{ "title": "Windows Basics Practice Exam", "subtitle": "Course TT00CD75 • 40 Questions (Modules M01 to M08)", "passPercentage": 50, "footer": "Windows Basics TT00CD75 Multiple-Choice Examination Practice Suite", "icon": "windows", "locale": "en", "questions": [ { "id": 1, "module": "M01", "moduleTitle": "M01: Windows 11 Introduction & Architecture", "question": "Which Windows 11 edition supports up to 6 TB of RAM, multi-CPU configurations, and the Resilient File System (ReFS) out of the box for data-intensive workloads?", "options": [ "Windows 11 Home", "Windows 11 Pro for Workstations", "Windows 11 SE", "Windows 11 Education" ], "answer": 1, "explanation": "Windows 11 Pro for Workstations is engineered for extreme data-intensive computing. It supports up to 4 physical CPUs, up to 6 TB of physical RAM, native ReFS volume creation, and persistent memory (NVDIMM-N) modules." }, { "id": 2, "module": "M01", "moduleTitle": "M01: Windows 11 Introduction & Architecture", "question": "What fundamental architectural leap did the Windows NT kernel introduce compared to the legacy MS-DOS foundation?", "options": [ "Direct 16-bit real-mode execution and single-tasking constraints", "Preemptive multitasking, hardware memory protection, and built-in security", "Complete elimination of access control lists and user profiles", "Exclusive reliance on command-line batch files for hardware initialization" ], "answer": 1, "explanation": "While MS-DOS was a simple, single-user, single-tasking operating system with direct hardware access, the Windows NT kernel established a multi-user operating system architecture featuring preemptive multitasking, protected memory spaces, built-in security permissions, and native Win32/Win64 execution." }, { "id": 3, "module": "M01", "moduleTitle": "M01: Windows 11 Introduction & Architecture", "question": "An enterprise receives new computers from a vendor with Windows licenses pre-installed and permanently bound to the original motherboard, prohibiting transfer to replacement systems. Which licensing model is this?", "options": [ "Retail / Full Packaged Product (FPP)", "Cloud Solution Provider (CSP) Subscription", "OEM (Original Equipment Manufacturer)", "Enterprise Volume Licensing (MAK)" ], "answer": 2, "explanation": "OEM licenses are pre-installed by PC manufacturers. They are legally and digitally tied to the original motherboard and cannot be transferred to another PC if the hardware is decommissioned." }, { "id": 4, "module": "M01", "moduleTitle": "M01: Windows 11 Introduction & Architecture", "question": "Which built-in diagnostic utility is launched using the command `msinfo32` to inspect granular hardware allocations (such as IRQs, I/O ports, and DMA channels) and BIOS/UEFI parameters?", "options": [ "System Information", "Device Manager", "System Configuration", "Performance Monitor" ], "answer": 0, "explanation": "Running `msinfo32` launches the System Information utility, which provides granular hardware resource breakdowns (IRQs, memory addresses, conflicts) and OS build specifications." }, { "id": 5, "module": "M01", "moduleTitle": "M01: Windows 11 Introduction & Architecture", "question": "Starting in Windows 11 version 22H2, which modern utility serves as the default shell host, hosting Command Prompt, PowerShell, and WSL sessions in a unified tabbed interface?", "options": [ "Windows PowerShell ISE", "Windows Terminal", "Classic ConHost", "Remote Desktop Connection" ], "answer": 1, "explanation": "Starting with Windows 11 22H2, Windows Terminal was made the default command-line host application, providing tabs, rich custom profiles, themes, keyboard shortcuts, and GPU-accelerated text rendering." }, { "id": 6, "module": "M02", "moduleTitle": "M02: File System Management", "question": "On a 64-bit Windows 11 installation, what is the specific architectural purpose of the `C:\\Windows\\SysWOW64` folder?", "options": [ "It stores 64-bit kernel binaries and driver packages exclusively.", "It contains 32-bit system libraries and binaries to allow 32-bit applications to execute seamlessly on 64-bit Windows.", "It is a temporary cache folder used exclusively by Windows Update servicing.", "It houses default templates for roaming user profiles." ], "answer": 1, "explanation": "SysWOW64 stands for 'Windows 32-bit on Windows 64-bit'. On 64-bit Windows, `System32` holds native 64-bit binaries, while `SysWOW64` stores 32-bit system files and DLLs to provide binary compatibility for 32-bit applications." }, { "id": 7, "module": "M02", "moduleTitle": "M02: File System Management", "question": "Which file system should be chosen to format a 128 GB external USB flash drive to store 10 GB video files and allow