All practice questions

521 questions

Question 321Question

A network security administrator is standardizing wireless authentication and encryption technologies across a corporate enterprise network. Match each wireless security control or authentication protocol on the left with its primary operational requirement or technical characteristic on the right.

Click a left item, then click its matching right item

Items

WPA3-Enterprise
EAP-TLS
PEAP
Captive Portal

Matches

Show answer & explanation

Answer

WPA3-Enterprise matches with enforcing 192-bit cryptographic suite capability and mandatory 802.1X RADIUS authentication. EAP-TLS matches with requiring digital certificates on both the authentication server and client device for mutual authentication. PEAP matches with creating an encrypted TLS tunnel using only a server-side certificate to protect user credentials. Captive Portal matches with intercepting web requests from unauthenticated clients and redirecting them to a web page for policy acceptance or authentication.
WPA3-Enterprise provides robust 192-bit security suite capabilities and relies on 802.1X RADIUS infrastructure. EAP-TLS enforces mutual authentication by requiring digital certificates on both the RADIUS server and client endpoint devices. PEAP simplifies client configuration by requiring only a server-side certificate to establish a secure TLS tunnel for credential validation. Captive Portals manage unauthenticated or guest network access by intercepting HTTP/HTTPS requests and redirecting users to an authentication or terms-of-service web landing page.

Step-by-Step Solution

1
Identify the security architecture requirements for enterprise wireless encryption standards.
WPA3-Enterprise implements 192-bit enterprise security mode capabilities using 802.1X and RADIUS integration.
Enterprise WPA3 builds upon 802.1X authentication standards to centralize access management across organization access points.
2
Analyze the certificate requirements for EAP-TLS vs PEAP authentication methods.
EAP-TLS requires both client and server digital certificates for mutual authentication, whereas PEAP only requires a server-side certificate to set up an encrypted tunnel for credential exchange.
Distinguishing PKI certificate placement is essential for configuring scale-appropriate 802.1X wireless access controls.
3
Evaluate web-based guest network isolation mechanisms.
Captive portals intercept web browser requests from unauthenticated devices and force agreement to terms or credential entry before permitting access.
Guest wireless networks frequently rely on web redirection captive portals rather than pre-shared keys or domain credentials.

Key Concept

Wireless Security Protocols and Enterprise Authentication Frameworks
Question 322Question

Match each organizational cloud infrastructure scenario on the left with its corresponding cloud deployment model on the right.

Click a left item, then click its matching right item

Items

An e-commerce retailer utilizing on-premises servers for core customer data while bursting dynamic web workloads to third-party cloud infrastructure during peak holiday sales.
A coalition of regional law enforcement agencies sharing a jointly funded evidence portal restricted exclusively to member departments.
A financial enterprise operating dedicated, single-tenant cloud infrastructure housed strictly within its own secured physical data center.
A mobile game developer hosting public leaderboards on shared, multi-tenant third-party infrastructure accessible over the internet.

Matches

Show answer & explanation

Answer

Matching pairs: (1) E-commerce cloud bursting matches Hybrid Cloud; (2) Multi-agency police evidence portal matches Community Cloud; (3) Dedicated single-tenant enterprise datacenter matches Private Cloud; (4) Shared multi-tenant game leaderboards match Public Cloud.
Each deployment model is matched to its defining operational boundary: Hybrid cloud combines private and public infrastructures for dynamic scaling; Community cloud shares infrastructure across distinct organizations with mutual requirements; Private cloud reserves dedicated single-tenant hardware for one organization; Public cloud delivers shared multi-tenant services over the open internet.

Step-by-Step Solution

1
Analyze each scenario to identify resource ownership, multi-tenancy, and access boundaries.
Identified four distinct operational requirements across the organizational scenarios.
Cloud deployment models are categorized primarily by who owns/operates the infrastructure and who has permission to access it.
2
Map scenarios with combined private and public environments to Hybrid Cloud, and shared multi-organization scenarios to Community Cloud.
The e-commerce bursting scenario maps to Hybrid Cloud; the multi-agency police portal maps to Community Cloud.
Hybrid cloud integrates on-premises and third-party public resources; Community cloud serves specific organizations sharing common mission and security needs.
3
Map dedicated single-tenant environments to Private Cloud and open multi-tenant environments to Public Cloud.
The financial enterprise server maps to Private Cloud; the public game leaderboard maps to Public Cloud.
Private cloud ensures isolated single-tenant access, whereas public cloud offers shared multi-tenant resources managed by an external vendor.

Key Concept

Cloud Deployment Models (Public, Private, Hybrid, Community)
Question 323Question

Match each macOS or Linux administrative tool or feature to its correct system function.

