All practice questions

521 questions

Question 221Question

A field technician is troubleshooting distinct printing issues across various department printer types in an organization. Match each reported printer symptom on the left to its most likely root cause or resolution on the right.

Click a left item, then click its matching right item

Items

A point-of-sale thermal receipt printer feeds paper correctly but produces completely blank receipts.
A departmental monochrome laser printer outputs continuous dark vertical lines running down every page.
A desktop color inkjet printer outputs faint, streaky images with missing color lines after being unused for several weeks.
A warehouse impact dot-matrix printer produces faint, faded text across all pages of multi-part carbonless forms.

Matches

Show answer & explanation

Answer

1. Thermal receipt printer blank output matches Thermal paper roll loaded upside down or backwards. 2. Laser printer continuous dark vertical lines matches Scratched or damaged photosensitive imaging drum. 3. Inkjet printer faint/streaky output matches Dried ink causing clogged printhead nozzles. 4. Dot-matrix printer faint text on multi-part forms matches Depleted fabric ink ribbon cartridge requiring replacement.
Each printer technology exhibits distinctive failure symptoms: reversed thermal paper prevents heat-activated dye reaction; drum scratches cause continuous laser vertical lines; dried liquid ink clogs inkjet printhead nozzles; and depleted fabric ribbons cause faint dot-matrix impact printing across multi-part forms.

Step-by-Step Solution

1
Analyze thermal printer symptoms
Determine that paper feeding without print on direct thermal paper indicates heat is contacting the non-coated paper side.
Direct thermal printing requires heating chemical-coated paper on the specific treated side.
2
Analyze laser printer print defect symptoms
Identify continuous vertical lines as physical damage along the circumference of the photosensitive drum.
As the drum rotates during printing, a scratch continuously transfers unwanted toner onto the page along the paper feed path.
3
Analyze inkjet printing defects after an extended idle period
Identify ink drying inside micro-nozzle channels.
Idle printhead nozzles expose liquid ink to air, causing evaporation and clogs that restrict ink flow.
4
Analyze impact dot-matrix printing defects
Identify depleted fabric ribbon ink as the cause of faint printing across carbonless form layers.
Impact printheads strike a fabric ribbon; when the ribbon ink is depleted, physical impact alone yields faint text.

Key Concept

Printer Technology Troubleshooting and Defect Root Cause Analysis
Question 222Question

Match each data destruction and sanitization method to its correct operational description and capability.

Click a left item, then click its matching right item

Items

Degaussing
Overwriting (Zero-Fill)
Cryptographic Erase
Physical Shredding

Matches

Show answer & explanation

Answer

Degaussing matches disruption of magnetic fields on HDDs; Overwriting matches replacing storage sectors with binary patterns for hardware reuse; Cryptographic Erase matches deleting the encryption key on Self-Encrypting Drives; Physical Shredding matches cutting storage media into tiny fragments with mechanical blades.
Each method is matched correctly based on its core sanitization technique: Degaussing alters magnetic fields on HDDs, Overwriting fills drive sectors with pattern data to allow reuse, Cryptographic Erase invalidates encryption keys on SEDs, and Physical Shredding mechanically fragments storage media.

Step-by-Step Solution

1
Identify the data sanitization mechanism for magnetic media rendered inoperable by magnetic fields.
Degaussing applies a strong electromagnetic pulse to magnetic drives (HDDs/tapes), destroying track alignment and data.
Degaussing alters magnetic domain alignment on magnetic storage media.
2
Identify the software-based method for sanitizing drive sectors to permit hardware reuse.
Overwriting (Zero-Fill) writes new patterns over drive sectors, making data unrecoverable while keeping the device operable.
Logical drive wiping allows disk reuse without physical damage.
3
Identify the method specific to Self-Encrypting Drives (SEDs).
Cryptographic Erase instantly deletes or resets the drive's media encryption key (MEK).
Without the encryption key, data stored as ciphertext on the drive cannot be decrypted.
4
Identify the method that relies on mechanical destruction into small physical pieces.
Physical Shredding physically destroys the storage medium using mechanical cutters.
Shredding guarantees complete physical destruction across all media types.

Key Concept

Data Sanitization and Destruction Methods
Question 223Question

A network technician is configuring wireless security settings across various company locations and access scenarios. Match each wireless security requirement or deployment scenario on the left to its corresponding technology or protocol on the right.

Click a left item, then click its matching right item

Items

An enterprise deployment requiring individual user authentication via 802.1X and a RADIUS server
A legacy wireless encryption standard introduced to temporarily patch WEP vulnerabilities using TKIP
A modern SOHO wireless security standard using Simultaneous Authentication of Equals (SAE) to prevent dictionary attacks
A guest wireless setup that redirects HTTP traffic to a web page requiring acceptance of an acceptable use policy before granting network access

Matches

Show answer & explanation

Answer

1. Enterprise 802.1X authentication matches WPA2-Enterprise.
2. Legacy TKIP standard matches WPA.
3. Modern SAE SOHO standard matches WPA3-Personal.
4. Web page redirection for guest access matches Captive Portal.
Each wireless security technology matches its exact operational characteristics: WPA2-Enterprise provides 802.1X/RADIUS authentication; WPA relies on TKIP; WPA3-Personal uses SAE for enhanced PSK protection; and Captive Portals manage guest network landing page redirection.

