Title: Lesson 21: Quiz
Course: RITA MC - ITNW 1308 > Section: Lesson 21: Monitoring System Performance

Q: Which three logs in Windows have been consistently maintained as the basic logs available?
- System
- Setup
- Security
- Application
A: System; Setup; Security
Feedback: Windows has maintained the same three basic logs throughout several versions: a System log, a Security log, and an Application log. Recent versions have added a Setup log, and servers performing certain roles have additional logs, such as those tracking DNS and File Replication activities.

Q: You can associate several actions to occur upon a specific event occurring. Which of the listed actions is not one of the available options?
- Start a program
- Send an SNMP trap
- Send an email message
- Display a message
A: Send an SNMP trap
Feedback: You can then associate one of three Actions with an event: Start a Program, Send an e-mail, or Display a Message.

Q: On the collector computer, what command will you need to enter from an elevated command prompt to start and autoconfigure the Windows Event Collector Service?
- winrm quickconfig
- wecutil qc
- wecutil auto
- winrm autoconfig
A: wecutil qc
Feedback: To start and autoconfigure the Windows Event Collector Service, open an elevated command prompt, type the following command, and then press Enter: wecutil qc.

Q: Event log subscriptions use what two possible protocols for communication?
- HTTP
- SNMP
- HTTPS
- SMTPS
A: HTTP; HTTPS
Feedback: Event log subscriptions use the Hypertext Transfer Protocol (HTTP) or, optionally, the Secure Hypertext Transfer Protocol (HTTPS) for communications. These are the same protocols used by Internet web servers and browsers, so most computers are configured to allow them through their firewalls. However, if you experience communication problems, make sure that the firewalls on the collector and all source computers are configured to allow traffic on TCP port 80 for HTTP, or TCP port 443 for HTTPS, in addition to specific firewall rules enabling the relevant remote applications.

Q: What PowerShell cmdlet can be used to display the Event Logs?
- Show-WinEvent
- Get-WinEvent
- Display-WinEvent
- Parse-WinEvent
A: Get-WinEvent
Feedback: You will use the Get-WinEvent cmdlet to display the Windows Event logs.

Q: What is the name given to the system rating that quantifies the capabilities of a Windows 8.1 computer by breaking it down into categories and assigning each one a rating?
- Windows Experience Index
- Windows Performance Index
- Windows Capabilities Index
- Windows Fulfillment Index
A: Windows Experience Index
Feedback: The System control panel provides a system rating called the Windows Experience Index, which quantifies the capabilities of a Windows 8.1 computer by breaking it down into categories and assigning each one a rating. One key function of this rating is to help users determine system ability to run features like the Windows Aero user experience. However, the underlying technology of this tool has other uses as well.

Q: To add a performance counter, what pieces of information will you need to specify? (Choose all that apply)
- Computer
- Performance object
- Performance counter
- Instance
A: Computer; Performance object; Performance counter; Instance
Feedback: You will need to specify all four items, though if you are adding counters for the local computer, that piece of information is assumed. Likewise, if the object or counter does not measure multiple instances, you wont need to worry about the specific instance.

Q: Which of the listed items present good guidelines to consider when selecting performance counters for performance monitoring? (Choose all that apply)
- Limit the number of counters
- Use histogram view
- Modify the counter display properties
- Choose counters with comparable values
A: Limit the number of counters; Modify the counter display properties; Choose counters with comparable values
Feedback: Consider the following tips when selecting counters: - Limit the number of counters: Too many counters make the graph more difficult to understand. - Modify the counter display properties: Depending on the size and capabilities of your monitor, the default colors and line widths that System Monitor uses in its graph might make it difficult to distinguish counters from each other. - Choose counters with comparable values: Performance Monitor imposes no limitations on the combinations of counters you can select for a single graph, but some statistics are not practical to display together because of their disparate values.

Q: What name is given to a set of readings, captured under normal operating conditions, which you can save and compare to readings taken at a later time?
- Baseline
- Trend line
- Data set
- Collector set
A: Baseline
Feedback: A baseline is simply a set of readings, captured under normal operating conditions, which you can save and compare to readings taken at a later time. By comparing the baseline readings to the workstation’s current readings at regular intervals, you might possibly detect trends that eventually affect the computer’s performance.

Q: How often does the Reliability Monitor gather data for the stability index?
- Every hour
- Every 24 hours
- Every 15 minutes
- Every minute
A: Every hour
Feedback: The agent collects data from the event logs every hour and updates the Reliability Monitor display every 24 hours. The stability index is a number from 0 to 10 (with 0 representing the least and 10 the most stability).

Q: What keyboard combination will directly open the Task Manager in Windows 8.1?
- CTL+ALT+DEL
- CTL+SHIFT-ESC
- SHIFT+F4
- CTRL+F10
A: CTL+SHIFT-ESC
Feedback: As always, you can use CTL+ALT+DEL and select Task Manager from the list of available options. This is not an ideal recommendation for the standard user, because repeating the key set reboots the computer. Microsoft has also added a more user-friendly hot-key combination, CTL+SHIFT-ESC, that performs the same function.

Q: What tool extends the basic functionality provided in Task Manager with additional features and tools?
- Performance Tracker
- Resource Monitor
- Troubleshooting Toolkit
- Performance Manager
A: Resource Monitor
Feedback: Resource Monitor is a Performance tool that extends the capabilities of the Task Manager. When you click the Resource Monitor button on the Task Manager’s Performance tab, the Resource Monitor window appears, displaying a more comprehensive breakdown of process and performance statistics. On the Overview tab, there are four real-time line graphs (CPU, Disk, Network, and Memory) that display information about the main system hardware components. Each of the four components also has a separate, expandable section listed below the Overview tab that display more detailed information in text form, such as the resources used by individual applications and processes.

Q: What is the paging file used for?
- It allows Windows to reorder data stored in memory in a more efficient manner.
- It allows Windows to store data that overflows system memory.
- It allows Windows to read-ahead data that the user is predicted to need.
- It allows Windows to reduce the amount of traffic that must traverse the network.
A: It allows Windows to store data that overflows system memory.
Feedback: A paging file is an area of disk space that Windows uses to store data that overflows from system memory. This virtual memory enables Windows to run programs that utilize more memory than is available in the system, but at the cost of reduced performance. This is because memory I/O is inherently faster than disk I/O.

Q: What are the net effects of enabling indexing of diacritics? (Choose all that apply)
- It can enhance search for some language sets
- It might decrease system performance
- It will reduce the index file size
- It can degrade search for some language sets
A: It can enhance search for some language sets; It might decrease system performance
Feedback: A diacritic is a vowel or consonant utilizing accent marks that may alter pronunciation or interpretation within select language sets. The default is for diacritic indexing to be disabled. Enabling diacritics can enhance search for some language sets although it might decrease performance and will decidedly increase the index file size.

Q: In which type of Event Log would you most likely find useful information about services and device drivers?
- Application
- Setup
- System
- Security
A: System
Feedback: The System log contains information about events generated by the operating system, such as services and device drivers. For example, a failure of a service to start or a driver to load during system startup is recorded in the System log.

Q: What event type warns that an incident has occurred, resulting in a catastrophic loss of functionality or data in a component or process?
- Error
- Warning
- Critical
- Information
A: Critical
Feedback: Critical: An event that warns that an incident has occurred, resulting in a catastrophic loss of functionality or data in a component or process.

Q: What event type warns of a problem that is not likely to affect the performance of the component or process where the problem occurred, but that could affect the performance of other components or processes on the system?
- Error
- Warning
- Critical
- Information
A: Error
Feedback: Error: An event that warns of a problem that is not likely to affect the performance of the component or process where the problem occurred, but that could affect the performance of other components or processes on the system.

Q: What event type indicates a service degradation or an occurrence that can potentially cause a service degradation in the near future?
- Error
- Warning
- Critical
- Information
A: Warning
Feedback: Warning: An event that warns of a service degradation or an occurrence that can potentially cause a service degradation in the near future, unless you take steps to prevent it.

Q: What event type describes a change in the state of a component or process as part of a normal operation?
- Error
- Warning
- Critical
- Information
A: Information
Feedback: Information: An event that describes a change in the state of a component or process as part of a normal operation.