Question

Difficulty: MediumWindows Administrative and System Management Tools

A system administrator is troubleshooting a Windows 11 Pro workstation where a background service periodically stops responding. Standard Task Manager metrics do not provide the detailed file handle paths or thread wait chain information required to isolate the application freeze. Additionally, the administrator needs to record disk queue length and memory metrics continuously over a 24-hour period to establish a performance baseline. Which TWO Windows administrative tools should the administrator use to accomplish these tasks?

  1. Resource Monitor (resmon.exe) to inspect real-time file handles, active disk activities, and thread wait chains for the unresponsive processAnswer
  2. Performance Monitor (perfmon.msc) to configure a Data Collector Set for logging system performance counters continuously over extended time periodsAnswer
  3. C
    Event Viewer (eventvwr.msc) to monitor real-time process thread wait chains and file handle paths
  4. D
    Services console (services.msc) to record long-term disk queue length performance counter logs

Answer

The administrator should use Resource Monitor (resmon.exe) to analyze real-time process thread wait chains and file handles, and Performance Monitor (perfmon.msc) to configure Data Collector Sets for long-term performance counter logging.
Resource Monitor (resmon.exe) allows administrators to examine real-time process threads, file handle locks, and Analyze Wait Chain details to troubleshoot unresponsive programs. Performance Monitor (perfmon.msc) enables the creation of Data Collector Sets that log performance counters into log files across extended intervals (e.g., 24 hours) for trending and baseline measurement.

Step-by-Step Solution

1
Identify the real-time diagnostic tool required for granular process handle and wait chain analysis
Resource Monitor (resmon.exe) is selected because it displays active process dependencies, open file handles, and thread wait states beyond basic Task Manager metrics
Task Manager only offers high-level CPU, memory, disk, and network percentages without showing specific thread wait chains or open file handles causing process lockups
2
Identify the tool required for continuous baseline logging over an extended duration
Performance Monitor (perfmon.msc) is selected to create a User Defined Data Collector Set
Performance Monitor provides historical log collection capabilities via performance counters configured to record metrics such as disk queue lengths over hours or days

Key Concept

Selecting Windows Administrative Tools (Resource Monitor vs. Performance Monitor)
Rate this question