Step-by-Step Solution

1
Analyze enterprise authentication requirements requiring RADIUS and 802.1X.
Identify that 802.1X authentication with central user account management corresponds to Enterprise security modes (WPA2-Enterprise).
Enterprise modes use EAP and RADIUS servers for individual user credentials rather than pre-shared keys.
2
Evaluate legacy encryption mechanisms designed to address original WEP weaknesses.
Identify TKIP as the protocol created for the original WPA standard.
WPA added TKIP as a temporary security patch compatible with existing WEP network hardware.
3
Examine modern SOHO passphrase authentication enhancements against offline password guessing.
Identify SAE as the core authentication protocol introduced in WPA3-Personal.
SAE performs a secure key exchange that makes offline dictionary attacks ineffective even with weak passwords.
4
Determine the mechanism used for web page redirection and terms acceptance on guest networks.
Identify Captive Portal as the access control mechanism for guest networks.
Captive portals intercept unauthenticated HTTP traffic to present login or landing pages.

Key Concept

Wireless Security Protocols and Authentication Frameworks
Question 224Question

As an IT support technician, you are implementing standard security controls across office desktop systems. Match each workstation hardening technique on the left to its primary risk mitigation objective on the right.

Click a left item, then click its matching right item

Items

Disabling AutoPlay and AutoRun features
Configuring a short password-protected screen saver timeout
Disabling unneeded operating system background services
Renaming or disabling the built-in Administrator account

Matches

Show answer & explanation

Answer

Disabling AutoPlay and AutoRun features matches with preventing automatic execution of malicious code from attached USB drives. Configuring a short password-protected screen saver timeout matches with mitigating unauthorized physical access to unattended active sessions. Disabling unneeded operating system background services matches with reducing the network attack surface by closing unused ports. Renaming or disabling the built-in Administrator account matches with protecting against targeted brute-force attacks exploiting default credentials.
Each hardening control directly addresses a distinct attack vector: disabling AutoPlay protects against removable media exploits, screen timeouts secure idle physical sessions, service minimization reduces open network ports, and account baseline changes mitigate default credential attacks.

Step-by-Step Solution

1
Identify the primary threat vector associated with removable storage media.
Disabling AutoPlay/AutoRun directly prevents unauthorized executables from running automatically when flash drives are inserted.
AutoPlay/AutoRun exploits rely on OS features that execute scripts upon hardware detection.
2
Evaluate local physical session security measures.
Configuring a screen lock timeout ensures unattended workstations automatically lock and demand credentials.
Physical security best practices require securing idle endpoints against walkthrough intrusion.
3
Analyze operating system service minimization.
Disabling unneeded services shuts down associated listening network ports.
Fewer active background services result in a smaller overall system attack surface.
4
Examine local user account security baselines.
Disabling or renaming default accounts neutralizes automated attacks targeting known default account identifiers.
Attackers target well-known SID patterns and default names like 'Administrator' or 'Guest' first.

Key Concept

Workstation Hardening Controls and Risk Mitigation
Question 225Question

A helpdesk technician is reviewing several recent security incident logs across the organization. Match each reported security incident scenario on the left to its corresponding threat type on the right.

Click a left item, then click its matching right item

Items

An employee receives a text message on their mobile phone claiming their financial account is compromised, containing a shortened link to verify credentials.
A system administrator discovers hidden software that altered kernel-level system files to conceal unauthorized backdoor access from Task Manager.
An unbadged visitor carrying a large package follows an employee closely through a secure door immediately after the employee scans their access card.
A user reports that all local files have been encrypted with an unrecognized extension and a text file demands cryptocurrency payment to unlock them.

Matches

Show answer & explanation

Answer

Smishing matches the SMS text message lure scenario; Rootkit matches the kernel-level process hiding scenario; Tailgating matches the physical intrusion following an authorized employee scenario; Ransomware matches the file encryption demanding payment scenario.
Each scenario represents a classic security threat vector: SMS-based phishing is smishing, kernel-level hiding malware is a rootkit, following someone through a secure door without authentication is tailgating, and encrypting files for extortion is ransomware.