Click a left item, then click its matching right item

Items

rsync
crontab
Time Machine
ps

Matches

Show answer & explanation

Answer

rsync matches with local or remote file synchronization; crontab matches with scheduling recurring background tasks; Time Machine matches with automated incremental macOS backups; ps matches with displaying a snapshot of running system processes.
Each utility correctly aligns with its primary administrative purpose: rsync handles differential file transfers, crontab configures scheduled cron jobs, Time Machine performs macOS incremental system backups, and ps lists process snapshots.

Step-by-Step Solution

1
Identify file management and remote synchronization commands.
rsync is selected as the utility for efficient file transfers and delta synchronization across local and remote paths.
rsync analyzes differences between source and target files to reduce network overhead.
2
Determine job scheduling and native OS backup tools.
crontab is paired with recurring task schedules, while Time Machine is paired with native macOS backups.
The cron daemon relies on crontab configuration files, and Time Machine handles native macOS snapshot recovery.
3
Distinguish static process viewing utilities.
ps is identified as the process snapshot viewer.
ps returns current process IDs (PIDs) and memory status without continuous real-time updates.

Key Concept

macOS and Linux Administrative Utilities and System Features
Question 324Question

An IT support technician needs to perform several configuration tasks on Windows client workstations using standard Control Panel applets. Match each system configuration task on the left with its corresponding Windows Control Panel utility on the right.

Click a left item, then click its matching right item

Items

Define location dialing rules, area codes, and tone/pulse properties for telephony services
Un-hide operating system files, toggle file extension visibility, and set folder window behaviors
Swap primary mouse button assignments, adjust double-click speed, and enable pointer trails
Install custom OpenType typefaces, preview character glyphs, and remove system font files

Matches

Show answer & explanation

Answer

Telephony dialing rules match Phone and Modem; folder view and file extension settings match File Explorer Options; button configuration and pointer motion match Mouse; typeface management matches Fonts.
Each administrative task corresponds to its dedicated Windows Control Panel utility: Phone and Modem manages dialing rules and telephony properties; File Explorer Options manages hidden files and extension visibility; Mouse manages button configuration and pointer motion; Fonts manages typeface installation and removal.

Step-by-Step Solution

1
Analyze task 1: Configuring location dialing rules, area codes, and telephony settings.
Identify Phone and Modem as the specialized Control Panel utility that configures telephony dialing locations and modem rules.
Telephony rules and area code parameters are specifically configured within the Phone and Modem applet.
2
Analyze task 2: Un-hiding system files, toggling file extension visibility, and setting folder view options.
Identify File Explorer Options (formerly Folder Options) as the applet that controls file visibility and folder display settings.
File Explorer Options contains the View tab where users toggle hidden files, system files, and file extension visibility.
3
Analyze task 3: Swapping primary buttons, double-click sensitivity, and pointer trails.
Identify Mouse as the applet managing pointing device input settings and pointer options.
The Mouse utility provides tabs for button configuration, pointer speed, snap-to default button, and motion trails.
4
Analyze task 4: Installing OpenType typefaces, previewing glyphs, and removing font files.
Identify Fonts as the applet dedicated to managing font files.
The Fonts applet presents the installed font library and allows administrators to add or remove font files.

Key Concept

Windows Control Panel Utilities
Question 325Question

A system administrator is organizing administrative scripts used across various operating systems in the enterprise. Match each script file extension on the left with its corresponding native execution environment or interpreter on the right.

Click a left item, then click its matching right item

Items

.ps1
.sh
.vbs
.bat

Matches

Show answer & explanation

Answer

.ps1 matches Windows PowerShell; .sh matches Linux / Unix Shell (Bash); .vbs matches Windows Script Host (VBScript); .bat matches Windows Command Prompt (cmd.exe).
Each script extension maps directly to its operating system runtime environment: .ps1 runs in Windows PowerShell, .sh runs in Unix/Linux shell interpreters such as Bash, .vbs runs via Windows Script Host, and .bat runs natively inside the Windows Command Prompt.

Step-by-Step Solution

1
Identify the .ps1 script extension
Associates with Windows PowerShell
PowerShell scripts use the .ps1 extension for task automation and configuration management in Windows environments.
2
Identify the .sh script extension
Associates with Linux / Unix Shell (Bash)
Shell scripts executed in Unix-like environments customarily use the .sh file extension.
3
Identify the .vbs script extension
Associates with Windows Script Host (VBScript)
VBScript files end in .vbs and run within the Windows Script Host environment using CScript or WScript.
4
Identify the .bat script extension
Associates with Windows Command Prompt (cmd.exe)
Batch files use the .bat extension and execute commands sequentially inside the traditional Windows Command Prompt.

Key Concept

Basic Scripting Languages and File Extensions
Question 326Question

A helpdesk supervisor is creating a training module to help new IT support technicians identify various security threats reported by corporate employees. Match each security threat on the left with its corresponding real-world incident description on the right.

