Windows Event Viewer

Which Event Viewer task enables administrators to save specific filtered events for later use or distribution?

Which log category in Event Viewer would contain information about user logon attempts, both successful and unsuccessful?

An application setup program fails to install correctly. In which Event Viewer log category would you likely find relevant information to diagnose the issue?

If a Windows operating system component, such as a driver, experiences an issue, where would the event details typically be logged?

An administrator wants to collect events from several remote computers for centralized monitoring. Which Event Viewer feature facilitates this?

Which level in Event Viewer suggests a condition that could lead to a more serious problem if not addressed?

An application encounters a problem affecting other applications or system components. Which Event Viewer level is most applicable?

Which Event Viewer level indicates that an application or component has experienced a failure and cannot automatically recover?

When troubleshooting system performance, what term describes a component that restricts overall system efficiency?

When analyzing system performance, what is used to establish a standard for identifying performance issues?

Which tool provides real-time analysis of CPU, Memory, Disk, and Network usage by processes and services?

You need to quickly check which applications are using the most CPU resources. Which tool is the most suitable for this task?

An administrator wants to monitor disk I/O performance over a period of time. Which tool is best suited for this purpose, offering the ability to log data for later analysis?

Within Resource Monitor, which tab provides a graphical representation of network utilization by individual processes?

An administrator needs to collect specific performance counters and event data related to a particular application. Which feature in Performance Monitor simplifies this process?

Which Windows feature provides real-time protection against viruses and malware?

What method does real-time protection use to identify and block malware behavior?

Which type of scan checks only the areas of your system most commonly affected by malware?

Which type of scan examines every file on your hard drive, including running programs?

You want to scan only a specific folder for potential malware. Which type of scan should you use?

In Windows Defender, what happens to items that are detected as threats but not removed from your computer?

What is the function of the 'Allowed Items' list in Windows Defender?

Where can you find a comprehensive list of all items detected by Windows Defender, regardless of their current status (quarantined, allowed, or removed)?

A system administrator notices that a server is experiencing slow performance during peak hours. They suspect a resource bottleneck. Which sequence of tools would be MOST efficient to identify the cause?

An application is experiencing frequent crashes. To investigate, you need to view the application's error logs and also monitor its resource usage. Which combination of tools is MOST suitable?

A user reports that their computer has been running slower than usual. You suspect a malware infection. What is the MOST appropriate first step to take using the tools available?

After installing a new program, the system becomes unstable. Which action, using built-in tools, would BEST help diagnose potential conflicts or errors introduced by the new software?

You need to ensure that a critical service on a remote server is running efficiently and without errors. To proactively monitor this, what combination of tools would provide the MOST comprehensive overview?

A server administrator wants to establish a long-term record of CPU utilization, disk I/O, and network traffic to facilitate capacity planning. Which tool is BEST suited for this purpose?