All practice questions

3551 questions

Question 2441Question

A technician is installing a new motherboard and connecting cables from the power supply unit. Which TWO of the following motherboard connectors must be connected directly to the power supply to provide primary system board power and dedicated auxiliary processor power? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: 24-pin ATX main power connector; 8-pin EPS12V power connector

Answer

The 24-pin ATX main power connector and the 8-pin EPS12V power connector must both be connected from the power supply unit to the motherboard.
The 24-pin ATX main power connector provides primary power to the motherboard logic board and integrated circuits, while the 8-pin EPS12V connector provides dedicated +12V power to the processor VRMs.

Step-by-Step Solution

1
Identify the connector responsible for delivering core motherboard and onboard component power.
The 24-pin ATX main power connector supplies main logic power voltages (+3.3V, +5V, +12V) to the motherboard.
Without the main 24-pin connector, the motherboard chipset and expansion buses cannot receive main power.
2
Identify the connector responsible for delivering dedicated power to the processor.
The 8-pin EPS12V (or 4-pin ATX12V) connector delivers auxiliary +12V power directly to the processor's VRMs.
Modern CPUs draw high currents that exceed what the 24-pin main connector can safely supply alone.

Key Concept

Motherboard Power Connectors (24-pin ATX and 8-pin EPS12V)
Question 2442Question

A user reports that a desktop application has begun crashing intermittently after recent system updates. A technician wants to review a chronological timeline of application failures, Windows updates, and system warnings to identify when the instability started. Which Windows tool provides this historical stability view?

Show answer & explanation

Answer: Reliability Monitor

Answer

Reliability Monitor
Reliability Monitor provides a graphical timeline that correlates application failures, system hangs, and software installation events, allowing technicians to quickly spot patterns or updates associated with application crashes.

Step-by-Step Solution

1
Identify the technician's requirement
The technician needs a chronological timeline showing system stability, application crashes, and system events over days or weeks.
Tracking when crashes began relative to system updates helps isolate the root cause.
2
Evaluate Windows administrative tools
Reliability Monitor (perfmon /rel) tracks application failures, OS crashes, and software installation events on a day-by-day graph with stability index scores.
Reliability Monitor consolidates event history specifically designed for evaluating software stability trends.

Key Concept

Using Reliability Monitor to evaluate application crash history and system stability trends
Question 2443Question

Match each macOS or Linux operating system feature or command-line utility to its primary administrative function.

Click a left item, then click its matching right item

Items

diskutil
NVRAM
tar
sudo

Matches

Show answer & explanation

Answer

diskutil matches managing storage drives and partitions; NVRAM matches storing persistent macOS system settings like boot selection; tar matches bundling and extracting archived files; sudo matches executing commands with elevated superuser privileges.
Each feature or utility is correctly paired with its function: diskutil handles macOS CLI disk and volume management; NVRAM stores persistent hardware and system configuration preferences; tar creates and extracts file archives; sudo executes commands with temporary root/superuser rights.

Step-by-Step Solution

1
Identify the primary function of diskutil
Recognize that diskutil is a native macOS CLI tool used to format, partition, and modify disk storage.
diskutil provides disk management operations via Terminal in macOS.
2
Identify the primary function of NVRAM
Recognize that NVRAM holds non-volatile system state settings in macOS like screen resolution and startup disk preferences.
NVRAM maintains hardware configuration states across power cycles.
3
Identify the primary function of tar
Recognize that tar is an archiving utility in Linux and macOS used to package files together into archive files.
tar creates consolidated archive files (.tar, .tar.gz).
4
Identify the primary function of sudo
Recognize that sudo executes commands with elevated root/superuser security rights.
sudo elevates command privileges for authorized administrative operations.

Key Concept

macOS and Linux Operating System Features and Tools
Question 2444Question

A desktop support specialist is customizing an automated system maintenance script with a .sh file extension to execute on Linux and macOS workstations. To document recent configuration updates, the specialist needs to insert internal documentation lines into the script that will be ignored by the shell command interpreter during execution. Which syntax must the specialist use to denote commented lines in this script?

Show answer & explanation

Answer: Prepend each commented line with the # character.

Answer

Prepend each commented line with the # character.
In Bash shell scripts (.sh), placing a hash character (#) at the start of a line instructs the shell command interpreter to treat that text as a comment and ignore it during script execution.

