Deck 12: Monitoring and Troubleshooting Windows Server 2019

Question 1

The terms "program" and "process" are one and the same.

Answer 1

False

Question 2

Monitoring is a time-consuming task.

Answer 2

True

Question 3

Andrade is a systems administrator. He goes through several event logs with thousands of events on a regular basis to troubleshoot system issues. What is the easiest way to limit the events to only those that are relevant to a specific problem?

A) He can search for the next occurrence of a specific event in the event log.
B) He can use the Get-EventLog cmdlet in Windows PowerShell to view the events in an event log.
C) He can search for specific events related to a problem using an event ID.
D) He can use the Filter Current Log option in the Actions pane in Event Viewer.

Answer 3

D

Question 4

The ping utility is used to test the connectivity between two devices on a network.

Question 5

Lea's organization develops a cloud-based storage application. While running the application on the local server, she notices that a process run by the application consumes excess amounts of memory, which in turn leads to new performance issues. She gets the process ID from Task Manager to search for possible solutions online. However, she is not successful. What should Lea have done instead?

A) Troubleshoot the issue and modify the programming code of the application herself
B) Check the Resource Monitor to check the amount of memory used by the process
C) Create a dump file and share it with the development team so that they can fix the issue
D) Share the process ID with a support technician and get the issue sorted

Question 6

You are attempting to troubleshoot an issue that is preventing you from logging in to your Windows Server 2019 system by using the information in the Windows Registry used the last time the system successfully booted. Which of the following options would you choose from the Advanced Boot Options menu?

A) Enable low-resolution video
B) Last Known Good Configuration
C) Safe Mode
D) Start Windows Normally

Question 7

A computer is running multiple applications simultaneously. They all demand large amounts of processor time, which affects the processing speed of the system. Which of the following options will you use to identify and terminate the process that is consuming the highest processor time?

A) Click the Memory column in the Processes tab of Task Manager
B) Select the Processes tab of Task Manager and click the CPU column
C) Check the User tab to identify the user who started all the processes
D) Select the Services tab and restart stopped services

Question 8

You are troubleshooting a hard disk error in a Windows Server 2019 system. You are not able to identify the root cause of the problem. A colleague suggests that you look at the system event log for more information. Is your colleague right about the system log? Why?

A) Yes. Events related to hardware issues are usually recorded in the system event log.
B) No. Issues related to hard disk errors are stored in the application event log.
C) Yes. Events from the software applications using the hard disk will be stored in the system event log.
D) No. A Windows Server 2019 system does not use event logs.

Question 9

You are using the Performance Monitor in Windows Server 2019 to collect information regarding the system's performance. What does the % Idle Time counter indicate?

A) The percentage of time a storage device was not performing a read or write function
B) The percentage of time the processor spends executing processes that do not require privileged access
C) The percentage of free space on a volume
D) The percentage of time the processor spends responding to interrupts

Question 10

Margret is a support technician working at Mercorp Inc. She tells the interns that the easiest way to stop a rogue process from causing performance issues is to right click the process in Task Manager and click End Task. An intern asks her what he should do if the specific process restarts even after selecting End Task . What can Margret tell the intern if the process issue is caused by a third-party application and it has no solution yet?

A) Run the same process under a different user
B) Use the process ID and search online for information regarding the process
C) Create a dump file and share it with the in-house development team
D) Check with the program vendor for an update

Question 11

You have created a data collector set called SERVERX Data Collector set. As a system administrator, you want to restrict other users from accessing the results of the data set. Which of the following options under the properties dialog box will you use?

A) General
B) Directory
C) Schedule
D) Security

Question 12

Your organization has a Windows Server 2019 system called SERVERX. It has come to your notice that several computers have tried to access a file in the server and failed in the attempt. You check the Security event log to check how many of such events attempts have been made in the past six months. The log has only stored information pertaining to the past few days. What can you do to ensure that the log stores more information?

A) View the event log on a day-to-day basis
B) Increase the size limit of the event log
C) Click Clear Log from the Actions menu
D) Take a backup of the event log every week

Question 13

What command can you use to determine if a network service is listening on the correct port number?

A) netstat -a
B) tracert
C) ping
D) Test-NetConnection

Question 14

Martha is configuring the Network Policy and Access Services server role to configure a Windows Server 2019 system as a RADIUS server so that it can be used with the 802.1X Wireless. After this, she is facing some issues activating the server in Active Directory. She thinks that there were issues with the installation. Which of the following event logs should Martha check to examine events specific to the installation?

A) Security
B) Application
C) Setup
D) System

Question 15

After experiencing several issues with an Active Directory domain controller, you have decided to perform a restore operation on the Active Directory. Which of the following options on the Advanced Boot Options menu should be used to perform the restoration?

A) Safe Mode with Networking
B) Directory Services Repair Mode
C) Repair Your Computer
D) Active Directory Emergency Maintenance Mode

Question 16

Performance Monitor allows one to track how individual system resources are being used.