seamless read/write access across Windows, macOS, and Linux without third-party drivers?", "options": [ "FAT32", "NTFS", "exFAT", "ReFS" ], "answer": 2, "explanation": "FAT32 cannot store single files exceeding 4 GB. NTFS write support is often read-only or requires proprietary drivers on macOS and Linux. exFAT was built for flash media, has no 4 GB limit, and is supported natively across Windows, macOS, and Linux." }, { "id": 8, "module": "M02", "moduleTitle": "M02: File System Management", "question": "When troubleshooting corrupted or stuck Windows Updates, which directory's `Download` subfolder should an administrator purge after executing `net stop wuauserv`?", "options": [ "C:\\Windows\\SoftwareDistribution", "C:\\Windows\\WinSxS", "C:\\Windows\\System32\\drivers\\etc", "C:\\ProgramData\\Microsoft\\Windows" ], "answer": 0, "explanation": "Windows Update stages download payloads inside `C:\\Windows\\SoftwareDistribution\\Download`. Purging this cache after stopping the `wuauserv` service clears corrupted update files so clean copies can be downloaded." }, { "id": 9, "module": "M02", "moduleTitle": "M02: File System Management", "question": "In Windows NTFS permission inheritance and evaluation, how does an explicit 'Deny' permission on a folder interact with an inherited 'Allow' permission assigned to a user group?", "options": [ "The Allow permission takes precedence because inherited permissions always override local assignments.", "The Deny permission takes precedence and blocks access immediately.", "The permissions combine to grant Read-Only access.", "Windows triggers a mandatory UAC elevation prompt for the user." ], "answer": 1, "explanation": "Under NTFS security evaluation rules, an explicit Deny permission always takes precedence over an Allow permission, preventing access to the resource." }, { "id": 10, "module": "M02", "moduleTitle": "M02: File System Management", "question": "Which statement accurately describes the operation and impact of Windows System Restore points?", "options": [ "System Restore creates complete backups of all personal user files, documents, and photos in `C:\\Users`.", "System Restore takes snapshots of registry states, driver configurations, and critical system binaries without altering personal user documents.", "System Restore completely reformats the drive and resets Windows to factory default settings.", "System Restore is enabled automatically on all secondary non-system drives." ], "answer": 1, "explanation": "System Restore captures system-level state snapshots (registry, drivers, DLLs). Restoring reverts system configurations and software updates while leaving personal files in user profiles untouched." }, { "id": 11, "module": "M03", "moduleTitle": "M03: Networking", "question": "What is the total bit length and standard notation of an IPv6 address?", "options": [ "32 bits, expressed as 4 decimal octets separated by dots", "48 bits, expressed as 6 pairs of hexadecimal digits separated by hyphens", "128 bits, expressed as 8 groups of four hexadecimal digits separated by colons", "256 bits, expressed as 16 binary blocks separated by forward slashes" ], "answer": 2, "explanation": "An IPv6 address consists of 128 bits, represented in human-readable form as 8 groups of four hexadecimal digits separated by colons (e.g. `2001:0db8:85a3:0000:0000:8a2e:0370:7334`)." }, { "id": 12, "module": "M03", "moduleTitle": "M03: Networking", "question": "When connecting a Windows 11 laptop to an untrusted Wi-Fi hotspot in an airport or coffee shop, why should the network connection profile be configured as 'Public'?", "options": [ "It turns off the Windows Defender Firewall to allow unthrottled wireless speeds.", "It hides the device by turning off Network Discovery and blocking incoming file and printer sharing traffic.", "It automatically negotiates an Active Directory domain trust with the local router.", "It requests a globally routable public static IPv4 address directly from the ISP." ], "answer": 1, "explanation": "The Public network profile enforces strict firewall filtering, disables Network Discovery (making your PC invisible to peers), and shuts off file and printer sharing to prevent unauthorized access." }, { "id": 13, "module": "M03", "moduleTitle": "M03: Networking", "question": "Which Command Prompt command outputs exhaustive network configuration details, including the hardware MAC address, DHCP server, lease acquisition timestamps, and DNS servers?", "options": [ "ipconfig", "ipconfig /all", "netstat -ano", "nslookup localhost" ], "answer": 1, "explanation": "`ipconfig /all` provides complete diagnostic network details for all adapters, displaying physical MAC addresses, DHCP lease