Technical Support Fundamentals
Computer hardware · Software & OS · Networking basics · Troubleshooting · Customer service
1 · Computer Hardware & Architecture
Core Components
- CPU (Central Processing Unit) - the "brain." Fetches, decodes, and executes instructions. Key specs: core count, clock speed (GHz), cache size (L1/L2/L3). More cores = better multitasking; higher GHz = faster per-core execution.
- RAM (Random Access Memory) - volatile, high-speed temporary storage. Programs run here. When RAM is full, the OS spills to slower virtual memory (page file / swap). Current standard: DDR4 or DDR5.
- Storage (HDD / SSD) - non-volatile, permanent storage. SSDs use flash chips (faster, more durable, more expensive per GB). HDDs use spinning magnetic platters (slower, cheaper per GB, more fragile).
- Motherboard - the backbone connecting all components. Contains the chipset, CPU socket, RAM slots, PCIe slots, SATA ports, and I/O headers. The form factor (ATX, Micro-ATX, Mini-ITX) determines case compatibility.
- PSU (Power Supply Unit) - converts wall AC power to regulated DC voltages (+12V, +5V, +3.3V). Wattage must exceed total system draw. 80 Plus rating indicates efficiency (Bronze → Gold → Platinum → Titanium).
- GPU (Graphics Processing Unit) - renders visuals. Integrated GPUs share system RAM; discrete GPUs have dedicated VRAM and a PCIe slot. Essential for displays even on headless servers.
Storage Types Compared
| Type | Interface | Typical Speed | Use Case |
|---|---|---|---|
| HDD (3.5") | SATA | 80–160 MB/s | Bulk storage, NAS |
| HDD (2.5") | SATA | 80–120 MB/s | Laptops |
| SSD (2.5") | SATA | ~550 MB/s | OS drive upgrade from HDD |
| SSD (M.2 SATA) | SATA via M.2 | ~550 MB/s | Compact SATA SSD |
| SSD (M.2 NVMe) | PCIe / NVMe | 3,000–7,000 MB/s | High-performance OS / workloads |
Ports & Connectors
| Connector | Max Speed / Notes | Common Use |
|---|---|---|
| USB 2.0 | 480 Mbps | Keyboards, mice, low-speed devices |
| USB 3.0 / 3.1 Gen 1 | 5 Gbps | Flash drives, external HDDs |
| USB 3.1 Gen 2 | 10 Gbps | External SSDs |
| USB 3.2 Gen 2×2 | 20 Gbps | High-speed storage |
| USB4 / Thunderbolt 3/4 | 40 Gbps | Docks, eGPUs, 4K displays |
| USB-C | Shape - not a speed standard | Can carry USB, Thunderbolt, DP, power |
| HDMI | Up to 48 Gbps (2.1) | Consumer displays, TVs, projectors |
| DisplayPort | Up to 77 Gbps (2.1) | PC monitors, daisy-chaining |
| VGA | Analog only | Legacy - no longer recommended |
| DVI | Analog + digital | Legacy monitors |
Binary & Number Systems
- Binary (base 2) - computers use 0s and 1s because transistors have two states (on/off). A bit is one binary digit. A byte = 8 bits.
- Hexadecimal (base 16) - digits 0–9 then A–F. One hex digit = 4 bits (a nibble); two hex digits = 1 byte. Used heavily in memory addresses, MAC addresses, and color codes.
1 KB (kibibyte)= 1,024 bytes (2¹⁰)
1 MB = 1,024 KB
1 GB = 1,024 MB
1 TB = 1,024 GB
Hex digit range0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, F
Binary → Hex1111 = F | 1010 = A | 0000 = 0
Key Terms
- What is the difference between RAM and storage? Why does a program need RAM to run?
- A user's computer is very slow but has only 8 GB RAM and 16 GB of active programs open. What is likely happening?
- How many bits are in 3 bytes? Convert the binary number
1001to decimal. - A technician opens a desktop and doesn't use an anti-static wrist strap. What risk does this create?
- What is the purpose of the POST, and what might beep codes indicate?
- Which storage interface is fastest: SATA SSD, M.2 NVMe, or HDD?
- RAM is volatile (lost at power-off) and extremely fast - the CPU reads/writes it directly while a program runs. Storage is non-volatile and slower - it holds the program permanently when it's not running. Programs must be loaded into RAM to execute.
- The OS is using virtual memory (page file/swap) on disk because RAM is exhausted. Disk is far slower than RAM, causing heavy slowdowns - commonly called "thrashing."