Step-by-Step Solution

1
Identify the scripting environment based on the file extension.
The file extension .sh indicates a Unix/Linux Bash shell script.
Scripting languages use distinct comment syntax depending on their execution runtime environment.
2
Determine the standard comment syntax for Bash shell scripting.
The hash symbol (#) designates a single-line comment in Bash scripts.
The shell interpreter ignores any line or portion of a line following the # symbol (except for the shebang line #! at the very top).

Key Concept

Scripting language syntax and comment conventions (.sh vs .bat vs .vbs vs .js)
Question 2445Question

A senior identity engineer is planning an operating system upgrade across primary Active Directory domain controllers in an enterprise network. Place the following change management procedures in the correct chronological order from first step to final step.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order of change management steps begins with conducting a risk analysis and drafting a rollback plan, followed by submitting the request to the CAB for approval, notifying affected end-users of the scheduled maintenance window, executing the upgrade during the maintenance window, and concluding with post-implementation testing and documentation.
The standard CompTIA change management lifecycle follows a structured sequence: initial documentation (scope, risk analysis, and rollback plan), formal authorization by the Change Advisory Board (CAB), end-user notification of the scheduled maintenance window, implementation during the maintenance window, and post-implementation testing alongside final documentation.

Step-by-Step Solution

1
Identify the change preparation phase.
Performing a risk analysis and drafting a rollback plan is established as the initial step.
Before submitting any change for authorization, the technical scope, potential risks, and fallback procedures must be fully documented.
2
Identify the authorization phase.
Submitting the completed change request to the Change Advisory Board (CAB) follows initial preparation.
The CAB must review and authorize the plan and schedule before any implementation work or public announcements occur.
3
Identify the communication phase.
Notifying stakeholders and end-users of the upcoming maintenance window is the third step.
Users must be informed of expected service interruptions after authorization is granted but prior to starting the work.
4
Identify the deployment phase.
Executing the upgrade during the authorized maintenance window is the fourth step.
System modifications occur strictly within the designated maintenance window after all approval and communication prerequisites are satisfied.
5
Identify the post-deployment phase.
Conducting post-implementation testing and updating configuration documentation is the final step.
Testing validates that directory services function correctly, and final documentation updates complete the change lifecycle.

Key Concept

CompTIA A+ Change Management Lifecycle Order
Estimated Time:1m 30s
Question 2446Question

A security technician is decommissioning magnetic hard disk drives (HDDs) containing sensitive financial files. Arrange the following steps in the correct chronological sequence for executing a compliant hardware sanitization and disposition lifecycle.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence begins with documenting chain of custody, followed by magnetic degaussing, physical shredding, and finally archiving the Certificate of Destruction.
The hardware disposition lifecycle follows a strict sequence: first, inventory logging establishes chain of custody; second, media sanitization (degaussing) renders the magnetic data unreadable; third, physical destruction (shredding) prevents hardware recovery; and fourth, administrative auditing secures a Certificate of Destruction.

Step-by-Step Solution

1
Inventory and Chain of Custody
Drive serial numbers are recorded and tracked.
Maintaining regulatory compliance requires documenting the custody of sensitive storage assets before any action is taken.
2
Data Sanitization
The magnetic drive platters are demagnetized via degaussing.
Degaussing renders data unreadable while the drives remain intact.
3
Physical Destruction
The drive hardware is reduced to small metallic fragments.
Physical shredding guarantees that no hardware components can be recovered or reassembled.
4
Compliance Verification
A Certificate of Destruction is validated and archived.
The certificate serves as formal legal proof that the data disposal process was completed according to standards.

Key Concept

Hardware Disposition Lifecycle and Chain of Custody
Estimated Time:1m 30s
Question 2447Question

A technician is troubleshooting a desktop computer that turns off immediately after being turned on. What is the correct sequence of steps the technician should follow to diagnose and resolve a suspected power supply issue according to standard troubleshooting procedures?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence begins with verifying external power, checking internal motherboard cable seating, testing PSU rail voltages with a dedicated tester, and finally replacing the faulty power supply unit.
CompTIA troubleshooting methodology requires prioritizing simple external verifications before inspecting internal connections, taking tool-based measurements, and performing component replacement.

Step-by-Step Solution

1
Verify external power sources and connections.
Ensures utility power is actively reaching the power supply inlet.
Standard troubleshooting dictates starting with simple external checks first.
2
Inspect internal power cable seating on the motherboard.
Confirms 24-pin ATX and 8-pin EPS connectors are fully latched.
Loose motherboard power leads can cause thermal trip or immediate power-off events.
3
Test power supply outputs using a multimeter or PSU tester.
Identifies if voltage rails (+12V, +5V, +3.3V) are within proper operating specs.
Direct measurement isolates PSU electrical failure before performing component swaps.
4
Swap out the bad PSU for a functional replacement unit.
Restores consistent power to all system hardware components.
Remediation via hardware replacement occurs after empirical failure verification.

Key Concept

Power Supply Diagnostics and Isolation Sequence
Question 2448Question

A systems administrator is configuring a wireless access point for corporate employees. To comply with internal security policies, the wireless network must enforce individual credential authentication integrated with the central Active Directory domain, while disallowing vulnerable legacy protocols like TKIP. Which of the following security configurations should the administrator implement?

Show answer & explanation

Answer: WPA3-Enterprise utilizing 802.1X authentication and RADIUS

Answer

WPA3-Enterprise utilizing 802.1X authentication and RADIUS
WPA3-Enterprise requires an 802.1X RADIUS server infrastructure to authenticate users individually against central directory services like Active Directory. Furthermore, WPA3 enforces strong AES encryption standards, satisfying all security policy mandates.

Step-by-Step Solution

1
Identify the authentication requirement
Individual domain credentials require an Enterprise security framework utilizing 802.1X and RADIUS rather than a shared passphrase.
Personal modes (PSK/SAE) share a single key among all users, preventing individual user accounting and domain integration.
2
Identify the encryption standard requirement
WPA3 mandates modern AES-based cipher suites (such as CCMP/GCMP) and disallows legacy TKIP.
TKIP has known cryptographic weaknesses and is deprecated across modern wireless security standards.
3
Select the matching configuration option
WPA3-Enterprise satisfies both individual authentication and secure encryption criteria.
It combines 802.1X network access control with strong mandatory AES encryption.

Key Concept

Enterprise Wireless Security (802.1X / RADIUS vs. Personal PSK/SAE)
Question 2449Question

A user on a Windows 11 workstation reports that a legacy line-of-business application fails to save local configuration settings unless it is launched by right-clicking the icon and choosing 'Run as administrator'. The workstation is logged into by a Standard User account. The helpdesk technician wants to enable the user to save settings within the application without granting the account local administrator rights or lowering overall system User Account Control (UAC) security settings. Which of the following actions should the technician take?

Show answer & explanation

Answer: Grant the Standard User account explicit Modify permissions on the application's file folder and registry subkeys.

Answer

Grant the Standard User account explicit Modify permissions on the application's file folder and registry subkeys.
Granting explicit Modify permissions to the specific folder and registry keys used by the application resolves write access errors under a Standard User account without elevating the user's overall system privileges or disabling system security controls.

Step-by-Step Solution

1
Identify the cause of the UAC elevation requirement for the application.
Legacy applications often require administrative access because they attempt to write configuration data to protected directories such as C:\Program Files or HKEY_LOCAL_MACHINE.
Standard user accounts lack write/modify rights to system-protected locations by default.
2
Apply targeted permission changes using the principle of least privilege.
Updating NTFS permissions on the application folder and registry key permissions for the application's specific registry path enables file and registry modifications.
This resolves the application failure while keeping the user account at a standard privilege level and maintaining UAC protection system-wide.

Key Concept

Principle of Least Privilege and UAC Application Security
Estimated Time:1m 15s
Question 2450Question

A technician suspects a Windows workstation is infected with malware after observing unexpected browser redirects and modified system settings. According to CompTIA's standard 7-step malware removal procedures, which of the following initial actions should the technician take before attempting to clean or scan the system? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Disconnect the computer from the wired and wireless network.; Disable System Restore in Windows.

Answer

The correct actions are disconnecting the infected system from the network (Isolate) and disabling System Restore prior to remediation.
According to the official 7-step remediation process, after identifying malware symptoms (Step 1), the technician must isolate the infected system (Step 2) to contain the threat and disable System Restore (Step 3) so that restore points do not store infected files during remediation.

