Operating Systems practice questions

Answer: A) Upgrade the laptops to Windows 11 Pro, then join them to the domain and enable BitLocker

Windows 11 Home can't join an Active Directory domain or turn on full BitLocker. Upgrading to Windows 11 Pro adds both. Enterprise E3 subscriptions require Pro as the base edition, and a workgroup isn't domain membership.

• ACorrect. Windows 11 Pro is one of the editions that can join an Active Directory domain, and it supports BitLocker. Home supports neither, so an edition upgrade to Pro is the step that makes both possible.
• BIncorrect. Device encryption is available on all editions, but it isn't full BitLocker with its management options. More importantly, Home isn't on Microsoft's list of editions that can join an Active Directory domain.
• CIncorrect. Windows Enterprise E3 requires Windows Pro as the qualifying operating system. Subscription activation steps a device up from Pro to Enterprise, not from Home.
• DIncorrect. A workgroup is a peer-to-peer arrangement, not Active Directory domain membership, so naming it after the domain does nothing. The laptops would also still be on Home, which doesn't support BitLocker.

Answer: A) Storage Spaces with a two-way mirror space

Storage Spaces pools physical drives and creates virtual disks with a chosen resiliency type, such as a two-way mirror that tolerates one drive failure. Spanned and striped dynamic volumes have no redundancy, and File History is only a backup tool.

• ACorrect. Storage Spaces groups physical disks, including USB drives, into a storage pool. You then create virtual disks (spaces) from the pool and choose a resiliency type. A two-way mirror tolerates one disk failure, and the pool can grow later by adding more disks.
• BIncorrect. A spanned volume joins space from several disks into one volume, but it keeps no extra copy of the data. Losing any one disk loses the volume. It also uses the dynamic-disk method the user wants to avoid.
• CIncorrect. A striped volume (RAID 0) spreads data across disks for speed but has no redundancy, so one failed disk destroys the whole volume. It also relies on Disk Management dynamic disks.
• DIncorrect. File History saves backup copies of a user's files to another drive. It does not pool drives into one volume or provide a resilient live volume.

Answer: A) Enable Safe Mode

Safe Mode is the Startup Settings option that loads only essential drivers and services, which makes it the standard way to isolate a driver or service that stops Windows from reaching the desktop. Boot logging, low-resolution video and disabling signature enforcement all still load the full driver set.

• ASafe Mode starts Windows with only a basic set of drivers and services. If the PC reaches the desktop in Safe Mode, a non-essential or third-party driver or service is probably the cause. The technician can then use tools such as Event Viewer to find it and roll it back.
• BBoot logging starts Windows normally and records loaded and unloaded drivers in ntbtlog.txt. That log helps diagnosis, but the full driver set still loads, so the faulty driver can still cause the black screen.
• CThis option starts Windows with low resolution and refresh-rate settings, which helps when display settings are wrong. All other drivers and services still load normally, so it does not give the minimal environment the technician needs.
• DThis option lets drivers without valid signatures load. It loads more drivers, not fewer, so it does not isolate a faulty driver or service.

Answer: A) Snipping Tool

Snipping Tool is the built-in Windows tool that captures a chosen screen region and opens it in a mark-up window for annotation, saving or sharing. Steps Recorder, Magnifier and Clipboard history cannot capture a selected region and annotate it.

• ASnipping Tool captures free-form, rectangular, window or full-screen snips. Each capture opens in a mark-up window where the user can annotate it, then save or share it. It can also be opened with Windows logo key + Shift + S.
• BSteps Recorder (psr.exe) records the steps a user takes to reproduce a problem. It does not let the user select one region and draw on it. Microsoft has also deprecated it and recommends Snipping Tool instead.
• CMagnifier is an accessibility tool that enlarges part of the screen for easier viewing. It does not capture or save images, and it has no annotation tools.
• DClipboard history (Windows logo key + V) stores items the user has already copied so they can be pasted again. It cannot capture a screen region or draw on an image.

Answer: A) It omits Windows Media Player and related media components, which can be added with the Media Feature Pack

Windows N editions match their standard editions except that Windows Media Player and related media technologies are left out. The Media Feature Pack can add those components back.

