Which Troubleshooting Step Involves Checking Logs for Recent Changes?

Why the Answer Is Correct

The first step of the CompTIA troubleshooting methodology is to identify the problem, which heavily relies on systematic information gathering. During this phase, technicians review system logs, monitor network traffic, and interview users to detect patterns, errors, or recent configuration changes. Checking logs aligns directly with collecting baseline data and understanding the scope of the issue before forming hypotheses.

Why the Other Options Are Wrong

Testing a theory (Option C) occurs after you have already gathered initial data and formulated a likely cause; at that stage, you actively isolate variables rather than just reviewing historical logs. Establishing a plan of action (Option D) focuses on risk assessment and implementation steps, not diagnostic data collection. Documenting findings (Option B) happens exclusively at the end of the process to record resolutions and lessons learned.

Community Comment Notes

The majority of voters correctly selected Option A, noting that log reviews are fundamental to the initial information-gathering phase. One highly voted comment highlighted that looking for what has changed is a classic symptom identification technique used early in troubleshooting. While another commenter suggested Option C, official CompTIA training materials consistently categorize log analysis under the first step to prevent premature theorizing.