60 Practice Questions & Answers
A user reports that their Windows 10 computer is running slowly and frequently freezes. You check Task Manager and notice that the CPU usage is consistently at 100% even when no applications are open. Which of the following should you check FIRST?
-
A
Reinstall Windows 10 to eliminate all potential issues
-
B
Run a full system scan with Windows Defender
-
C
Disable all startup programs immediately
-
D
Check the Details tab to identify which process is consuming CPU resources
✓ Correct
Explanation
The Details tab in Task Manager shows individual process CPU usage, allowing you to identify the culprit before taking drastic action. This diagnostic step is essential before implementing solutions.
Which of the following BEST describes the purpose of UEFI Secure Boot?
-
A
Automatically backs up the system before any updates are applied
-
B
Disables legacy BIOS features to improve overall system performance
-
C
Prevents unauthorized kernel-mode drivers and unsigned code from loading during the boot process
✓ Correct
-
D
Encrypts all data stored on the hard drive to prevent unauthorized access
Explanation
Secure Boot verifies the digital signature of boot components to ensure that only authorized, signed code executes during startup, protecting against bootkit malware and rootkits.
A technician needs to remotely access a Windows 10 workstation to provide technical support. The user has already enabled the necessary service. Which protocol is used by Windows Remote Desktop?
-
A
VNC (Virtual Network Computing)
-
B
SNMP (Simple Network Management Protocol)
-
C
RDP (Remote Desktop Protocol)
✓ Correct
-
D
SSH (Secure Shell)
Explanation
Remote Desktop Protocol (RDP) is the native Windows remote access solution that operates on port 3389 and provides encrypted remote desktop connections for technical support scenarios.
You are deploying a Windows domain with multiple user workstations. Which Group Policy setting would you configure to enforce password complexity requirements across all computers in the domain?
-
A
Password Policy under Computer Configuration > Policies > Windows Settings > Security Settings
✓ Correct
-
B
User Rights Assignment in the Default Domain Policy
-
C
Audit Policy to monitor password changes on the domain controller
-
D
Local Security Policy on each individual workstation
Explanation
Password Policy under Computer Configuration in Group Policy allows administrators to set complexity, minimum length, and expiration requirements that apply to all computers in the domain when the GPO is linked.
A Windows user has accidentally deleted important files and emptied the Recycle Bin. What is the MOST effective method to recover these files?
-
A
Boot into Safe Mode and attempt to recover files using built-in recovery tools
-
B
Use System Restore to revert the entire system to a previous checkpoint
-
C
Use third-party file recovery software before writing new data to the drive
✓ Correct
-
D
Run the CHKDSK utility with the /F parameter to repair file system errors
Explanation
Third-party file recovery software can recover deleted files by reading the unallocated space on the drive before new data overwrites it. Acting quickly is critical to maximize recovery success.
Which of the following represents the CORRECT order of steps when performing a clean Windows installation?
-
A
Download Windows ISO, create bootable USB, boot from USB without entering BIOS, skip locale selection, install to default partition
-
B
Create installation media, boot from media, select language and keyboard, choose destination drive, select Custom installation, create partitions, format drive, install Windows
✓ Correct
-
C
Copy Windows files to a folder, run Setup.exe, choose upgrade installation, select destination folder, complete installation
-
D
Insert installation disc, format the destination drive, create partitions, begin Windows installation, choose language settings, select network drivers
Explanation
A clean installation requires creating media, booting from it, selecting language/keyboard, then proceeding to Custom installation where you partition and format the destination drive before installing Windows.
A technician is troubleshooting a Windows system that fails to boot. The BIOS displays an error indicating that no bootable device was found. Which of the following should be checked FIRST?