Click a left item, then click its matching right item

Items

Keylogger
Drive-by Download
Pretexting
Rootkit

Matches

Show answer & explanation

Answer

Keylogger matches the description of capturing keystrokes covertly; Drive-by Download matches the automatic execution of malware upon visiting a compromised website; Pretexting matches fabricating a scenario to trick an employee into granting access; Rootkit matches deeply embedded malware hiding administrative access from security detection tools.
Each threat type is correctly matched to its distinct operation signature: Keyloggers record typed input, Drive-by Downloads exploit web sessions automatically without user prompts, Pretexting uses fabricated stories to manipulate staff, and Rootkits subvert system controls to mask administrative intrusion.

Step-by-Step Solution

1
Analyze Keylogger characteristics
Identified as hardware or software designed specifically to log typed characters.
Matches the description regarding covert capture of keystrokes to steal credentials.
2
Analyze Drive-by Download characteristics
Identified as silent installation of malicious code via web browsing without explicit user initiation.
Matches the description of downloading malware automatically upon visiting a compromised web page.
3
Analyze Pretexting characteristics
Identified as social engineering using a fabricated narrative or identity.
Matches the description of inventing a scenario over the phone to trick an employee.
4
Analyze Rootkit characteristics
Identified as low-level system malware that conceals its presence while retaining root control.
Matches the description of deeply embedded malware hiding privileged access from antimalware tools.

Key Concept

Identifying social engineering vectors and technical threat classifications by their mechanisms of operation and delivery.
Estimated Time:1m 30s
Question 327Question

A systems administrator is reviewing IT security controls and compliance directives across various enterprise operational units. Match each compliance regulation or framework to the technical mandate or data handling restriction it strictly enforces.

Click a left item, then click its matching right item

Items

PCI-DSS
GDPR
HIPAA
FERPA

Matches

Show answer & explanation

Answer

PCI-DSS matches with prohibiting storage of full primary account numbers post-authorization; GDPR matches with granting individuals the right to request permanent deletion of their personal data; HIPAA matches with mandating technical and physical safeguards for protected health information; FERPA matches with restricting non-consensual disclosure of student educational records.
Each framework targets a specific data classification: PCI-DSS for payment card data, GDPR for EU consumer PII and data rights, HIPAA for patient PHI, and FERPA for student educational records.

Step-by-Step Solution

1
Identify payment card processing regulations.
PCI-DSS governs credit card handling and restricts storing cardholder data and authentication details.
Ensures financial transaction security.
2
Identify European privacy regulations.
GDPR defines data privacy rights for EU citizens, including the right to erasure.
Ensures personal data control and subject sovereignty.
3
Identify healthcare compliance regulations.
HIPAA governs protected health information (PHI).
Secures medical data confidentiality.
4
Identify academic data regulations.
FERPA protects student educational transcripts and records.
Prevents unauthorized release of student records.

Key Concept

Data Privacy Frameworks and Compliance Scopes
Question 328Question

An IT technician is organizing a workstation deployment project and must categorize various display cables and interface specifications based on their physical characteristics and capabilities. Match each display cable connector type on the left with its corresponding technical capability or physical design feature on the right.

Click a left item, then click its matching right item

Items

DB-15 (VGA)
DVI-D Dual-Link
DisplayPort
USB-C with Alt Mode

Matches

Show answer & explanation

Answer

DB-15 (VGA) matches the legacy 15-pin analog RGB connector; DVI-D Dual-Link matches the 24-pin digital-only interface up to 2560x1600; DisplayPort matches the 20-pin latched connector supporting MST daisy-chaining; USB-C with Alt Mode matches the reversible compact interface providing video, data, and power over one cable.
Each display connection standard is accurately paired with its distinct physical interface, pin layout, and signal delivery mechanism standard to the CompTIA A+ Core 1 objectives.

Step-by-Step Solution

1
Identify the signal type and pin layout for DB-15 (VGA)
DB-15 is recognized as a 15-pin connector in three rows carrying purely analog signals.
VGA is an older analog display standard using the DB-15 physical shell.
2
Differentiate DVI variants by signal and bandwidth capabilities
DVI-D indicates digital-only signals, and Dual-Link adds extra digital pins allowing high resolution (2560×16002560\times 1600).
DVI-D omits the analog pins around the flat blade while Dual-Link doubles the digital transmission bandwidth.
3
Analyze DisplayPort connector design and protocol features
DisplayPort features a 20-pin connector, physical latches for retention, and MST for multi-monitor daisy-chaining.
VESA DisplayPort specifications mandate packetized video data transmission enabling MST and secure latching mechanisms.
4
Evaluate USB Type-C Alternate Mode functionality
USB-C with Alt Mode leverages reversible pins to carry native video signals (such as DisplayPort) alongside USB host data and charging power.
Alternate Mode allows non-USB protocols to transmit over physical USB-C pins.