Step-by-Step Solution

1
Analyze the first scenario involving an SMS text message sent to a mobile phone attempting to harvest credentials.
Identify this attack vector as Smishing (SMS Phishing).
Phishing conducted specifically over SMS text messages is categorized as smishing.
2
Analyze the second scenario involving software that alters kernel files and hides processes from management utilities.
Identify this malware type as a Rootkit.
Rootkits operate deep within the operating system kernel to maintain administrative access and cloak their presence.
3
Analyze the third scenario involving an unbadged individual physically following a badged worker through a secure entryway.
Identify this physical security breach as Tailgating.
Tailgating relies on social compliance or physical proximity to bypass electronic physical access controls.
4
Analyze the fourth scenario involving file encryption and a demand for cryptocurrency payment.
Identify this malware attack as Ransomware.
Extortion via file encryption and decryption ransom demands defines ransomware.

Key Concept

Social Engineering and Malware Threat Classifications
Estimated Time:1m 30s
Question 226Question

Match each Linux/macOS command-line utility to its primary administrative function.

Click a left item, then click its matching right item

Items

find
killall
uname
passwd

Matches

Show answer & explanation

Answer

The command 'find' searches the directory hierarchy for files matching specific criteria; 'killall' terminates running processes by program name; 'uname' prints system architecture and kernel release information; and 'passwd' changes user account credentials.
Each tool directly maps to its primary administrative function: 'find' searches the directory tree for files, 'killall' stops processes matching a program name, 'uname' outputs kernel and architecture data, and 'passwd' changes account passwords.

Step-by-Step Solution

1
Identify the file system search utility
'find' pairs with searching directory hierarchies based on file name or size.
The 'find' command evaluates directory trees recursively for files meeting specified criteria.
2
Identify the process termination command targeting by name
'killall' pairs with terminating processes by program name.
Unlike 'kill', which requires a specific Process ID (PID), 'killall' targets all instances sharing a process name.
3
Identify the system specification utility
'uname' pairs with printing kernel version and machine architecture information.
The 'uname' command outputs platform configuration data like system name, kernel release, and hardware architecture.
4
Identify the credential modification tool
'passwd' pairs with modifying user account authentication credentials.
The 'passwd' command updates password hashes for user accounts.

Key Concept

macOS and Linux Operating System Features and Tools
Question 227Question

An IT security administrator is establishing mobile endpoint and embedded system security policies for an enterprise organization. Match each operational security goal on the left with the correct policy control or technical implementation on the right.

Click a left item, then click its matching right item

Items

Restricting mobile application functionality automatically when a device physically exits an authorized corporate facility campus.
Encapsulating corporate apps and data on employee-owned (BYOD) devices to allow targeted removal without touching personal content.
Preventing unauthorized execution of unverified binaries on embedded industrial sensors that lack traditional antivirus software.
Verifying device OS patch state, encryption status, and root/jailbreak integrity before permitting a remote VPN connection.

Matches

Show answer & explanation

Answer

1. Restricting mobile application functionality based on physical perimeter location matches with Geofencing.
2. Encapsulating corporate apps and data on BYOD devices matches with Containerization.
3. Preventing unauthorized binary execution on embedded devices matches with Application Whitelisting.
4. Verifying device security health before granting VPN access matches with Posture Assessment.
Each requirement directly aligns with its specific technical implementation:
- Location-driven security enforcement uses Geofencing.
- Segmenting corporate data from personal storage on BYOD endpoints utilizes Containerization.
- Restricting execution on resource-constrained embedded systems relies on Application Whitelisting.
- Evaluating endpoint health before establishing connection tunnels requires Posture Assessment.

Step-by-Step Solution

1
Analyze location-based policy enforcement requirements for mobile devices.
Identify that using location services (GPS/cellular/Wi-Fi) to restrict app capabilities outside a physical boundary defines geofencing.
Geofencing dynamically alters device posture or application availability based on real-time location metrics.
2
Evaluate BYOD data isolation and selective wipe controls.
Identify containerization (MAM) as the technology designed to sandbox corporate assets from personal user storage.
Containerization ensures corporate privacy control while maintaining personal user privacy on non-corporate-owned hardware.
3
Determine execution control methods for embedded IoT hardware.
Match application whitelisting with embedded system binary execution control.
Embedded systems frequently lack compute resources for real-time signature antivirus scanning, making strict whitelisting the optimal default-deny mitigation.
4
Examine pre-connection health validation controls.
Associate checking patch levels and root status before VPN access with posture assessment.
Posture assessment ensures endpoints satisfy baseline health requirements prior to network connection authorization.

Key Concept

Mobile Device and Embedded System Security Controls
Question 228Question

An IT security technician is updating baseline security policies for workstations deployed across an enterprise network. Match each workstation hardening control on the left with the specific risk or attack vector it is primarily designed to mitigate on the right.

