Download PrepIQ System Diagnostics Troubleshooting Certification Ultimate Exam and more Exams Technology in PDF only on Docsity!
Troubleshooting Certification
Ultimate Exam
Question 1. Which step of the diagnostic process directly follows “establishing a theory of probable cause”? A) Identifying the problem B) Testing the theory C) Verifying system functionality D) Documenting findings Answer: B Explanation: After hypothesizing a cause, the technician must test that theory to confirm or refute it before proceeding. Question 2. In a “5 Whys” analysis, the primary goal is to: A) Generate a list of possible symptoms B) Identify the root cause by repeatedly asking “why” C) Document the escalation path D) Prioritize issues based on severity Answer: B Explanation: The technique drills down through successive “why” questions to uncover the underlying root cause. Question 3. When interviewing a non-technical user, the most effective communication technique is: A) Using complex technical jargon to sound authoritative B) Asking open-ended questions and paraphrasing their responses C) Providing a detailed hardware schematic immediately D) Limiting the conversation to yes/no answers only Answer: B
Troubleshooting Certification
Ultimate Exam
Explanation: Open-ended questions encourage details, and paraphrasing confirms understanding, making communication clearer. Question 4. A technician should escalate a problem to Tier 3 when: A) The issue is resolved by reinstalling the OS B) The problem requires vendor-specific firmware updates C) The user reports a minor UI glitch D) The workstation is turned off Answer: B Explanation: Vendor-specific firmware updates typically exceed the scope of Tier 2 support and need higher-level expertise. Question 5. While testing a power supply with a multimeter, the “Power Good” signal is expected to be: A) 3.3 V ± 5% B) 5 V ± 5% C) 12 V ± 5% D) 5 V DC logic high (≈ 5 V) Answer: D Explanation: The Power Good (PG) signal is a 5 V logic line indicating the PSU has stabilized before the motherboard begins POST. Question 6. A capacitor that appears bulged on a motherboard most likely indicates: A) Improper BIOS settings B) Over-voltage condition or age-related failure
Troubleshooting Certification
Ultimate Exam
Question 9. MemTest86+ reports a “Parity error” during testing. This suggests: A) A faulty SSD controller B) Corrupted BIOS firmware C) Defective RAM module or memory controller D) Incorrect network configuration Answer: C Explanation: Parity errors are memory-related, indicating that data bits are not matching expected values, pointing to bad RAM or a failing memory controller. Question 10. A SMART attribute showing “Re-allocated Sector Count” increasing rapidly indicates: A) CPU overheating B) Disk is developing bad sectors and remapping them C) Network latency issue D) GPU driver conflict Answer: B Explanation: The attribute tracks how many sectors have been moved to spare areas; a rise signals deteriorating drive health. Question 11. When an NVMe SSD shows significantly lower throughput than a SATA SSD in the same system, the most likely cause is: A) Incompatible file system B) PCIe lane throttling or BIOS configuration limiting the NVMe link C) Excessive RAM usage
Troubleshooting Certification
Ultimate Exam
D) Incorrect DHCP lease time Answer: B Explanation: NVMe drives rely on full PCIe bandwidth; BIOS or slot limitations can throttle performance, making them appear slower than SATA. Question 12. A RAID 1 array shows a “degraded” status after one disk failure. The next appropriate action is: A) Reformat both disks B) Replace the failed disk and rebuild the array C) Convert the array to RAID 0 D) Disable the RAID controller Answer: B Explanation: In RAID 1, the surviving disk continues operation; replacing the failed drive and rebuilding restores redundancy. Question 13. Artifacting on a display (colored squares, lines) most often points to a problem with: A) Incorrect DNS settings B) GPU hardware failure or overheating C) Bad Ethernet cable D) Corrupted Windows registry hive Answer: B Explanation: Visual artifacts are typical symptoms of GPU issues, such as failing memory chips or excessive heat. Question 14. The Windows TDR (Timeout Detection and Recovery) error is triggered when:
Troubleshooting Certification
Ultimate Exam