Key Concept

Identifying physical form factors, pin configurations, signal types (analog vs digital), and advanced protocol features (MST, Alt Mode) across display interfaces.
Question 329Question

A technician is installing internal system wiring and power delivery lines on a new motherboard. Match each motherboard connector or pin header on the left with its primary function or power role on the right.

Click a left item, then click its matching right item

Items

24-pin ATX Power Connector
4/8-pin EPS +12V Connector
Front Panel Header (FPANEL)
Molex Peripheral Connector

Matches

Show answer & explanation

Answer

The 24-pin ATX connector supplies main power to motherboard logic and memory; the 4/8-pin EPS +12V connector provides dedicated power to the CPU voltage regulators; the front panel header connects chassis buttons and status LEDs; and the Molex peripheral connector supplies +5V and +12V DC power to legacy drives or cooling components.
Each motherboard connector fulfills a specific electrical or signaling role: the 24-pin ATX connector provides primary board power, the EPS connector feeds dedicated CPU voltage regulator circuits, front panel pin headers route physical chassis switches and indicator LEDs, and Molex connectors supply peripheral DC power.

Step-by-Step Solution

1
Identify the primary power feed required by modern motherboard chipsets and memory channels.
The 24-pin main ATX power connector supplies all primary board voltage rails (+3.3V, +5V, +12V).
Modern motherboards require a standardized multi-rail main harness to power onboard controller ICs, PCIe slots, and system RAM.
2
Identify the dedicated power header supplying power to processor voltage regulation modules.
The 4/8-pin EPS +12V connector supplies dedicated high-amperage 12V current directly to the CPU power phases.
Modern multi-core CPUs require dedicated current paths separate from the main 24-pin motherboard connector.
3
Identify the multi-pin motherboard block responsible for chassis user controls.
The Front Panel Header (FPANEL) receives pin connections from chassis momentary switches and diagnostic status LEDs.
Physical power/reset buttons and diagnostic indicators must map directly to motherboard jumper contacts.
4
Identify peripheral DC power delivery standards.
The 4-pin Molex connector delivers raw +5V and +12V DC power to auxiliary or legacy chassis hardware.
Molex is a standard 4-pin peripheral power connector used for fans, pumps, and older drive enclosures.

Key Concept

Motherboard Power Connectors and Header Pinouts
Question 330Question

Match each printer technology on the left with its corresponding primary consumable or key maintenance component on the right.

Click a left item, then click its matching right item

Items

Direct Thermal Printer
Thermal Transfer Printer
Fused Deposition Modeling (FDM) 3D Printer
Impact / Dot Matrix Printer

Matches

Show answer & explanation

Answer

Direct Thermal Printer pairs with Chemically treated heat-sensitive paper stock; Thermal Transfer Printer pairs with Wax or resin print ribbon; Fused Deposition Modeling (FDM) 3D Printer pairs with Spool of thermoplastic filament (PLA/ABS); Impact / Dot Matrix Printer pairs with Ink-soaked fabric ribbon cartridge.
Each printer technology relies on specific consumables matched to its core mechanism: Direct Thermal uses chemically treated paper that reacts directly to printhead heat; Thermal Transfer melts ink from a wax or resin ribbon onto the substrate; FDM 3D printing feeds spooled thermoplastic filament through a heated nozzle; and Impact printers strike printhead pins against an ink-soaked fabric ribbon.

Step-by-Step Solution

1
Analyze Direct Thermal printing requirements.
Direct thermal technology relies strictly on chemically treated paper that changes color when exposed to printhead heat without an intermediate ink layer.
This technology uses no ribbon, ink cartridge, or toner.
2
Analyze Thermal Transfer printing requirements.
Thermal transfer uses heat from the printhead to transfer wax or resin ink off a donor ribbon onto standard paper or durable synthetic labels.
A wax or resin ribbon is mandatory for image creation in thermal transfer printers.
3
Analyze FDM 3D printing requirements.
Fused Deposition Modeling creates three-dimensional objects layer-by-layer using spools of solid plastic filament such as PLA or ABS fed through a heated extruder.
Thermoplastic filament is the primary build consumable for FDM printers.
4
Analyze Impact / Dot Matrix printing requirements.
Dot matrix printers press mechanical pins against a continuous cloth ribbon soaked in ink to leave marks on standard or multi-part carbonless paper.
The fabric ribbon provides the ink for physical pin strikes.

Key Concept

Printer Technologies and Consumables Maintenance
Question 331Question

A network security technician is standardizing wireless access controls across various corporate branch sites based on specific operational requirements. Match each wireless access scenario on the left with the appropriate security protocol or mechanism on the right.