-
A
Replace the hard drive with a new drive and reinstall Windows
-
B
Perform a motherboard BIOS reset by removing the CMOS battery for several minutes
-
C
Disconnect all USB devices and external drives that might interfere with boot priority
-
D
Verify that the boot device is enabled in BIOS/UEFI and that the hard drive is listed in the boot order
✓ Correct
Explanation
Checking BIOS/UEFI settings for boot device priority and ensuring the hard drive is enabled and properly ordered is the first diagnostic step before considering hardware replacement or CMOS resets.
Which Windows system utility can be used to view and modify user account permissions and group memberships on a local computer?
-
A
Local Users and Groups (lusrmgr.msc)
✓ Correct
-
B
Device Manager
-
C
Disk Management
-
D
System Information
Explanation
Local Users and Groups (lusrmgr.msc) is the Microsoft Management Console snap-in that allows administrators to manage local user accounts, groups, and their respective permissions on a workstation.
A user's Windows 10 system is experiencing slow boot times. You want to review which programs are launching automatically at startup. Which of the following locations should you check?
-
A
System Properties > Performance Options > Virtual Memory
-
B
Programs and Features in Control Panel
-
C
Device Manager under Universal Serial Bus controllers
-
D
Services tab in Task Manager or MSCONFIG Startup tab
✓ Correct
Explanation
Both the Services tab in Task Manager and the Startup tab in MSCONFIG display auto-launching programs and services, allowing you to disable unnecessary startup items to improve boot performance.
Which of the following BEST explains the relationship between User Account Control (UAC) and privilege escalation in Windows?
-
A
UAC redirects all administrative requests to the domain controller for approval
-
B
UAC automatically grants administrator privileges to all user accounts without requiring confirmation
-
C
UAC requires user confirmation before allowing programs to make changes that require administrative privileges
✓ Correct
-
D
UAC completely disables administrator accounts to improve system security
Explanation
User Account Control prompts users for permission or administrator credentials before allowing programs to make system-level changes, implementing the principle of privilege escalation on demand rather than running everything with administrator rights.
A technician discovers that a Windows system has a corrupted boot sector. Which command-line utility can be used to repair the Master Boot Record (MBR) on an NTFS partition?
-
A
FDISK /MBR
-
B
DEFRAG C:
-
C
CONVERT C: /FS:NTFS
-
D
BOOTREC /FIXMBR
✓ Correct
Explanation
The BOOTREC /FIXMBR command repairs the Master Boot Record when launched from the Windows Recovery Environment, restoring boot functionality on systems with MBR corruption.
Which Windows feature allows administrators to capture a system image that includes the operating system, applications, drivers, and settings for deployment to multiple computers?
-
A
File and Folder Backup using Windows Backup
-
B
Windows Imaging Format (WIM) and imaging tools like DISM
✓ Correct
-
C
System Restore Point creation and restoration
-
D
Device Driver Backup in Device Manager
Explanation
Windows Imaging Format (WIM) and Deployment Image Servicing and Management (DISM) allow administrators to create comprehensive system images that can be captured and deployed across multiple computers for standardized deployments.
A user reports that they cannot connect to a network printer that was previously working. The printer is on the same subnet as the computer. Which of the following should you verify FIRST?
-
A
Reinstall the printer driver from the manufacturer's website
-
B
Check that the printer is powered on and connected to the network with an active IP address
✓ Correct
-
C
Contact the printer manufacturer's support team for replacement
-
D
Remove the printer from Devices and Printers and re-add it using the Add Printer wizard
Explanation
Basic network connectivity and power status should be verified first before driver reinstallation or hardware replacement. Confirming the printer's IP address and network connectivity is the essential diagnostic step.
Which registry hive file on a Windows system contains configuration data for the currently logged-in user's profile, including desktop settings and application preferences?
-
A
HKEY_LOCAL_MACHINE
-
B
HKEY_CLASSES_ROOT
-
C
HKEY_CURRENT_USER
✓ Correct
-
D
HKEY_USERS
Explanation
HKEY_CURRENT_USER (HKCU) contains the registry data for the currently logged-in user, including personalization settings, application configurations, and user-specific preferences.
A technician is setting up a new Windows workstation and needs to configure it to automatically apply security updates from Windows Update. Which Control Panel applet should be used?
-
A
Windows Defender Firewall
-
B
Administrative Tools > Services
-
C
Programs and Features
-
D
Windows Update or Settings > Update & Security
✓ Correct
Explanation
Windows Update settings (accessible through Settings > Update & Security in Windows 10 or Control Panel > Windows Update) allow configuration of automatic update installation including security patches.
A Windows domain user experiences permission errors when attempting to access shared network resources, even though the user is a member of groups with appropriate permissions. Which of the following is the MOST LIKELY cause?
-
A
The user's group membership change requires a logoff and logon for group membership tokens to be refreshed
✓ Correct
-
B
The user's password has expired and must be reset before any resource access is granted
-
C
The shared resource's Access Control List (ACL) contains an explicit Deny entry for the user's groups
-
D
Windows Firewall is blocking access to all network resources on the domain
Explanation
When group memberships change, the user must logoff and logon again to refresh their security token, which includes the updated group membership information needed for access control decisions.
Which Windows feature provides real-time scanning and protection against malware, viruses, and other potentially unwanted software without requiring a separate antivirus application?
-
A
User Account Control (UAC)
-
B
Windows Defender (now Microsoft Defender)
✓ Correct
-
C
BitLocker Drive Encryption
-
D
Windows Firewall with Advanced Security
Explanation
Windows Defender, now called Microsoft Defender, is the built-in antimalware solution included with modern Windows operating systems that provides real-time protection against threats.
A technician needs to determine which version of Windows 10 is installed on a system and verify that it meets the minimum specifications for a software application. Which system utility provides this information?
-
A
System Information (msinfo32) or Settings > System > About
✓ Correct
-
B
Performance Monitor
-
C
Event Viewer
-
D
Device Manager
Explanation
System Information utility and the Settings > System > About page display the Windows version, build number, processor, RAM, and other hardware specifications needed to verify compatibility and system details.
A Windows system is experiencing frequent kernel panic errors and system crashes. After reviewing Event Viewer, you identify hardware compatibility issues with recently installed drivers. What is the BEST course of action?
-
A
Check the manufacturer's website for updated or alternative drivers specifically certified for your system
✓ Correct
-
B
Boot into Safe Mode and perform a System Restore to a point before the drivers were installed
-
C
Replace the hardware component associated with the faulty drivers
-
D
Immediately uninstall the problematic drivers and use generic drivers until certified replacements are available
Explanation
The best practice is to obtain updated or certified replacement drivers from the manufacturer before uninstalling, as this minimizes downtime and ensures you have compatible drivers ready to install.
Which Group Policy setting would allow an administrator to prevent users from installing applications on their local workstations?
-
A
Configure Software Restriction Policies to block executable file execution from non-system directories
-
B
Use AppLocker to create policies that only allow approved applications to run
✓ Correct
-
C
Disable the Control Panel entirely for all standard users
-
D
Disable the Windows Installer service on all workstations in the domain
Explanation
AppLocker policies provide fine-grained control over which applications can execute, allowing administrators to create rules that prevent installation of unapproved software while maintaining flexibility for legitimate business applications.
A user's Windows 10 system displays a blue screen of death (BSOD) with the stop code 0x0000007E (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED). Which resource should you check FIRST to diagnose this error?
-
A
Device Manager to check for devices with driver errors
-
B
BIOS/UEFI settings to verify hardware compatibility mode is enabled
-
C
Event Viewer > Windows Logs > System for detailed error information and related events
✓ Correct
-
D
Windows Memory Diagnostic to test for faulty RAM
Explanation
Event Viewer's System log captures detailed information about BSOD events, including which driver or component caused the exception, providing essential diagnostic data for troubleshooting the root cause.
Which Windows technology provides transparent, full-disk encryption for protecting data at rest on internal and external storage devices?
-
A
BitLocker or BitLocker To Go
✓ Correct
-
B
Windows Defender Firewall
-
C
Encrypting File System (EFS) folder-level encryption
-
D
NTFS file permissions and access control lists
Explanation
BitLocker provides full-disk encryption for internal drives, while BitLocker To Go extends this protection to external USB drives, ensuring data remains protected even if the physical storage device is lost or stolen.
A technician is troubleshooting a Windows system that is generating excessive disk I/O activity, causing performance degradation. Which Task Manager tab should be reviewed to identify which files or processes are accessing the disk?
-
A
Startup tab to disable unnecessary startup programs
-
B
Disk tab to see I/O operations and file access by process
✓ Correct
-
C
Performance tab to monitor overall disk utilization
-
D
Processes tab sorted by CPU usage
Explanation
The Disk tab in Task Manager (Windows 10 and later) displays real-time disk activity, I/O operations, and identifies which processes are responsible for disk reads and writes, allowing targeted troubleshooting.
Which Windows command-line tool can be used to view detailed network configuration information including IP address, subnet mask, default gateway, and DNS servers on a local system?
-
A
NSLOOKUP localhost
-
B
ROUTE PRINT
-
C
NETSTAT -AN
-
D
IPCONFIG /ALL
✓ Correct
Explanation
The IPCONFIG /ALL command displays comprehensive network configuration details including all IP addresses, subnet masks, gateways, DNS servers, and adapter information for all network interfaces.
A Windows domain environment requires that all user passwords meet specific complexity requirements and must be changed every 90 days. Where should this Group Policy be configured to ensure it applies to all domain users?
-
A
In the Restricted Groups policy under Computer Configuration
-
B
On each individual workstation's Local Security Policy
-
C
In the Default Domain Policy GPO, linked to the domain root
✓ Correct
-
D
In Active Directory Users and Computers on each user account property
Explanation
The Default Domain Policy GPO should be configured with password complexity and expiration settings and linked at the domain root level to ensure the policy applies consistently to all users in the domain.
A user reports that their Windows system will not shut down completely; it appears to remain in a partial power state. Which of the following steps would BEST help diagnose this issue?
-
A
Immediately reinstall Windows as the installation is corrupted
-
B
Perform a hard reset by holding the power button for 10 seconds without troubleshooting
-
C
Review Event Viewer for errors and disable fast startup to test for related issues with sleep states
✓ Correct
-
D
Check for pending Windows updates or drivers awaiting installation before shutdown
Explanation
Reviewing Event Viewer for shutdown-related errors and testing with Fast Startup disabled can help isolate whether the issue is related to sleep state management, drivers, or updates without immediately resorting to reinstallation.
A user reports that their Windows 10 computer is running slowly and freezes intermittently. You check Task Manager and notice that the disk usage is consistently at 100%. Which of the following is the BEST first step to resolve this issue?
-
A
Increase the virtual memory size to compensate for high disk usage
-
B
Perform a clean Windows reinstall
-
C
Disable startup programs and check for malware using Windows Defender
✓ Correct
-
D
Replace the hard drive immediately with an SSD
Explanation
High disk usage is often caused by malware, Windows updates, or excessive startup programs. Disabling startup items and running malware scans is the least invasive and most effective first troubleshooting step.
Which of the following Windows 10 features allows a user to create multiple virtual desktops and organize applications across them?
-
A
Task View
✓ Correct
-
B
Settings Panel
-
C
Action Center
-
D
Snap Assist
Explanation
Task View enables users to create and manage multiple virtual desktops in Windows 10, allowing better organization of open applications and windows.
A technician needs to configure a Windows 10 system to automatically lock after 15 minutes of inactivity for security purposes. Where should they navigate to accomplish this?