• ACorrect. Microsoft documents that N editions have the same functionality as the corresponding standard edition but don't include Windows Media Player and other Windows Media technologies, such as media codecs and format support. The Media Feature Pack installs these components.
• BIncorrect. An N edition keeps the same features as its standard edition apart from the media technologies. Pro N still includes the Pro business features, such as BitLocker and Group Policy.
• CIncorrect. 'N' does not mean 'no network'. Networking works the same as in the standard edition; only the media-related technologies are left out.
• DIncorrect. The N designation is about which media components are included, not how the edition is licensed or activated. An N edition needs a valid license just like its standard edition.

Answer: A) "Deny log on locally"

• AThe "Deny log on locally" user rights assignment explicitly blocks a specified account from logging in interactively at a machine's physical console, even if that account otherwise has valid credentials — appropriate for service accounts that should only ever run background processes, never be used for someone to actually sit down and log into.
• BPassword history controls how many previous passwords are remembered/blocked from reuse; it doesn't restrict which login methods an account is permitted to use.
• CAccount lockout threshold controls how many failed login attempts trigger a lockout; it doesn't specifically block interactive local logon for a designated account.
• DDisk Cleanup removes unnecessary files to free space; it has no relationship to logon policy restrictions.

Answer: A) Network discovery under Advanced sharing settings for the Private profile

Network discovery controls whether a PC can see other local devices and be seen by them, and it should be on for trusted Private networks. The Public profile blocks discovery, and the other settings control access, not visibility.

• ANetwork discovery lets the PC find other devices on the local network and lets them find it. It belongs on trusted Private networks such as a home LAN.
• BThe Public profile is the higher-security profile meant for hotspots and other untrusted networks, and it blocks discovery. Switching to it would make the problem worse.
• CPassword protected sharing makes people enter account credentials to open shared resources. It controls access to shares, not whether devices can see each other.
• DRemote Desktop lets users sign in to the PC remotely. It doesn't make the PC or other devices show up when browsing the local network.

Answer: A) The Details pane

File Explorer's Details pane shows properties of the selected item, such as size and created/modified dates, inside the main window, so the user doesn't need to open the Properties dialog.

• ACorrect. The Details pane shows metadata for the currently selected item, such as size, date created, and date modified, right inside the File Explorer window. Microsoft lists the details pane among the places File Explorer displays item properties.
• BIncorrect. The Navigation pane is the tree on the left side used to move between drives, folders, and libraries. It does not show metadata for a selected file.
• CIncorrect. This View/Show option only adds extensions such as .docx to file names. It does not show size or date information.
• DIncorrect. This View/Show option makes files and folders with the hidden attribute visible. It does not show a selected file's size or dates.

Answer: A) Startup Repair

Startup Repair (Automatic Repair) is the WinRE tool that automatically diagnoses and fixes common problems that stop Windows from starting. System Restore, System Image Recovery and Command Prompt all need the technician to provide input.

• ACorrect. Startup Repair (called Automatic Repair in current Microsoft documentation) automates common diagnostic and repair tasks for Windows installations that won't start. It also runs automatically when the PC fails over into WinRE after a detected startup failure.
• BIncorrect. System Restore returns system files and settings to an earlier restore point, which the technician has to choose. It doesn't diagnose the startup problem on its own.
• CIncorrect. System Image Recovery replaces the drive's contents from a previously created system image on external storage. It's a full restore from a backup the technician has to supply, not an automatic diagnosis.
• DIncorrect. The WinRE Command Prompt gives access to tools such as chkdsk and Registry Editor, but the technician has to diagnose the problem and run each command manually.

Answer: A) Network

In msconfig, Safe boot > Network (Safe Mode with Networking) loads the safe mode drivers plus network support. Minimal and Alternate shell have no networking, and Active Directory repair is for domain controllers.

• ACorrect. The Network safe boot option loads the drivers and services listed under the SafeBoot\Network registry key. These are the safe mode set plus network support, so the technician can reach the vendor's site while troubleshooting.
• BIncorrect. Minimal loads only the drivers and services listed under the SafeBoot\Minimal key, which leaves out networking. The technician could not download the driver.
• CIncorrect. Alternate shell starts safe mode with a command prompt instead of the normal Explorer shell. It is based on the minimal safe mode and does not add network support.
• DIncorrect. This mode is for restoring the Active Directory service on a domain controller from backup. It is not used to fix driver problems on a workstation.