- 3 bytes = 24 bits. Binary
1001= 8+0+0+1 = 9 in decimal. - ESD (Electrostatic Discharge) - the static built up in the technician's body can discharge into sensitive components, potentially damaging or destroying the CPU, RAM, GPU, or motherboard without any visible sign.
- POST (Power-On Self Test) verifies that critical hardware (CPU, RAM, GPU, storage) is present and functioning before the OS loads. Beep codes indicate which component failed - the pattern varies by BIOS/UEFI vendor.
- M.2 NVMe is fastest (3,000–7,000 MB/s), followed by SATA SSD (~550 MB/s), then HDD (80–160 MB/s).
2 · Software & Operating Systems
Types of Software
What an OS Does
- Process management - starts, schedules, and terminates programs. Decides which process gets CPU time (scheduling algorithms).
- Memory management - allocates RAM to processes and reclaims it when they exit. Handles virtual memory when RAM is full.
- File system management - organizes data on storage into files and directories, controls access permissions.
- Device management - communicates with hardware via drivers; abstracts complexity so applications don't need to know hardware specifics.
- User interface - either a CLI (Command Line Interface) or GUI (Graphical User Interface), or both.
- Security & access control - enforces user accounts, permissions, and authentication.
Major Operating Systems
| OS | Kernel / Base | Default Filesystem | Common Use |
|---|---|---|---|
| Windows 10/11 | NT kernel | NTFS | Enterprise desktop, gaming, general-purpose |
| macOS | XNU (Unix/Darwin) | APFS | Creative professionals, Apple ecosystem |
| Linux (Ubuntu) | Linux kernel | ext4 | Servers, developers, open-source workstations |
| Linux (CentOS/RHEL) | Linux kernel | XFS / ext4 | Enterprise servers |
| Chrome OS | Linux kernel | ext4 | Cloud-centric, education, lightweight laptops |
| Android | Linux kernel | ext4 / F2FS | Mobile devices |
| iOS / iPadOS | XNU (Unix) | APFS | Apple mobile devices |
Software Licensing
Virtual Machines & Hypervisors
- A virtual machine (VM) is a software emulation of a physical computer, running its own OS inside another OS.
- A hypervisor creates and manages VMs, abstracting physical hardware into virtual resources.
- Type 1 (bare-metal): runs directly on hardware, no host OS. Higher performance. Examples: VMware ESXi, Microsoft Hyper-V, KVM.
- Type 2 (hosted): runs on top of an existing OS. Easier to set up. Examples: VirtualBox, VMware Workstation.
- Snapshot: a point-in-time copy of a VM's state - useful for testing or rolling back changes.
Software Versioning
- Semantic versioning:
MAJOR.MINOR.PATCH(e.g.,3.11.2). MAJOR = breaking change; MINOR = new feature; PATCH = bug fix. - LTS (Long-Term Support): a version with extended security updates - preferred for production servers (e.g., Ubuntu 22.04 LTS supported until 2027).
- Keeping software updated patches security vulnerabilities - critical for IT support.
- What is a kernel, and how do applications interact with it?
- A printer was just connected to a Windows PC but isn't working. What type of software is most likely missing?
- What is the difference between a Type 1 and Type 2 hypervisor? Give an example of each.
- A company wants to use Linux on their servers but needs commercial support. Which distribution is a common choice?
- What does GPL require of derivative software, and how does this differ from the MIT license?
- Interpret the version number
2.0.0→2.1.0→2.1.3. What happened at each step?
- The kernel is the privileged core of the OS that directly manages hardware resources. Applications communicate with it through system calls - requests to perform operations like reading a file or sending network data.
- A device driver - the software that translates OS-level commands into instructions the specific printer hardware understands.
- Type 1 runs directly on bare metal hardware (e.g., VMware ESXi, Hyper-V) - higher performance. Type 2 runs on top of an existing OS (e.g., VirtualBox, VMware Workstation) - easier to set up on a personal machine.
- Red Hat Enterprise Linux (RHEL) or its community rebuild Rocky Linux / AlmaLinux. Canonical also offers commercial Ubuntu support.
- GPL requires that any software derived from GPL code must also be released under GPL (copyleft). MIT is permissive - you can incorporate MIT-licensed code into a proprietary product without releasing your source code.
- 2.0.0 = initial major release (breaking changes from 1.x). 2.1.0 = new feature added (backwards-compatible). 2.1.3 = three bug fixes applied to the 2.1 feature set.
