MD-100 Troubleshooting and Recovery 1 — Questions and Answers
Question 1: Which built-in Windows tool allows administrators to view detailed logs of system events, application errors, and security audits?
- Task Manager
- Event Viewer (Correct answer)
- Resource Monitor
- Performance Monitor
Correct answer: Event Viewer
Event Viewer aggregates logs from the Windows system, applications, and security subsystem into a searchable, filterable interface.
Question 2: Which command-line tool scans all protected Windows system files and replaces corrupted files with a cached copy?
- chkdsk /f
- sfc /scannow (Correct answer)
- dism /cleanup-image
- netsh winsock reset
Correct answer: sfc /scannow
sfc /scannow (System File Checker) scans integrity of all protected system files and repairs problems when possible.
Question 3: What is the primary purpose of running DISM with the /RestoreHealth switch?
- Defragment and optimize the system drive
- Repair the local Windows image using Windows Update as the source (Correct answer)
- Reset all network adapter settings
- Revert the system to a previous restore point
Correct answer: Repair the local Windows image using Windows Update as the source
DISM /Online /Cleanup-Image /RestoreHealth contacts Windows Update to download healthy component files and repair the local Windows image store.
Question 4: Which Windows 10 feature creates periodic snapshots of system files and registry settings that can be used to roll back unwanted changes?
- File History
- System Restore (Correct answer)
- Backup and Restore (Windows 7)
- Storage Spaces
Correct answer: System Restore
System Restore saves restore points containing system file and registry snapshots, allowing rollback of driver, update, or software changes without affecting personal files.
Question 5: From a running Windows 10 system, which navigation path launches Advanced Startup to boot into the Windows Recovery Environment?
- Control Panel > System > Advanced system settings > Recovery
- Settings > Update & Security > Recovery > Advanced startup > Restart now (Correct answer)
- Task Manager > Startup > Advanced Options
- System Configuration (msconfig) > Boot > Safe boot
Correct answer: Settings > Update & Security > Recovery > Advanced startup > Restart now
Settings > Update & Security > Recovery > Advanced startup > Restart now reboots the PC into WinRE where recovery tools are available.
Question 6: Which Performance Monitor feature lets you schedule data collection over a period of time and save results for later analysis?
- Task Scheduler jobs
- Data Collector Sets (Correct answer)
- Event Subscriptions
- Reliability Monitor traces
Correct answer: Data Collector Sets
Data Collector Sets in Performance Monitor group counters and traces into scheduled collection jobs that log results to files for trend analysis.
Question 7: A technician notices a process is consuming 95% CPU and the system is unresponsive. Which built-in tool allows them to end the process immediately?
- Event Viewer
- Resource Monitor
- Task Manager (Correct answer)
- Device Manager
Correct answer: Task Manager
Task Manager's Processes or Details tab allows a technician to select any running process and use End Task to terminate it immediately.
MD-100 Troubleshooting and Recovery 1
Which built-in Windows tool allows administrators to view detailed logs of system events, application errors, and security audits?