Click a left item, then click its matching right item

Items

Providing centralized user authentication against an Active Directory domain using 802.1X and a RADIUS server
Securing a small remote office network using a single shared password with AES encryption
Redirecting unauthenticated guest users to a web page requiring acceptance of an Acceptable Use Policy (AUP)
Implementing mutual authentication requiring digital certificates on both the client device and the authentication server

Matches

Show answer & explanation

Answer

Centralized 802.1X/RADIUS authentication matches WPA3-Enterprise; SOHO single shared password security matches WPA2-Personal; guest web-page redirection and AUP acceptance matches Captive Portal; mutual authentication using client and server certificates matches EAP-TLS.
Each wireless security control aligns directly with its operational scope: WPA3-Enterprise enables centralized RADIUS/802.1X authentication; WPA2-Personal relies on a PSK for smaller deployments; a Captive Portal forces guest web redirection for terms acceptance; and EAP-TLS delivers robust mutual authentication via client and server certificates.

Step-by-Step Solution

1
Identify authentication mechanisms for corporate domain environments.
Centralized user-based authentication via 802.1X/RADIUS corresponds to WPA3-Enterprise.
Enterprise modes offload credentials handling to a AAA server (like RADIUS) instead of relying on a shared passphrase.
2
Identify security options for SOHO or small branch sites.
Using a Pre-Shared Key (PSK) with AES encryption corresponds to WPA2-Personal.
Personal mode utilizes a single passphrase shared among users, suitable for smaller sites without domain controllers.
3
Identify mechanisms for guest user access management.
Web redirection for terms acceptance corresponds to a Captive Portal.
Captive portals trap initial HTTP/HTTPS traffic from unauthenticated devices to present terms or collect guest login details.
4
Identify advanced certificate-based EAP methods.
Mutual certificate authentication corresponds to EAP-TLS.
EAP-TLS is one of the highest security EAP types because it requires client-side X.509 certificates in addition to server certificates.

Key Concept

Wireless Security Protocols and Authentication Frameworks
Question 332Question

An IT support technician is performing administrative configuration tasks across several Windows client workstations in an enterprise environment. Match each administrative task on the left with its corresponding Windows Control Panel utility on the right.

Click a left item, then click its matching right item

Items

Configuring Microsoft Outlook user profiles, email server accounts, and OST/PST data file locations outside of the Office desktop application.
Configuring automated, continuous backups of personal library files and desktop items to an attached external drive.
Subscribing a client workstation to published virtual applications and remote desktop collections hosted on an enterprise server.
Importing and assigning ICC/ICM display color profiles to specific monitors for color-critical graphic editing tasks.

Matches

Show answer & explanation

Answer

The correct pairings are: 1) Mail (32-bit) matches with configuring Outlook user profiles and data files; 2) File History matches with configuring automated local file backups; 3) RemoteApp and Desktop Connections matches with subscribing to published virtual applications; and 4) Color Management matches with assigning ICC/ICM display profiles.
Each task maps directly to its specialized Control Panel applet: Mail (32-bit) manages Microsoft Outlook profiles and data stores; File History configures backup schedules for personal user files; RemoteApp and Desktop Connections configures access to published RDS virtual resources; and Color Management handles ICC/ICM color profiles for display adapters and monitors.

Step-by-Step Solution

1
Identify the utility required for managing Outlook accounts and data stores outside the application.
Match the Outlook profile management task to the Mail (32-bit) Control Panel utility.
The Mail applet provides direct access to Outlook profile settings and data files independently of launching the Microsoft Outlook app.
2
Identify the tool for setting up automated personal file backups to secondary storage.
Match the continuous local file backup task to File History.
File History routinely scans and saves incremental copies of user personal folder contents to an external drive or network destination.
3
Identify the utility used to access corporate virtual applications hosted on Remote Desktop Services.
Match the published virtual application task to RemoteApp and Desktop Connections.
RemoteApp and Desktop Connections sets up connection URLs to access remote desktops and published programs within the enterprise network.
4
Identify the utility used for configuring display monitor color profiles.
Match the ICC/ICM profile assignment task to Color Management.
Color Management controls system-wide color calibration and associates color profile files with graphic adapters and monitors.

Key Concept

Windows Control Panel Utilities
Question 333Question

Match each macOS or Linux operating system feature or command-line utility to its primary administrative function.

Click a left item, then click its matching right item

Items

diskutil
NVRAM
tar
sudo

Matches

Show answer & explanation

Answer

diskutil matches managing storage drives and partitions; NVRAM matches storing persistent macOS system settings like boot selection; tar matches bundling and extracting archived files; sudo matches executing commands with elevated superuser privileges.
Each feature or utility is correctly paired with its function: diskutil handles macOS CLI disk and volume management; NVRAM stores persistent hardware and system configuration preferences; tar creates and extracts file archives; sudo executes commands with temporary root/superuser rights.

Step-by-Step Solution

1
Identify the primary function of diskutil
Recognize that diskutil is a native macOS CLI tool used to format, partition, and modify disk storage.
diskutil provides disk management operations via Terminal in macOS.
2
Identify the primary function of NVRAM
Recognize that NVRAM holds non-volatile system state settings in macOS like screen resolution and startup disk preferences.
NVRAM maintains hardware configuration states across power cycles.
3
Identify the primary function of tar
Recognize that tar is an archiving utility in Linux and macOS used to package files together into archive files.
tar creates consolidated archive files (.tar, .tar.gz).
4
Identify the primary function of sudo
Recognize that sudo executes commands with elevated root/superuser security rights.
sudo elevates command privileges for authorized administrative operations.

Key Concept

macOS and Linux Operating System Features and Tools
Question 334Question

An IT technician is reviewing corporate data handling standards and regulatory compliance requirements across various business units. Match each data privacy framework or data classification standard on the left with its corresponding operational mandate or primary data restriction on the right.

Click a left item, then click its matching right item

Items

General Data Protection Regulation (GDPR)
Payment Card Industry Data Security Standard (PCI-DSS)
Health Insurance Portability and Accountability Act (HIPAA)
Personally Identifiable Information (PII)

Matches

Show answer & explanation

Answer

General Data Protection Regulation (GDPR) matches with granting EU citizens explicit rights to request deletion of personal records under the Right to Erasure. Payment Card Industry Data Security Standard (PCI-DSS) matches with prohibiting the storage of Sensitive Authentication Data (SAD), such as card validation codes (CVV/CVC), post-authorization. Health Insurance Portability and Accountability Act (HIPAA) matches with mandating administrative, physical, and technical safeguards for individually identifiable health data handled by covered entities. Personally Identifiable Information (PII) matches with defining standalone or combined data elements capable of uniquely identifying an individual.
Each regulation or standard targets a specific domain: GDPR protects EU data privacy rights like erasure; PCI-DSS restricts cardholder and sensitive authentication data storage; HIPAA safeguards protected health information (PHI); and PII classifies data capable of identifying an individual.

Step-by-Step Solution

1
Analyze the scope of European data privacy legislation
Associate General Data Protection Regulation (GDPR) with EU data subject rights, specifically the Right to Erasure (Right to be Forgotten).
GDPR focuses on user consent, control, and data deletion rights for EU citizens.
2
Evaluate merchant payment processing standards
Associate Payment Card Industry Data Security Standard (PCI-DSS) with cardholder and authentication data protection rules.
PCI-DSS forbids saving sensitive authentication data like CVV or magnetic stripe contents after authorization.
3
Examine healthcare compliance standards
Associate Health Insurance Portability and Accountability Act (HIPAA) with Protected Health Information (PHI) safeguards.
HIPAA requires covered healthcare entities to enforce administrative, physical, and technical security controls.
4
Determine general data privacy definitions
Associate Personally Identifiable Information (PII) with attributes that uniquely identify a person.
PII serves as the broad classification for personal data requiring confidentiality controls across all IT systems.

Key Concept

Data Privacy Regulations and Classification Frameworks
Question 335Question

An IT security administrator is auditing endpoint compliance and hardening policies across corporate-issued mobile devices and legacy embedded infrastructure. Match each mobile or embedded security implementation on the left to its correct operational objective on the right.

Click a left item, then click its matching right item

Items

Geofencing
Containerization
Selective Wipe
Embedded System Microsegmentation

Matches

Show answer & explanation

Answer

Geofencing matches with restricting features based on physical location; Containerization matches with segregating enterprise apps from personal data; Selective Wipe matches with removing corporate assets without touching personal data; Embedded System Microsegmentation matches with placing unpatchable legacy IoT devices on isolated network segments.
Each security control directly fulfills its designated administrative objective: Geofencing manages location-based access; Containerization ensures logical data separation for BYOD endpoints; Selective Wipe sanitizes corporate data without destroying personal content; Microsegmentation protects corporate networks from unpatchable embedded devices.

Step-by-Step Solution

1
Analyze Geofencing functionality.
Identified that location-aware policy enforcement corresponds to tracking physical coordinates.
Geofencing relies on spatial boundaries to trigger security control restrictions dynamically.
2
Analyze Containerization functionality.
Identified that logical storage isolation separates corporate assets from user data.
Containerization prevents data leakage between enterprise and personal applications on mobile devices.
3
Analyze Selective Wipe functionality.
Identified that targeted sanitization deletes managed corporate profiles while retaining personal files.
Selective wipe specifically purges enterprise-controlled containers and certificates without performing a factory reset.
4
Analyze Embedded System Microsegmentation functionality.
Identified that placing legacy embedded devices on dedicated network zones limits blast radius.
Embedded systems frequently lack host security agents, requiring network-level containment controls.

Key Concept

Mobile Endpoint and Embedded System Security Control Enforcement
Question 336Question

A system technician is inventorying motherboard components and form factors for an upcoming workstation deployment. Match each motherboard form factor or internal connector on the left with its defining design specification or primary function on the right.

Click a left item, then click its matching right item

Items

Micro-ATX form factor
8-pin EPS12V connector
PCIe x1 expansion slot
20-pin USB 3.0 header

Matches

Show answer & explanation

Answer

Micro-ATX matches the 9.6 × 9.6 inch maximum form factor specification; 8-pin EPS12V matches dedicated +12V CPU power delivery; PCIe x1 matches the single serial lane for lower-bandwidth expansion cards; 20-pin USB 3.0 header matches the keyed connection for front-panel SuperSpeed ports.
Micro-ATX motherboards strictly adhere to the 9.6 × 9.6 inch dimensional standard with up to 4 expansion slots. The 8-pin EPS12V connector delivers dedicated +12V power to the processor's VRMs. The PCIe x1 slot provides a single serial lane ideal for basic expansion cards. The 20-pin internal header connects USB 3.0 front-panel ports.

Step-by-Step Solution

1
Identify the physical dimensions and slot limitations of common motherboard form factors.
Micro-ATX is defined by maximum dimensions of 9.6 × 9.6 inches with a maximum of 4 expansion slots.
Differentiates Micro-ATX from standard ATX (12 × 9.6 inches) and Mini-ITX (6.7 × 6.7 inches).
2
Analyze the primary role of the 8-pin EPS12V power connector.
It supplies supplementary +12V power directly to the CPU power phase components.
Main 24-pin ATX power supplies overall motherboard logic, whereas EPS12V specifically feeds CPU voltage regulators.
3
Determine throughput capabilities of PCIe slot configurations.
A PCIe x1 slot contains 1 communication lane for lower bandwidth devices like Wi-Fi or sound cards.
PCIe lanes scale from x1 up to x16 depending on bandwidth demands.
4
Match internal motherboard headers with front-panel connector types.
The 20-pin (19-pin active) keyed header connects front-panel USB 3.0 / USB 3.2 Gen 1 ports.
Distinguishes 5Gbps USB 3.0 headers from 9-pin USB 2.0 headers and front-panel audio headers.

Key Concept

Motherboard Form Factors, Power Connectors, Expansion Slots, and Internal Headers
Estimated Time:1m 30s
Question 337Question

Match each storage medium and disposition scenario with its most appropriate data destruction or sanitization method based on CompTIA security standards.

Click a left item, then click its matching right item

Items

Magnetic backup tape cartridges scheduled for permanent retirement
NVMe solid-state drives (SSDs) scheduled for internal reallocation to another department
Failed non-functional magnetic hard disk drive (HDD) containing sensitive data
Physical paper records and confidential optical discs slated for destruction

Matches

Show answer & explanation

Answer

Magnetic tapes match with degaussing; NVMe SSDs for reuse match with cryptographic erase; failed HDDs match with drive platter drilling or physical shredding; paper records and optical discs match with incineration or cross-cut shredding.
Each disposal method aligns directly with the underlying storage architecture and operational lifecycle requirement: degaussing destroys magnetic tape domains; cryptographic erasure sanitizes flash-based SSDs for safe internal reuse; physical destruction (drilling/shredding) guarantees data residual elimination on non-functional HDDs; and cross-cut shredding or incineration disposes of paper and optical media.

Step-by-Step Solution

1
Identify the media substrate (magnetic, flash, paper/optical) and the disposition goal (reuse vs. destruction).
Magnetic tape and failed HDD are magnetic; SSD is flash memory; paper/optical are non-magnetic physical substrates.
Different storage technologies require specific destruction techniques to prevent data exposure.
2
Select the appropriate technique for each medium.
Degaussing works on magnetic tape; Cryptographic erase purges SSD data while preserving drive functionality for reuse; Physical drilling/shredding permanently destroys failed HDDs; Cross-cut shredding or incineration destroys paper and optical media.
Applying degaussing to SSDs fails because flash memory relies on floating-gate transistors, not magnetic domains.

Key Concept

Data Destruction and Disposal Methods
Question 338Question

An IT administrator is preparing training material for help desk technicians on basic scripting constructs and data elements. Match each scripting concept on the left with its corresponding syntax or functional example on the right.

Click a left item, then click its matching right item

Items

Environment Variable
String Data Type
Loop Construct
Conditional Branch

Matches

Show answer & explanation

Answer

Environment Variable matches dynamic system parameter syntax (%USERPROFILE%), String Data Type matches quoted text values ("C:\Logs\output.txt"), Loop Construct matches repetitive execution blocks (for/while), and Conditional Branch matches decision structures (if/else).
Each scripting construct fulfills a distinct role in automation: environment variables store dynamic OS properties, strings hold literal text values, loops repeat tasks across data sets or conditions, and conditional branches direct code execution based on logical checks.

Step-by-Step Solution

1
Identify the construct representing dynamic operating system properties.
Match Environment Variable to %USERPROFILE% / $env:COMPUTERNAME syntax.
Environment variables hold dynamic paths and configuration parameters assigned by the operating system.
2
Identify literal text data within scripts.
Match String Data Type to quoted path text.
Strings consist of alphanumeric text sequences surrounded by quotation marks.
3
Identify repetitive execution mechanisms.
Match Loop Construct to iterative control blocks like for and while.
Loops iterate through collections or repeat actions until termination criteria are met.
4
Identify decision-making flow control mechanisms.
Match Conditional Branch to logic structures like if/else.
Conditionals branch script execution based on true/false condition evaluations.

Key Concept

Basic Scripting Languages and Constructs
Question 339Question

Match each wireless security protocol or implementation component on the left with its corresponding operational requirement or security characteristic on the right.

Click a left item, then click its matching right item

Items

EAP-TLS
WPA3-Personal
RADIUS Server
Captive Portal

Matches

Show answer & explanation

Answer

EAP-TLS matches with mutual certificate requirement; WPA3-Personal matches with Simultaneous Authentication of Equals (SAE); RADIUS Server matches with centralized 802.1X AAA authentication service; Captive Portal matches with web traffic interception for guest authentication/AUP.
Each wireless security technology matches its specific operational feature: EAP-TLS provides mutual authentication using client and server digital certificates. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) to resist offline dictionary attacks on pre-shared keys. RADIUS serves as the central AAA server in 802.1X wireless environments. A Captive Portal redirects unauthenticated web sessions to a landing page for credential entry or acceptable use policy acceptance.

Step-by-Step Solution

1
Identify authentication mechanisms requiring client-side certificates vs pre-shared keys.
EAP-TLS strictly requires digital certificates on both client and server, whereas WPA3-Personal relies on a passphrase secured via SAE.
Enterprise EAP methods differ fundamentally in certificate requirement for client devices.
2
Determine the backend component responsible for centralized credential validation in enterprise wireless.
RADIUS acts as the authentication server validating 802.1X requests against an identity provider like Active Directory.
Access points forward EAP messages to a backend RADIUS server during 802.1X authentication.
3
Identify web-based guest network access mechanisms.
Captive portals intercept HTTP/HTTPS requests to present policy agreements or web login forms before granting access.
Guest wireless deployments routinely implement web redirection instead of 802.1X or static PSKs.

Key Concept

Wireless Authentication Protocols and Enterprise Access Controls
Question 340Question

An IT manager is reviewing essential cloud computing characteristics to align organizational requirements with cloud deployment features. Match each cloud characteristic on the left with its correct operational description on the right.

Click a left item, then click its matching right item

Items

Rapid Elasticity
On-Demand Self-Service
Resource Pooling
Measured Service

Matches

Show answer & explanation

Answer

Rapid Elasticity matches automatic dynamic scaling outward and inward based on demand. On-Demand Self-Service matches provisioning computing resources automatically without human interaction. Resource Pooling matches serving multiple clients via a multi-tenant model with shared physical infrastructure. Measured Service matches monitoring and reporting usage transparently based on metered metrics.
Each cloud characteristic corresponds to a distinct NIST standard cloud feature: Rapid Elasticity provides automated real-time scaling; On-Demand Self-Service allows user provisioning without provider interaction; Resource Pooling aggregates infrastructure for multi-tenancy; and Measured Service meters usage for transparent tracking and billing.

Step-by-Step Solution

1
Analyze the core function of Rapid Elasticity.
Identify that rapid elasticity focuses on dynamic automated scaling up and down according to workload spikes or drops.
Elasticity emphasizes adaptability and dynamic scaling capability.
2
Analyze the core function of On-Demand Self-Service.
Identify that on-demand self-service enables users to independently provision resources via administrative portals without contacting support technicians.
Self-service eliminates provider interaction bottlenecks during provisioning.
3
Analyze the core function of Resource Pooling.
Identify that resource pooling involves aggregating physical infrastructure across multiple tenants to dynamically allocate capacity.
Pooling relies on multi-tenancy to maximize hardware utilization.
4
Analyze the core function of Measured Service.
Identify that measured service involves metered monitoring of resource consumption for billing and transparency.
Measured service provides usage tracking analogous to utility meters.

Key Concept

Core Cloud Computing Characteristics (NIST Definition)
PreviousPage 17 / 27Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin