Soru

Zorluk: OrtaTroubleshooting Windows Performance and Application Crashes

A technician is investigating a Windows 11 workstation where an enterprise application gradually consumes available system memory, causing severe system slowdowns after several hours of operation. In what order should the technician perform the following troubleshooting steps to identify and isolate the root cause?

  1. 1Launch Task Manager and Resource Monitor to inspect process memory metrics, observing Commit Charge and Working Set usage.
  2. 2Examine Event Viewer logs under Windows Logs > Application to inspect Event ID 1000 and Event ID 2004 fault records for process details.
  3. 3Launch System Configuration (msconfig), select 'Hide all Microsoft services', and disable all remaining third-party services.
  4. 4Restart the workstation and selectively re-enable background services to isolate the specific application service responsible for the memory leak.

Cevap

The correct troubleshooting sequence begins with monitoring active process memory metrics in Task Manager and Resource Monitor, followed by reviewing Event Viewer application logs for crash and resource exhaustion events (Event ID 1000 and 2004). Next, configure a clean boot state using System Configuration (msconfig) by hiding Microsoft services and disabling non-Microsoft services. Finally, reboot the system and incrementally re-enable services to isolate the specific application service causing the memory leak.
The standard CompTIA troubleshooting workflow for application memory leaks and crashes requires first gathering live diagnostic metrics (Task Manager/Resource Monitor), reviewing recorded log events (Event Viewer Event IDs 1000/2004), establishing a clean startup baseline (msconfig with Microsoft services hidden), and systematically testing services after a reboot to isolate the offending third-party service.

Adım Adım Çözüm

1
Observe live system resource metrics using Task Manager and Resource Monitor.
Identifies high memory utilization, uncommitted Working Set growth, or memory leak patterns in real time.
Troubleshooting begins with active observation and symptom verification without altering system state.
2
Inspect Windows Event Viewer Application logs for related fault events.
Gathers specific error codes, event IDs (such as Event 1000 Application Error or Event 2004 Resource Exhaustion), and faulting module names.
Correlating live symptoms with system log data confirms the underlying executable and failure mechanism.
3
Open System Configuration (msconfig) to configure a clean boot environment.
Disables third-party services and startup items while preserving critical Microsoft OS services.
Establishes a baseline software environment free from non-essential background service interference.
4
Reboot the computer and systematically re-enable startup services.
Isolates the individual third-party service causing memory degradation upon re-activation.
Incremental isolation testing in a clean boot environment pinpoints the precise service or application responsible.

Anahtar Kavram

Methodological isolation of Windows application crashes and memory leaks
Bu soruyu puanla