start and expiration dates, and DNS server IPs." }, { "id": 14, "module": "M03", "moduleTitle": "M03: Networking", "question": "An administrator suspects an intermediary router between the local office and a cloud server is dropping packets. Which diagnostic command maps each intermediate router hop and displays transit latency?", "options": [ "ping", "tracert", "netstat", "arp -a" ], "answer": 1, "explanation": "The `tracert` (Trace Route) command increments packet Time to Live (TTL) values to report every router hop along the path and calculate the round-trip latency at each step." }, { "id": 15, "module": "M03", "moduleTitle": "M03: Networking", "question": "Which command-line syntax maps the shared network folder `\\\\filesrv01\\finance` to local drive letter `Z:` in Windows Command Prompt?", "options": [ "map drive Z: \\\\filesrv01\\finance", "net use Z: \\\\filesrv01\\finance", "route add Z: \\\\filesrv01\\finance", "net share Z:=\\\\filesrv01\\finance" ], "answer": 1, "explanation": "`net use` is the legacy Windows command-line utility used to connect and map shared network folders. The command `net use Z: \\\\filesrv01\\finance` binds the share to local drive letter Z:." }, { "id": 16, "module": "M04", "moduleTitle": "M04: User Management", "question": "An administrator deletes a user account named 'jdoe' and immediately recreates a new account with the identical name 'jdoe'. Why does the new account lack access to the former user's NTFS-permissioned folders?", "options": [ "NTFS permissions are tied to the account's password hash, which has changed.", "Each Windows account is identified by a unique Security Identifier (SID); the new account receives a new SID regardless of having the same username.", "Windows enforces a mandatory 30-day quarantine period for reused usernames.", "The Security Account Manager (SAM) database rejects duplicate usernames until the computer reboots." ], "answer": 1, "explanation": "Windows authorizes access via unique Security Identifiers (SIDs), never by account names. Once an account is deleted, its SID is permanently destroyed. Recreating an account with the identical name creates a new SID that possesses zero previous permissions." }, { "id": 17, "module": "M04", "moduleTitle": "M04: User Management", "question": "A technician tries to launch the Local Users and Groups console (`lusrmgr.msc`) on a Windows 11 PC and receives an error message stating that the snap-in cannot be used in this edition. Which edition is running?", "options": [ "Windows 11 Pro", "Windows 11 Enterprise", "Windows 11 Education", "Windows 11 Home" ], "answer": 3, "explanation": "Microsoft disables the `lusrmgr.msc` MMC snap-in on Windows 11 Home edition. User account management on Windows 11 Home must be performed via the Settings app, netplwiz, or the `net user` command." }, { "id": 18, "module": "M04", "moduleTitle": "M04: User Management", "question": "Which command executed in an elevated Command Prompt creates a new local user named 'Student1' with the password 'P@ssw0rd123'?", "options": [ "useradd Student1 -p P@ssw0rd123", "net user Student1 P@ssw0rd123 /add", "lusrmgr /create:Student1 /pwd:P@ssw0rd123", "net account Student1 /new /password:P@ssw0rd123" ], "answer": 1, "explanation": "The native Windows CLI syntax for creating local user accounts is `net user /add`." }, { "id": 19, "module": "M04", "moduleTitle": "M04: User Management", "question": "In Microsoft Active Directory identity and group management, what sequence does the standard **AGDLP** best-practice model prescribe?", "options": [ "Administrator, Gateway, Domain, Local, Policy", "Accounts are placed into Global groups, which are nested into Domain Local groups, which are assigned Permissions", "Access Groups Defined by Local Policies", "Authentication Generated by Domain-Level Protocols" ], "answer": 1, "explanation": "AGDLP is the fundamental Microsoft role-based access strategy: Accounts (users) -> Global groups (business roles) -> Domain Local groups (resource access rules) -> Permissions (ACLs assigned on folders, printers, etc.)." }, { "id": 20, "module": "M04", "moduleTitle": "M04: User Management", "question": "Which built-in Windows service account possesses the highest privileges on the local machine (exceeding even local Administrators) and presents the computer account (`DOMAIN\\COMPUTER$`) over the network?", "options": [ "NT AUTHORITY\\LocalService", "NT AUTHORITY\\NetworkService", "NT AUTHORITY\\SYSTEM (LocalSystem)", "NT AUTHORITY\\Guest" ], "answer": 2, "explanation": "`NT AUTHORITY\\SYSTEM` (LocalSystem) is the operating system core service account. It has unrestricted local system privileges and accesses network resources using the computer's Active Directory domain identity." }, { "id": 21, "module": "M05", "moduleTitle": "M05: Disk Management", "question": "Why is an administrator required to initialize a newly installed 4 TB solid-state drive using the GPT (GUID Partition Table) partition style rather than legacy MBR?", "options": [ "MBR cannot address storage spaces larger than 2 TB and supports a maximum of 4 primary partitions.", "MBR does not support NTFS or exFAT file systems.", "GPT is required for backward compatibility with 16-bit MS-DOS commands.", "Windows 11 prohibits formatting any drive smaller than 4 TB with MBR." ], "answer": 0, "explanation": "MBR uses 32-bit sector addressing, which limits drive capacity to 2 TB (with standard 512-byte sectors) and restricts partition tables to 4 primary partitions. GPT uses 64-bit addressing (supporting disks up to zettabytes) and up to 128 partitions in Windows." }, { "id": 22, "module": "M05", "moduleTitle": "M05: Disk Management", "question": "What is the executable snap-in command used to launch the graphical Disk Management console from the Run dialog (`Win + R`)?", "options": [ "diskpart.exe", "diskmgmt.msc", "storagemgmt.cpl", "dskmgr.msc" ], "answer": 1, "explanation": "Typing `diskmgmt.msc` into the Run dialog or command line launches the Disk Management Microsoft Management Console snap-in." }, { "id": 23, "module": "M05", "moduleTitle": "M05: Disk Management", "question": "In the Windows Disk Management console, why would the 'Extend Volume' option for drive `C:` be greyed out even when there is unallocated space on the same physical disk?", "options": [ "Drive C: must be converted to an exFAT file system before extending.", "The unallocated space is not directly contiguous and located immediately to the right of the volume being extended.", "BitLocker encryption is active on the operating system volume.", "The computer must be in Safe Mode with Command Prompt." ], "answer": 1, "explanation": "Windows Disk Management requires that unallocated space be directly contiguous (adjacent) and positioned immediately to the right of the target partition in order to extend it." }, { "id": 24, "module": "M05", "moduleTitle": "M05: Disk Management", "question": "When working in the command-line utility `diskpart`, what fundamental procedural rule must be followed before executing destructive commands like `clean` or `format`?", "options": [ "The system must be booted into Safe Mode.", "The target object (disk, partition, or volume) must be explicitly selected to give it focus (e.g. `select disk 1`).", "The hard drive must be unplugged and reconnected via an external USB enclosure.", "The administrator must run `chkdsk /f` first." ], "answer": 1, "explanation": "`diskpart` functions on an explicit 'focus' model. All commands affect only the currently focused object, necessitating commands like `select disk 1` or `select volume 2` prior to running actions." }, { "id": 25, "module": "M05", "moduleTitle": "M05: Disk Management", "question": "What key operational advantage does the modern `.vhdx` virtual hard disk format offer over the older `.vhd` format?", "options": [ "It supports disk capacities up to 64 TB and incorporates resiliency logging to prevent file corruption during sudden power failures.", "It restricts disk capacity to 2 TB to prevent virtual drive overcommit.", "It enables running 16-bit DOS executables natively without a hypervisor.", "It eliminates the need for partition tables or file system formatting." ], "answer": 0, "explanation": "The `.vhdx` format expands the maximum virtual disk size from 2 TB to 64 TB and introduces log-based metadata protection that prevents file corruption during unexpected power outages." }, { "id": 26, "module": "M06", "moduleTitle": "M06: Security", "question": "When a User Account Control (UAC) prompt appears and dims the host display, what security architecture prevents background malware from forging user consent or injecting keystrokes?", "options": [ "Virtual Memory Page Guard", "Secure Desktop isolation", "BitLocker Credential Seal", "Network Quarantine Boundary" ], "answer": 1, "explanation": "The Secure Desktop switches the display to an isolated desktop session where no standard user-mode applications or malicious background processes can capture keystrokes or simulate mouse clicks." }, { "id": 27, "module": "M06", "moduleTitle": "M06: Security", "question": "What is the primary role of the hardware TPM 2.0 (Trusted Platform Module) chip required by Windows 11?", "options": [ "Accelerating 3D graphics and video encoding in DirectX applications", "Providing a tamper-resistant hardware microcontroller that securely generates and stores cryptographic keys for BitLocker and Windows Hello", "Serving as high-speed volatile cache memory for virtual machines", "Performing automatic scheduled defragmentation of solid-state storage" ], "answer": 1, "explanation": "TPM 2.0 is a specialized physical hardware chip providing tamper-resistant cryptographic functions, platform integrity measurements, and secure key storage for BitLocker drive encryption, Secure Boot, and Windows Hello." }, { "id": 28, "module": "M06", "moduleTitle": "M06: Security", "question": "Which statement accurately describes the characteristics and lifecycle of **Windows Sandbox**?", "options": [ "It is a persistent virtual machine that retains all installed test software and downloaded files across reboots.", "It is a lightweight, disposable virtual desktop environment; when closed, all applications, files, and state changes are permanently discarded.", "It is a tool designed specifically for Windows 11 Home edition to run legacy 16-bit software.", "It requires creating and formatting a dedicated physical hard disk partition before each launch." ], "answer": 1, "explanation": "Windows Sandbox provides a safe, disposable desktop sandbox using Hyper-V virtualization. Once closed, the entire guest operating system and all files or malware inside are permanently obliterated." }, { "id": 29, "module": "M06", "moduleTitle": "M06: Security", "question": "If a computer detects unexpected hardware changes (such as a motherboard swap or BIOS update), what 48-digit credential is required to unlock a BitLocker-encrypted volume?", "options": [ "Windows Digital Product Key", "BitLocker Recovery Key", "TPM Hardware Firmware Hash", "Active Directory Kerberos Ticket" ], "answer": 1, "explanation": "If BitLocker detects hardware tampering or firmware alterations, it locks down into recovery mode and requires the 48-digit numerical BitLocker Recovery Key to unlock the drive." }, { "id": 30, "module": "M06", "moduleTitle": "M06: Security", "question": "What is the primary role of Microsoft Defender SmartScreen in Windows 11?", "options": [ "To adjust display color profiles and refresh rates automatically", "To warn users and block unrecognized, untrusted, or malicious files and web downloads based on cloud reputation analysis", "To schedule daily defragmentation tasks on internal hard drives", "To synchronize printer queues and spool files across local subnets" ], "answer": 1, "explanation": "Microsoft Defender SmartScreen inspects downloaded files, installer executables, and websites against cloud reputation databases to protect users against phishing and unknown/malicious payloads." }, { "id": 31, "module": "M07", "moduleTitle": "M07: Windows Tools", "question": "In the Windows Registry (`regedit`), which root hive stores machine-wide configuration parameters, installed software settings, and hardware definitions that apply to ALL users on the computer?", "options": [ "HKEY_CURRENT_USER (HKCU)", "HKEY_LOCAL_MACHINE (HKLM)", "HKEY_CLASSES_ROOT (HKCR)", "HKEY_CURRENT_CONFIG (HKCC)" ], "answer": 1, "explanation": "`HKEY_LOCAL_MACHINE` (HKLM) contains machine-level configuration settings (BCD, SOFTWARE, SYSTEM, SAM, SECURITY) that apply globally to the local computer regardless of which user is signed in." }, { "id": 32, "module": "M07", "moduleTitle": "M07: Windows Tools", "question": "Which Windows Registry data type represents a 32-bit numerical integer, frequently used for binary configuration flags (0 for Disabled, 1 for Enabled) and numeric parameters?", "options": [ "REG_SZ", "REG_EXPAND_SZ", "REG_DWORD", "REG_MULTI_SZ" ], "answer": 2, "explanation": "`REG_DWORD` (Double Word) is a 32-bit (4-byte) integer, commonly used across the registry for boolean on/off switches (0 or 1) and numeric configuration values." }, { "id": 33, "module": "M07", "moduleTitle": "M07: Windows Tools", "question": "When troubleshooting unexpected driver crashes and operating system errors, which log under 'Windows Logs' in Event Viewer (`eventvwr.msc`) records system component and device driver events?", "options": [ "Application", "Security", "System", "Setup" ], "answer": 2, "explanation": "The System log in Event Viewer captures events logged by core Windows components, device drivers, and system services (such as driver loading failures or unexpected system restarts)." }, { "id": 34, "module": "M07", "moduleTitle": "M07: Windows Tools", "question": "Which Run command (`Win + R`) opens the Device Manager console to inspect driver states, troubleshoot yellow warning triangles, and update hardware device drivers?", "options": [ "devmgmt.msc", "services.msc", "msconfig", "ncpa.cpl" ], "answer": 0, "explanation": "`devmgmt.msc` is the Microsoft Management Console shortcut that directly launches Device Manager." }, { "id": 35, "module": "M07", "moduleTitle": "M07: Windows Tools", "question": "An administrator wants to decrease boot times by preventing unnecessary applications from launching automatically when a user signs in. Which tab in Task Manager (`taskmgr`) manages this configuration along with startup impact metrics?", "options": [ "Processes", "Performance", "Startup apps", "Details" ], "answer": 2, "explanation": "The 'Startup apps' tab in Windows 11 Task Manager displays all programs configured to run at user login, allowing users to enable or disable them and reviewing their measured boot impact (Low, Medium, High)." }, { "id": 36, "module": "M08", "moduleTitle": "M08: Troubleshooting", "question": "Which diagnostic utility, launched by running `perfmon /rel`, plots a chronological timeline of application errors, Windows failures, and updates alongside a Stability Index rated from 1 to 10?", "options": [ "Reliability Monitor", "Resource Monitor", "Task Scheduler", "DirectX Diagnostic Tool" ], "answer": 0, "explanation": "Reliability Monitor (`perfmon /rel`) provides an intuitive visual timeline displaying application crashes, Windows failures, and hardware issues, along with a calculated System Stability Index between 1 and 10." }, { "id": 37, "module": "M08", "moduleTitle": "M08: Troubleshooting", "question": "What is the recommended sequential order for running command-line repair tools when troubleshooting disk issues and corrupted system files in Windows?", "options": [ "sfc /scannow -> DISM -> chkdsk /f", "chkdsk /f -> DISM /Online /Cleanup-Image /RestoreHealth -> sfc /scannow", "DISM -> sfc /scannow -> defrag C:", "sfc /scannow -> chkdsk /f -> DISM" ], "answer": 1, "explanation": "Sysadmin best practice dictates fixing physical file system errors first with `chkdsk`, then repairing the local Windows Component Store image using `DISM`, and finally running `sfc /scannow` so SFC has a healthy component store to pull replacement files from." }, { "id": 38, "module": "M08", "moduleTitle": "M08: Troubleshooting", "question": "Why will `sfc /scannow` fail to repair corrupted operating system files if the Windows Component Store located at `C:\\Windows\\WinSxS` is damaged?", "options": [ "SFC automatically erases the master boot record if WinSxS is corrupted.", "SFC relies on the local WinSxS component store as the healthy source library to replace corrupted files; if the store is corrupted, SFC lacks clean replacement source files until DISM repairs it.", "WinSxS stores the BitLocker recovery keys required to authorize SFC execution.", "SFC can only repair files stored on external FAT32 drives." ], "answer": 1, "explanation": "System File Checker (`sfc`) replaces damaged system files with known-good copies retrieved from `C:\\Windows\\WinSxS`. If the Component Store has corrupted payloads, SFC cannot fix files until `DISM /Online /Cleanup-Image /RestoreHealth` repairs the store." }, { "id": 39, "module": "M08", "moduleTitle": "M08: Troubleshooting", "question": "A print job is jammed in the queue and cannot be deleted via the Windows GUI. What is the standard sysadmin procedure to clear the stuck print queue?", "options": [ "Delete the user profile folder from `C:\\Users` and reboot into Safe Mode.", "Stop the Print Spooler service (`net stop spooler`), delete all files inside `C:\\Windows\\System32\\spool\\PRINTERS`, and restart the service (`net start spooler`).", "Run `ipconfig /flushdns` and update the graphics card driver.", "Format the hard disk partition using exFAT." ], "answer": 1, "explanation": "Print jobs are written to `C:\\Windows\\System32\\spool\\PRINTERS`. Stopping the Print Spooler (`net stop spooler`), deleting the spool files, and restarting the service (`net start spooler`) forcibly clears jammed print queues." }, { "id": 40, "module": "M08", "moduleTitle": "M08: Troubleshooting", "question": "When performing a 'Reset this PC' in Windows 11 with the option 'Keep my files' selected, what happens to applications and user data?", "options": [ "All third-party installed desktop applications and custom settings are removed, while personal user files in user folders are preserved.", "Every file and partition on all internal hard drives is permanently wiped.", "Installed applications are kept intact, but personal documents are deleted.", "The operating system downgrades to a clean install of Windows 10." ], "answer": 0, "explanation": "The 'Keep my files' reset option reinstalls Windows 11 and removes installed desktop applications and custom system settings, while preserving files in personal profile directories (Documents, Pictures, Desktop, etc.)." } ] }