Click a left item, then click its matching right item

Items

Restricting 'Allow log on locally' rights via Local Group Policy
Enforcing screensaver timeout with password protection
Disabling the built-in Guest account and renaming the default Administrator account
Disabling AutoPlay and AutoRun policies across all storage volumes

Matches

Show answer & explanation

Answer

Restricting local logon rights matches with preventing non-authorized user accounts from establishing interactive physical console sessions. Enforcing screensaver timeout with password protection matches with preventing unauthorized physical access to an active desktop session when left unattended. Disabling the built-in Guest account and renaming the Administrator account matches with mitigating automated dictionary attacks targeting standard accounts. Disabling AutoPlay and AutoRun policies matches with preventing automatic execution of untrusted payloads when removable media is inserted.
Each workstation hardening control addresses a specific vulnerability vector. Restricting local logon permissions prevents unauthorized accounts from initiating physical console sessions. Password-protected screen locks prevent physical exposure of unattended active sessions. Disabling or renaming built-in accounts thwarts automated credential guessing against default account identifiers. Disabling AutoPlay/AutoRun stops drive-by code execution from connected removable storage.

Step-by-Step Solution

1
Analyze local user rights policies for interactive logon control.
Determined that 'Allow log on locally' controls physical console logon capability.
Restricting this permission ensures that only authorized personnel can log into the local workstation console.
2
Evaluate inactivity screen locking mechanisms.
Identified that password-protected screen saver timeouts lock active sessions automatically.
When a technician or user steps away, the lock prevents passerby tampering and shoulder surfing.
3
Examine account obfuscation and disabling policies.
Identified that default accounts like Guest and Administrator are predictable targets.
Renaming or disabling default accounts blocks automated scripts relying on standard account names.
4
Assess removable media execution controls.
Determined that AutoPlay/AutoRun policies govern media file auto-execution.
Disabling these features stops rogue USB flash drives or external drives from launching malicious code automatically.

Key Concept

Workstation Hardening and Threat Mitigation Controls
Estimated Time:2m 0s
Question 229Question

Match each Windows administration task or system configuration requirement on the left with its corresponding Control Panel utility on the right.

Click a left item, then click its matching right item

Items

Manage offline files and set up synchronization schedules for network shared folders
Add a multi-function office printer and adjust its default paper tray preferences
Enable optional Windows components such as Internet Information Services (IIS) or Hyper-V
Modify the computer host name and adjust performance settings for virtual memory pagefile size

Matches

Show answer & explanation

Answer

Offline files and network folder synchronization match Sync Center; adding printers and setting default paper tray preferences match Devices and Printers; enabling optional OS components like IIS or Hyper-V matches Programs and Features; modifying the host name and adjusting virtual memory pagefile size match System.
Each administrative task aligns directly with its primary Windows Control Panel utility: Sync Center manages offline network files and schedules; Devices and Printers handles peripheral configuration and default printer properties; Programs and Features allows technicians to enable or disable optional OS components like IIS or Hyper-V; System provides access to basic system specifications, computer identity, and virtual memory (paging file) configuration.

Step-by-Step Solution

1
Identify the tool for managing offline network folders and sync schedules.
Determine that Sync Center handles offline files, synchronization status, and conflict resolution.
Windows routes file caching and sync rules through the Sync Center applet.
2
Identify the tool for managing user-facing printer settings and default properties.
Determine that Devices and Printers manages installed peripherals, printing defaults, and print queues.
Higher-level device preferences and default selections are configured in Devices and Printers.
3
Identify the location for turning Windows features on or off.
Determine that Programs and Features houses the option to enable optional components such as IIS or Hyper-V.
Built-in OS features and optional roles are managed from within Programs and Features.
4
Identify the applet controlling system host identity and performance options.
Determine that the System utility provides access to System Properties for computer renaming and virtual memory paging configuration.
Host name, domain membership, and advanced performance settings (such as pagefile sizing) reside under System settings.

Key Concept

Windows Control Panel Utilities Functionality
Estimated Time:1m 30s
Question 230Question

Match each remote access technology or tool with its characteristic operating requirement, protocol, or default port configuration.

Click a left item, then click its matching right item

Items

Remote Desktop Host (RDP)
Microsoft Remote Assistance (MSRA)
Secure Shell (SSH)
Virtual Network Computing (VNC)

Matches

Show answer & explanation

Answer

Remote Desktop Host (RDP) matches the requirement for Windows Pro/Enterprise/Education on TCP port 3389. Microsoft Remote Assistance (MSRA) matches helper invitation sessions across all Windows editions. Secure Shell (SSH) matches encrypted command-line access on TCP port 22. Virtual Network Computing (VNC) matches RFB protocol usage on TCP port 5900.
Each remote access technology correctly maps to its core operational parameter: RDP host capabilities require Windows Pro/Enterprise/Education on TCP 3389; MSRA enables interactive helper sessions via invitation tokens across all editions; SSH supplies encrypted terminal administration over TCP 22; and VNC delivers cross-platform screen sharing via the RFB protocol over TCP 5900.

Step-by-Step Solution

1
Identify operating system edition restrictions for incoming GUI remote desktop sessions.
Confirm that Windows Home editions lack the RDP host listener component, requiring Pro, Enterprise, or Education editions on TCP port 3389.
CompTIA A+ objectives specifically contrast RDP host availability between Windows client editions.
2
Differentiate MSRA functionality from standard RDP session behaviors.
Determine that MSRA allows assisted remote support sessions across all Windows editions via user invitation tokens.
Technicians use MSRA to assist remote users on Home edition machines where RDP host mode is disabled.
3
Associate command-line and cross-platform tools with their default network ports and protocols.
Link SSH to encrypted CLI administration on TCP port 22, and VNC to RFB protocol administration on TCP port 5900.
Network firewalls and routers must be configured with correct default listening ports for SSH and VNC connectivity.

Key Concept

Remote Access Technologies, Port Assignments, and Windows Edition Capabilities
Question 231Question

Match each remote access technology or protocol with its primary operational characteristic and default port assignment.

Click a left item, then click its matching right item

Items

SSH (Secure Shell)
RDP (Remote Desktop Protocol)
Telnet
MSRA (Microsoft Remote Assistance)

Matches

Show answer & explanation

Answer

SSH matches encrypted command-line access on TCP port 22; RDP matches graphical desktop access on TCP port 3389; Telnet matches unencrypted legacy command-line access on TCP port 23; MSRA matches user-initiated active desktop session assistance.
SSH provides secure, encrypted command-line communication over TCP port 22. RDP delivers graphical desktop access over TCP port 3389. Telnet transmits unencrypted command-line data over TCP port 23. MSRA requires user initiation to enable interactive desktop troubleshooting.

Step-by-Step Solution

1
Differentiate command-line management protocols by security and default port assignment
SSH provides encrypted shell access on TCP port 22, whereas Telnet provides unencrypted cleartext shell access on TCP port 23.
CompTIA standards emphasize replacing cleartext protocols like Telnet with secure encrypted alternatives like SSH.
2
Distinguish graphical remote management tools by session interaction mode and port requirements
RDP connects directly to manage Windows desktops over TCP port 3389, while MSRA provides collaborative session sharing initiated by an end user invitation.
RDP is primarily used for administrative remote access, while MSRA is designed specifically for interactive desktop troubleshooting with user consent.

Key Concept

Remote Access Technologies and Default Port Assignments
Question 232Question

A systems technician is standardizing operational documentation for remote administration tools and support workflows across an enterprise network environment. Match each remote access tool or protocol to its primary operational characteristic and protocol constraint.

Click a left item, then click its matching right item

Items

Microsoft Remote Assistance (MSRA)
Remote Desktop Protocol (RDP)
Secure Shell (SSH)
Virtual Network Computing (VNC)

Matches

Show answer & explanation

Answer

Microsoft Remote Assistance (MSRA) matches with establishing a temporary, interactive screen-sharing session over TCP port 3389 requiring user invitation. Remote Desktop Protocol (RDP) matches with providing full graphical desktop control over TCP port 3389 restricted to Windows Pro, Enterprise, and Server host editions. Secure Shell (SSH) matches with encrypted command-line terminal management over TCP port 22. Virtual Network Computing (VNC) matches with cross-platform desktop sharing using RFB over TCP port 5900.
Each tool is correctly matched based on its protocol, default port number, and operational capabilities: MSRA (TCP 3389, interactive invitation), RDP (TCP 3389, full administrative control on Windows Pro/Enterprise), SSH (TCP 22, secure CLI management), and VNC (TCP 5900, cross-platform RFB graphical desktop access).

Step-by-Step Solution

1
Identify user assistance tools using TCP 3389
Differentiate between MSRA (user-invited collaborative screen sharing) and full RDP host connections.
Both MSRA and RDP use TCP 3389, but MSRA requires explicit user interaction, whereas RDP hosts a full remote login session.
2
Evaluate Windows OS edition host restrictions for RDP
Confirm RDP incoming connections require Pro, Enterprise, or Server editions.
Windows Home edition supports running the RDP client software but lacks the RDP host server component.
3
Associate command-line management and platform-independent tools with their ports
SSH corresponds to TCP port 22 encrypted CLI access, while VNC corresponds to TCP port 5900 cross-platform RFB screen sharing.
Matching default network ports (22 for SSH, 5900 for VNC) to their functional architecture ensures standard operational security compliance.

Key Concept

Remote Access Technologies, Protocols, and Default Port Configurations
Question 233Question

Match each remote access technology or protocol to its primary operational characteristic and default port assignment.

Click a left item, then click its matching right item

Items

SSH (Secure Shell)
RDP (Remote Desktop Protocol)
Telnet
MSRA (Microsoft Remote Assistance)

Matches

Show answer & explanation

Answer

SSH matches with TCP port 22 encrypted command-line access; RDP matches with TCP port 3389 full GUI host session restricted to Pro/Enterprise Windows editions; Telnet matches with TCP port 23 unencrypted cleartext terminal; MSRA matches with TCP port 3389 user-invited interactive session sharing.
Each technology correctly corresponds to its default network port and operational scope: SSH secures command-line administrative sessions over port 22; RDP provides complete remote control over port 3389 for host-capable Windows editions (Pro/Enterprise); Telnet uses cleartext port 23; and MSRA enables temporary screen-sharing assistance via user invitation over port 3389.