-
A
Settings > Accounts > Sign-in options > Screen timeout
✓ Correct
-
B
Control Panel > User Accounts > Change account type
-
C
Settings > System > Display > Screen timeout
-
D
Control Panel > Power Options > Sleep settings
Explanation
Windows 10's screen timeout and lock settings are found in Settings > Accounts > Sign-in options, where you can configure inactivity timeout for screen lock.
A company wants to deploy Group Policy settings across multiple Windows 10 computers in an Active Directory domain. What is the primary tool used to edit and apply these policies?
-
A
Group Policy Object Editor (gpedit.msc)
-
B
Active Directory Users and Computers
✓ Correct
-
C
Local Security Policy editor
-
D
Windows Management Instrumentation Command line
Explanation
While Group Policy Object Editor can view policies, Active Directory Users and Computers is the primary tool for managing and applying Group Policy Objects across domain computers.
Which Windows 10 built-in tool should a technician use to monitor real-time system performance metrics such as CPU, memory, disk, and network usage?
-
A
Device Manager
-
B
System Information
-
C
Performance Monitor
-
D
Resource Monitor
✓ Correct
Explanation
Resource Monitor provides real-time visual display of CPU, memory, disk, and network performance metrics, making it ideal for quick performance monitoring.
A user's Windows 10 system fails to boot and displays a blue screen with a DRIVER_IRQL_NOT_LESS_OR_EQUAL error. Which troubleshooting method would be MOST appropriate as a first step?
-
A
Remove all external USB devices and restart the computer
-
B
Replace the motherboard's BIOS battery
-
C
Boot into Safe Mode and check Device Manager for problematic drivers
✓ Correct
-
D
Immediately perform a clean Windows installation from installation media
Explanation
This BSOD error is typically caused by a faulty driver. Booting into Safe Mode allows access to Device Manager to identify and remove the problematic driver without a full reinstall.
Which of the following Windows 10 editions includes Group Policy support for domain management?
-
A
Windows 10 Core
-
B
Windows 10 Pro or higher editions
✓ Correct
-
C
Windows 10 Single Language edition
-
D
Windows 10 Home
Explanation
Group Policy Object support is available in Windows 10 Pro, Enterprise, and Education editions, but NOT in Windows 10 Home.
A technician needs to remove administrative rights from a standard user account in Windows 10. Which Control Panel location provides this functionality?
-
A
Control Panel > Programs > Programs and Features
-
B
Control Panel > User Accounts > Manage another account
✓ Correct
-
C
Control Panel > Devices and Printers > Device settings
-
D
Control Panel > System and Security > Windows Defender Firewall
Explanation
Control Panel > User Accounts > Manage another account allows administrators to change user account types between Standard and Administrator.
Which Windows 10 feature automatically encrypts files and folders on an NTFS drive using a user's credentials?
-
A
Encrypting File System (EFS)
✓ Correct
-
B
Windows Defender Full Disk Encryption
-
C
NTFS Partition Protection
-
D
BitLocker Drive Encryption
Explanation
EFS (Encrypting File System) automatically encrypts individual files and folders at the file system level using the user's credentials on NTFS drives.
A user reports that they cannot connect to their company's VPN after a Windows 10 update. The VPN client is installed and was working previously. What should the technician check FIRST?
-
A
Verify the VPN client software version and update it if necessary, then check Device Manager for network adapter drivers that may have been updated
✓ Correct
-
B
Change the user's password in Active Directory
-
C
Reinstall the entire operating system
-
D
Replace the network adapter hardware
Explanation
Windows updates can update network drivers and affect VPN functionality. Checking the VPN client version and network drivers is the best first troubleshooting step.
Which Windows 10 system file should a technician NOT manually edit, but can verify integrity using built-in tools?
-
A
hosts file in System32\drivers\etc
-
B
registry files in the System32 directory
✓ Correct
-
C
boot.ini
-
D
application configuration files
Explanation
Registry files are critical system files that should not be manually edited; the Registry Editor tool should be used to access and verify registry integrity.
