Question 1

A user reports a Blue Screen of Death on their workstation. What information would you collect, and how would you begin diagnosing the root cause?

Accepted Answer

A Blue Screen of Death, commonly referred to as a BSOD, occurs when Windows encounters a critical error that it cannot recover from. The system halts and displays a blue screen with a stop code and, in newer versions of Windows, a QR code that links to troubleshooting information. As an L2 technician, your job is to move beyond the surface symptoms and identify the underlying cause so the issue does not recur.

The first piece of information to collect is the stop code displayed on the blue screen itself. Stop codes like IRQL_NOT_LESS_OR_EQUAL, KERNEL_DATA_INPAGE_ERROR, or SYSTEM_SERVICE_EXC

Question 2

What are the different Windows boot modes and recovery options, and when would you use each one during troubleshooting?

Accepted Answer

Windows provides several boot modes and recovery options designed to help technicians troubleshoot and resolve issues that prevent normal operation. Knowing which mode to use in each situation saves time and avoids unnecessary escalations.

Safe Mode is the most commonly used diagnostic boot option. It starts Windows with a minimal set of drivers and services, disabling third-party software, non-essential drivers, and startup programs. This allows you to determine whether a problem is caused by a third-party driver or application versus a core Windows component. If the system works normally

Question 3

Explain the logical structure of Active Directory, including domains, trees, forests, and organizational units. How do they relate to each other?

Accepted Answer

Active Directory organizes network resources into a hierarchical logical structure that allows administrators to manage users, computers, and services efficiently. Understanding this structure is fundamental for any L2 technician working in a Windows enterprise environment, because the way objects are organized determines how policies are applied, how authentication works, and how administrative responsibilities are delegated.

A domain is the core building block of Active Directory. It is a logical grouping of objects, including user accounts, computer accounts, groups, and shared resources

Question 4

What is the difference between security groups and distribution groups in Active Directory, and what are the different group scopes?

Accepted Answer

Active Directory uses groups to organize users and other objects so that permissions and email distribution can be managed efficiently. Understanding the difference between group types and scopes is essential for L2 technicians, because using the wrong group type or scope is a common source of access issues and confusion.

There are two types of groups in Active Directory: security groups and distribution groups. Security groups are used to assign permissions to shared resources. When you want to grant a set of users access to a file share, a printer, or an application, you add them to a sec

Question 5

Explain the DHCP DORA process and describe what happens at each step when a device joins a network.

Accepted Answer

DHCP, which stands for Dynamic Host Configuration Protocol, is the service responsible for automatically assigning IP addresses and network configuration to devices when they connect to a network. The process it follows is known as DORA, an acronym that represents the four steps involved: Discovery, Offer, Request, and Acknowledgment.

The first step is Discovery. When a device, such as a laptop or phone, connects to the network, it does not yet have an IP address. It sends out a broadcast message called a DHCP Discover packet to the entire local network, essentially asking if there is a DHC

Question 6

How does DNS resolution work, and what steps would you take to troubleshoot a situation where a user can ping an IP address but cannot access a website by its domain name?

Accepted Answer

DNS, or Domain Name System, is the service that translates human-readable domain names like google.com into the numerical IP addresses that computers use to communicate. When a user types a URL into their browser, the system needs to resolve that name to an IP address before it can establish a connection.

The resolution process starts with the client checking its local DNS cache to see if it already has a recent record for that domain. If not, it queries the configured DNS server, which is usually provided by DHCP or set manually. That DNS server may have the answer cached from a previous l

Question 7

What are Windows Server roles and features, and which roles would you expect to see on a typical server in a small to mid-size business environment?

Accepted Answer

In Windows Server, roles and features are the building blocks that define what services a server provides to the network. A role is a primary function that the server is dedicated to performing, while features are additional capabilities that support or enhance those roles. You install roles and features through Server Manager or PowerShell, and each role can be added or removed without reinstalling the operating system.

The most common roles you would see in a small to mid-size business environment include Active Directory Domain Services, commonly known as AD DS. This role turns the serve

Question 8

Explain the difference between a virtual machine and a physical server. What are the main benefits of using virtualization in an IT environment?

Accepted Answer

A physical server is a standalone piece of hardware with its own processor, memory, storage, and network interfaces, running a single operating system directly on the hardware. A virtual machine, on the other hand, is a software-based emulation of a physical computer that runs on top of a hypervisor. The hypervisor is a layer of software that sits between the physical hardware and the virtual machines, allocating hardware resources like CPU, RAM, and storage to each VM. Multiple virtual machines can run simultaneously on a single physical server, each with its own operating system and applicat

Question 9

What is the difference between SCCM and Microsoft Intune, and in what scenarios would you use one over the other?

Accepted Answer

SCCM, which Microsoft has rebranded as Microsoft Endpoint Configuration Manager and is now part of Microsoft Configuration Manager, is an on-premises device management solution. It requires server infrastructure within your organization's data center, including a site server, SQL database, distribution points for content delivery, and management points for client communication. SCCM manages devices through a client agent installed on each endpoint.

Microsoft Intune, on the other hand, is a cloud-based device management solution. It requires no on-premises infrastructure because everything i

Question 10

Explain the concept of OS imaging and deployment. How would you create and deploy a standardized Windows image to new workstations in your organization?

Accepted Answer

OS imaging is the process of creating a preconfigured master copy of an operating system, complete with drivers, applications, settings, and security configurations, and then deploying that image to multiple computers. Instead of manually installing Windows and configuring each machine individually, which could take hours per device, you deploy the same standardized image to every workstation, ensuring consistency across the environment and dramatically reducing setup time.

The traditional approach to imaging involves several steps. First, you build a reference machine by installing Windows

IT Support

Topics

Advanced Troubleshooting & Diagnostics

Active Directory & Group Policy Management

Networking & Infrastructure

Server Administration & Virtualization

Endpoint Management & Automation

Mock Interview

Quick Stats