Step-by-Step Solution

1
Isolate the infected machine
Network connectivity is severed (unplug Ethernet, turn off Wi-Fi).
Prevents malware propagation and communication with command-and-control servers.
2
Disable System Restore
System Protection is turned off and existing restore points are cleared.
Ensures malware is not backed up into restore points or reinjected during cleanup.

Key Concept

CompTIA 7-Step Malware Removal Procedure (Isolate infected system and Disable System Restore prior to remediation)
Question 2451Question

An IT technician is reviewing corporate data handling standards and regulatory compliance requirements across various business units. Match each data privacy framework or data classification standard on the left with its corresponding operational mandate or primary data restriction on the right.

Click a left item, then click its matching right item

Items

General Data Protection Regulation (GDPR)
Payment Card Industry Data Security Standard (PCI-DSS)
Health Insurance Portability and Accountability Act (HIPAA)
Personally Identifiable Information (PII)

Matches

Show answer & explanation

Answer

General Data Protection Regulation (GDPR) matches with granting EU citizens explicit rights to request deletion of personal records under the Right to Erasure. Payment Card Industry Data Security Standard (PCI-DSS) matches with prohibiting the storage of Sensitive Authentication Data (SAD), such as card validation codes (CVV/CVC), post-authorization. Health Insurance Portability and Accountability Act (HIPAA) matches with mandating administrative, physical, and technical safeguards for individually identifiable health data handled by covered entities. Personally Identifiable Information (PII) matches with defining standalone or combined data elements capable of uniquely identifying an individual.
Each regulation or standard targets a specific domain: GDPR protects EU data privacy rights like erasure; PCI-DSS restricts cardholder and sensitive authentication data storage; HIPAA safeguards protected health information (PHI); and PII classifies data capable of identifying an individual.

Step-by-Step Solution

1
Analyze the scope of European data privacy legislation
Associate General Data Protection Regulation (GDPR) with EU data subject rights, specifically the Right to Erasure (Right to be Forgotten).
GDPR focuses on user consent, control, and data deletion rights for EU citizens.
2
Evaluate merchant payment processing standards
Associate Payment Card Industry Data Security Standard (PCI-DSS) with cardholder and authentication data protection rules.
PCI-DSS forbids saving sensitive authentication data like CVV or magnetic stripe contents after authorization.
3
Examine healthcare compliance standards
Associate Health Insurance Portability and Accountability Act (HIPAA) with Protected Health Information (PHI) safeguards.
HIPAA requires covered healthcare entities to enforce administrative, physical, and technical security controls.
4
Determine general data privacy definitions
Associate Personally Identifiable Information (PII) with attributes that uniquely identify a person.
PII serves as the broad classification for personal data requiring confidentiality controls across all IT systems.

Key Concept

Data Privacy Regulations and Classification Frameworks
Question 2452Question

A technician is servicing a legacy Windows 10 computer that fails to start after an unexpected power outage. Upon powering on, the screen displays the error message 'Operating System not found'. The technician boots the system into the Windows Recovery Environment (WinRE) command prompt to repair the MBR boot code and the volume boot sector. Which TWO of the following bootrec commands should the technician execute to accomplish this? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: bootrec /fixmbr; bootrec /fixboot

Answer

The technician should execute the bootrec /fixmbr and bootrec /fixboot commands.
The command bootrec /fixmbr writes a Windows-compatible Master Boot Record to the system partition to resolve MBR corruption, while bootrec /fixboot writes a new volume boot sector to repair damaged boot code on the system partition.

Step-by-Step Solution

1
Identify the cause of the 'Operating System not found' error on an MBR system.
Determine that the Master Boot Record code or volume boot sector code is corrupted or missing.
Power outages can cause write interruptions that corrupt boot sectors on MBR partitions.
2
Select the appropriate bootrec command to repair the Master Boot Record.
Use bootrec /fixmbr to write a Windows-compatible MBR to the system partition.
This fixes corrupted MBR header/code without altering the partition table.
3
Select the appropriate bootrec command to write a new boot sector.
Use bootrec /fixboot to write a new boot sector to the system partition.
This repairs the volume boot sector required to launch the Windows Boot Manager.

Key Concept

Troubleshooting Windows OS Startup and Boot Errors using bootrec commands in WinRE
Question 2453Question

A data analytics firm hosts its infrastructure in a cloud provider's facility. The provider maintains a large, multi-tenant infrastructure where physical compute cores, system memory, and storage drives from vast server racks are dynamically allocated and reallocated among multiple corporate clients according to real-time workload demands. Individual clients are unaware of the exact physical locations of the underlying hardware components supporting their workloads. Which cloud computing characteristic is described in this scenario?

Show answer & explanation

Answer: Resource pooling

Answer

Resource pooling
Resource pooling is the cloud characteristic where the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand, while masking specific physical location details from the customer.

Step-by-Step Solution

1
Analyze the key attributes presented in the scenario.
The scenario describes a multi-tenant model where physical compute, memory, and storage are dynamically allocated across multiple clients from a unified hardware base, location-independently.
Identifying the defining features of cloud infrastructure characteristics is necessary to classify the operational model.
2
Map the attributes to official cloud characteristics.
The concept of serving multiple customers using a shared pool of physical and virtual hardware resources without tenant knowledge of exact physical locations represents resource pooling.
NIST definitions specify resource pooling as multi-tenant allocation of location-independent physical and virtual assets.

Key Concept

Cloud Characteristics: Resource Pooling
Estimated Time:1m 0s
Question 2454Question

A field technician is auditing print subsystem behavior on a commercial electrophotographic (EP) laser printer to identify where image corruption occurs during document creation. Place the following EP laser printing steps in the correct chronological order from the initial job receipt to the final paper output.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence for the electrophotographic (EP) printing process is: 1) Processing (rasterizing data in memory), 2) Charging (conditioning the drum with negative charge), 3) Exposing (writing the latent image via laser), 4) Developing (applying toner to exposed drum areas), 5) Transferring (attracting toner to paper using positive charge), and 6) Fusing (melting toner onto paper with heat and pressure).
The standard CompTIA electrophotographic (EP) printing process follows seven primary steps: Processing, Charging, Exposing, Developing, Transferring, Fusing, and Cleaning. Processing translates the document into a bitmap image in memory. Charging applies a high negative charge across the photosensitive drum. Exposing uses a laser to lower the voltage on specific areas of the drum, creating a latent electrostatic image. Developing transfers toner onto those exposed areas. Transferring uses positive charge on the back of the paper to pull toner off the drum onto the paper. Finally, Fusing uses heat and pressure rollers to permanently fuse toner into the paper fibers.

Step-by-Step Solution

1
Identify the data rendering phase.
Processing is identified as the initial step where print commands are rasterized into a bitmap in memory.
The printer must build the page image in memory before physical drum manipulation can begin.
2
Identify the drum preparation phase.
Charging is placed second.
The primary charge roller conditions the photosensitive drum surface with a uniform negative charge.
3
Identify the optical writing phase.
Exposing is placed third.
The laser beam scans the drum to neutralize specific areas, leaving a latent electrostatic image.
4
Identify the toner application phase.
Developing is placed fourth.
Negatively charged toner moves from the developer roller to the higher potential (discharged) areas on the drum.
5
Identify the paper contact and image transfer phase.
Transferring is placed fifth.
The transfer roller charges the paper positively to pull toner particles off the drum onto the paper.
6
Identify the final bonding phase.
Fusing is placed sixth.
Heat and pressure melt and press the toner permanently into the paper fibers.

Key Concept

Electrophotographic (EP) Laser Printing Process Sequence
Question 2455Question

A corporate workstation frequently displays persistent advertisement pop-ups and redirects Microsoft Edge web searches to an unapproved third-party search portal. The technician suspects malicious browser modifications and system settings changes. Which TWO of the following actions should the technician take to isolate and remediate the browser security issue?

Select all that apply

Show answer & explanation

Answer: Inspect and remove any unrecognized browser extensions and reset the web browser to its default configuration.; Verify system network settings to remove any unapproved manual proxy configurations or rogue proxy server entries.

Answer

The technician should inspect and remove unrecognized browser extensions while resetting the browser settings, and check system network settings to clear unauthorized proxy server configurations.
Remediating persistent browser redirects and pop-ups requires removing malicious browser add-ons/extensions, resetting modified search defaults, and clearing unauthorized proxy server entries that reroute network connections.

Step-by-Step Solution

1
Inspect browser add-ons and reset defaults
Unapproved extensions causing pop-ups and search hijacks are disabled and removed.
Browser hijackers often inject extensions that override search providers and generate pop-up windows.
2
Check local OS network proxy settings
Rogue proxy configurations routing web traffic to unwanted domains are removed.
Adware and malicious tools modify proxy settings so all HTTP/HTTPS requests are directed through adversary-controlled servers.

Key Concept

Browser Hijacking Remediation and Proxy Security Configuration
Question 2456Question

A desktop support specialist at a corporate law firm is responding to an infected Windows 11 workstation exhibiting rogue security alerts and unauthorized background network traffic. The specialist has verified the malware infection and disconnected the system from the local network to quarantine it. Which TWO of the following actions should the specialist perform NEXT prior to running a full anti-malware remediation scan?

Select all that apply

Show answer & explanation

Answer: Disable System Restore in Windows to prevent infected system files from being archived in restore points.; Update the anti-malware software definitions using an external, uninfected source while keeping the machine offline.

Answer

The technician should disable System Restore in Windows to eliminate infected restore points and update the anti-malware definitions using clean external media before scanning.
According to the official CompTIA 7-step malware remediation process, after identifying the malware (Step 1) and quarantining the infected system (Step 2), the technician must next disable System Restore (Step 3) to delete infected restore points and prevent reinfection. Following that, the technician must remediate the system (Step 4), which begins by updating the anti-malware engine and signature definitions (Step 4a). Since the system is isolated from the network, definitions should be obtained from an uninfected computer and loaded manually via external media.

Step-by-Step Solution

1
Identify the current step in the CompTIA 7-Step Malware Remediation Process.
The scenario states that Step 1 (Identify malware symptoms) and Step 2 (Quarantine infected systems) have already occurred.
Knowing the starting phase determines the required sequential actions.
2
Execute Step 3 of the remediation framework.
Disable System Restore in Windows settings.
Disabling System Restore clears existing restore points so infected malware binaries cannot persist across recovery points.
3
Execute Step 4a of the remediation framework.
Update the anti-malware signatures/definitions.
Scans require the latest virus signatures to detect and remove modern threat strains effectively.

Key Concept

CompTIA 7-Step Malware Remediation Process Order
Estimated Time:1m 30s
Question 2457Question

An IT security administrator is implementing security baseline policies on corporate workstations to reduce the system attack surface. To comply with defense-in-depth requirements, the administrator must secure local user account configurations and prevent unauthorized automated execution of software via external storage. Which of the following procedures should the administrator perform to achieve this objective?

Show answer & explanation

Answer: Disable the local Guest account, rename the built-in Administrator account, and configure Group Policy to disable AutoRun/AutoPlay for all removable media.

Answer

Disable the local Guest account, rename the built-in Administrator account, and configure Group Policy to disable AutoRun/AutoPlay for all removable media.
Hardening a workstation involves minimizing its attack surface. Key practices include disabling unnecessary accounts (such as the default Guest account), renaming predictable accounts (such as the built-in Administrator account), and enforcing security policies like disabling AutoRun/AutoPlay via Group Policy to prevent automatic malware execution from external media.

Step-by-Step Solution

1
Identify local account security risks
Disabling the Guest account and renaming the default Administrator account reduces the workstation attack surface by preventing baseline target exploitation.
Default account names are predictable targets for attackers attempting brute-force or credential stuffing attacks.
2
Identify autorun security risks
Disabling AutoRun and AutoPlay prevents malicious scripts from executing automatically when USB drives or external media are connected.
Automated media execution allows drive-by malware infections without user intervention.
3
Select the appropriate administrative configuration tool
Deploying these configurations via Group Policy enforces security baselines across endpoints consistently.
Group Policy Objects (GPO) allow system administrators to apply mandatory security settings centrally across Windows operating systems.

Key Concept

Workstation Hardening and Account Baseline Security
Question 2458Question

A desktop technician is troubleshooting a Windows 11 workstation that experiences file read errors on an internal secondary magnetic hard drive (drive D:). The technician suspects physical bad sectors on the disk surface and needs to run a diagnostic tool that will locate these bad sectors, recover readable information, and fix detected file system errors on drive D:. Which of the following commands should the technician execute in an elevated Command Prompt?