Question 17

Ahmed, a network administrator, is looking at the events added to a Windows Server 2019 system log in the Event Viewer. He notices three events being highlighted with a yellow exclamation mark. The events were related to a remote access attempt. If Ahmed were to treat this as a warning sign, what kind of issues should he anticipate?

A) The system may become unstable.
B) The services running on the server may not function properly.
C) Users may be prevented from accessing the system.
D) The functionality of the system can be affected.

Question 18

There are two types of event logs in Windows Server 2019, Microsoft logs and Windows logs.

Question 19

What key should be pressed as soon as the computer boots to enter Safe Mode?

A) Ctrl+Alt+Del
B) F8
C) Ctrl+Shift+Del
D) Esc

Question 20

Your organization launches a new web application for video editing. Multiple users can access the application at the same time and edit their videos online. What will you use to monitor the amount of memory being used by the application in real time?

A) The Reliability Monitor
B) Data Collector Sets
C) Event Viewer
D) The Performance Monitor

Question 21

List the options that are listed when you right-click a process on the Details tab of Task Manager.

Question 22

You just completed troubleshooting a server role issue with the help of the Setup event log. How will you save the events shown in the event log for future reference?

Question 23

List and explain the processor-related information available in the Performance tab of Task Manager.

Question 24

What logs are created by Windows for reporting general operating system and software application events?

Question 25

The hard disk of a computer running the Windows Server 2019 operating system fails. A colleague tells you that the data on the hard disk can be regenerated as soon as it is replaced with a new one. Can you identify why this solution is feasible?

A) The system need not be powered down to replace the hard disk.
B) The operating system was backed up prior to the disk failure.
C) The Windows system uses a RAID level 5 configuration.
D) The corrupt hard disk contained the boot volume.

Question 26

Joshua works as a systems administrator. A computer running Windows 2019 Server crashes. However, he is not able to find the root cause of the problem. If the root cause of the problem is processor overload, which of the following should Joshua investigate to troubleshoot the issue?

A) The Security event log
B) The Hardware Events event log
C) The Application event log
D) The System event log

Question 27

Your organization has installed a new application that fetches project details from a database installed on a Windows Server 2019 system to perform financial computations. A bug in the application causes the program to fetch details of incorrect project IDs. The network administrator tries reinstalling the operating system, but the issue remains to be fixed. Can you identify why reinstalling the operation system did not work?

A) The administrator changed the boot volume while installing the operating system.
B) The problem was with a device driver and not with the operating system.
C) The issue was with the software and not the operating system.
D) There was an issue in the installation of the operating system.

Question 28

The programs running on the client systems in your organization are not able to access a service on the server. The problem is not with the server because the network services are running and you are able interact with the network service on your local machine. What do you see as other possible issues with the server access?

A) The client programs are not using the non-standard port number used by the network service.
B) The network service might have failed to start when the client systems were requesting the service.
C) The network service is not responding to the requests from a local machine.
D) There were other client systems that were accessing the network service.

Question 29

The system administrator working in your organization always stores documentation on a separate computer. What do you think is the motive behind the administrator's actions?

Question 30

Can you distinguish between proactive and reactive maintenance with examples?

Question 31

Rahul is a systems administrator in a multinational corporation. As part of the routine auditing process, he checks the Security event log and finds out that there was a failed attempt to view a file on the server. He remembers that there was a similar attempt made a year ago. But he is not able to find the event in the log file. Can you explain the cause of the problem?

Question 32

How will you troubleshoot a performance issue if the information available in Task Manager is not sufficient for you to identify the root cause of the problem?

Question 33

You notice a critical operating system-related event under the System event log in the Event Viewer. You or your colleagues have not encountered this error before. How will you resolve it?

Question 34

The hard disk of a Windows Server 2019 system in your organization has crashed. Unfortunately, the boot volume was on the hard disk, and you happen to not have a backup of the operating system. What will you do in this situation?

Question 35

Your organization runs several applications that store information on a specific volume on a Windows 2019 Server system. Of late, the applications have become slow and fail to perform as they did earlier. The performance improves after the server administrator defragments the volume. Can you identify what the problem must have been?

A) The applications could not connect to the server.
B) The applications were not configured properly.
C) The hard disk was too slow.
D) The space for file cache was not sufficient.

Question 36

The workstations in your organization have been upgraded with the latest GPUs. To save costs, the company has procured a brand that is not widely known in the market. To install the drivers, the system administrator reboots the system using the Disable Early Launch Anti-Malware Driver option in the Advanced Boot Options menu. Why do you think this step was required to install the driver?

A) Rebooting helps scan for malwares in the driver at boot time.
B) The driver can be installed only if the system is booted in Safe Mode.
C) The driver did not have a valid digital signature.
D) Windows Defender may have considered the driver to be suspicious.

Question 37

You are troubleshooting a network latency issue in your organization. You identify a router as the root cause of the problem. The router was rejecting IP packets sent from computers requesting a service from a Windows Server 2019 system. What will you do to solve this issue?

A) Reinstall Windows Server 2019.
B) Reboot the router.
C) Disable the firewall.
D) Reboot the computers sending the packets.