall or an equivalent host-based firewall may block SMB (port 445) or NetBIOS ports, preventing share access even though ICMP is allowed. Option A is wrong because DNS would affect name resolution, not reachability by IP. Option B is wrong because an incorrect subnet mask would generally prevent any communication, including pings.

Option D is wrong because a duplicate IP would cause intermittent connectivity or an IP conflict error, not a consistent inability to access shares while ping works.

Practice this question →
36
MCQmedium

A technician is troubleshooting a server that fails to boot after a power outage. The server displays a "Non-system disk or disk error" message. Which action should the technician take first?

A.Run a filesystem check utility from a recovery disk.
B.Replace the hard drive with a known good one.
C.Reseat the hard drive data and power cables.
D.Check the boot order in the BIOS configuration.
AnswerD

Power outages can reset BIOS settings, changing the boot order. Verifying and correcting the boot order is the best first step.

Why this answer

The error indicates that the server cannot find a bootable device. The most common cause after a power outage is a change in the BIOS boot order. Checking the boot order is a quick, non-invasive first step.

Replacing the drive or reseating cables may be necessary if boot order is correct, but starting with boot order is best.

Practice this question →
37
MCQhard

A server running a critical application fails to boot with the error: 'Boot device not found.' The server uses UEFI and a RAID 5 array for the OS. The administrator verifies that all disks are present and powered. Which of the following should the administrator check FIRST?

A.The array configuration in the RAID BIOS
B.The integrity of the OS boot files
C.The boot order in UEFI
D.The RAID controller battery
AnswerA

Correct — The RAID setup utility will show if the array is degraded, offline, or missing, which is the most likely cause of the boot device error.

Why this answer

Option C is correct. With all disks powered and present, the RAID array may be degraded or its configuration lost, leading to the boot device error. Checking the array configuration in the RAID controller's BIOS (or UEFI setup) allows verifying that the array is intact and the boot volume is accessible.

Option A (RAID battery) is important for write cache but not directly causing 'boot device not found.' Option B (boot order) might be an issue, but after checking that the RAID array is operational; if the array is offline, boot order changes won't help. Option D (OS boot files) should be checked after ensuring the RAID subsystem is functional.

Practice this question →
38
MCQmedium

A technician is troubleshooting a server that fails to boot. The server powers on, fans spin, but no video output and no beep codes. The technician reseats the RAM and GPU, but the issue persists. Which of the following should the technician check NEXT?

A.Replace the CMOS battery
B.Test or replace the CPU
C.Flash the BIOS firmware
D.Replace the power supply
AnswerB

A faulty CPU can cause the system to power on with fans but no POST or beep codes. This is a logical next step after verifying RAM and GPU.

Why this answer

Option C is correct because if the system powers on but no POST, a faulty CPU is a common cause when other components are reseated. Option A is wrong because power supply issues would typically cause no power or cycling. Option B is wrong because the CMOS battery is for clock/BIOS settings, not boot failure.

Option D is wrong because BIOS corruption is less likely after reseating.

Practice this question →
39
Multi-Selecthard

Following a firmware update on a server's RAID controller, the server fails to boot and reports "No boot device found." The RAID array status shows healthy in the controller BIOS. Which THREE of the following actions should the administrator take to resolve the issue? (Choose three.)

Select 3 answers
A.Roll back the RAID controller firmware
B.Rebuild the RAID array from backup
C.Reset the RAID controller configuration to defaults
D.Verify the boot order in the system BIOS
E.Install the latest drivers for the RAID controller in the OS
AnswersA, C, D

If the new firmware caused the boot issue, rolling back to the previous version can restore functionality.

Why this answer

Options A, B, and E are correct. Rolling back firmware can undo a bad update. Verifying boot order ensures the correct device is first.

Resetting the controller configuration may clear incompatible settings from the update. Rebuilding the array is unnecessary as it is healthy. Installing OS drivers is impossible without a booted OS.

Practice this question →
40
MCQeasy

A server fails to boot with an 'Operating System Not Found' error. The BIOS detects the hard drive. What is the MOST likely cause?

A.Failed CPU
B.Incorrect memory timings
C.Overheating
D.Corrupted Master Boot Record
AnswerD

If the MBR is damaged or missing, the BIOS can detect the drive but cannot hand off to the OS bootloader.

Why this answer

Option B is correct because a corrupted Master Boot Record (MBR) can prevent the system from locating the OS loader even when the drive is detected by BIOS. Option A (incorrect memory timings) would typically cause POST failures, not a missing OS message. Option C (failed CPU) would prevent POST entirely.

Option D (overheating) would likely cause shutdowns before OS load.

Practice this question →
41
MCQmedium

A server is running out of disk space on the system drive (C:). The server is running Windows Server 2019. The IT manager wants to add more space without downtime. The server has one free SATA port and one available drive bay. Which of the following is the BEST solution?

A.Shrink the existing partition and extend it onto an additional drive
B.Add a new drive, initialize it, and configure a RAID 1 mirror with the existing drive
C.Add a new drive, create a new partition, and mount it as a folder in the system drive
D.Replace the current system drive with a larger one and restore from backup
AnswerC

This allows adding space without downtime; the mounted folder appears as part of C: drive.

Why this answer

Option C is correct because mounting a new drive as a folder into the C: drive allows immediate space expansion without downtime or rebooting. Option A is wrong because it requires downtime for replacement and restore. Option B is wrong because configuring a mirror would require converting to dynamic disk and may require a reboot; also it duplicates data but does not add usable capacity.

Option D is wrong because shrinking the system partition and extending to another disk is complex and often requires reboot or specialized software.

Practice this question →
42
PBQhard

A company uses a two-node failover cluster for a critical database application. The cluster consists of Node A and Node B, with shared storage connected via SAS. During a routine check, the administrator discovers that Node A has failed and the cluster resources did not fail over to Node B. The cluster service is running on Node B, but the database resource remains offline. Node B can successfully ping Node A's management IP address but not the dedicated cluster heartbeat IP. The shared storage appears in the operating system on Node B, but attempts to bring the disks online fail. The administrator must restore database service as quickly as possible. Which of the following actions should the administrator take FIRST?

A.Check and repair connectivity to the shared storage from Node B
B.Run the cluster validation wizard
C.Force a quorum on Node B using the /forcequorum switch
D.Reboot Node A
AnswerA

Why this answer

The immediate problem is that the database resource cannot start because the shared storage cannot be brought online. This indicates a storage connectivity issue (e.g., SAS cable, HBA, or multipath problem) that must be resolved before any cluster actions can succeed. Rebooting Node A (A) might restore the node but takes time and may not fix the storage access for Node B.

Running the cluster validation wizard (B) is a diagnostic step, not a repair action, and would delay service restoration. Forcing quorum on Node B (C) allows cluster operations but does not address the underlying storage problem; the disk would still fail to come online.

Practice this question →
43
PBQhard

The Coho Vineyard company operates a two-node Windows Server failover cluster to provide high availability for a critical SQL database. Node A has been running the database workload without issues, while Node B was taken offline two weeks ago due to a memory module failure. The faulty memory was replaced, and Node B was powered on. The administrator verified that Node B boots correctly, the network links are up, and the cluster service is running. However, the database role fails to start on Node B. Checking the cluster logs reveals that Node B cannot join the cluster, and the event 'Cluster service has lost quorum' is recorded. The administrator confirms both nodes can ping each other and access the shared SAN storage, but the cluster disk resource appears as 'Offline' on Node B. What should the administrator do to resolve the issue and bring the database online?

A.Evict Node B from the cluster and re-add it.
B.Manually force start the cluster service on Node B with the /forcequorum switch.
C.Restore the system state backup on Node B.
D.Run the cluster validation wizard to check configuration.
AnswerA

Why this answer

Evicting and re-adding the node clears stale configuration and allows it to rejoin the cluster properly after an extended period offline and hardware replacement.

Practice this question →
44
MCQhard

After applying a Windows security patch, a server fails to boot and displays 'Bootmgr is missing'. The server is UEFI-based. Which of the following is the MOST efficient way to resolve the issue?

A.Use the recovery environment to repair the boot loader.
B.Reset the BIOS to factory settings.
C.Replace the hard drive and restore from backup.
D.Boot from the installation media and run chkdsk.
AnswerA

Tools like bootrec /fixboot in the recovery environment are specifically designed to fix boot manager issues on UEFI systems.

Why this answer

Option D is correct because the error indicates boot loader corruption, and the recovery environment can repair it without reinstalling the OS or replacing hardware. Option A: chkdsk checks disk errors, not boot loader integrity. Option B is overly destructive and time-consuming.

Option C: BIOS reset does not affect UEFI boot entries or file system boot loader files.

Practice this question →
45
MCQeasy

A server technician has just replaced a failed hard drive in a RAID 5 array. After inserting the new drive, the array begins rebuilding, but after 10 minutes, the rebuild fails and the array status shows 'degraded' again. Which of the following is the MOST likely cause?

A.The new drive has a higher rotational speed.
B.The new drive has a different firmware version than the other drives.
C.The new drive is not hot-swappable and was inserted while the server was on.
D.The new drive is larger than the other drives in the array.
AnswerD

A larger drive may cause rebuild failure because the RAID controller cannot properly integrate a disk with greater capacity than existing members.

Why this answer

Option A is correct. In RAID 5, if the replacement drive is larger than the other drives, some RAID controllers will fail the rebuild because they cannot utilize the extra capacity or may encounter metadata inconsistencies. Option B is unlikely because enterprise drives are typically hot-swappable.

Option C (firmware differences) can sometimes cause issues but is less common than size mismatch. Option D (rotational speed) rarely prevents a rebuild.

Practice this question →
46
PBQhard

An organization has a server with a hardware RAID 5 array consisting of four 2 TB SAS drives. The server hosts a critical database and is configured with a hot spare. During routine monitoring, the storage administrator discovers that one drive has failed and the hot spare has automatically taken over, with the array currently rebuilding. However, the rebuild process repeatedly fails at approximately 30% completion, and the RAID controller logs show I/O errors on the hot spare drive. The failed drive was replaced with an identical model from inventory, and the rebuild was restarted, but it again fails at the same point. All other drives show healthy SMART status, and the server's firmware and RAID controller firmware are up to date. The database is still online and functioning, but the array is running in a degraded state, putting data at risk. The server is located in a remote data center without onsite staff, and a maintenance window is scheduled in three days.

A.Initiate a full array consistency check to find and repair any parity mismatches before rebuilding.
B.Run a low-level diagnostic on the replacement drive and verify its firmware revision against the RAID controller's compatibility list.
C.Back up all data immediately, then break and recreate the RAID 5 array from scratch, restoring the backup.
D.Replace the RAID controller card and its cache module, then attempt the rebuild again.
AnswerB

Why this answer

Option D is correct because the repeated rebuild failure at the same point, with I/O errors on the new drive, suggests either a physical media error on the new drive or an incompatibility issue. Running a manufacturer diagnostic and checking the firmware version of the spare can reveal if the drive is faulty or needs a firmware update to match the controller’s expectations. Option A (replacing the RAID controller) is unlikely needed when the issue seems confined to a single drive slot.

Option B (performing a consistency check) is useful but won't resolve the rebuild failure; it could even cause more wear. Option C (breaking and recreating the array) is the most drastic and will destroy all data, requiring restore from backup.

Practice this question →
47
MCQmedium

Refer to the exhibit. A server is running slowly. Based on the memory statistics, what is the MOST likely issue?

A.Memory leak in an application
B.Virtual memory is misconfigured
C.Insufficient physical memory
D.Page file is too small
AnswerC

Correct. Only 1 GB available indicates physical memory is nearly exhausted, causing excessive paging and slowness.

Why this answer

With only 1 GB of available physical memory out of 16 GB, the server is heavily dependent on paging, leading to slow performance.

Practice this question →
48
MCQeasy

A server with dual redundant power supplies shuts down unexpectedly. One power supply has a solid amber LED. What is the most likely cause?

A.The server is drawing too much power
B.The power cord is unplugged
C.The power supply has failed
D.The server is overheating
AnswerC

An amber LED on a redundant power supply is a standard indicator of failure. The server likely shut down because the other supply could not handle the load alone or also failed.

Why this answer

A solid amber LED on a redundant power supply typically indicates a power supply failure. Overheating would cause both to fail or trigger thermal shutdown. A power cord unplugged would show no LED.

Server overload would not cause a single amber LED.

Practice this question →
49
MCQhard

A web application server is experiencing intermittent 502 Bad Gateway errors during peak usage hours. The server's reverse proxy logs show connections to the backend application server being refused. The application server's resource monitor shows CPU utilization at 95% and memory utilization at 40%. Which of the following actions is MOST likely to resolve the issue?

A.Replace the reverse proxy with a hardware load balancer.
B.Add more CPU cores to the server.
C.Increase the server's physical memory.
D.Adjust thread pool and connection timeout settings on the application server.
AnswerD

Modifying thread pool size and timeouts can allow the server to handle more concurrent requests and reduce connection refusals under load.

Why this answer

Option B is correct. High CPU and connection refusals commonly indicate that the application’s worker thread pool or connection queue is saturated, preventing new connections. Tuning thread pool and timeout settings can alleviate this.

Adding CPU (option C) may help long-term but is not the most direct fix. Memory (option A) is not the bottleneck. Replacing the proxy (option D) does not address the backend overload.

Practice this question →
50
PBQhard

A file server running Windows Server 2016 is critical for a department's daily operations. For the past two weeks, it has been crashing with a blue screen every 1–2 days. The IT team collects minidump files and opens the latest one in WinDbg. After running '!analyze -v', they obtain the following output: ``` DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. Arguments: Arg1: fffff80012345678, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, value 0 = read operation, 1 = write operation Arg4: fffff80abcde1234, address which referenced memory Debugging Details: ... PROCESS_NAME: fileserver.exe SYMBOL_NAME: NetAdapterCx.sys!NetAdapterCxSetLinkState+0x1234 IMAGE_NAME: NetAdapterCx.sys ... ``` The server has 64GB ECC RAM, two Intel Xeon processors, and a Broadcom NetXtreme quad-port 10GbE NIC. The NIC driver was updated from version 7.12.6 to 7.14.8 two weeks ago as part of patch management. The BSODs started occurring immediately after that driver update; prior to the update, the server had been stable for over six months. The driver was obtained from the server manufacturer's support site and installed without error. The administrator wants to restore stability with minimal downtime and risk. Which action should the administrator take FIRST?

A.Replace the Broadcom NIC with a different brand network adapter and disable the onboard NIC in the BIOS.
B.Boot into Safe Mode and roll back the network adapter driver to the previous version (7.12.6).
C.Reinstall Windows Server 2016 and restore data from backups to eliminate any corrupted system files.
D.Run Windows Memory Diagnostic overnight to check for hardware memory errors that might corrupt driver loading.
AnswerB

Why this answer

Option A is correct because the crash dump explicitly denotes NetAdapterCx.sys (the network driver framework) as the cause, and the problem started right after the driver was updated. Rolling back is the quickest and safest step to restore operational stability. Option B is wrong because an OS reinstall is extreme and unlikely to fix a driver-specific issue.

Option C is wrong because the dump identifies a driver, not a memory fault, and ECC memory typically reports errors before causing crashes. Option D is wrong because a hardware replacement is costly and unnecessary when a driver rollback is available.

Practice this question →
51
MCQmedium

A server configured with a RAID 5 array and a hot spare experiences intermittent crashes under heavy disk I/O. A technician suspects a failing drive. Which of the following should the technician do FIRST?

A.Initiate a manual failover to the hot spare.
B.Remove the suspected drive and rebuild the array.
C.Replace the hot spare with a new drive.
D.Run the array manufacturer's diagnostic utility.
AnswerD

This is the first step to confirm a drive failure and identify which drive is problematic.

Why this answer

Running the manufacturer's diagnostic utility (Option B) is correct because it provides a non-invasive method to verify the health of the drives without disrupting the array. Replacing the hot spare (Option A) is premature without confirmation. Removing a suspected drive (Option C) risks data loss if the array is already degraded.

Initiating a manual failover (Option D) is unnecessary if the drive has not actually failed.

Practice this question →
52
MCQmedium

Users report slow file server performance. The administrator suspects a single process is consuming excessive CPU and wants to analyse its threads and handles. Which tool should be used?

A.System Information
B.Task Manager
C.Resource Monitor
D.Performance Monitor
AnswerC

Resource Monitor offers detailed real-time metrics per process, including thread and handle counts, allowing precise identification of resource consumption.

Why this answer

Resource Monitor provides real-time, in-depth per-process data including CPU, memory, disk, network, and the ability to drill down into associated threads and handles. Task Manager shows basic per-process CPU but not thread-level details. Performance Monitor is for long-term logging.

System Information only gives static hardware/software inventory.

Practice this question →
53
Multi-Selectmedium

A server experienced an unexpected power loss. After power is restored, the server boots successfully, but several critical services fail to start automatically. The administrator checks the system logs and finds errors indicating missing LUNs from a SAN. The SAN administrator confirms the SAN is online and the LUNs are assigned to the server's WWNs. The server uses FC HBAs. Which TWO steps should the administrator perform to diagnose the issue?

Select 2 answers
A.Rescan the SCSI bus on the server.
B.Check the FC switch zoning configuration.
C.Replace the FC HBAs.
D.Reboot the SAN controller.
E.Reinstall the multipathing driver.
AnswersA, B

A rescan will refresh the server's list of visible LUNs and may re-establish connections that were lost during the power cycle.

Why this answer

Options A and C are correct. After an unexpected power loss, the SAN topology or host's view of LUNs may be stale. Rescanning the SCSI bus forces the host to re-discover all accessible LUNs.

Checking FC switch zoning ensures that the path between the host and storage is still correctly allowed after the power event. Option B is unnecessary and disruptive, as the SAN is confirmed online. Option D is premature.

Option E is unrelated to sudden LUN disappearance after power restoration.

Practice this question →
54
PBQhard

A data center technician is troubleshooting a server that is overheating and shutting down intermittently. The server is a 2U rackmount with six fans at the front and a power supply with an integrated fan at the rear. The technician checks the ambient temperature (72°F) and verifies that the server intake temperature is normal. The server's system logs show 'CPU temperature threshold exceeded' before each shutdown. The technician has replaced the thermal paste on the CPU and reseated the heat sink, but the issue persists. Which of the following should the technician do NEXT?

A.Move the server to a cooler location in the data center
B.Reinstall the CPU heat sink with more thermal paste
C.Replace the chassis fans with high-static-pressure models
D.Replace the power supply unit
AnswerC

Why this answer

Option B is correct: the fans may be running but not at full speed due to a faulty fan controller or sensors. Option A is wrong because ambient temp is fine. Option C is wrong because CPU is already reseated.

Option D is wrong because power supply is not indicated.

Practice this question →
55
MCQhard

Refer to the exhibit. A technician is troubleshooting a server that is experiencing data corruption. What is the MOST likely cause?

A.Corrupted file system
B.Loose data cable
C.Failed hard disk drive
D.Faulty RAID controller
AnswerD

Correct. Event ID 11 with 'controller error' indicates a problem with the storage controller, which can cause data corruption.

Why this answer

Event ID 11 with a controller error typically indicates a faulty RAID controller or HBA, not a disk failure or cable issue.

Practice this question →
56
PBQhard

You are a server engineer for a financial services firm. The company recently deployed a new HP ProLiant DL380 Gen10 server running Windows Server 2022 with SQL Server 2019. The server has 2 Intel Xeon Gold processors, 128GB RAM, and a Smart Array P408i-p controller managing two RAID 1 arrays: one for OS (two 300GB 10K SAS) and one for data (four 600GB 10K SAS). After one month, the OS array reports a predictive failure on one drive. You replace the drive via hot-swap, and the RAID controller rebuilds. However, the server now experiences random system crashes with Event ID 1001 (BugCheck) and the SQL database occasionally becomes corrupt requiring restore from backup. The server's RAM has been tested with HP's diagnostic tool and passed, and the CPU temperature is normal. The RAID controller log shows no errors during the rebuild but occasional 'Parity errors' logged before the drive replacement. Which of the following is the MOST likely cause of the current instability?

A.The new replacement drive is faulty.
B.The motherboard has a faulty PCIe slot for the RAID controller.
C.The remaining original OS drive has bad sectors that were not detected.
D.The RAID controller cache module has failed.
AnswerC

Why this answer

Option C is correct because predictive failure on one drive may indicate that the entire mirrored pair has latent defects; the remaining original drive may have bad sectors that were not detected. The parity errors before replacement suggest data inconsistency, and after rebuild, the system relies on the remaining drive which can cause crashes and database corruption. Option A is wrong because the rebuild completed without errors, so the new drive is likely fine.

Option B is wrong because a failed cache module would cause general errors, not specific parity issues. Option D is wrong because a faulty PCIe slot would cause intermittent disconnects of the controller, not these symptoms.

Practice this question →
57
MCQeasy

A server fails to complete POST and emits a series of beeps: two long, three short. According to the manufacturer's documentation, this beep code indicates a memory error. The server has eight DIMMs installed. Which of the following steps should the technician perform FIRST?

A.Replace all memory modules.
B.Reseat all memory modules and attempt to boot.
C.Clear the CMOS battery.
D.Update the server's UEFI firmware.
AnswerB

Reseating corrects poor electrical contacts, which is the most common cause of transient memory errors signaled by POST beeps.

Why this answer

Option A is correct. Reseating memory modules is the least invasive and often the most effective first step for beep codes indicating memory errors, as poor connections from thermal expansion or vibration can cause such issues. Option B is excessive before attempting reseating.

Option C may reset BIOS settings but does not physically reseat RAM. Option D does not directly address the immediate memory detection failure.

Practice this question →
58
MCQmedium

A server's performance degrades significantly during peak usage hours. Monitoring shows high memory utilization and consistently high disk I/O. Which of the following should the technician check FIRST?

A.RAID controller battery status
B.Network bandwidth utilization
C.CPU utilization statistics
D.Page file location and configuration
AnswerD

When physical memory is overcommitted, the server pages to disk; poor page file placement can cause high I/O and slow performance.

Why this answer

Option B is correct because high memory usage and heavy disk I/O suggest excessive paging. Checking the page file location and its performance (e.g., on a slow disk) is the first step to diagnose paging bottlenecks. Option A is less likely if CPU is not a known issue.

Option C would typically cause different symptoms. Option D is unrelated to immediate memory/disk correlation.

Practice this question →
59
MCQhard

Refer to the exhibit. A Linux server started reporting I/O errors to its local disk. The administrator runs `dmesg` and sees the output shown. Which of the following is the MOST likely cause of the errors?

A.The disk has a bad sector that cannot be remapped.
B.The filesystem on /dev/sda is corrupted.
C.The SCSI cable is loose.
D.The RAID controller firmware is outdated.
AnswerA

The Sense Key 'Medium Error' and additional sense 'auto reallocate failed' explicitly indicate an unreadable sector that the drive's internal remapping could not fix.

Why this answer

Option B is correct. The 'Medium Error' sense key along with 'Unrecovered read error - auto reallocate failed' indicates a physical bad sector that the drive could not reallocate. Option A would typically produce a different hostbyte (e.g., DID_NO_CONNECT).

Option C, outdated firmware, rarely causes medium errors. Option D, filesystem corruption, would manifest as filesystem-level errors, not SCSI sense codes.

Practice this question →
60
PBQhard

A company has a small virtualized environment with two ESXi 7.0 hosts (HostA and HostB) managed by vCenter Server. They use a shared iSCSI storage array for all VMs. The network consists of a single physical switch that connects the hosts, storage, and management traffic using VLANs. Yesterday, the switch failed and was replaced with an identical model. After restoring the configuration from a backup, all VMs on HostA are working normally, but all VMs on HostB show 'network disconnected' in the vSphere console. The VMs on HostB are still running, but they cannot communicate with any other device on the network. HostB itself is reachable via its management IP and can access the storage array. The administrator has verified that the physical cables are correct and the NICs are up on HostB. The VLAN configuration on the new switch was restored for the ports connecting HostB, but the issue persists. Which of the following actions should the administrator perform FIRST to restore connectivity?

A.Reboot HostB to renegotiate the network configuration.
B.Restart the vCenter Server service on the vCenter appliance.
C.vMotion all affected VMs from HostB to HostA to confirm they work on HostA.
D.Check the VLAN configuration on the switch ports connected to HostB for the VM network uplinks.
AnswerD

Why this answer

Option B is correct. Since all other functions (management, storage) work and only VM traffic is affected, the most likely cause is incorrect VLAN tagging on the switch port carrying the VM traffic uplink. Restoring a switch config may have missed the exact VLAN trunk settings.

Checking and correcting the VLAN configuration on the switch ports for HostB's VM network is the first targeted step. Options A and C are nondisruptive but don't address the immediate config issue. Option D involves rebooting the host without diagnosing, which is risky and may not fix the issue.

Practice this question →

Ready to test yourself?

Try a timed practice session using only Troubleshooting questions.

Start 20-question session