Show answer & explanation

Answer: chkdsk D: /r

Answer

Executing chkdsk D: /r in an elevated Command Prompt locates bad sectors, recovers readable data, and repairs file system errors on drive D:.
The chkdsk D: /r command is the correct choice because the /r switch scans the physical surface of the target drive (D:) for bad sectors, attempts to read and recover readable data from damaged areas, and implicitly performs all repairs included in the /f switch.

Step-by-Step Solution

1
Identify the troubleshooting objective
The goal is to scan drive D: for physical bad sectors, recover readable data, and repair file system corruption.
Different command switches alter the depth and focus of disk diagnostics.
2
Evaluate the Windows Check Disk (chkdsk) switches
The /r switch performs a full physical surface scan for bad sectors and recovers readable information, while automatically implying and executing the repair functions of the /f switch.
Using /r provides a comprehensive surface scan and data recovery operation essential for magnetic storage issues.

Key Concept

Windows Check Disk (chkdsk) utility switches and capabilities
Question 2459Question

An IT security administrator is auditing endpoint compliance and hardening policies across corporate-issued mobile devices and legacy embedded infrastructure. Match each mobile or embedded security implementation on the left to its correct operational objective on the right.

Click a left item, then click its matching right item

Items

Geofencing
Containerization
Selective Wipe
Embedded System Microsegmentation

Matches

Show answer & explanation

Answer

Geofencing matches with restricting features based on physical location; Containerization matches with segregating enterprise apps from personal data; Selective Wipe matches with removing corporate assets without touching personal data; Embedded System Microsegmentation matches with placing unpatchable legacy IoT devices on isolated network segments.
Each security control directly fulfills its designated administrative objective: Geofencing manages location-based access; Containerization ensures logical data separation for BYOD endpoints; Selective Wipe sanitizes corporate data without destroying personal content; Microsegmentation protects corporate networks from unpatchable embedded devices.

Step-by-Step Solution

1
Analyze Geofencing functionality.
Identified that location-aware policy enforcement corresponds to tracking physical coordinates.
Geofencing relies on spatial boundaries to trigger security control restrictions dynamically.
2
Analyze Containerization functionality.
Identified that logical storage isolation separates corporate assets from user data.
Containerization prevents data leakage between enterprise and personal applications on mobile devices.
3
Analyze Selective Wipe functionality.
Identified that targeted sanitization deletes managed corporate profiles while retaining personal files.
Selective wipe specifically purges enterprise-controlled containers and certificates without performing a factory reset.
4
Analyze Embedded System Microsegmentation functionality.
Identified that placing legacy embedded devices on dedicated network zones limits blast radius.
Embedded systems frequently lack host security agents, requiring network-level containment controls.

Key Concept

Mobile Endpoint and Embedded System Security Control Enforcement
Question 2460Question

A systems administrator is configuring client-side Type 2 hypervisors on local desktop workstations for a software quality assurance team. The team requires an environment where they can test proprietary software installer scripts across multiple operating system builds without altering the host configuration, and safely observe the behavior of experimental web browser plugins. Which of the following represent valid purposes for implementing client-side virtualization in this scenario? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Cross-platform and multi-OS compatibility testing; Security sandboxing for isolating experimental or untrusted software

Answer

The valid purposes for implementing client-side virtualization in this scenario are cross-platform and multi-OS compatibility testing, as well as security sandboxing for isolating experimental or untrusted software.
Cross-platform/multi-OS compatibility testing and security sandboxing directly address the scenario requirements. Virtual machines allow technicians to execute different operating system builds on a single physical host to test software installer scripts, while sandboxing prevents untested browser plugins or potentially malicious code from altering or corrupting the underlying host environment.

Step-by-Step Solution

1
Analyze the business requirements specified in the scenario
Identified two primary needs: testing software installers across different operating system builds without affecting host configuration, and safely running experimental browser plugins.
These operational goals map directly to host-based client-side virtualization use cases.
2
Evaluate the option regarding OS testing
Confirmed that running multiple guest OS environments concurrently on one host workstation fulfills multi-OS compatibility testing.
Client virtualization allows different OS versions to run simultaneously on host hardware.
3
Evaluate the option regarding security isolation
Confirmed that security sandboxing isolates unverified or potentially harmful software from the host operating system.
The virtual machine abstraction prevents changes within the guest environment from damaging the underlying host computer.

Key Concept

Client-side virtualization purposes include legacy software support, cross-platform testing, security sandboxing, and isolated training environments.
PreviousPage 123 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin