A server technician is examining reports of system instability on an email server. The technician reviews the notes from a junior administrator and finds the following information: To determine the…

Reviewing system logs is the first step in any structured troubleshooting methodology because logs provide specific error messages, timestamps, and event sequences that identify the root cause without making any changes to the system. Acting before gathering evidence can obscure the true cause or introduce additional variables, making diagnosis harder. Log review is non-destructive and may immediately reveal whether the issue is hardware, software, or configuration related.

Swapping memory is a corrective action that should only be taken after logs or diagnostics have confirmed memory errors as the likely cause.

Restoring the OS from backup is a drastic, time-consuming step that should only be considered after identifying the root cause and exhausting less disruptive options.

Updating chipset drivers is a speculative fix that could introduce new instability if the drivers are not the cause of the problem, and should follow proper diagnosis.