5 troubleshooting habits that show up on almost every IT certification exam

SteadfastIQ — Wed, 11 Nov 2026 03:46:30 +0000

Whether you're studying for Security+, CCNA, an AWS associate exam or the CKA, scenario questions keep testing the same handful of habits. Here are five worth practicing until they're automatic.

1. Confirm the symptom before you change anything. Exam scenarios love the candidate who reboots first. Read the error, check the log, reproduce it. On Linux that's journalctl -u <service> and df -h; on Windows it's Event Viewer and ipconfig /all.

2. Work the layers in order. If a host can't reach a site, check link, IP, gateway, DNS, then the app. A surprising number of "network" questions are really DNS questions.

3. Look for the most specific rule that matches. Firewall rules, NSGs, IAM policies and ACLs all reward reading top-down and remembering the implicit deny at the end. An explicit deny usually beats an allow.

4. Contain before you clean up. In incident questions, the first step after confirming a compromise is almost always isolation, not deletion or reimaging. Preserve evidence, then eradicate.

5. Fix the cause, not just the alert. Deleting a full log file frees space today; log rotation keeps it from happening next week. Exams reward the durable fix.

The fastest way to build these habits is hands-on practice. We built SteadfastIQ for exactly that: practice tests plus browser-based labs where you work a real-world ticket in a terminal or admin console, and the lab checks your work. There's a sample phishing-triage lab you can try: https://steadfastiq.com/sample-lab

Full access is $4.99/month. SteadfastIQ is an independent study resource and isn't affiliated with any certification vendor; all trademarks belong to their owners.

DEV Community: SteadfastIQ

5 troubleshooting habits that show up on almost every IT certification exam