Explanation: UEFI boots from the ESP, a FAT32 partition containing .efi executables for each OS. Question 17. A Windows system fails to start and displays “INACCESSIBLE_BOOT_DEVICE”. The most likely cause is: A. Corrupted boot configuration data (BCD) B. Failed RAM test C. Incorrect DNS server address D. GPU driver mismatch Answer: A Explanation: This STOP code indicates Windows cannot access the system partition, often due to BCD corruption or driver issues. Question 18. A macOS machine shows a “Kernel Panic” after installing a third-party kernel extension (kext). The appropriate remediation is: A. Reinstall the firmware B. Boot into Recovery, remove the offending kext, and reboot C. Run Disk Utility on an external drive D. Disable FileVault Answer: B Explanation: Removing the problematic kext restores kernel stability; Recovery mode provides a safe environment for this. Question 19. In Linux, the command used to check and repair a corrupted ext4 filesystem is: A. fsck -y /dev/sda
Troubleshooting Certification
Ultimate Exam
B. chkdsk /f /r C. diskutil verifyVolume /dev/disk0s D. sfc /scannow Answer: A Explanation: “fsck” performs filesystem checks; the “-y” flag automatically fixes errors on the specified device. Question 20. Which Windows recovery environment tool allows you to roll back a driver that caused a system crash? A. System Restore B. Command Prompt (DISM) C. Windows Memory Diagnostic D. Task Manager Answer: A Explanation: System Restore can revert system files and drivers to a previous point, undoing problematic driver changes. Question 21. A “zombie” process in Linux is best described as: A. A process that has completed execution but still has an entry in the process table because its parent hasn’t read its exit status B. A process consuming 100 % CPU C. A process blocked on I/O D. A process running with root privileges Answer: A Explanation: Zombie processes have terminated but remain as entries until the parent process reaps them.
Troubleshooting Certification
Ultimate Exam
C. RIP
D. DHCP
Answer: A Explanation: STP prevents loops; mis-configurations can cause ports to repeatedly block and unblock, resulting in flapping. Question 25. A VLAN tagging mismatch typically results in: A. Duplicate IP addresses on the same subnet B. Frames being dropped because the receiving port expects a different VLAN ID C. Increased CPU temperature D. Hard drive read errors Answer: B Explanation: If a port expects untagged frames but receives tagged ones (or vice versa), the switch discards the traffic. Question 26. When a workstation receives an APIPA address (169.254.x.x), the most probable cause is: A. Successful DHCP lease acquisition B. DHCP server unavailable or no lease could be obtained C. Static IP configuration error D. Incorrect DNS server entry Answer: B Explanation: APIPA is a fallback address assigned when DHCP fails to provide a valid lease.
Troubleshooting Certification
Ultimate Exam
Question 27. A subnet mask of 255.255.255.240 provides how many usable host addresses? A. 14 B. 16 C. 30 D. 62 Answer: A Explanation: /28 subnet provides 16 total addresses; subtract network and broadcast addresses, leaving 14 usable hosts. Question 28. DNS cache poisoning primarily affects which aspect of name resolution? A. Physical cable wiring B. The local resolver returning forged IP addresses for legitimate domain names C. DHCP lease timing D. SMTP authentication Answer: B Explanation: Cache poisoning injects false records into a DNS resolver, causing clients to be directed to malicious IPs. Question 29. To clear a corrupted DNS resolver cache on a Windows client, you would run: A. ipconfig /release B. netsh winsock reset C. ipconfig /flushdns D. nslookup -type=all
Troubleshooting Certification
Ultimate Exam
A. A hardware failure on the storage array B. Successful encryption and demand for ransom to restore file access C. A Windows update pending reboot D. A corrupted boot sector Answer: B Explanation: Ransomware often renames files with a unique extension to signal encryption and extort payment. Question 33. When reviewing firewall logs, a series of “ICMP Destination Unreachable” entries from internal hosts to a single external IP suggests: A. Successful VPN tunnel establishment B. The external IP is unreachable, possibly due to routing or blacklisting issues C. A GPU driver crash D. Hard drive SMART failure Answer: B Explanation: ICMP “Destination Unreachable” indicates that packets cannot be delivered to the target address. Question 34. In a sandbox environment, the primary purpose of detonation testing is to: A. Measure CPU clock speed B. Observe malicious behavior safely without affecting production systems C. Calibrate network switches D. Update BIOS firmware Answer: B
Troubleshooting Certification
Ultimate Exam