A technician is configuring Windows 10 for a guest user who should have minimal system access. Which account type should be created?
-
A
Standard user account
✓ Correct
-
B
Administrator account
-
C
Service account
-
D
System account
Explanation
A Standard user account provides limited permissions suitable for guest users, restricting access to system settings and administrative functions.
Which Windows 10 utility allows a technician to schedule tasks and scripts to run automatically at specified times or events?
-
A
Services console
-
B
Task Scheduler
✓ Correct
-
C
Event Viewer
-
D
Performance Monitor
Explanation
Task Scheduler enables creation and management of automated tasks and scripts that execute on a schedule or when specific system events occur.
A company implements Windows 10 computers that require users to authenticate with biometric data instead of passwords. Which Windows 10 feature enables this functionality?
-
A
Trusted Platform Module
-
B
Smart Card authentication
-
C
Multi-factor authentication gateway
-
D
Windows Hello
✓ Correct
Explanation
Windows Hello provides biometric authentication using facial recognition, fingerprint, or iris scanning as an alternative to password-based authentication.
When troubleshooting a Windows 10 system with intermittent network connectivity issues, which diagnostic command should a technician use to test continuous connectivity to a specific host?
-
A
tracert [IP address]
-
B
ipconfig /release
-
C
ping -t [IP address]
✓ Correct
-
D
netstat -an
Explanation
The 'ping -t' command sends continuous ping packets to a host, allowing the technician to monitor real-time connectivity and packet loss patterns.
A technician needs to verify that a Windows 10 system has all critical security updates installed. Which tool provides the most comprehensive update history?
-
A
Windows Update Medic Service status
-
B
Control Panel > System > Device Manager
-
C
Event Viewer > Windows Logs > System
-
D
Settings > Update & Security > Update history
✓ Correct
Explanation
Settings > Update & Security > Update history displays all installed updates, their installation dates, and KB numbers for verification of security patches.
Which Windows 10 component is responsible for managing hardware devices and ensuring that compatible drivers are loaded and functioning correctly?
-
A
Device Manager
✓ Correct
-
B
System Configuration utility
-
C
Windows Registry
-
D
Hardware Abstraction Layer (HAL)
Explanation
Device Manager is the Windows utility for viewing, managing, and updating hardware devices and their drivers; the Hardware Abstraction Layer is the underlying system component.
A user accidentally deletes important files from their Windows 10 Documents folder. The Recycle Bin has been emptied. Which feature provides the best chance of file recovery?
-
A
Registry recovery tools
-
B
Windows File History or System Image Restore if backups were previously configured
✓ Correct
-
C
Windows Prefetch folder analysis
-
D
Temporary Internet Files cache
Explanation
Windows File History and System Image Restore can recover previously deleted files if they were backed up before deletion; without prior backups, recovery becomes difficult.
Which Windows 10 startup mode loads only essential drivers and services, making it useful for isolating software-related problems?
-
A
Recovery Environment
-
B
Diagnostic startup
-
C
Normal mode
-
D
Safe Mode
✓ Correct
Explanation
Safe Mode loads a minimal set of drivers and services, allowing technicians to determine if problems are caused by third-party software or hardware issues.
A technician discovers that a Windows 10 computer is experiencing significant slowness due to a high number of background processes. Using System Configuration, which startup tab option should be disabled to prevent unnecessary applications from loading?
-
A
Boot tab to modify kernel parameters
-
B
Services tab only
-
C
Tools tab to access Windows Defender
-
D
Startup tab and Startup Items section
✓ Correct
Explanation
System Configuration > Startup tab allows disabling startup items that automatically load, reducing system load and improving boot times.
A Windows 10 system connected to a corporate domain suddenly cannot authenticate with the domain controller. Which network troubleshooting command should be run FIRST to verify basic network connectivity?
-
A
ipconfig /all
-
B
ping [domain controller IP]
✓ Correct
-
C
nslookup [domain name]
-
D
net user /domain
Explanation
Ping verifies basic network connectivity to the domain controller; if ping fails, network connectivity is the issue before attempting authentication troubleshooting.
Which Windows 10 feature allows an administrator to take ownership of files or folders when access is denied, and change permissions as needed?
-
A
Run As Administrator context menu option
-
B
Group Policy > File and Folder Permissions
-
C
Right-click Properties > Security > Advanced > Change Owner
✓ Correct
-
D
File Sharing wizard in Settings
Explanation
The Security tab in file Properties > Advanced allows changing ownership and modifying permissions when access is restricted or inherited permissions are problematic.
A user reports that Windows 10 frequently prompts for administrator consent even when performing routine tasks. What is the BEST way to balance security and usability?
-
A
Adjust UAC slider to 'Notify me only when apps try to make changes' and keep Windows Defender enabled
✓ Correct
-
B
Modify Group Policy to never require administrator approval for any action
-
C
Create a second Administrator account for daily use
-
D
Completely disable User Account Control (UAC)
Explanation
Adjusting the UAC slider provides a balance between security and usability by reducing unnecessary prompts while maintaining protection against unauthorized system changes.
Which Windows 10 troubleshooting tool generates detailed reports about system hardware, software compatibility, and potential issues?
-
A
Performance Monitor
-
B
Reliability Monitor
✓ Correct
-
C
System Information utility
-
D
DirectX Diagnostic Tool
Explanation
Reliability Monitor tracks system stability over time, showing hardware/software failures, crashes, and warnings with detailed reports for troubleshooting.
A user reports that their Windows 10 computer frequently displays the blue screen of death (BSOD) with the error code 0x0000007E. Which of the following is the FIRST troubleshooting step you should perform?
-
A
Note the error code and check the Windows Event Viewer for system errors and driver information
✓ Correct
-
B
Disable all startup programs and perform a clean boot
-
C
Replace the hard drive as it is likely failing
-
D
Immediately reinstall Windows 10 using installation media
Explanation
The first step in diagnosing BSOD errors is to document the error code and check system logs in Event Viewer to identify the problematic driver or component. This provides crucial information before attempting more invasive solutions.
Which Windows utility allows you to view and manage startup programs and services that launch at boot time, and can significantly impact system performance?
-
A
Registry Editor (regedit)
-
B
System Configuration (msconfig) and Task Manager Startup tab
✓ Correct
-
C
Windows Update
-
D
Device Manager
Explanation
Both msconfig and the Task Manager Startup tab are primary tools for managing startup items. Disabling unnecessary startup programs is a standard optimization technique to improve boot performance.
A technician needs to transfer user files from a Windows 7 computer to a Windows 10 computer while preserving file permissions and attributes. Which migration method would be MOST appropriate?
-
A
Use the User State Migration Tool (USMT) or a third-party migration tool to preserve settings and permissions
✓ Correct
-
B
Copy files using File Explorer with copy and paste operations
-
C
Transfer files via USB drive with manual reconfiguration of permissions on the destination computer
-
D
Use the Windows Easy Transfer utility included with Windows 10
Explanation
USMT is designed specifically for enterprise migrations and preserves user data, settings, and NTFS permissions accurately. Windows Easy Transfer is deprecated, and manual methods risk losing important file attributes and permissions.
A customer's laptop will not connect to the company's WPA3-secured wireless network, although other devices connect without issue. The laptop is running Windows 10 with the latest updates. What is the MOST likely cause?
-
A
The wireless adapter driver is outdated and does not support WPA3 encryption
✓ Correct
-
B
The access point has reached its maximum device connection limit
-
C
Windows 10 does not natively support WPA3 without additional software installation
-
D
The laptop's BIOS needs to be updated to support modern wireless protocols
Explanation
WPA3 support requires updated wireless adapter drivers; older drivers may only support WPA2. Updating the network driver is the standard fix for wireless connectivity issues with modern security standards.
When configuring a Windows 10 workstation for maximum security in a corporate environment, which of the following Group Policy settings should be ENABLED to prevent unauthorized software execution?
-
A
User Account Control (UAC) at the default level and AppLocker or Software Restriction Policies
✓ Correct
-
B
Windows Defender SmartScreen for Microsoft Edge browser only
-
C
Automatic Windows Update scheduled for nights only
-
D
Windows Firewall for outbound connections exclusively
Explanation
UAC combined with AppLocker or Software Restriction Policies provides layered protection against unauthorized software execution. AppLocker is the modern approach for controlling which applications users can run.
A Windows user attempts to open a file shared on a network drive but receives an 'Access Denied' error, even though the share permissions appear to allow read access. Which permission layer should the technician check NEXT?
-
A
The MAC address filtering rules on the network switch
-
B
The NTFS file permissions on the shared folder and its contents
✓ Correct
-
C
The network adapter configuration on the user's computer
-
D
The user's group membership in Active Directory
Explanation
Both share permissions AND NTFS permissions must be satisfied for access. If share permissions allow access but NTFS permissions deny it, the user will still be denied. NTFS permissions are the restrictive layer that must be checked.
A technician is setting up a Windows 11 computer in a classroom where students need limited administrative capabilities. Which feature should be implemented to allow only approved applications to run?
-
A
Implement Windows Sandbox for isolated application testing
-
B
Configure AppLocker rules or Windows Defender Application Guard policies
✓ Correct
-
C
Set all user accounts to standard user accounts without any group policy modifications
-
D
Enable Secure Boot in UEFI firmware settings
Explanation
AppLocker allows granular control over which applications can execute, making it ideal for restricted environments. Windows Defender Application Guard isolates browsers, while standard accounts alone lack enforcement mechanisms for specific applications.
A company wants to implement a backup strategy where daily incremental backups are performed, with a full backup once per week. Approximately how many backup sets would be needed to fully restore a system after a failure on day 10?
-
A
Two full backup sets to ensure redundancy
-
B
One full backup set plus all incremental backups since the last full backup
✓ Correct
-
C
Only the most recent incremental backup from day 10
-
D
All seven incremental backups plus the most recent full backup
Explanation
Incremental backup strategy requires the full backup and all incremental backups since that full backup to achieve complete restoration. On day 10, you would need the week 1 full backup plus incremental backups from days 2-10.
When troubleshooting a print queue issue where documents are stuck and the print spooler service is running, which action should be performed to clear the queue without losing user documents?
-
A
Restart the Print Spooler service and allow pending jobs to complete their timeout period before manual deletion
✓ Correct
-
B
Modify the registry to disable spooling for all printers on the system
-
C
Reinstall the printer driver from the manufacturer's website
-
D
Delete all files in the C:\Windows\System32\spool\PRINTERS directory immediately
Explanation
The proper procedure is to stop the Print Spooler service, allow it to restart, and let stuck jobs timeout naturally before manual intervention. This prevents data loss and is the standard troubleshooting approach.
A Windows 11 user has enabled BitLocker encryption on their C: drive. After reinstalling Windows 11 on the same computer, they cannot access their previously encrypted drive. What is the MOST likely issue?
-
A
Windows 11 uses a newer encryption standard that is incompatible with BitLocker volumes from previous installations
-
B
BitLocker requires a separate encryption key to be entered before Windows installation begins
-
C
The BIOS/UEFI settings have reset and Secure Boot is disabled, preventing BitLocker from functioning
-
D
The BitLocker recovery key from the previous installation is required; the old encrypted volume cannot be accessed with the new Windows installation without it
✓ Correct
Explanation
BitLocker encryption persists after Windows reinstallation, and the original recovery key is required to unlock the drive. Without the recovery key, the encrypted data becomes inaccessible, which is why backing up recovery keys is critical.