Windows XP Pro Research & Evidence-Based Practice 3

Question 1

Which Windows XP built-in resource allows a technician to search Microsoft's documented solutions by error code without internet access?

Accepted Answer

Help and Support Center offline content

Answer

Windows XP's Help and Support Center includes offline documentation and links to error code explanations even without an internet connection.

Question 2

A technician is documenting evidence of unauthorized software installs on a Windows XP system. Which registry hive is the primary source?

Accepted Answer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Answer

The Uninstall key lists all programs registered for Add/Remove Programs, providing a documented inventory of installed software.

Question 3

When researching Windows XP performance degradation, which tool provides a historical log of CPU, memory, and disk counters?

Accepted Answer

Performance Logs and Alerts (perfmon.exe)

Answer

Performance Logs and Alerts can record counter data to log files over time, enabling evidence-based before/after comparison.

Question 4

A user reports that a specific application crashes repeatedly on Windows XP. Where does Dr. Watson store its crash evidence by default?

Accepted Answer

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson

Answer

Dr. Watson saves drwtsn32.log and user.dmp files to the Dr Watson folder under All Users Application Data by default.

Question 5

To verify whether a Windows XP system's TCP/IP stack is intact before escalating a network issue, which evidence-gathering command is used?

Accepted Answer

ping 127.0.0.1

Answer

Pinging the loopback address 127.0.0.1 confirms the TCP/IP stack is functional independent of physical network hardware.

Windows XP Pro Practice Test