1What is the primary role of the Windows operating system?
Introduction to the Windows operating system
Easy
A.Design processors and memory chips
B.Create websites and host domains
C.Replace all installed device drivers
D.Manage hardware and run applications
Correct Answer: Manage hardware and run applications
Explanation:
Windows manages computer hardware and provides an environment in which applications can run.
Incorrect! Try again.
2Which Windows edition is primarily designed for typical home users?
Windows editions and versions
Easy
A.Windows Enterprise
B.Windows Home
C.Windows Server
D.Windows Education
Correct Answer: Windows Home
Explanation:
Windows Home provides features intended for everyday personal and household use.
Incorrect! Try again.
3Which Windows edition commonly includes business features such as BitLocker and domain joining?
Windows editions and versions
Easy
A.Windows Pro
B.Windows Home
C.Windows Mobile
D.Windows Starter
Correct Answer: Windows Pro
Explanation:
Windows Pro includes additional security and network-management features for professional environments.
Incorrect! Try again.
4Which Windows interface element provides access to applications, settings, and power options?
User interface and system navigation
Easy
A.Title bar
B.Start menu
C.Scroll bar
D.Status bar
Correct Answer: Start menu
Explanation:
The Start menu provides central access to installed applications, system settings, and power controls.
Incorrect! Try again.
5Which Windows tool is mainly used to browse files and folders?
User interface and system navigation
Easy
A.File Explorer
B.Task Scheduler
C.Registry Editor
D.Event Viewer
Correct Answer: File Explorer
Explanation:
File Explorer lets users browse, organize, copy, move, and delete files and folders.
Incorrect! Try again.
6Which file system is normally preferred for modern internal Windows drives?
File system hierarchy (NTFS, FAT32)
Easy
A.FAT32
B.ext4
C.NTFS
D.FAT16
Correct Answer: NTFS
Explanation:
NTFS is the standard Windows file system and supports permissions, large files, and other advanced features.
Incorrect! Try again.
7What is a well-known limitation of FAT32?
File system hierarchy (NTFS, FAT32)
Easy
A.A drive cannot exceed 4 MB
B.A single file cannot exceed 4 GB
C.A filename cannot exceed 4 letters
D.A folder cannot contain 4 files
Correct Answer: A single file cannot exceed 4 GB
Explanation:
FAT32 cannot store an individual file of 4 GB or larger.
Incorrect! Try again.
8Which folder commonly contains the main Windows operating system files?
System folders and environment variables
Easy
A.C:\Public
B.C:\Users
C.C:\Temp
D.C:\Windows
Correct Answer: C:\Windows
Explanation:
The C:\Windows folder normally contains core Windows files and system components.
Incorrect! Try again.
9Which environment variable usually refers to the current user's profile folder?
System folders and environment variables
Easy
A.%PATHEXT%
B.%COMSPEC%
C.%USERPROFILE%
D.%SYSTEMROOT%
Correct Answer: %USERPROFILE%
Explanation:
%USERPROFILE% normally points to the current user's profile directory under C:\Users.
Incorrect! Try again.
10What is a main responsibility of the Windows kernel?
Overview of Windows architecture: kernel, services, and drivers
Easy
A.Manage core system resources
B.Edit user documents
C.Create spreadsheet formulas
D.Browse internet pages
Correct Answer: Manage core system resources
Explanation:
The kernel manages essential resources such as processor time, memory, and hardware communication.
Incorrect! Try again.
11What does a Windows device driver primarily do?
Overview of Windows architecture: kernel, services, and drivers
Easy
A.Displays website search results
B.Stores personal user documents
C.Enables communication with hardware
D.Compresses every installed program
Correct Answer: Enables communication with hardware
Explanation:
A device driver allows Windows and its applications to communicate with a hardware device.
Incorrect! Try again.
12What is a Windows service?
Overview of Windows architecture: kernel, services, and drivers
Easy
A.A document opened in an application
B.A file copied to the Recycle Bin
C.A program that runs in the background
D.A shortcut stored on the desktop
Correct Answer: A program that runs in the background
Explanation:
A Windows service performs background tasks and can run without direct user interaction.
Incorrect! Try again.
13Which tool shows running applications and their CPU and memory usage?
Task Manager and Resource Monitor usage
Easy
A.Task Manager
B.File Explorer
C.Disk Cleanup
D.Control Panel
Correct Answer: Task Manager
Explanation:
Task Manager displays running applications and processes along with their resource usage.
Incorrect! Try again.
14Which tool provides detailed information about CPU, memory, disk, and network activity?
Task Manager and Resource Monitor usage
Easy
A.Resource Monitor
B.Notepad
C.Character Map
D.Paint
Correct Answer: Resource Monitor
Explanation:
Resource Monitor provides detailed real-time data about major system resources.
Incorrect! Try again.
15What is a process in Windows?
Managing processes, threads, and memory
Easy
A.A permanent section of a drive
B.A collection of desktop shortcuts
C.An instance of a running program
D.A physical part of the processor
Correct Answer: An instance of a running program
Explanation:
A process is a program that is currently executing and using system resources.
Incorrect! Try again.
16What is a thread within a Windows process?
Managing processes, threads, and memory
Easy
A.A unit of program execution
B.A type of storage partition
C.A category of user account
D.A format for system logs
Correct Answer: A unit of program execution
Explanation:
A thread is a unit of execution within a process, and one process can contain multiple threads.
Incorrect! Try again.
17What does the Windows Registry store?
Understanding Windows Registry structure, hives, and keys
Easy
A.System and application settings
B.Only deleted user documents
C.Physical hardware components
D.Only downloaded media files
Correct Answer: System and application settings
Explanation:
The Registry is a hierarchical database containing configuration settings for Windows, users, and applications.
Incorrect! Try again.
18Which Registry hive contains settings for the currently signed-in user?
Understanding Windows Registry structure, hives, and keys
Easy
A.HKEY_CURRENT_CONFIG
B.HKEY_LOCAL_MACHINE
C.HKEY_CURRENT_USER
D.HKEY_CLASSES_ROOT
Correct Answer: HKEY_CURRENT_USER
Explanation:
HKEY_CURRENT_USER contains preferences and settings associated with the current user account.
Incorrect! Try again.
19Which command-line tool uses cmdlets such as Get-Process?
Introduction to command-line tools (CMD, PowerShell)
Easy
A.PowerShell
B.Event Viewer
C.File Explorer
D.Command Prompt
Correct Answer: PowerShell
Explanation:
PowerShell uses cmdlets, including Get-Process, to perform administrative and automation tasks.
Incorrect! Try again.
20Which Windows command displays detailed operating system and computer information?
System information commands
Easy
A.mkdir
B.rename
C.cls
D.systeminfo
Correct Answer: systeminfo
Explanation:
The systeminfo command displays details such as the Windows version, system model, memory, and update information.
Incorrect! Try again.
21A user account can run standard applications but receives a User Account Control prompt when changing system-wide settings. Which Windows design principle is being applied?
Introduction to the Windows operating system
Medium
A.Virtual memory paging
B.Least-privilege access
C.File system journaling
D.Preemptive multitasking
Correct Answer: Least-privilege access
Explanation:
Least privilege gives users only the permissions normally required and requests elevation for administrative changes.
Incorrect! Try again.
22A small company needs Windows computers to join an Active Directory domain and use Group Policy. Which edition is the most appropriate minimum choice?
Windows editions and versions
Medium
A.Windows Home configured with local accounts, shared folders, and manually synchronized settings
B.Windows SE
C.Windows Pro
D.Windows Home
Correct Answer: Windows Pro
Explanation:
Windows Pro supports Active Directory domain joining and Group Policy features that are unavailable in the Home edition.
Incorrect! Try again.
23An application window is unresponsive, but the Start menu still works. Which keyboard shortcut provides direct access to security options, including Task Manager?
User interface and system navigation
Medium
A.Alt+Tab
B.Ctrl+Shift+S
C.Ctrl+Alt+Delete
D.Windows+E
Correct Answer: Ctrl+Alt+Delete
Explanation:
Ctrl+Alt+Delete opens the Windows security screen, from which Task Manager can be started even when an application is unresponsive.
Incorrect! Try again.
24A technician must store a 7 GB disk image on a removable drive while keeping the drive compatible with many older devices. The drive currently uses FAT32. What is the immediate technical limitation?
File system hierarchy (NTFS, FAT32)
Medium
A.FAT32 cannot store an individual file larger than 4 GB
B.FAT32 cannot be used on removable storage larger than 2 GB
C.FAT32 encrypts removable files and requires a recovery certificate before another device can read them
D.FAT32 prevents disk image files from being copied
Correct Answer: FAT32 cannot store an individual file larger than 4 GB
Explanation:
FAT32 has a maximum individual file size of bytes, which is just under 4 GB.
Incorrect! Try again.
25A department needs different users to have different permissions on folders stored on an internal Windows drive. Which file system should be selected?
File system hierarchy (NTFS, FAT32)
Medium
A.NTFS
B.FAT16
C.ISO 9660
D.FAT32
Correct Answer: NTFS
Explanation:
NTFS supports access control lists, allowing permissions to be assigned to users and groups at file and folder levels.
Incorrect! Try again.
26A script must open the current user's profile folder without assuming a username or drive letter. Which environment variable should it use?
System folders and environment variables
Medium
A.%PROGRAMDATA%
B.%SYSTEMROOT%
C.%TEMP%
D.%USERPROFILE%
Correct Answer: %USERPROFILE%
Explanation:
%USERPROFILE% expands to the current user's profile directory, such as C:\Users\Amina.
Incorrect! Try again.
27An administrator needs an application to store configuration shared by every user without placing it inside a specific user's profile. Which location is most appropriate?
System folders and environment variables
Medium
A.%USERPROFILE%
B.%PROGRAMDATA%
C.%LOCALAPPDATA%
D.%APPDATA%
Correct Answer: %PROGRAMDATA%
Explanation:
%PROGRAMDATA% identifies the shared application-data directory used for settings and data available to all users.
Incorrect! Try again.
28After a new storage driver is installed, Windows crashes during startup before users can sign in. Which explanation is most likely?
Overview of Windows architecture: kernel, services, and drivers
Medium
A.The driver runs only inside File Explorer
B.The driver runs with kernel-level privileges
C.The driver is stored in the user profile
D.The driver is controlled exclusively by Task Scheduler
Correct Answer: The driver runs with kernel-level privileges
Explanation:
Many device drivers operate in kernel mode, so a faulty boot-critical driver can destabilize the entire operating system during startup.
Incorrect! Try again.
29A background component must start before any user signs in and continue running when users sign out. Which Windows component type best fits this requirement?
Overview of Windows architecture: kernel, services, and drivers
Medium
A.Windows service
B.File Explorer extension
C.Desktop shortcut
D.User startup application
Correct Answer: Windows service
Explanation:
A Windows service can start during system boot and operate independently of an interactive user session.
Incorrect! Try again.
30Task Manager shows high disk usage, but the responsible application is unclear. Which tool is best for identifying the processes and files generating disk activity?
Task Manager and Resource Monitor usage
Medium
A.Registry Editor
B.System Configuration
C.Disk Cleanup
D.Resource Monitor
Correct Answer: Resource Monitor
Explanation:
Resource Monitor provides detailed per-process disk activity and shows the specific files being read or written.
Incorrect! Try again.
31A computer signs in slowly because several nonessential applications launch automatically. Which Task Manager section should be examined first?
Task Manager and Resource Monitor usage
Medium
A.Startup apps
B.App history
C.Details
D.Users
Correct Answer: Startup apps
Explanation:
The Startup apps section lists programs configured to launch at sign-in and allows unnecessary entries to be disabled.
Incorrect! Try again.
32A process is using 25% CPU on a computer with four logical processors while the other applications are nearly idle. What does this most likely indicate?
Managing processes, threads, and memory
Medium
A.The process has reserved 25% of physical memory
B.One execution thread is fully using one logical processor
C.Four execution threads are each using one logical processor
D.One execution thread has permanently disabled the remaining three processors through processor affinity settings
Correct Answer: One execution thread is fully using one logical processor
Explanation:
On four equally weighted logical processors, one fully utilized processor represents approximately of total CPU capacity.
Incorrect! Try again.
33A system has little available physical RAM, but applications continue running as Windows moves inactive memory pages to disk. Which mechanism is being used?
Managing processes, threads, and memory
Medium
A.Driver signing
B.File compression
C.Virtual memory
D.Process affinity
Correct Answer: Virtual memory
Explanation:
Virtual memory allows Windows to move less-active pages between physical RAM and the page file when memory pressure increases.
Incorrect! Try again.
34A technician ends a process in Task Manager. What normally happens to the threads owned by that process?
Managing processes, threads, and memory
Medium
A.They move into the kernel process
B.They remain active until the next restart
C.They are terminated with the process
D.They become independent services
Correct Answer: They are terminated with the process
Explanation:
Threads execute within the resources and address space of their owning process, so terminating the process also terminates its threads.
Incorrect! Try again.
35An administrator needs to change a setting that applies to every user of a computer. Which Registry hive is the most appropriate place to inspect?
Understanding Windows Registry structure, hives, and keys
Medium
A.HKEY_CURRENT_CONFIG
B.HKEY_LOCAL_MACHINE
C.HKEY_CURRENT_USER
D.HKEY_CLASSES_ROOT
Correct Answer: HKEY_LOCAL_MACHINE
Explanation:
HKEY_LOCAL_MACHINE stores system-wide hardware and software configuration that generally applies to the entire computer.
Incorrect! Try again.
36A preference must apply only to the user who is currently signed in. Under which Registry hive should the application normally store it?
Understanding Windows Registry structure, hives, and keys
Medium
A.HKEY_LOCAL_MACHINE
B.HKEY_CURRENT_USER
C.HKEY_PERFORMANCE_DATA
D.HKEY_CURRENT_CONFIG
Correct Answer: HKEY_CURRENT_USER
Explanation:
HKEY_CURRENT_USER maps to the Registry profile of the signed-in user and is intended for user-specific settings.
Incorrect! Try again.
37An administrator wants to list running processes as structured objects that can be filtered by CPU usage. Which command is most suitable?
Introduction to command-line tools (CMD, PowerShell)
Medium
A.ipconfig /all
B.Get-Process
C.reg query
D.dir /s
Correct Answer: Get-Process
Explanation:
Get-Process returns PowerShell process objects whose properties, such as CPU usage, can be sorted or filtered.
Incorrect! Try again.
38A PowerShell command produces many objects, and the administrator wants only those whose Status property equals Running. Which pipeline component should be used?
Introduction to command-line tools (CMD, PowerShell)
Medium
A.Format-Wide
B.Write-Output
C.Where-Object
D.Read-Host
Correct Answer: Where-Object
Explanation:
Where-Object filters pipeline objects according to a condition, such as $_.Status -eq "Running".
Incorrect! Try again.
39A support technician needs the Windows version, installation date, system model, installed memory, and recent boot time in one command. Which command is most appropriate?
System information commands
Medium
A.hostname
B.systeminfo
C.tasklist
D.whoami
Correct Answer: systeminfo
Explanation:
systeminfo displays a consolidated report containing operating system, hardware, memory, update, and boot details.
Incorrect! Try again.
40A Windows service failed to start during boot. In Event Viewer, which log should an administrator examine first?
System logs via Event Viewer
Medium
A.System log
B.Security log
C.Application log
D.Forwarded Events log
Correct Answer: System log
Explanation:
The System log records events from Windows system components, including the Service Control Manager and driver-related startup failures.
Incorrect! Try again.
41A company must configure Windows laptops to join an on-premises Active Directory domain, receive Group Policy, and host incoming Remote Desktop sessions. Which minimum edition satisfies all three requirements without an edition upgrade?
Windows editions and versions
Hard
A.Windows Pro
B.Windows Home in S mode
C.Windows SE
D.Windows Home
Correct Answer: Windows Pro
Explanation:
Windows Pro supports Active Directory domain join, Group Policy, and acting as a Remote Desktop host. Home editions lack these enterprise management capabilities.
Incorrect! Try again.
42An interactive application becomes unresponsive, but the mouse pointer still moves, other applications work, and the system continues servicing network requests. Which conclusion is best supported?
Introduction to the Windows operating system
Hard
A.The entire Windows kernel has deadlocked
B.The application's UI thread is blocked
C.The computer has exhausted all physical memory and can no longer schedule any thread
D.The display driver has stopped permanently
Correct Answer: The application's UI thread is blocked
Explanation:
Windows isolates user-mode processes and schedules their threads independently. A blocked UI thread can freeze one application while the kernel and other processes continue operating.
Incorrect! Try again.
43An administrator needs to open a user's Documents known folder reliably on systems where Windows is installed on different drives and the folder may have been redirected to a network location. Which method is most robust?
User interface and system navigation
Hard
A.Search every fixed drive for a directory whose displayed name is Documents
B.Open C:\Users\%USERNAME%\Documents
C.Use the shell known-folder identifier for Documents
D.Open %USERPROFILE%\Documents
Correct Answer: Use the shell known-folder identifier for Documents
Explanation:
Known-folder APIs and shell identifiers resolve redirection and localization. Constructing a path from %USERPROFILE% assumes Documents remains physically beneath the profile.
Incorrect! Try again.
44A file with a custom NTFS access control list is moved from C:\Restricted to C:\Public on the same NTFS volume by using File Explorer. Assuming no application explicitly rewrites its permissions, what normally happens?
File system hierarchy (NTFS, FAT32)
Hard
A.It inherits only the destination permissions
B.It loses all explicit access control entries
C.It retains its existing access control list
D.It is converted to FAT32-compatible permissions while Windows stores a separate backup copy of the original descriptor
Correct Answer: It retains its existing access control list
Explanation:
A same-volume move normally renames or relinks the existing NTFS object, so its security descriptor remains. A copy or cross-volume move creates a new object that normally inherits destination permissions.
Incorrect! Try again.
45A 6 GiB disk image cannot be copied to an otherwise empty 64 GiB USB drive formatted as FAT32. Which explanation and remedy are correct?
File system hierarchy (NTFS, FAT32)
Hard
A.Windows blocks images larger than 4 GiB only on removable media; changing the drive policy resolves it
B.FAT32 limits each directory to 4 GiB; creating a second directory resolves it
C.FAT32 reserves half the volume for metadata; compressing the directory resolves it
D.FAT32 limits one file to just under 4 GiB; reformatting as NTFS or exFAT resolves it
Correct Answer: FAT32 limits one file to just under 4 GiB; reformatting as NTFS or exFAT resolves it
Explanation:
FAT32 stores file sizes in a 32-bit field, limiting a single file to bytes. Free space does not remove that per-file limit.
Incorrect! Try again.
46A 64-bit Windows installation contains both System32 and SysWOW64. A 32-bit process requires the normal 32-bit system DLL set. Which statement is accurate?
System folders and environment variables
Hard
A.System32 contains 64-bit DLLs, while SysWOW64 contains 32-bit DLLs
B.System32 contains 32-bit DLLs, while SysWOW64 contains 64-bit DLLs
C.SysWOW64 contains compatibility DLLs only when Hyper-V is enabled for the operating system
D.Both folders contain identical DLLs, and NTFS selects their bitness from metadata
On 64-bit Windows, System32 holds native 64-bit system components and SysWOW64 holds 32-bit components. WOW64 file-system redirection helps 32-bit applications reach the appropriate files.
Incorrect! Try again.
47A parent process changes its own TEMP environment variable after starting a child process. No interprocess communication or registry update occurs. What value does the already-running child normally observe?
System folders and environment variables
Hard
A.The parent's new value immediately
B.The original value inherited at process creation
C.The machine-level value only
D.An empty value until the child restarts the Windows Environment service
Correct Answer: The original value inherited at process creation
Explanation:
A child normally receives a copy of the parent's environment block when it is created. Later changes to the parent's block do not automatically update the child's environment.
Incorrect! Try again.
48A faulty third-party application crashes but Windows remains stable; a faulty kernel-mode driver instead causes a bug check. Which architectural distinction best explains the difference?
Overview of Windows architecture: kernel, services, and drivers
Hard
A.Applications execute only on efficiency cores, while drivers execute only on performance cores
B.Drivers receive a separate physical-memory partition that is automatically discarded whenever an invalid pointer is detected
C.Applications use isolated user-mode address spaces, while drivers may execute with kernel privileges
D.Applications are interpreted by Explorer, while drivers are compiled directly by the Registry service
Correct Answer: Applications use isolated user-mode address spaces, while drivers may execute with kernel privileges
Explanation:
User-mode process isolation limits the impact of most application faults. Kernel-mode drivers share privileged kernel space, so invalid driver behavior can compromise system-wide execution.
Incorrect! Try again.
49Several Windows services appear inside one svchost.exe process. One hosted service is consuming CPU. Why is terminating the entire process a poor first response?
Overview of Windows architecture: kernel, services, and drivers
Hard
A.It forces all device drivers into user mode
B.It can terminate multiple services sharing that host
C.It rewrites the service executable paths so they point to the terminated process identifier
D.It permanently removes every hosted service registration
Correct Answer: It can terminate multiple services sharing that host
Explanation:
svchost.exe can host multiple services. Ending the host process may stop every service in that instance, so identifying and controlling the individual service is safer.
Incorrect! Try again.
50On a system with eight equally capable logical processors, one single-threaded CPU-bound process fully occupies one logical processor while the others are idle. Approximately what total CPU utilization should Task Manager report, ignoring background work?
Task Manager and Resource Monitor usage
Hard
A.6.25%
B.50%
C.12.5%
D.100%
Correct Answer: 12.5%
Explanation:
One fully utilized logical processor out of eight represents approximately total CPU capacity.
Incorrect! Try again.
51Resource Monitor shows a high rate of hard faults for a process. Which interpretation is technically correct?
Task Manager and Resource Monitor usage
Hard
A.Pages must be retrieved from disk because they are not currently in physical memory
B.The CPU has detected defective RAM cells assigned to the process
C.The process has generated unrecoverable access violations
D.The storage device has reported hardware errors, and Resource Monitor has automatically reassigned the affected sectors
Correct Answer: Pages must be retrieved from disk because they are not currently in physical memory
Explanation:
A hard fault is a page fault requiring disk access, potentially to the page file or a memory-mapped file. It does not by itself indicate defective RAM or a disk hardware fault.
Incorrect! Try again.
52A process has one blocked UI thread and several worker threads that continue completing requests. Which action most directly explains why the window appears frozen even though process-level CPU and I/O remain active?
Managing processes, threads, and memory
Hard
A.The UI thread is not dispatching its window message queue
B.The process working set has been locked entirely in physical memory by the active worker threads
C.The kernel has converted the process into a background service
D.The worker threads have inherited the UI thread's process identifier
Correct Answer: The UI thread is not dispatching its window message queue
Explanation:
Windows GUI responsiveness depends on the owning UI thread processing window messages. Worker threads can remain active while the blocked UI thread leaves the window marked as not responding.
Incorrect! Try again.
53Two processes map the same DLL pages into memory. Which metric is most likely to overstate the total unique physical memory consumed if the values are simply added across both processes?
Managing processes, threads, and memory
Hard
A.Process identifier
B.Thread count
C.Working set
D.Base priority
Correct Answer: Working set
Explanation:
A process working set can include shared physical pages. Adding working sets can count the same shared DLL pages more than once, overstating unique RAM consumption.
Incorrect! Try again.
54For a normally logged-on user with SID S-1-X, HKEY_CURRENT_USER primarily acts as a convenient view of which Registry location?
Understanding Windows Registry structure, hives, and keys
Hard
A.HKEY_LOCAL_MACHINE\S-1-X
B.HKEY_CURRENT_CONFIG\S-1-X
C.HKEY_USERS\S-1-X
D.HKEY_CLASSES_ROOT\S-1-X
Correct Answer: HKEY_USERS\S-1-X
Explanation:
HKEY_CURRENT_USER maps to the current user's loaded profile hive beneath HKEY_USERS, identified by that user's SID.
Incorrect! Try again.
55A file association is defined machine-wide, but the current user has a conflicting per-user association. When an application reads the merged HKEY_CLASSES_ROOT view, which setting normally takes precedence?
Understanding Windows Registry structure, hives, and keys
Hard
A.The per-user class registration
B.The registration whose executable has the highest requested execution level in its application manifest
C.The registration with the newest timestamp
D.The machine-wide class registration
Correct Answer: The per-user class registration
Explanation:
HKEY_CLASSES_ROOT is a merged view of machine and per-user class registrations. For conflicts, the per-user registration generally takes precedence.
Incorrect! Try again.
56A 32-bit configuration utility and a 64-bit utility access what appears to be the same path under HKLM\Software, but they observe different values. What is the most likely cause?
Understanding Windows Registry structure, hives, and keys
Hard
A.WOW64 Registry redirection provides separate logical views
B.The Registry service stores every 32-bit value in HKEY_CURRENT_CONFIG until the next system restart
C.NTFS permissions duplicate Registry keys per executable
D.User Account Control encrypts values written by 32-bit processes
Correct Answer: WOW64 Registry redirection provides separate logical views
Explanation:
On 64-bit Windows, WOW64 can present different 32-bit and 64-bit Registry views. Tools must explicitly select the appropriate view when inspecting cross-bitness configuration.
Incorrect! Try again.
57Why can Get-Process | Where-Object CPU -gt 100 filter processes without parsing formatted text, whereas an equivalent CMD pipeline usually requires text-processing logic?
Introduction to command-line tools (CMD, PowerShell)
Hard
A.CMD converts each process into a temporary service before passing it to the next executable in the pipeline
B.PowerShell passes structured objects through its pipeline
C.CMD pipelines pass serialized .NET objects between programs
D.PowerShell stores command output exclusively in the Registry
Correct Answer: PowerShell passes structured objects through its pipeline
Explanation:
PowerShell pipeline elements are objects with properties such as CPU. Traditional CMD pipelines pass text streams, so downstream commands generally must parse textual output.
Incorrect! Try again.
58An administrator needs a script-friendly PowerShell result containing operating-system details, BIOS information, and hardware properties as named fields rather than a formatted text report. Which command is the best fit?
System information commands
Hard
A.msinfo32 /nfo report.nfo, followed by opening the generated report interactively in System Information
B.winver
C.ver
D.Get-ComputerInfo
Correct Answer: Get-ComputerInfo
Explanation:
Get-ComputerInfo returns structured PowerShell objects with extensive OS, BIOS, and hardware properties. ver is limited, while winver and msinfo32 are primarily presentation or report tools.
Incorrect! Try again.
59A system restart occurred unexpectedly. Event Viewer contains Kernel-Power event ID 41. What can be concluded from that event alone?
System logs via Event Viewer
Hard
A.The power supply unit has been proven defective
B.Windows detected that the previous shutdown was not clean
C.Windows measured an external power interruption and recorded its exact electrical duration in the event payload
D.A kernel-mode driver has been identified as the root cause
Correct Answer: Windows detected that the previous shutdown was not clean
Explanation:
Kernel-Power event 41 records that Windows started after an improper shutdown. It does not by itself distinguish power loss, a reset, a hang, or a system crash.
Incorrect! Try again.
60An administrator must find events from provider Service Control Manager with event ID 7031, but only within the System log. Which filtering approach is most precise?
System logs via Event Viewer
Hard
A.Search all logs for the text 7031
B.Sort every Windows log by timestamp and inspect each message whose description contains the word service
C.Filter the System log by provider and event ID
D.Filter the Application log by Critical level
Correct Answer: Filter the System log by provider and event ID
Explanation:
Filtering the specific log by both provider and event ID avoids unrelated events that share an ID or contain similar text. Event IDs are meaningful in combination with their provider and log.
Incorrect! Try again.
Did this save you a night before the exam?
LPU Notes is free, and it stays free. Ads cover part of the server bill.
The rest comes out of a student's own pocket: the domain, the storage,
and keeping the site up through the weeks everyone needs it at once.
The payment button didn't load. An ad blocker or a filtered network is the usual reason.
to try again.
Nothing here is ever locked, and nothing unlocks. Chip in only if it was worth it.
What it pays for →