Explanation: Detonation in an isolated VM allows analysts to study malware actions without risk to the live environment. Question 35. A Type 1 hypervisor (e.g., ESXi) reports “VMkernel panic” during a VM power-on. The most likely cause is: A. Incorrect VLAN tagging on the physical switch B. Incompatible virtual hardware version with the guest OS C. Missing Windows update D. Corrupted DNS cache Answer: B Explanation: Virtual hardware mismatches can cause the VMkernel to encounter fatal errors when initializing the guest. Question 36. Cloud latency that is higher for a specific region, while other regions perform normally, is most likely due to: A. Local ISP congestion only B. Regional AWS/Azure outage or misconfigured security group blocking traffic C. Faulty SSD in the local workstation D. Improper BIOS settings on the client PC Answer: B Explanation: Cloud providers may have region-specific issues or security group rules that affect latency. Question 37. A VDI “black screen” at login is commonly caused by: A. Incorrect DHCP lease length
Troubleshooting Certification
Ultimate Exam
Explanation: Process Explorer offers extensive details such as parent-child relationships, loaded modules, and handles, aiding thorough investigation. Question 40. An internal knowledge base article is most valuable when it includes: A. Only the final solution without steps B. Clear problem description, step-by-step resolution, screenshots, and reference IDs C. A list of unrelated hardware components D. Only vendor marketing material Answer: B Explanation: Comprehensive documentation ensures repeatability and reduces time spent on similar future tickets. Question 41. Which of the following is the correct order of steps in the standard troubleshooting methodology? A. Test theory → Identify problem → Verify functionality → Document findings → Establish plan → Establish theory B. Identify problem → Establish theory → Test theory → Establish plan → Verify functionality → Document findings C. Document findings → Identify problem → Verify functionality → Test theory → Establish plan → Establish theory D. Establish plan → Identify problem → Test theory → Verify functionality → Document findings → Establish theory Answer: B Explanation: The classic methodology follows identification, hypothesis, testing, planning, verification, then documentation.
Troubleshooting Certification
Ultimate Exam
Question 42. A “fishbone” (Ishikawa) diagram is primarily used to: A. Map network topology B. Identify potential root causes across categories (people, process, equipment, etc.) C. Configure RAID levels D. Generate BIOS passwords Answer: B Explanation: The diagram visualizes cause-and-effect relationships, helping teams explore all possible sources of a problem. Question 43. When a user reports intermittent freezing after a recent RAM upgrade, the first diagnostic step should be: A. Replace the power supply B. Run MemTest86+ on the new modules C. Update the graphics driver D. Reinstall the operating system Answer: B Explanation: Memory testing isolates whether the new RAM is defective or incompatible, which commonly causes freezes. Question 44. In a Windows environment, the “System File Checker” (sfc /scannow) primarily verifies: A. Disk fragmentation levels B. Integrity of protected system files and repairs corrupted ones C. Network latency D. BIOS version
Troubleshooting Certification
Ultimate Exam
A. /var/log/messages or /var/log/syslog (depending on distro) B. C:\Windows\System32\LogFiles C. /boot/grub/grub.cfg D. /etc/hosts Answer: A Explanation: DHCP client activity and errors are recorded in the system messages log. Question 48. A “blue screen” with error code 0x0000007B indicates: A. INACCESSIBLE_BOOT_DEVICE (often due to storage controller driver issues) B. GPU driver timeout C. Network adapter failure D. BIOS password error Answer: A Explanation: Stop code 0x7B corresponds to boot device access problems, commonly after driver or BIOS changes. Question 49. During a Windows update, the system becomes “bricked” and cannot boot. The most reliable recovery method is: A. Running CHKDSK from the command line B. Performing a clean install after backing up data via WinPE C. Disabling the GPU in BIOS D. Changing the monitor resolution Answer: B
Troubleshooting Certification
Ultimate Exam
Explanation: If the OS is unrecoverable, booting into WinPE to back up data and reinstalling Windows restores functionality. Question 50. In macOS, the “First Aid” function in Disk Utility primarily performs: A. Firmware updates B. File system consistency checks and repairs on APFS/HFS+ volumes C. Network configuration resets D. GPU driver installations Answer: B Explanation: First Aid runs fsck-like operations to verify and fix disk structures. Question 51. A network device shows “Port Security violation” in its log. The most common cause is: A. Exceeding the maximum number of learned MAC addresses on a secured port B. Incorrect DNS server address C. Low battery on the device D. Overheating CPU Answer: A Explanation: Port security limits MAC address learning; additional devices trigger a violation. Question 52. The “ping -t” command in Windows is used to: A. Perform a continuous ICMP echo request until stopped, helpful for monitoring intermittent connectivity