3 · Networking Basics
Network Types by Scale
Network Hardware
Physical Media
| Medium | Standard / Type | Max Speed | Notes |
|---|---|---|---|
| Cat 5e | Twisted pair (UTP) | 1 Gbps / 100 m | Minimum for gigabit - still common |
| Cat 6 | Twisted pair (UTP) | 10 Gbps / 55 m | Most new installations |
| Cat 6a | Twisted pair (STP) | 10 Gbps / 100 m | Full 10G at longer runs |
| Fiber (multimode) | Glass/plastic core | 100 Gbps+ | Short–medium runs inside buildings; cheaper lasers |
| Fiber (single-mode) | Glass core (narrow) | 100 Gbps+ | Long-distance; ISP backbone, campus links |
| Wi-Fi 5 (802.11ac) | 5 GHz | ~3.5 Gbps theoretical | Ubiquitous current standard |
| Wi-Fi 6 (802.11ax) | 2.4 & 5 GHz | ~9.6 Gbps theoretical | Better in dense environments (OFDMA) |
Network Topologies
IP Addresses - Overview
- Every device on a network needs an IP address to communicate. Like a postal address - unique identifier for routing.
- IPv4: 32-bit, written as four 0–255 numbers separated by dots. ~4.3 billion possible addresses (mostly exhausted).
- IPv6: 128-bit, written in hexadecimal with colons. Virtually unlimited addresses.
- Private IPs (e.g.,
192.168.x.x) are used inside a network; a router uses NAT to share one public IP for internet access. - DHCP automatically assigns IP addresses to devices joining the network so you don't configure them manually.
- DNS translates domain names (
google.com) to IP addresses so you don't need to memorize numbers.
- What is the functional difference between a hub and a switch?
- A user in a home office has a single device from their ISP that handles both the internet connection and local Wi-Fi. What is this device called?
- Which cable category supports 10 Gbps over 100 meters?
- Why is a star topology preferred over a bus topology in modern LANs?
- A device on a LAN has the IP address
192.168.1.50. Is this a public or private address? - What does a router do that a switch cannot?
- A hub broadcasts every frame to all ports (layer 1, one collision domain). A switch learns MAC addresses and forwards frames only to the correct port (layer 2, separate collision domains per port), making it far more efficient.
- A modem/router combo (sometimes called a gateway or residential gateway). The modem converts the ISP signal; the router manages the LAN and provides Wi-Fi via a built-in WAP.
- Cat 6a (Cat 6 supports 10G only up to 55 m; Cat 6a extends it to the full 100 m)
- In a star topology, only the device with the failed link goes down. In a bus topology, a single break in the shared cable takes the entire segment offline.
- Private -
192.168.0.0/16is one of the RFC 1918 private ranges, not routable on the public internet. - A router operates at Layer 3 and forwards traffic between different networks using IP addresses. A switch operates at Layer 2 and can only move traffic within a single network using MAC addresses.
4 · Troubleshooting Best Practices
The Troubleshooting Methodology (7 Steps)
Step 2 - Theory Establish a probable cause. Question the obvious first (is it plugged in?).
Step 3 - Test theory Confirm or eliminate the theory. If wrong, go back to step 2.
Step 4 - Plan Establish an action plan. Consider side effects before implementing.
Step 5 - Implement Apply the fix. Escalate if beyond your authority or skill set.
Step 6 - Verify Confirm the issue is resolved and no new problems were introduced.
Step 7 - Document Record the problem, root cause, and solution in the ticketing system.
Asking the Right Questions
- "What changed recently?" - software update, new hardware, configuration change. Most outages have a recent change as the root cause.
- "When did it start / how often does it happen?" - intermittent vs consistent failures point to different causes (heat, memory, network congestion vs hard failure).
- "Does it happen to anyone else?" - determines if it's user-specific, device-specific, or infrastructure-wide.
- "What have you already tried?" - avoids repeating steps and signals what to rule out.
- "Can you reproduce it?" - reproducible bugs are far easier to diagnose.
Troubleshooting Approaches
Support Tiers
| Tier | Name | Handles |
|---|---|---|
| Tier 0 | Self-service | FAQs, knowledge base, automated tools - user resolves without contacting IT |
| Tier 1 | Help desk / front line | Password resets, basic connectivity, standard procedures - scripted responses |
| Tier 2 | Technical support | In-depth troubleshooting, configuration, OS issues - deeper technical knowledge |
| Tier 3 | Expert / engineering | Complex bugs, vendor escalations, infrastructure changes - subject matter experts |
| Tier 4 | Vendor support | Issues requiring the original manufacturer or vendor (hardware warranty, software bugs) |
Safety & Environmental Considerations
- ESD prevention: anti-static wrist strap (grounded), anti-static mat, anti-static bags for components, avoid carpeted areas when working on hardware.
- Electrical safety: always power off and unplug before opening a PSU or working near high-voltage components. Capacitors inside PSUs can hold charge even when unplugged.
- Thermal management: overheating causes performance throttling and component failure. Ensure proper airflow; clean dust filters periodically.
- Cable management: poor cable management restricts airflow and makes troubleshooting harder - not just aesthetic.
- A user says "my email doesn't work." What are your first three questions?
- You apply a fix in step 5 but the problem returns the next day. Which step did you likely skip, and what should you do?
- A user's machine is randomly shutting off. Would you approach this top-down or bottom-up? Why?
- At what tier would a password reset typically be handled?
- You need to open a desktop to reseat RAM. What should you do before touching any components?
- Why is documentation (step 7) important even for simple issues you've solved before?
- 1) "When did it stop working / what changed?" 2) "Can you still access the internet or other apps?" 3) "Is anyone else in the office having the same problem?" (distinguishes user-specific vs infrastructure issue)
- You likely found a symptom, not the root cause (step 2 theory was incomplete). Reopen the ticket, revisit step 2 with new information, and find the underlying cause before implementing again.
- Bottom-up - random shutdowns are often a hardware or environmental issue (overheating, PSU underload, RAM failure). Starting at the physical layer to check temps, PSU wattage, and hardware stability is more direct than starting at the OS.
- Tier 1 (Help Desk) - password resets are a standard scripted procedure.
- Power off the machine, unplug it from the wall, and attach an anti-static wrist strap grounded to the case before touching any components.
- Documentation builds the knowledge base. Next time someone (you or a colleague) encounters the same issue, a documented resolution saves time. It also creates an audit trail for compliance and SLA reporting, and reveals patterns (recurring issues → problem management).
5 · Customer Service & Documentation
Core Customer Service Skills
- Active listening - let the user fully describe the problem before speaking. Don't interrupt or complete their sentences. Paraphrase back to confirm understanding.
- Empathy - acknowledge the user's frustration: "I understand this is disruptive, let's get it sorted." People want to feel heard before they want to be fixed.
- Positive language - reframe negatives. Instead of "I don't know," say "Let me find out." Instead of "That's not possible," say "Here's what we can do."
- Avoid jargon - explain technical issues in terms the user understands. Talking down or over a user's head both erode trust.
- Set expectations - give a realistic timeline. If you don't know, say when you'll follow up. Silence breeds frustration.
- Follow through - do what you said you'd do, when you said you'd do it. If you can't, proactively communicate before the deadline passes.
Ticketing System Lifecycle
2. Triage Ticket assigned a priority (P1–P4) and routed to appropriate tier
3. Diagnosis Technician investigates, updates ticket with findings
4. Resolution Fix applied; resolution steps logged in the ticket
5. Closure User confirms issue is resolved; ticket closed
6. Follow-up Optional satisfaction survey; review for recurring patterns
SLA - Service Level Agreement
- A formal contract specifying the expected level of service - including response times, resolution times, and uptime guarantees.
- Response time: how quickly the IT team acknowledges the ticket.
- Resolution time: how quickly the issue is fully resolved.
- SLAs are tied to priority levels - critical outages have much tighter SLAs than low-priority requests.
- Breaching an SLA may have financial penalties or reputational consequences - flag at-risk tickets early.
| Priority | Typical Meaning | Example Response Target |
|---|---|---|
| P1 - Critical | Complete outage affecting all users / revenue | 15 min response · 4 hr resolution |
| P2 - High | Major function unavailable, many users affected | 1 hr response · 8 hr resolution |
| P3 - Medium | Partial degradation, workaround exists | 4 hr response · 24 hr resolution |
| P4 - Low | Minor issue, cosmetic, single user | Next business day |
ITIL Concepts - Incident vs Problem vs Change
Documentation Best Practices
- Write for a stranger - your documentation should allow someone who has never seen the system to follow it without asking questions.
- Runbooks / SOPs: step-by-step procedures for common tasks (server restart, new user onboarding, backup restore). Reduces human error and training time.
- Knowledge base articles: solutions to known issues written in plain language - searchable by users for self-service (Tier 0).
- Network diagrams: always keep updated. Tools: draw.io, Lucidchart, Visio.
- Change logs: record every infrastructure change with date, who made it, what changed, and why. Invaluable for incident investigation.
- A user is frustrated and says "nothing ever works around here." How do you respond?
- What is the difference between an incident and a problem in ITIL terms?
- A recurring P2 ticket appears every Monday morning for the same server. What ITIL process should be initiated?
- Why is it important to update a ticket with your findings even if you haven't resolved it yet?
- What is a runbook and when would you use one?
- A Tier 1 tech is 30 minutes away from breaching the SLA response time on a P1 ticket. What should they do?
- Acknowledge the frustration first: "I hear you, and I'm sorry this has been a frustrating experience. Let me focus on getting this specific issue fixed right now, and I'll make sure you're updated every step of the way." Avoid being defensive; stay calm and professional.
- An incident is an unplanned service disruption requiring fast restoration (e.g., restart a crashed service). A problem is the root cause investigation of why incidents occur - it takes longer but prevents recurrence.
- Problem management - open a Problem record to investigate the root cause of the recurring incident, rather than just patching it each week.
- It creates a shared audit trail so that if someone else picks up the ticket, they don't repeat work. It also timestamps your progress for SLA compliance and provides data for post-incident review.
- A runbook is a documented step-by-step procedure for a routine task (e.g., "how to restart the mail server"). It's used to ensure consistent execution, reduce errors, and allow less experienced staff to handle critical tasks safely.
- Escalate immediately - notify their supervisor or the on-call Tier 2/3 engineer. Never let a P1 SLA breach silently; proactive communication allows management to reassign resources before the breach occurs.
6 · What Actually Matters — Key Takeaways
Hardware — the mental model
Every hardware question ultimately comes down to: is the right component present, is it powered, and is it communicating? Run through components in the POST order — CPU → RAM → storage → display.
- RAM vs storage is the single most-tested distinction. RAM = volatile, fast, where programs run. Storage = permanent, slow, where programs live. Slowness with high RAM usage → thrashing (virtual memory). Slowness with low RAM → check CPU, thermals, or disk speed.
- Boot sequence: power on → PSU delivers voltage → motherboard firmware (UEFI/BIOS) runs POST → hands off to OS bootloader → OS loads into RAM. Know where failures can happen at each step.
- Storage speed hierarchy comes up constantly as an upgrade recommendation: NVMe ≫ SATA SSD ≫ HDD. Default to NVMe for OS drives.
- ESD is on the exam and in real life — always ground yourself before touching internal components.
Software & OS — the kernel is the center
- The kernel is the privileged layer between hardware and every running program. All software communicates with it via system calls. This mental model explains why OS crashes affect everything while app crashes usually don't.
- Drivers are the most common hardware fix. Device not working after connecting? Update or reinstall the driver first. Kernel modules on Linux work the same way — loadable, removable without rebooting.
- Licensing categories matter in enterprise: proprietary (pay for a license), open source (GPL = copyleft, MIT/Apache = permissive), freeware (free but closed). The GPL "viral" clause is a real compliance concern for organizations shipping products.
- Hypervisors: Type 1 (bare metal, e.g., ESXi, Hyper-V) for production servers. Type 2 (hosted, e.g., VirtualBox) for desktops and testing. Snapshots are your safety net before risky changes.
Troubleshooting — the methodology is the point
The 7-step methodology isn't just exam content — it's the actual difference between technicians who fix things once and those who fix the same thing every week.
Theory Form a hypothesis — question the obvious first
Test theory Confirm or eliminate — if wrong, go back
Plan Consider side effects before acting
Implement Apply the fix; escalate if needed
Verify Confirm the fix AND check for new problems
Document Write it down — this is the step most people skip
Customer service & ITIL — soft skills are real skills
- Empathy before fixes. A user who feels heard is a user who cooperates. Acknowledge frustration, set expectations, follow through. People remember how they were treated long after they forget what was broken.
- Incident vs Problem vs Change is the core ITIL distinction. Incident = restore service fast (reboot the server). Problem = find out why it keeps crashing. Change = plan and approve the OS upgrade. Confusing these leads to treating symptoms forever.
- SLAs define your accountability. P1 outages have minutes, not hours. Know your priority levels and escalate before the clock runs out — proactive communication beats a missed SLA every time.
- Documentation is institutional memory. A well-written ticket means the next person (including future you) doesn't start from zero. Runbooks and knowledge base articles scale your expertise beyond yourself.
The bigger picture