Unit 21
What name is given to a set of readings, captured under normal operating conditions, which you can save and compare to readings taken at a later time?
Baseline
What event type describes a change in the state of a component or process as part of a normal operation?
Information
What is the paging file used for?
It allows Windows to store data that overflows system memory.
What five areas are included in the Windows Experience Index?
Processor, memory, graphics, gaming graphics, and hard disk
A stability-tracking tool that extends the capabilities of the Event Viewer and Windows Experience Index enhancing both baseline comparison and problem resolution.
Reliability Monitor
What tool extends the basic functionality provided in Task Manager with additional features and tools?
Resource Monitor
You can associate several actions to occur upon a specific event occurring. what is one example
Send an SNMP trap
What enables administrators to receive events from other computers?
Subscriptions
In which type of Event Log would you most likely find useful information about services and device drivers?
System
What event type indicates a service degradation or an occurrence that can potentially cause a service degradation in the near future?
Warning
A system rating that quantifies the capabilities of a Windows 8.1 computer by breaking it down into categories and assigning each one a rating.
Windows Experience Index
In Task Manager, a display of the relationships between system processes.
process trees
In an Event Viewer subscription, the remote computer that is the source of legged events.
sources
An Event Viewer feature that enables administrators to receive events from other computers (called sources) in the Event Viewer console on their own computers (called collectors).
subscriptions
On the collector computer, what command will you need to enter from command prompt to start and autoconfigure the Windows Event Collector Service?
wecutil qc
To add a performance counter, what pieces of information will you need to specify?
1) Computer 2) Instance 3) Performance object 4) Performance counter
Event log subscriptions use which two possible protocols for communication?
1) HTTP 2) HTTPS
8 steps to create a custom view?
1) In the Start screen, launch Control Panel > System and Security > Administrative Tools > Event Viewer. 2) Right-click the Custom Views folder and then, from the context menu, select Create Custom View. 3) From the Logged drop-down list, select the time interval from which you want to display events. 4) In the Event level area, select the check boxes for the types of events you want to display. 5) From the By log drop-down list, select the log(s) from which you want to display events. Alternatively, from the By source list, select the source(s) from which you want to display events. Click OK. 6) Optionally, you can specify event ID numbers, task categories, keywords, and user credentials to narrow your search. 7) Click OK. 8) In the Name text box, type a name for the view, a description if desired, and select the folder in which you want to create your custom view.
8 steps to create an event subscription?
1) In the Start screen, launch Control Panel > System and Security > Administrative Tools > Event Viewer. 2) Right-click the Subscriptions node and, from the context menu, select Create Subscription. 3) In the Subscription Name text box, type a name for the subscription. 4) Select a subscription type option. 5) Click Select Events. The Query Filter dialog box appears. 6) Use the controls to select the events you want the source computers to forward and then click OK. 7) Click Advanced to set delivery optimization settings or use HTTPS for additional security. 8) Click OK to create the subscription.
What are the net effects of enabling indexing of diacritics?
1) It can enhance search for some language sets 2) It might decrease system performance
What 3 items present good guidelines to consider when selecting performance counters for performance monitoring?`
1) Limit the number of counters 2) Use histogram view 3) Choose counters with comparable values
What three views does Performance Monitor offer?
1) Line graph 2) histogram 3) report
10 steps to create a collector set?
1) On the Start Screen, type Perfmon and then click the Perfmon.exe tile 2) Expand the Data Collector Sets folder. Then right-click the User Defined folder and, from the context menu, select New > Data Collector Set. 3) In the Name text box, type a name for the data collector set. Then, select the Create manually (Advanced) option and then click Next. 4) Select the Performance counter check box and then click Next. 5) Select the interval at which you want the system to collect samples and then click Next. The Where would you like the data to be saved? page appears. 6) Type the name of or browse to the folder where you want to store the data collector set and then click Next. 7) If the account you are currently using does not have the privileges needed to gather the log information, click Change to display a Performance Monitor dialog box in which you can supply alternative credentials. 8) Select applicable options for further configuration. 9) Click Finish. The new data collector set appears in the User Defined folder. 10) Select the new data collector set and then click Start in the toolbar.
What three logs in Windows have been consistently maintained as the basic logs available?
1) System 2) Security 3) Setup
A log for a Windows component in the Event Viewer console. When you expand the Applications and Services Logs folder, you see logs for Windows applications, such as Internet Explorer. Then, when you expand the Microsoft and Windows folders, you see a long list of Windows components. Each of these components has its own separate log, called a channel.
A Windows PowerShell cmdlet that enables you to view Event Viewer logs.
What keyboard combination will directly open the Task Manager in Windows 8.1?
CTL+SHIFT-ESC
A remote engineering system fails intermittently. The helpdesk attempts to create an event collector to monitor specific incidents occurring on the remote system. The remote system is visible across the network, and you confirm that you can telnet to the system. An event subscription exists in the collector computer; the remote system recently rebooted, yet there are no events in the Forwarded Events log. Explain some of the steps that you might take to reach a working solution.
Create and configure the event collecter before creating the subscription were the source is coming from and whos recieving
What event type warns that an incident has occurred, resulting in a catastrophic loss of functionality or data in a component or process?
Error
How often does the Reliability Monitor gather data for the stability index?
Every hour
A Windows 8.1 feature that uses a modified hiberfil.sys that contains only the essential kernel and driver elements of the operating system. This enables both visibly and measurably faster boot times.
Fast Boot
A Windows PowerShell cmdlet that enables you to view Event Viewer logs.
Get-WinEvent
What PowerShell cmdlet can be used to display the Event Logs?
Get-WinEvent
A hidden scheduled task that collects data from the event logs every hour and updates the Reliability Monitor display every 24 hours.
Reliability Access Component Agent (RAC Agent)
Reliability Monitor gathers information using a hidden scheduled task called blank.
Reliability Access Component Agent (RACAgent)
What tool is designed to support system boot and startup options without the need to use the Boot Control Database, recovery environment, or BCDEdit?
System Configuration tool (Msconfig.exe)
A Windows tool that is designed to support system boot and startup options without the need to use the Boot Control Database, recovery environment, or BCDEdit.
System Configuration tool (msconfig.exe)
A Windows tool that is designed to gather and display detailed system information to aid with system analysis and troubleshooting.
System Information tool (msinfo32.exe)
What tool is beneficial to system diagnostics and configuration because it allows a single location to view comprehensive hardware, software, and configuration information?
System Information tool (msinfo32.exe)
A standard user is experiencing Internet connectivity issues. You have advised the user to run the Windows Network Diagnostic tool to repair the problem, to no effect. Diagnostics identify problems resolving host names and accessing specific services on remote computers. Explain what might be limiting the automated repairs associated with the Windows Network Diagnostic tool.
The computer is having issues communicating to the network. Make sure the ip address and the subnet mask are right other wise the computer wont be able to connect. If the computer is having a hard time connecting a red X should appear on the network connection for trouble shooting.
What is the name given to the system rating that quantifies the capabilities of a Windows 8.1 computer by breaking it down into categories and assigning each one a rating?
Windows Experience Index
The ability to assign one or more specific processors in a multi-processor or multi-core system to affect customized processing capabilities.
affinity
The overall system performance rating for the computer.
base score
A set of readings, captured under normal operating conditions, which you can save and compare to readings taken at a later time. By comparing the baseline readings to the workstation's current readings at regular intervals, you might detect trends that eventually affect the computer's performance.
baseline
A Windows 8.1 computer, configured with an Event Viewer subscription, which receives event information from other computers over the network.
collectors
A filtered version of a particular log, configured to display only certain events.
custom view
A collection of performance counter readings gathered under controlled circumstances for evaluation at a later time.
data collector set
A vowel or consonant utilizing accent marks that may alter pronunciation or interpretation within select language sets.
diacritic
A single record in a log of Windows system activities, viewable in the Event Viewer console.
events
What executable file can you run to open the Event Viewer?
eventvwr.exe
An element representing a specific occurrence of a specific performance counter.
instance
A Windows 8.1 management system that detects, monitors, controls, and attempts to automatically connect or repair both wired and wireless network connections.
intelligent network
A list of events, which can track the activity of the software, document errors, and provide analytical information to administrators.
log
A statistical element that the Performance Monitor application can track in a variety of ways. You can use Performance Monitor to create a customized graph or report containing any performance counters you choose.
performance counter
A category representing a specific hardware or software component in the computer.
performance object