ExamFinch.com My Study

Study guide

Windows Administrative Tools & Utilities

Practice this exam

CompTIA A+ 220-1201 & 220-1202

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

About the CompTIA A+ Certification Exam Domains & Study Strategy

2 Core 1 Domain 1: Mobile Devices (13%)

Laptop Hardware & Components Laptop Features & Display Types Mobile Device Connectivity & Accessories Mobile Operating System Features Mobile Device Synchronization & Data Transfer

3 Core 1 Domain 2: Networking (23%)

TCP/IP Fundamentals & the OSI Model Common Ports & Protocols Wireless Networking Standards Network Hardware & Devices Network Configuration & Internet Connections Network Types & Topologies

4 Core 1 Domain 3: Hardware (25%)

Cables & Connectors RAM Types & Storage Devices Motherboards, CPUs & Power Supplies Printers & Multifunction Devices Peripheral Devices & Expansion Cards Network Cable Tools & Testing

5 Core 1 Domain 4: Virtualization & Cloud Computing (11%)

Virtualization Concepts Cloud Computing Models & Services Client-Side Virtualization in Practice

6 Core 1 Domain 5: Hardware & Network Troubleshooting (28%)

CompTIA Troubleshooting Methodology Hardware Troubleshooting Network Troubleshooting Printer Troubleshooting Display & Mobile Device Troubleshooting

7 Core 2 Domain 1: Operating Systems (28%)

Windows Editions & Features Windows Administrative Tools & Utilities Windows Command Line & PowerShell macOS & Linux Basics Windows Networking & File Sharing Windows Installation & Upgrade Methods

8 Core 2 Domain 2: Security (28%)

Physical & Logical Security Measures Malware Types & Threat Mitigation Wireless & Network Security Encryption & Data Protection

9 Core 2 Domain 3: Software Troubleshooting (23%)

Windows OS Troubleshooting Mobile OS & Application Troubleshooting Browser & Application Troubleshooting

10 Core 2 Domain 4: Operational Procedures (21%)

Documentation & Change Management Backup & Recovery Methods Safety & Environmental Procedures Scripting & Remote Access Technologies Privacy, Licensing & Organizational Policies

Windows Administrative Tools & Utilities

Key Takeaways Explain This Topic AI

Task Manager (Ctrl+Shift+Esc) is the first stop for performance triage; its tabs surface per-process CPU/RAM/disk/network use, startup impact ratings, services, and signed-in users.

Microsoft Management Console (MMC) snap-ins are launched by .msc commands: devmgmt.msc, diskmgmt.msc, eventvwr.msc, compmgmt.msc, lusrmgr.msc, gpedit.msc, perfmon.msc, taskschd.msc.

Event Viewer separates logs into Application, Security, Setup, and System with severity levels Information, Warning, Error, and Critical for crash and audit diagnosis.

Disk Management initializes disks (MBR or GPT), creates/formats/extends/shrinks volumes, and changes drive letters; GPT is required for Windows 11 and drives over 2.2 TB.

System Configuration (msconfig) drives the clean-boot procedure to isolate a faulty service or startup item, while regedit edits the five registry hives — back up before editing.

Last updated: October 2026

Task Manager (Ctrl+Shift+Esc)

Task Manager is the fastest path to a slow-PC diagnosis. Opening it directly with Ctrl+Shift+Esc skips the security screen you reach via Ctrl+Alt+Del. Its tabs each answer a different question.

  • Tab What it tells you
  • Processes Live CPU, memory, disk, and network per app/background task — sort to find the hog
  • Performance Real-time graphs for CPU, memory, disk, network, GPU
  • App history Cumulative resource use for Store/UWP apps
  • Startup apps Programs that auto-run, with a High/Medium/Low startup impact rating
  • Users Signed-in users and what each consumes
  • Details Raw process list with PID, status, priority
  • Services Running/stopped services with a jump to Services.msc

Scenario: A machine boots fine but feels sluggish all day. Open Task Manager, sort the Processes tab by CPU or Disk, and identify the runaway process before assuming a hardware fault.

Core MMC Snap-ins

The Microsoft Management Console (MMC) hosts modular snap-ins, each with a memorizable .msc launch command.

  • Snap-in Command Purpose
  • Device Manager devmgmt.msc Hardware + driver state
  • Disk Management diskmgmt.msc Partitions and volumes
  • Event Viewer eventvwr.msc System/app/security logs
  • Computer Management compmgmt.msc Umbrella of the above
  • Local Users & Groups lusrmgr.msc Accounts (Pro+)
  • Group Policy Editor gpedit.msc Local policy (Pro+)
  • Performance Monitor perfmon.msc Counters and data collector sets
  • Task Scheduler taskschd.msc Automated tasks
  • Services services.msc Service startup type/state

Device Manager icons are a frequent question: a yellow triangle with ! means a driver problem or resource conflict, a down-arrow marks a device the user disabled, and a missing/unknown device shows under "Other devices." Right-click to update, roll back, disable, or uninstall a driver.

Disk Management & MBR vs. GPT

Disk Management (diskmgmt.msc) initializes new disks, creates and formats volumes (NTFS/FAT32/exFAT), and resizes partitions. Extend Volume needs adjacent unallocated space to its right; Shrink Volume frees space without data loss.

  • Trait MBR (Master Boot Record) GPT (GUID Partition Table)
  • Max primary partitions 4 (or 3 + 1 extended) 128
  • Max disk size 2.2 TB ~9.4 ZB (effectively unlimited)
  • Boot firmware Legacy BIOS UEFI
  • Redundancy Single table Primary + backup table
  • Windows 11 Not supported Required
  • Event Viewer Severity Levels

Event Viewer (eventvwr.msc) is where you confirm what failed and when . Logs split into Application , System , Security (logon/audit events), and Setup .

  • Level Meaning
  • Information Normal operation, no action
  • Warning Possible future problem
  • Error Something failed
  • Critical Severe failure, e.g. unexpected reboot
  • msconfig Clean Boot

System Configuration (msconfig) controls boot and startup for troubleshooting. The clean boot procedure isolates a misbehaving third-party service or startup app:

Run msconfig .

Services tab: check Hide all Microsoft services , then Disable all .

Startup tab: open Task Manager and disable every startup item.

Reboot. If the symptom disappears, re-enable items in halves to bisect the culprit.

Registry Editor (regedit)

The Registry is a hierarchical settings database edited with regedit . Memorize the five hives and back up via File > Export before any change — a bad edit can leave Windows unbootable.

  • Hive Holds
  • HKEY_LOCAL_MACHINE (HKLM) System-wide hardware/software config
  • HKEY_CURRENT_USER (HKCU) Current user's settings
  • HKEY_USERS (HKU) All loaded user profiles
  • HKEY_CLASSES_ROOT (HKCR) File associations, COM
  • HKEY_CURRENT_CONFIG (HKCC) Active hardware profile
  • Choosing the Right Tool by Symptom

Where the exam earns its difficulty is mapping a symptom to the one best tool , since several utilities overlap. When a machine is slow right now , go to Task Manager for a live snapshot; when you need historical counters or to log usage over hours, escalate to Performance Monitor (perfmon) with a data collector set. When a service or driver causes instability only at startup , the answer is the msconfig clean boot procedure, not Task Manager, because clean boot disables third-party services before the desktop loads.

When the question is "why did the PC reboot unexpectedly last night?", the answer is Event Viewer , where a Critical entry (often Kernel-Power Event ID 41) records the abrupt shutdown.

Disk problems split the same way. Disk Management is the graphical tool for partition layout, drive-letter changes, and converting between MBR and GPT, but it cannot repair file-system corruption — that is chkdsk 's job, and bad sectors point at failing media that should be replaced. A blank or missing drive in File Explorer that does appear in Disk Management usually just needs to be initialized , formatted , and assigned a drive letter — three actions all performed inside Disk Management.

Account and policy questions hinge on edition. Local Users and Groups (lusrmgr.msc) and the Group Policy Editor (gpedit.msc) exist only on Pro and above; on Home edition you manage accounts through Settings and substitute Registry edits for policy. A classic distractor offers gpedit.msc as the fix on a Home machine — it is wrong because the snap-in is simply absent there.

Registry caution: Before any regedit change, use File > Export to back up the affected branch (or the whole Registry). A malformed value in HKLM can prevent boot, and unlike a file you can undo, a bad Registry write may require Safe Mode or System Restore to recover. System Restore itself snapshots the Registry and protected system files, which is why creating a restore point before risky changes is a recommended habit on the exam.