A user reports getting a BSOD (Blue Screen of Death) error on their computer at least twice a day. Which of the following should the technician use…

The Event Viewer is the primary Windows utility for diagnosing system errors, including the Blue Screen of Death (BSOD). When a stop error occurs, Windows generates logs that are recorded in the System or Application logs within Event Viewer. These logs contain critical information, such as the error code (e.g., 0x000000D1), the faulting driver or module, and a timestamp. Analyzing these event logs allows a technician to identify patterns and pinpoint the root cause of the recurring crashes, whether it's a faulty driver, failing hardware, or a software conflict.

Performance Monitor is used for analyzing system performance metrics over time, not for diagnosing the specific cause of a system crash event.

System Information (msinfo32) provides a detailed summary of the system's hardware and software configuration but does not contain error logs from crashes.

Device Manager is used to manage hardware devices and their drivers. While a faulty driver shown here could be the cause, Event Viewer provides the specific error log.

1. Microsoft Corporation. (2023). Troubleshoot blue screen errors. Microsoft Support. The article explicitly states, "In the search box on the taskbar, type Event Viewer, and then select it from the list of results. In Event Viewer, select Windows Logs > System. Look for critical errors that occurred around the same time as the blue screen."

2. Purdue University, Information Technology. (n.d.). What is the Event Viewer, and how can I use it?. ITaP Customer Service Center. The article describes Event Viewer as a tool that "records a log of system events... These events can be used by a technician to troubleshoot computer problems."