Step-by-Step Solution

1
Evaluate the command-line protocol features and security mechanisms.
Map SSH to TCP port 22 due to encrypted session transmission and Telnet to TCP port 23 due to unencrypted cleartext transport.
CompTIA standards emphasize using SSH over Telnet to prevent credential interception.
2
Analyze Windows-native GUI remote access utilities and OS edition capabilities.
Map RDP to TCP port 3389 host hosting restrictions (requires Windows Pro/Enterprise) and MSRA to TCP port 3389 invitation-based desktop assistance.
RDP creates an independent locked desktop host session available only on higher Windows editions, whereas MSRA allows interactive dual control across standard client editions.

Key Concept

Remote Access Protocols, Default Ports, and Windows Edition Capabilities
Estimated Time:1m 30s
Question 234Question

Match each remote access operational scenario or requirement with the correct protocol, default port assignment, or Windows OS restriction.

Click a left item, then click its matching right item

Items

A network engineer requires an encrypted, authenticated command-line session to securely manage a remote Linux router across an untrusted network.
A help desk technician attempts to configure native incoming Remote Desktop host capabilities on an employee's company-issued laptop running Windows 11 Home edition.
A systems administrator establishes a native Windows graphical user interface (GUI) session to perform maintenance on a remote Windows Server 2022 instance.
A security analyst flags an unencrypted, legacy text-based remote administration session during a network packet capture audit.

Matches

Show answer & explanation

Answer

1 matches SSH on TCP port 22; 2 matches Windows Home RDP hosting limitation; 3 matches RDP on TCP port 3389; 4 matches Telnet on cleartext TCP port 23.
Each scenario maps to its underlying protocol specification or OS constraint. Secure command-line access relies on SSH (TCP 22), plain-text legacy access uses Telnet (TCP 23), native Windows GUI management relies on RDP (TCP 3389), and incoming RDP hosting is limited to Windows Pro and higher editions.

Step-by-Step Solution

1
Analyze command-line remote management requirements
Identify SSH as the secure encrypted CLI protocol (TCP port 22) and Telnet as the insecure cleartext CLI protocol (TCP port 23).
Secure network administration requires encryption across untrusted boundaries.
2
Evaluate Windows edition limitations for incoming remote connections
Confirm that Windows 11 Home does not support hosting incoming RDP sessions.
Microsoft restricts the RDP host server feature to Professional, Enterprise, and Education editions.
3
Identify native Windows GUI management protocols and default ports
Map native Windows GUI administration to RDP operating on TCP port 3389.
RDP is Microsoft's primary protocol for remote graphical desktop access.

Key Concept

Remote Access Protocols, Port Numbers, and OS Feature Restrictions
Estimated Time:2m 0s
Question 235Question

Match each remote access technology or tool on the left with its defining default port and operational characteristic on the right.

Click a left item, then click its matching right item

Items

Remote Desktop Protocol (RDP)
Secure Shell (SSH)
Microsoft Remote Assistance (MSRA)
Telnet

Matches

Show answer & explanation

Answer

Remote Desktop Protocol (RDP) matches with TCP port 3389 for full graphical control on supported Windows editions; Secure Shell (SSH) matches with TCP port 22 for encrypted command-line sessions; Microsoft Remote Assistance (MSRA) matches with invitation-based screen sharing and troubleshooting; Telnet matches with TCP port 23 for unencrypted clear-text command-line connections.
Each remote access tool is paired directly with its standard port and operational mode: Remote Desktop Protocol (RDP) uses TCP 3389 for graphical host access; Secure Shell (SSH) uses TCP 22 for encrypted command-line administration; Microsoft Remote Assistance (MSRA) uses user invitation methods for interactive desktop support; Telnet uses TCP 23 for unencrypted clear-text terminal access.

Step-by-Step Solution

1
Identify the primary protocol function and port for RDP.
RDP uses TCP port 3389 for graphical remote desktop management on supported Windows editions.
CompTIA standards identify RDP specifically with port 3389 and Windows host requirements.
2
Identify the primary protocol function and port for SSH.
SSH uses TCP port 22 to deliver secure, encrypted command-line access.
SSH is the encrypted replacement for insecure legacy terminal protocols.
3
Identify the operational mechanism for Microsoft Remote Assistance (MSRA).
MSRA utilizes invitations or connection strings to assist a logged-in user interactively.
MSRA differs from RDP by assisting an active user session rather than logging into a separate session.
4
Identify the default port and security status of Telnet.
Telnet uses TCP port 23 and lacks encryption.
Telnet sends credentials in plain text across the network.

Key Concept

Remote Access Technologies and Tools
Question 236Question

Match each remote access technology or protocol on the left with its defining port number and operational characteristics on the right.

Click a left item, then click its matching right item

Items

Remote Desktop Protocol (RDP)
Secure Shell (SSH)
Telnet
Microsoft Remote Assistance (MSRA)

Matches

Show answer & explanation

Answer

Remote Desktop Protocol (RDP) pairs with TCP port 3389 and Windows Pro/Enterprise/Education host requirement; Secure Shell (SSH) pairs with TCP port 22 encrypted command-line management; Telnet pairs with TCP port 23 cleartext transmission; Microsoft Remote Assistance (MSRA) pairs with invitation-based interactive desktop session sharing.
Each remote access technology is accurately matched to its standard default network port, encryption status, and operating system hosting requirements per standard educational guidelines.

Step-by-Step Solution

1
Identify default ports and OS hosting requirements for GUI remote desktop tools.
RDP uses TCP 3389 and requires Windows Pro, Enterprise, or Education to accept incoming connection hosting requests.
Windows Home edition includes the RDP client software but lacks the inbound RDP host server feature.
2
Compare command-line remote access protocols based on security and port numbers.
SSH uses TCP port 22 for encrypted CLI access, while Telnet uses TCP port 23 without encryption.
SSH was specifically designed to secure shell communications over public or untrusted networks.
3
Identify the operational mechanism of Microsoft Remote Assistance (MSRA).
MSRA establishes a collaborative desktop connection requiring a user invitation.
Unlike RDP which locks the physical workstation monitor, MSRA keeps the local session active for dual control.

Key Concept

Remote Access Technologies, Ports, and Capabilities
Estimated Time:1m 30s
Question 237Question

A systems administrator is auditing administrative scripts across a heterogeneous corporate network. Match each script code snippet or syntax requirement on the left to its correct scripting language environment, file extension, and execution rule on the right.

Click a left item, then click its matching right item

Items

A script snippet referencing `$env:COMPUTERNAME` and using `Get-ChildItem -Path C:\Logs` to process system events.
A script snippet using `%SYSTEMROOT%` environment variables with `IF EXIST` conditional syntax and `REM` for documentation lines.
A script snippet starting with `#!/bin/bash`, utilizing `$1` for positional input arguments and `#` for inline comments.
A legacy automation script using `WScript.Echo` to prompt users, using a single quote `'` for comments and execution via `cscript.exe`.

Matches

Show answer & explanation

Answer

The script snippet using `env:COMPUTERNAMEandGetChildItemmatchesPowerShell(.ps1).Thescriptusingenv:COMPUTERNAME` and `Get-ChildItem` matches PowerShell (`.ps1`). The script using `%SYSTEMROOT%`, `IF EXIST`, and `REM` matches Windows Batch (`.bat`). The script starting with `#!/bin/bash` and using ` 1` matches Bash Shell (`.sh`). The script using `WScript.Echo` and single quote comments matches VBScript (`.vbs`).
Each script snippet relies on unique syntax constructs and execution environments defined in CompTIA A+ Core 2 objectives: PowerShell uses `$env:` and cmdlets (`.ps1`); Batch uses `%VAR%` and `REM` (`.bat`); Bash uses shebang directives `#!/bin/bash` and `#` comments (`.sh`); VBScript uses `WScript` runtime objects and single-quote comments (`.vbs`).

Step-by-Step Solution

1
Analyze variable notation and cmdlet syntax for the first snippet
Identified `$env:` syntax and `Get-ChildItem` cmdlet as PowerShell characteristics (`.ps1`).
PowerShell standardizes environment variable access through the `$env:` provider.
2
Analyze conditional syntax and comment markers for the second snippet
Identified `%VAR%` expansion and `REM` keyword as Windows Command Shell batch script features (`.bat`).
Legacy command-prompt scripts require percent sign wrapping for environment variables.
3
Analyze shebang header and positional parameters for the third snippet
Identified `#!/bin/bash` shebang line and `$1` parameter reference as Bash shell script features (`.sh`).
Unix-like systems utilize shebang interpreter directives to locate the execution binary.
4
Analyze runtime engine objects and comment delimiters for the fourth snippet
Identified `WScript.Echo` and `cscript.exe` host requirement as VBScript characteristics (`.vbs`).
VBScript relies on Windows Script Host (WSH) COM objects for input/output operations.

Key Concept

Basic Scripting Languages, File Extensions, and Environmental Syntax
Question 238Question

Match each data privacy framework or regulatory standard on the left with its corresponding technical requirement or operational enforcement constraint on the right.

Click a left item, then click its matching right item

Items

GDPR Right to Erasure ('Right to be Forgotten')
PCI-DSS Account Data Handling
HIPAA Security Rule Technical Safeguards
FERPA Educational Privacy Regulations

Matches

Show answer & explanation

Answer

The regulations match their operational requirements as follows: GDPR Right to Erasure matches requiring record purging upon request unless statutory financial retention laws supersede; PCI-DSS matches isolating the CDE and prohibiting CVV persistence post-authorization; HIPAA Security Rule matches technical safeguards such as unique IDs, auto-logoff, and audit controls for ePHI; FERPA matches restricting disclosure of student academic records and managing directory information opt-out rights.
Each data privacy framework maps directly to its specific legal scope and technical enforcement requirements: GDPR regulates EU personal data erasure subject to statutory retention exceptions; PCI-DSS mandates CDE network isolation and bans CVV storage post-authorization; HIPAA mandates access, audit, and encryption controls for ePHI; and FERPA governs student educational records disclosure.

Step-by-Step Solution

1
Analyze GDPR requirements regarding data erasure
Recognize that GDPR allows data subjects to demand personal data deletion, but statutory legal or tax retention rules take precedence over erasure requests for specific transactional financial records.
Systems administrators must verify conflicting regulatory data retention laws before executing system-wide deletion commands.
2
Evaluate PCI-DSS scope and prohibited data storage rules
Identify that PCI-DSS governs credit card handling, requiring network segmentation to isolate card processing environments and explicitly banning post-authorization storage of Sensitive Authentication Data (SAD) such as CVV/CVC codes.
Storing CVV validation data post-authorization creates severe compliance violations and security risks.
3
Identify HIPAA technical safeguard requirements
Determine that HIPAA governs electronic Protected Health Information (ePHI), specifying technical controls including unique login credentials, automatic session termination, activity audit logs, and data encryption.
Healthcare workstations and applications must enforce mandatory access and audit controls to safeguard patient records.
4
Analyze FERPA scope in educational institutions
Determine that FERPA mandates privacy protections for student educational records and regulates the disclosure of directory information.
Educational IT staff must restrict access to student cumulative records and enforce opt-out preferences.

Key Concept

Data Privacy Frameworks and IT Compliance Technical Controls
Estimated Time:2m 30s
Question 239Question

Match each remote access technology or protocol on the left with its defining operational characteristic and port specification on the right.

Click a left item, then click its matching right item

Items

Secure Shell (SSH)
Remote Desktop Protocol (RDP)
Microsoft Remote Assistance (MSRA)
Telnet

Matches

Show answer & explanation

Answer

Secure Shell (SSH) pairs with encrypted CLI over TCP port 22. Remote Desktop Protocol (RDP) pairs with full graphical control over TCP port 3389 that locks local sessions. Microsoft Remote Assistance (MSRA) pairs with invitation-based interactive session control. Telnet pairs with unencrypted cleartext CLI over TCP port 23.
Each technology is mapped according to standard network port assignments and session management behaviors. Secure Shell (SSH) encrypts terminal sessions on TCP port 22; Remote Desktop Protocol (RDP) provides exclusive GUI management on TCP port 3389; Microsoft Remote Assistance (MSRA) uses invitations for collaborative remote assistance; and Telnet sends unencrypted terminal data over TCP port 23.

Step-by-Step Solution

1
Analyze command-line remote access tools based on security and port numbers.
SSH provides encrypted administration using TCP port 22, whereas Telnet sends unencrypted cleartext data over TCP port 23.
Distinguishing secure protocols from insecure legacy protocols is critical for operational procedures.
2
Analyze Windows graphical remote access tools based on session handling and user interaction.
RDP uses TCP port 3389 and creates an exclusive session that locks the local monitor, whereas MSRA uses user-initiated invitations to allow dual-view interactive troubleshooting.
RDP is designed for remote workspace access, while MSRA is designed for real-time user support.
3
Map each protocol or tool to its exact operational definition.
All four items are matched to their corresponding characteristics.
Ensures complete alignment with CompTIA remote access specifications.

Key Concept

Remote Access Protocols, Default Ports, and Operational Behaviors
Question 240Question

Match each data privacy framework or data classification term on the left with its correct regulatory definition or operational scope on the right.

Click a left item, then click its matching right item

Items

PCI-DSS
PHI
PII
GDPR

Matches

Show answer & explanation

Answer

PCI-DSS matches with credit card processing standards; PHI matches with healthcare information; PII matches with personal identity data; GDPR matches with EU data subject rights.
Each data privacy standard or term matches its exact definition: PCI-DSS governs credit card security, PHI governs medical records, PII governs personal identifying information, and GDPR governs EU individual data rights.

Step-by-Step Solution

1
Identify payment processing security standards.
Connect PCI-DSS to credit card data protection.
PCI-DSS stands for Payment Card Industry Data Security Standard.
2
Identify medical data classification terms.
Connect PHI to health information stored by covered entities.
PHI (Protected Health Information) is defined under healthcare privacy regulations.
3
Classify general identity information terms.
Connect PII to details used to distinguish an individual.
PII (Personally Identifiable Information) refers to individual identity markers.
4
Identify regional compliance laws regarding personal privacy.
Connect GDPR to EU citizen data control and erasure rights.
GDPR (General Data Protection Regulation) establishes data rights across the EU.

Key Concept

Data Privacy Standards and Regulatory Scopes
PreviousPage 12 / 27Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin