Desktop Support Engineer Interview Practice

Active Directory (AD)

Microsoft's centralized directory service that manages users, computers, groups, and permissions in a Windows domain. It is used to authenticate users and control access to network resources.

Microsoft Entra ID (Azure AD)

Microsoft's cloud-based identity and access management service for Microsoft 365 and other cloud applications. It authenticates users and manages access to cloud resources.

Domain

A collection of users, computers, and resources managed by Active Directory. It allows centralized management and authentication across multiple devices.

Domain Controller (DC)

A server that hosts Active Directory Domain Services. It authenticates users, enforces security policies, and manages domain resources.

Local Account

A user account that exists only on a single computer. It can only be used to access that specific device.

Active Directory Account

A centrally managed user account stored in Active Directory. It allows users to sign in to any authorized computer within the domain.

Group Policy (GPO)

A Windows feature that allows administrators to centrally configure settings for users and computers. It is used to enforce security policies and standardize configurations across a domain.

Organizational Unit (OU)

A container in Active Directory used to organize users, groups, and computers. It makes administration easier by allowing Group Policies and permissions to be applied to specific groups of objects.

Security Group

A collection of users or computers used to simplify permission management. Permissions are assigned to the group instead of individual users.

Authentication

The process of verifying a user's identity. It confirms that a user is who they claim to be before granting access.

Authorization

The process of determining what resources an authenticated user can access. It controls permissions after a user has successfully signed in.

Single Sign-On (SSO)

An authentication method that allows users to sign in once and access multiple applications. It reduces the need to remember multiple passwords.

Multi-Factor Authentication (MFA)

A security method that requires two or more forms of verification before granting access. It helps protect accounts even if a password is compromised.

Least Privilege

A security principle that gives users only the permissions necessary to perform their job. It reduces the risk of accidental or malicious changes.

Windows Server

Microsoft's server operating system used to manage network services and business infrastructure. It provides services such as Active Directory, DNS, DHCP, file sharing, and application hosting.

Safe Mode

A diagnostic startup mode that loads Windows with only essential drivers and services. It is used to troubleshoot software and driver issues.

Reliability Monitor

A Windows tool that displays a timeline of system and application failures. It helps identify recurring issues and troubleshoot system stability problems.

BitLocker

A Windows drive encryption feature that protects data by encrypting entire drives. It helps prevent unauthorized access if a device is lost or stolen.

Windows Update

A Microsoft service that installs security patches, bug fixes, and feature updates. It helps keep systems secure and operating reliably.

IP Address

A unique numerical address assigned to a device on a network. It allows devices to identify and communicate with each other.

Subnet Mask

A 32-bit value used with an IP address to separate the network portion from the host portion. It helps devices determine whether traffic should stay on the local network or be sent to a router.

Default Gateway

A router or network device that forwards traffic to other networks. It allows devices to communicate outside of their local network, such as with the internet.

DNS (Domain Name System)

A service that translates domain names into IP addresses. It allows users to access websites without remembering numerical IP addresses.

DHCP (Dynamic Host Configuration Protocol)

A network service that automatically assigns IP addresses and other network settings to devices. It eliminates the need to manually configure each device.

MAC Address

A unique hardware address assigned to a network adapter. It identifies a device on a local network.

TCP (Transmission Control Protocol)

A reliable transport protocol that guarantees data is delivered accurately and in order. It is commonly used for web browsing, email, and file transfers.

UDP (User Datagram Protocol)

A fast transport protocol that does not guarantee delivery or order of data. It is commonly used for streaming, online gaming, and voice calls.

Port

A logical communication endpoint used by applications and services. It allows multiple network services to operate on a single device.

Ping

A network utility that tests connectivity between two devices. It is commonly used to verify whether a device is reachable on a network.

Traceroute

A network diagnostic tool that shows the path packets take to reach a destination. It helps identify where network delays or failures occur.

VPN (Virtual Private Network)

A secure, encrypted connection between a device and a remote network. It allows users to securely access company resources over the internet.

LAN (Local Area Network)

A network that connects devices within a limited geographic area, such as a home or office. It allows devices to communicate and share resources locally.

WAN (Wide Area Network)

A network that connects multiple LANs across large geographic distances. The internet is the largest example of a WAN.

Exchange Online

Microsoft's cloud-hosted email service included with Microsoft 365. It provides email, calendars, contacts, and mailbox management.

SharePoint

Microsoft's platform for document storage, collaboration, and intranet sites. It allows teams to securely share files and work together.

Endpoint Protection

Security software that protects computers from malware, ransomware, and other cyber threats. It monitors devices and automatically detects and blocks suspicious activity.

Firewall

A security system that filters incoming and outgoing network traffic based on defined rules. It helps prevent unauthorized access to devices and networks.

Phishing

A cyberattack that attempts to trick users into revealing sensitive information through fake emails, websites, or messages. It is commonly used to steal passwords and financial information.

Ransomware

A type of malware that encrypts files or locks a system and demands payment for recovery. It often spreads through phishing emails or software vulnerabilities.

Zero-Day Vulnerability

A software security flaw that has no available patch when it is discovered. Attackers may exploit it before developers release a fix.

Hypervisor

Software that creates and manages virtual machines on a physical computer. It allows multiple operating systems to run on the same hardware.

VMware

A virtualization platform that allows multiple virtual machines to run on a single physical server. It improves hardware utilization and simplifies server management.

VMware vSphere

VMware's enterprise virtualization platform for managing virtual infrastructure. It uses ESXi hosts and vCenter to deploy and manage virtual machines.

ESXi

VMware's bare-metal hypervisor that runs directly on server hardware. It hosts and manages virtual machines.

vCenter

VMware's centralized management software for ESXi hosts and virtual machines. It simplifies administration, monitoring, and resource management.

POST (Power-On Self-Test)

A hardware diagnostic process that runs when a computer starts. It checks that essential hardware components are functioning properly before loading the operating system.

BIOS (Basic Input/Output System)

Legacy firmware that initializes hardware during startup. It starts the boot process and loads the operating system.

UEFI (Unified Extensible Firmware Interface)

The modern replacement for BIOS that initializes hardware during startup. It supports faster boot times, larger drives, and improved security features.

Driver

Software that allows the operating system to communicate with hardware devices. Without the correct driver, hardware may not function properly.

Print Spooler

A Windows service that manages print jobs sent to a printer. It stores print jobs in a queue until they are printed.

Escalation

The process of transferring an issue to someone with more expertise or higher-level access. It is used when a problem cannot be resolved at the current support level.

Scope

The process of determining how widespread an issue is. It helps identify whether a problem affects one user, multiple users, or the entire organization.

Isolate

The process of narrowing down the cause of a problem through systematic troubleshooting. It helps identify the root cause efficiently.

Kernel

The core component of the Windows operating system that manages hardware and system resources. It handles tasks such as memory management, process scheduling, and device communication.

Boot Manager

A Windows component responsible for locating and starting the operating system during startup. It loads the boot loader after POST is complete.

Boot Loader

A program that loads the Windows kernel into memory. Once loaded, the kernel takes control and starts the operating system.