Examkin

All practice questions

3551 questions

All types3,551Multiple choice1,809Multiple select786Numeric12Matching521Ordering423
Question 681Question →

A field technician is troubleshooting a desktop computer that experiences intermittent storage drive read errors immediately following a system chassis upgrade. The technician interviewed the user, backed up existing critical data, and verified that the motherboard firmware reports drive S.M.A.R.T. warnings. The technician is currently working within the 'Establish a theory of probable cause' stage of the CompTIA troubleshooting methodology. Which of the following actions should the technician perform as part of this specific stage? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Consider simple and obvious hardware causes first, such as a loose SATA data cable connection resulting from the chassis transfer.; Evaluate multiple potential internal causes, such as drive controller failure or damaged SATA power delivery cables.

Answer

The technician should consider simple hardware causes first (such as a loose cable) and evaluate multiple potential causes (such as damaged power cables or controller failure).
When establishing a theory of probable cause (Step 2 of the CompTIA troubleshooting methodology), technicians must question the obvious (such as checking for cables loosened during a recent chassis migration) and consider multiple potential internal causes (such as power delivery damage or controller failure) before moving on to testing.

Step-by-Step Solution

1
Analyze the current troubleshooting methodology stage
The technician has already identified the problem (gathered symptoms, questioned user, backed up data). The current phase is establishing a theory of probable cause.
Before testing or implementing fixes, a valid theory must be formulated by considering all potential causes.
2
Apply core principles of theory establishment
Question the obvious (simple causes like loose cables) and evaluate multiple potential causes (controller or power cable failure).
CompTIA 6-step troubleshooting methodology explicitly requires questioning the obvious and considering top-down/bottom-up possibilities before testing.

Key Concept

CompTIA Troubleshooting Methodology - Step 2: Establish a theory of probable cause (question the obvious, consider multiple causes).
Question 682Question →

A helpdesk technician is troubleshooting a Windows workstation that is showing signs of corrupted files caused by physical disk sector degradation. The technician needs to run a command-line utility from an elevated command prompt to locate bad sectors on the hard drive, fix disk errors, and recover readable information. Which of the following commands should the technician execute?

Show answer & explanation

Answer: chkdsk /r

Answer

The command 'chkdsk /r' should be used because the '/r' switch scans for bad sectors and recovers readable data, automatically incorporating the file-system error fixes of '/f'.
Executing 'chkdsk /r' tells Windows Check Disk to scan the drive for file system errors, locate bad physical sectors, and attempt to recover any readable data stored within those compromised areas. It automatically includes the functionality of '/f'.

Step-by-Step Solution

1
Identify the primary troubleshooting objective.
The goal is to fix file system errors, scan for bad sectors, and recover readable data on a Windows volume.
The scenario explicitly mentions physical disk sector degradation and data recovery needs.
2
Select the correct Windows command-line tool and appropriate flag.
Choose 'chkdsk /r'.
The 'chkdsk' utility is used for disk repair, and the '/r' flag triggers a surface scan to locate bad sectors and recover readable file contents.

Key Concept

Windows Check Disk (chkdsk) command-line switches for disk maintenance and sector recovery.
Question 683Question →

Match each administrative task in Windows to its corresponding classic Control Panel applet.

Click a left item, then click its matching right item

Items

Configure browser proxy server settings, manage security zones, and clear cached temporary web files.
Turn optional Windows features on or off, view installed system updates, and uninstall desktop applications.
Set default audio playback and recording devices, test speaker output, and manage microphone input levels.
Adjust date, time, and currency display formats and modify the system locale for non-Unicode applications.

Matches

Show answer & explanation

Answer

1. Proxy settings, security zones, and temporary web file management match with Internet Options. 2. Turning Windows features on/off and uninstalling applications match with Programs and Features. 3. Setting default audio playback and recording devices matches with Sound. 4. Adjusting date, time, and currency formats along with system locale matches with Region.
Each task directly corresponds to its dedicated Control Panel applet: Internet Options handles proxy and web security configuration; Programs and Features handles desktop software management and Windows feature toggles; Sound controls audio endpoints and levels; and Region manages local formats and non-Unicode system locale settings.

Step-by-Step Solution

1
Identify the utility used for web, proxy, and security zone configuration.
Network proxy and temporary web file management are configured in Internet Options.
Internet Options centralizes network security zone settings and browser connections.
2
Identify the utility used for software management and optional OS components.
Uninstalling applications and toggling optional Windows features are performed in Programs and Features.
Programs and Features provides entry points for desktop application maintenance and Windows feature enablement.
3
Identify the utility responsible for system audio endpoints.
Selecting audio input/output devices and levels is managed via the Sound applet.
The Sound utility controls playback, recording, sounds scheme, and communication volume behavior.
4
Identify the utility responsible for local formatting and language locale options.
Date, time, currency formatting, and non-Unicode language locale options are set in the Region applet.
The Region applet manages internationalization settings across the operating system.

Key Concept

Identifying the administrative functions of classic Windows Control Panel applets.
Question 684Question →

A systems administrator is adjusting Windows client networking options to optimize connectivity and security across different network environments. Match each Windows network setting or configuration feature on the left to its corresponding operational behavior or administrative purpose on the right.

Click a left item, then click its matching right item

Items

Public Network Profile
Alternate IP Configuration
Interface Metric
Netsh int ip reset

Matches

Show answer & explanation

Answer

Public Network Profile matches restricting network discovery and applying restrictive firewall rules. Alternate IP Configuration matches assigning a static fallback IP when DHCP fails. Interface Metric matches determining routing priority across multiple active interfaces. Netsh int ip reset matches rewriting TCP/IP registry keys to restore default protocol configurations.
Each feature correctly matches its specific operational purpose within Windows client networking: Public Network Profile secures untrusted connections, Alternate IP Configuration handles static DHCP failover, Interface Metric controls route selection priority, and netsh int ip reset rebuilds the TCP/IP stack registry entries.

Step-by-Step Solution

1
Analyze network profiles
Identify that the Public Network profile enforces strict network isolation and firewall rules.
Public networks assume untrusted environments, disabling file sharing and discovery by default.
2
Evaluate addressing mechanisms
Connect Alternate IP Configuration to manual IP failover settings.
Alternate IP Configuration serves as an administrative alternative to automatic 169.254.x.x APIPA assignment.
3
Examine routing preferences
Link Interface Metric to routing priority control.
Lower metric values take precedence in routing tables when multiple gateways exist.
4
Review CLI remediation utilities
Map netsh int ip reset to TCP/IP registry repair.
The command targets TCP/IP protocol registry keys to remediate persistent stack corruption.

Key Concept

Windows Client Network Adapter Configuration and Utilities
Question 685Question →

A systems technician is troubleshooting a ceiling-mounted DLP projector in a corporate boardroom. During presentations, the projector functions normally for roughly 15 to 20 minutes, after which the lamp abruptly shuts off, the temperature LED flashes red, and the internal cooling fans spin at maximum speed for several minutes before the unit switches to standby mode. The projector bulb was replaced last week and has logged fewer than 30 total hours of use. Which of the following is the most likely cause of this symptom, and what is the BEST action to resolve it?

Show answer & explanation

Answer: Dust accumulation has blocked the projector air intake filters, triggering thermal overload protection; clean or replace the air filters and clear surrounding airflow obstructions.

Answer

Dust accumulation has blocked the projector air intake filters, triggering thermal overload protection; clean or replace the air filters and clear surrounding airflow obstructions.
The correct answer identifies blocked air filters as the root cause. Projectors generate intense heat from high-wattage lamps or light engines. When intake filters gather dust, airflow is restricted, causing internal operating temperatures to climb. Once internal thermistors hit critical thresholds, thermal overload protection automatically extinguishes the lamp and runs the cooling fans at maximum speed to prevent catastrophic hardware damage.

Step-by-Step Solution

1
Analyze the reported symptoms and hardware environment.
The projector functions normally for 15-20 minutes before experiencing a lamp shutdown accompanied by a red temperature warning LED and maximum fan speed.
Delayed failures occurring after a consistent period of time are classic indicators of heat buildup and thermal protection mechanisms.
2
Evaluate thermal and cooling system causes versus alternative hardware failures.
Recent bulb replacement eliminates lamp wear. The specific temperature LED indicator points directly to an internal thermal condition rather than a video source or signal transport issue.
Projectors contain thermal cut-off switches that shut down the lamp while running fans at full speed to cool the internal housing when intake airflow is restricted.
3
Select the appropriate remedial action based on CompTIA troubleshooting methodology.
Cleaning or replacing clogged air filters restores required cubic-feet-per-minute (CFM) airflow, resolving the overheating condition non-destructively.
Maintaining clean ventilation pathways is the standard preventive and corrective step for thermal shutdown symptoms in projection equipment.

Key Concept

Projector Thermal Management and Overheating Symptoms
Estimated Time:2m 0s
Question 686Question →

A systems administrator is reviewing network architecture specifications for a newly constructed data hall. The architecture includes a dedicated high-speed Fibre Channel network dedicated to block-level storage transfers between server nodes and disk arrays within the facility. Additionally, peripheral telemetry sensors monitoring cabinet thermal conditions transmit data over short-range Bluetooth links operating within a two-meter radius around each rack. Which of the following network scope classifications correctly identifies the block-level storage architecture and the cabinet telemetry sensor architecture, respectively?

Show answer & explanation

Answer: SAN (Storage Area Network) for the block-level storage architecture, and PAN (Personal Area Network) for the cabinet telemetry sensor architecture

Answer

The block-level storage network is classified as a SAN (Storage Area Network), while the short-range Bluetooth telemetry sensor network is classified as a PAN (Personal Area Network).
Storage Area Networks (SANs) are high-speed, dedicated networks providing block-level network access to storage arrays. Personal Area Networks (PANs) provide ultra-short-range communication (such as Bluetooth) between devices centered around a single rack or workspace. Therefore, SAN and PAN correctly categorize the storage fabric and telemetry sensors, respectively.

Step-by-Step Solution

1
Analyze the primary network requirement for storage interconnectivity.
The scenario describes a dedicated high-speed Fibre Channel network for block-level storage access between servers and disk arrays.
Networks optimized specifically for block-level data storage accessibility independent of the main local network fall under the SAN (Storage Area Network) classification.
2
Analyze the secondary network requirement for rack sensor communication.
The telemetry sensors communicate over short-range Bluetooth links within a localized two-meter boundary around individual racks.
Low-power, short-range peripheral communications operating within a immediate personal/device radius (typically under 10 meters) are classified as a PAN (Personal Area Network).
3
Synthesize the classifications to select the correct paired response.
Storage architecture = SAN; Telemetry sensor architecture = PAN.
This accurately matches both specialized scope definitions without misclassifying geographically confined storage fabrics as LAN/WAN/MAN or ultra-short-range Bluetooth links as WLAN/LAN.

Key Concept

Geographic and Functional Network Classifications (SAN vs. PAN vs. LAN vs. WAN)
Question 687Question →

A network technician is troubleshooting persistent connection drops and poor throughput on a warehouse wireless network operating on the 2.4 GHz frequency band. A site survey reveals that neighboring access points in the facility are currently broadcasting on channels 1, 2, and 4. Which of the following channel configuration changes should the technician make on the primary access point to BEST eliminate channel overlap and resolve the interference?

Show answer & explanation

Answer: Reconfigure the access point to operate on channel 11.

Answer

Reconfigure the access point to operate on channel 11.
In 2.4 GHz wireless networking, channels 1, 6, and 11 are the only standard non-overlapping channels. Changing the access point configuration to channel 11 moves the signal far enough away from channels 1, 2, and 4 to completely eliminate adjacent-channel interference.

Step-by-Step Solution

1
Identify the wireless frequency band and existing channel assignments
The network operates on the 2.4 GHz band with nearby access points assigned to channels 1, 2, and 4.
Understanding current spectrum usage is required to select a non-interfering channel.
2
Apply standard 2.4 GHz non-overlapping channel principles
Channels 1, 6, and 11 are the standard non-overlapping channels in the 2.4 GHz spectrum.
Each 2.4 GHz channel is 22 MHz wide and spaced 5 MHz apart, meaning channels must be spaced at least 5 channels apart to avoid overlap.
3
Select the optimal channel to avoid active interference
Channel 11 provides maximum frequency separation from channels 1, 2, and 4.
Operating on channel 11 eliminates adjacent-channel noise, restoring stability and throughput.

Key Concept

2.4 GHz Non-Overlapping Channel Selection
Question 688Question →

An office worker notes that scanned PDF files created using the Automatic Document Feeder (ADF) on a multifunction printer feature a continuous vertical black line down every page. However, documents scanned by placing paper directly onto the flatbed glass display no vertical lines or defects. Which component should be cleaned to resolve this issue?

Show answer & explanation

Answer: The small glass slit strip located adjacent to the main flatbed scanner glass

Answer

Clean the small glass slit strip located adjacent to the main flatbed scanner glass.
When using an Automatic Document Feeder (ADF), the scanner sensor remains parked directly underneath the narrow ADF glass strip while paper moves past it. Any tiny speck of dirt, ink, or correction fluid on this glass strip creates a continuous vertical line down the scanned page. Because flatbed scanning moves the sensor across clean main glass, flatbed scans remain clear.

Step-by-Step Solution

1
Analyze the symptom comparison between ADF scanning and flatbed scanning.
Defects occur exclusively when paper moves across the fixed scanner head during ADF operations.
During ADF scanning, the scanner glass sensor remains stationary underneath a narrow glass strip while paper moves over it.
2
Identify the hardware cause of a continuous vertical line in ADF scans.
A speck of dust, ink, or correction fluid on the narrow ADF scanner glass strip casts a shadow across the entire page as paper passes.
Since flatbed scans move the scanner head under stationary paper, clean flatbed scans confirm the issue is isolated to debris on the stationary ADF glass slit.

Key Concept

Multifunction Device ADF Glass vs Flatbed Scanner Troubleshooting
Question 689Question →

A desktop technician is troubleshooting a Windows 11 workstation that displays system instability. Running the System File Checker utility (sfc /scannow) produces an error stating that corrupted files were found but could not be repaired because the local store is also damaged. Which command must the technician run from an elevated command prompt to repair the Windows Component Store image prior to re-running the System File Checker?

Show answer & explanation

Answer: dism /online /cleanup-image /restorehealth

Answer

dism /online /cleanup-image /restorehealth
The Deployment Image Servicing and Management (DISM) tool with the parameters '/online /cleanup-image /restorehealth' scans the currently running Windows operating system for Component Store corruption and downloads replacement files via Windows Update to repair the image. Once the Component Store is healthy, System File Checker (sfc /scannow) can successfully restore corrupted system files.

Step-by-Step Solution

1
Identify the cause of the SFC repair failure.
SFC cannot repair system files when the local Component Store (WinSxS) image itself is corrupted.
SFC relies on a healthy Component Store as the source for replacing damaged system files.
2
Select the appropriate servicing command.
Deployment Image Servicing and Management (DISM) is used to service Windows images.
The /restorehealth parameter instructs DISM to scan the operating system for corruption and download repair files.
3
Execute DISM and follow up with SFC.
Running dism /online /cleanup-image /restorehealth restores Component Store health.
Once DISM completes successfully, sfc /scannow can be executed again to repair the system files.

Key Concept

Repairing Windows Component Store with DISM before running SFC
Question 690Question →

A system administrator notices that a high-performance audio editing desktop unexpectedly powers off without warning during complex multi-track rendering operations. When attempting an immediate restart, the power LED turns on for two seconds and the machine shuts off again. However, if the desktop is left powered off for 15 minutes, it boots into the operating system normally before failing again under heavy load. The technician verifies that the power supply unit (PSU) fan and CPU fan spin upon startup, and idle system voltages on the +12V rail read within standard operating tolerances. Which of the following is the most likely root cause of this behavior?

Show answer & explanation

Answer: Thermal protection thermal trip resulting from inadequate heat dissipation between the CPU and heatsink

Answer

Thermal protection thermal trip resulting from inadequate heat dissipation between the CPU and heatsink
The correct answer identifies a CPU thermal trip safety mechanism. Modern motherboards and CPUs incorporate hardware thermal monitors that initiate an immediate power-off when temperatures exceed safety thresholds (T_jmax). An immediate power-on attempt fails because internal temperatures remain elevated; waiting 15 minutes permits passive heat dissipation, allowing the system to boot until processing load causes thermal accumulation again.

Step-by-Step Solution

1
Analyze the reported symptoms and power behavior
The machine shuts down instantly during heavy workloads, fails an immediate reboot, but boots normally after a 15-minute cooling period.
Electronics cool down during idle time. A required waiting period before successful power-on indicates a thermal protection trip (cutoff) that requires ambient cooling time to lower temperatures below critical threshold.
2
Evaluate power supply and voltage observations
Fans spin and idle +12V rail voltages measure normal, ruling out initial short-circuits or complete PSU dead-on-arrival states.
If the PSU failed completely or experienced a permanent short, the system would not boot cleanly after 15 minutes.
3
Identify the primary failing component and corrective action
The thermal interface material (paste) or CPU heatsink seating has degraded or failed, causing CPU thermal throttling followed by thermal trip shutdown under load.
Re-seating the heatsink with fresh thermal compound resolves heat transfer resistance from the CPU thermal spreader to the cooling fins.

Key Concept

CPU Thermal Protection and Thermal Trip Diagnostics
Question 691Question →

A network technician receives an automated notification indicating that a Network-Attached Storage (NAS) appliance configured with a four-drive RAID 10 array is operating in a degraded state. Diagnostics show that Drive 2 has experienced a complete mechanical hardware failure and is offline. Which of the following actions should the technician take to restore redundancy to the storage array while minimizing downtime? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Replace the failed disk with a spare disk of equal or greater storage capacity.; Initiate an array rebuild operation using the hardware RAID management console.

Answer

The technician should replace the failed disk with a spare disk of equal or greater capacity and initiate an array rebuild operation using the hardware RAID management console.
In a RAID 10 array, a single drive failure leaves the affected mirrored set degraded but functional. Restoring full redundancy requires physically swapping the failed disk with a functional drive of adequate size and starting an array rebuild via the RAID management interface so data from the surviving mirrored partner disk can be copied over.

Step-by-Step Solution

1
Obtain a compatible replacement drive.
A disk with identical or greater capacity is acquired.
RAID controllers require replacement drives to be at least as large as the failed member disk to rebuild mirrored blocks.
2
Hot-swap the failed drive with the replacement drive.
The degraded bay receives the new operational disk.
Physical replacement restores hardware availability for the mirrored drive pair.
3
Start or verify the array rebuild process.
The controller mirrors active data to the replacement disk, returning the array status to Optimal.
Rebuilding synchronizes the newly inserted drive with its paired surviving disk.

Key Concept

RAID 10 Degraded State Recovery
Question 692Question →

A systems administrator is managing Windows 10/11 client networking environments across branch offices. Match each network configuration or diagnostic task on the left with the correct Windows utility, property tab, or command-line syntax on the right required to accomplish it.

Click a left item, then click its matching right item

Items

Forcing the client computer to refresh its DHCP lease and re-register its host name and IPv4 address with the enterprise DNS server without rebooting.
Configuring a secondary static IPv4 configuration that the client automatically falls back to when a DHCP server fails to respond on a local subnet.
Rewriting key registry keys to reset the Windows TCP/IP protocol stack to a clean baseline state after severe protocol corruption.
Configuring Network Discovery and File and Printer Sharing options across Private and Public network profile types.

Matches

Show answer & explanation

Answer

Each task matches its corresponding utility: refreshing DNS host registration matches 'ipconfig /registerdns'; setting a fallback IP configuration when DHCP fails matches the 'Alternate Configuration tab in TCP/IPv4 Properties'; resetting the protocol stack baseline matches 'netsh int ip reset'; and managing network profile discovery settings matches 'Advanced sharing settings in Network and Sharing Center'.
Matching each specific administrative goal to its exact command switch or control panel applet correctly reflects standard Windows client network troubleshooting workflows. 'ipconfig /registerdns' performs dynamic DNS updates; the 'Alternate Configuration' tab provides DHCP fallback static addressing; 'netsh int ip reset' restores the core TCP/IP stack; and 'Advanced sharing settings' governs profile discovery and resource sharing rules.

Step-by-Step Solution

1
Identify the CLI utility for dynamic DNS name registration updates.
Recognize that 'ipconfig /registerdns' forces the Windows client to send dynamic DNS update requests to the active DNS server.
When host records are missing or stale in DNS, this command manually triggers host name to IP registration.
2
Determine the GUI location for DHCP fallback static IP assignments.
Navigate to Network Connections (ncpa.cpl) -> TCP/IPv4 Properties -> Alternate Configuration.
The Alternate Configuration tab provides seamless IP connectivity without APIPA when connecting to networks without active DHCP infrastructure.
3
Identify the network shell command used to restore clean IP stack registry defaults.
Select 'netsh int ip reset'.
This utility resets IPv4 interface settings and restores low-level transport protocol stacks corrupted by software failures or malware.
4
Determine the Control Panel applet controlling profile-based network resource visibility.
Select 'Advanced sharing settings' in Network and Sharing Center.
This applet manages discovery behaviors separately for Private, Public, and All Networks profiles.

Key Concept

Windows Client Networking Configuration Tools and Syntax
Question 693Question →

Match each display or projector symptom to its corresponding root cause or characteristic.

Click a left item, then click its matching right item

Items

Keystone distortion
Dead pixel
Image burn-in
Color tinting

Matches

Show answer & explanation

Answer

Keystone distortion corresponds to an angled projector producing a trapezoidal image; a dead pixel corresponds to an unpowered transistor leaving a black spot; image burn-in corresponds to static graphics causing ghosting; and color tinting corresponds to a bent pin or loose connection on an analog cable.
Each display troubleshooting symptom directly links to a specific hardware condition: keystone distortion results from projector angling, dead pixels stem from unpowered sub-pixel transistors, burn-in is caused by static content degradation on susceptible display panels, and color tinting is caused by lost color channel signals through bent or loose pins on analog video cables.

Step-by-Step Solution

1
Analyze projector geometric distortions.
Trapezoidal screen shapes are recognized as keystone distortion caused by angled projection.
Aligning projector optics non-perpendicularly causes uneven image dimensions across the screen.
2
Differentiate pixel failure types.
Unlit black spots are identified as dead pixels, whereas stuck pixels display a constant color.
Dead pixels lack power or transistor functionality entirely, rendering them black.
3
Identify screen persistence issues.
Ghosting from static content is identified as image burn-in.
Emissive display technologies like OLED degrade unevenly when static images are left displayed for prolonged periods.
4
Examine signal connection errors.
Missing color channels causing tinting are linked to physical connector pin issues.
Analog video cables like VGA transmit Red, Green, and Blue signals across separate pins; interrupting one pin drops that color channel.

Key Concept

Video, Display, and Projector Troubleshooting Symptoms and Causes
Question 694Question →

A desktop support technician needs to disable the built-in Guest account and create a custom local user group named 'TempContractors' on a newly deployed corporate workstation. When the technician attempts to open the Local Users and Groups snap-in (`lusrmgr.msc`), the operating system displays an error message stating that the console snap-in is not supported on this edition of Windows. Which of the following explains the cause of this error and provides the correct administrative resolution?

Show answer & explanation

Answer: The workstation is running Windows 11 Home edition, which does not support the Local Users and Groups snap-in; the operating system must be upgraded to Windows 11 Pro or Enterprise to use this administrative console.

Answer

Upgrading the operating system from Windows 11 Home to Windows 11 Pro or Enterprise is required because the Local Users and Groups snap-in (lusrmgr.msc) is restricted in Home edition.
The correct option correctly identifies that Windows 11 Home edition does not include the Local Users and Groups snap-in (`lusrmgr.msc`). To utilize this snap-in and manage local security groups via the standard MMC interface, the system must be upgraded to Windows 11 Pro or Enterprise edition.

Step-by-Step Solution

1
Identify the cause of the console snap-in restriction.
Recognize that Microsoft excludes specific Microsoft Management Console (MMC) snap-ins—such as Local Users and Groups (lusrmgr.msc), Local Security Policy (secpol.msc), and Group Policy (gpedit.msc)—from Windows Home editions.
Windows edition licensing dictates feature availability for enterprise management utilities.
2
Evaluate alternative access methods (e.g., Computer Management elevation).
Determine that Computer Management (compmgmt.msc) also suppresses the Local Users and Groups node on Home edition systems.
The underlying snap-in binaries and management infrastructure are omitted or restricted across all GUI entry points in Home edition.
3
Select the appropriate resolution.
Perform an edition upgrade to Windows 11 Pro or Enterprise to enable full MMC snap-in management capabilities.
An in-place edition upgrade restores access to standard administrative tools required for local user and group management.

Key Concept

Windows Edition Features and Management Utility Restrictions (Home vs. Pro/Enterprise MMC Snap-ins)
Question 695Question →

A systems administrator needs to configure an automated system recovery workflow on a Windows 11 Pro workstation. Whenever a critical system service unexpectedly terminates and generates Event ID 7031 in the System event log, a custom remediation script must automatically execute with elevated administrative privileges. Place the steps in the correct chronological order to complete this configuration using Windows administrative tools.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct operational sequence begins by selecting the target event in Event Viewer, invoking 'Attach Task To This Event...', confirming the pre-filled event trigger parameters, specifying 'Start a program' with the script path, and finally enabling 'Run with highest privileges' in the task properties.
To automate recovery upon a specific Windows event, the administrator must first isolate the event in Event Viewer to use the 'Attach Task To This Event...' shortcut. This transfers the event filter attributes directly to Task Scheduler. After confirming the trigger criteria and setting the action to run the recovery script, the administrator must access the task's full properties to enable 'Run with highest privileges.' Without elevation, the automated script would fail due to insufficient User Account Control (UAC) permissions when attempting to restart system services.

Step-by-Step Solution

1
Locate the target log entry in Event Viewer
Event metadata for Event ID 7031 is selected in the System log view.
Event Viewer requires highlighting an existing log entry to pass its log source and event ID into the task wizard.
2
Invoke the context menu action 'Attach Task To This Event...'
The Create Basic Task Wizard opens with event parameters pre-configured.
This shortcut links Event Viewer directly to Task Scheduler, streamlining event-triggered task creation.
3
Confirm trigger parameters
Event log, source, and Event ID settings are validated.
Verifying pre-populated data ensures the task fires only when Event ID 7031 is generated.
4
Configure the task action
'Start a program' is selected and pointed to the script location.
Task Scheduler requires an explicit action definition (program/script execution) to carry out remediation.
5
Set execution privileges in Task Scheduler properties
'Run with highest privileges' is selected under administrative credentials.
Standard user context cannot restart Windows services; elevated privileges are necessary for system service management.

Key Concept

Event-Triggered Administrative Tasks and Privilege Elevation
Question 696Question →

A corporate user brings a tablet to the IT help desk complaining that the touchscreen occasionally misses touches near the edges and the display panel is slightly lifting off the frame on one side. A technician inspects the device and suspects early battery swelling combined with digitizer alignment issues. Which of the following initial actions should the technician take to properly handle and troubleshoot this device? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Immediately power off the mobile device and disconnect it from any external charging sources.; Inspect the display assembly and internal battery enclosure for physical expansion before attempting touchscreen recalibration.

Answer

The technician should immediately power off the device and disconnect external power, and inspect the display assembly and internal battery enclosure for physical expansion prior to touchscreen recalibration.
When a mobile device displays physical screen lifting along with touch screen irregularities, a swollen lithium-ion battery is a primary suspect. The immediate priority is user and workplace safety by shutting down the device and disconnecting power. Next, a physical inspection of the battery enclosure confirms whether internal mechanical pressure is warping the digitizer glass.

Step-by-Step Solution

1
Safety mitigation
Device is powered down and removed from charging to prevent thermal hazard.
Battery swelling indicates gas buildup inside a lithium-polymer cell, presenting a potential fire hazard.
2
Physical hardware inspection
Confirms whether battery swelling is exerting mechanical pressure on the digitizer screen.
Swollen batteries push against internal cables and screen assemblies, leading to lifting glass and distorted touch inputs.

Key Concept

Mobile Device Battery Swelling and Touch Digitizer Troubleshooting
Question 697Question →

A network administrator is deploying new endpoint security controls across a corporation. The security policy requires restricting application execution based on digital signatures, publisher rules, and file hashes using AppLocker. Which operating system edition is the MINIMUM requirement on client workstations to support AppLocker policy enforcement?

Show answer & explanation

Answer: Windows 11 Enterprise

Answer

Windows 11 Enterprise is the minimum edition required to enforce AppLocker policies.
AppLocker enforcement is an enterprise-specific capability available in Windows 11 Enterprise and Education editions. It allows organizations to restrict application execution by hash, path, or publisher criteria.

Step-by-Step Solution

1
Identify the key technical requirement in the scenario.
The scenario specifically requires enforcing application control policies using AppLocker.
AppLocker allows administrators to specify which users or groups can run specific applications based on unique file identity attributes.
2
Evaluate edition feature boundaries for Windows 11.
Windows 11 Home and Pro editions do not support AppLocker policy enforcement.
AppLocker management is classified as an enterprise-grade security feature reserved for Enterprise and Education editions.
3
Select the minimum compliant Windows edition.
Windows 11 Enterprise fulfills the AppLocker security requirement.
It is the lowest-tier edition in the provided options that natively includes full AppLocker capability.

Key Concept

Windows Edition Feature Boundaries (AppLocker Support)
Estimated Time:1m 0s
Question 698Question →

A systems technician needs to configure a Windows 11 Pro workstation to automatically run a maintenance cleanup script every night at midnight. The requirement specifies that the script must execute under a designated administrative account regardless of whether any user is logged into the system. Which Windows administrative utility should the technician use to configure this schedule and credential requirement?

Show answer & explanation

Answer: Task Scheduler

Answer

Task Scheduler
Task Scheduler is the dedicated Windows snap-in used to create and manage automated tasks that execute at specific times or in response to specific events. It natively supports running tasks under defined user accounts regardless of interactive user logon status.

Step-by-Step Solution

1
Identify the primary functional requirement of the scenario
The goal is to trigger a script automatically based on a specific time (midnight daily) under designated privileges.
Administrative tools in Windows have distinct specializations.
2
Evaluate Windows Administrative tools against the requirements
Task Scheduler (taskschd.msc) supports time-based triggers and configured security options such as 'Run whether user is logged on or not' and 'Run with highest privileges'.
Services manage continuous background processes, while Performance Monitor tracks metrics and Local Security Policy sets rights.

Key Concept

Windows Task Scheduler Configuration and Triggers
Estimated Time:1m 0s
Question 699Question →

A Tier 1 desktop support technician needs to reconfigure a Windows workstation network adapter that failed to update its network settings after a router restart. Arrange the following steps in the correct order to open the command interface, release the existing lease, acquire a new IP address assignment, and verify the updated networking details.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct operational sequence is: Launch Command Prompt with elevated administrative privileges, run ipconfig /release to drop the current IP configuration, run ipconfig /renew to request new settings from the DHCP server, and run ipconfig /all to confirm the newly assigned IP address and subnet mask.
Proper IP address reassignment using Windows command-line tools follows a strict chronological workflow: first, elevated administrative privileges must be obtained by opening Command Prompt as Administrator; second, the existing invalid DHCP configuration is unassigned using ipconfig /release; third, a new IP lease is solicited using ipconfig /renew; and finally, verification of all configuration settings is performed using ipconfig /all.

Step-by-Step Solution

1
Launch the command line interpreter with administrative rights.
Command Prompt window opens in Administrator mode.
Administrative rights are necessary to modify local system network interface settings.
2
Execute the lease release command.
The current IP address configuration bound to the network adapter is cleared.
The client must notify the DHCP server that it is releasing its current binding before asking for new parameters.
3
Execute the lease renewal command.
The workstation receives a fresh IP address, subnet mask, and default gateway.
The renewal command broadcasts a DHCP DISCOVER/REQUEST sequence to obtain active network configuration details.
4
Execute the full configuration output command.
Complete TCP/IP configuration information for all adapters is output to the console.
Inspecting the full output confirms that the network settings match the target subnet requirements.

Key Concept

Windows Network Adapter Command Line Management (ipconfig)
Question 700Question →

A network administrator is configuring and troubleshooting Windows client network interfaces in an enterprise environment. Match each specific administrative objective on the left with the exact command-line tool syntax or Advanced TCP/IP configuration setting on the right.

Click a left item, then click its matching right item

Items

Statically assign a primary IPv4 DNS server address of 192.168.1.10 to an interface named 'Ethernet0' using the command line.
Query an internal DNS server directly to verify the Start of Authority (SOA) resource record for the corporate domain.
Prevent the Windows client from automatically registering its IP address and primary domain suffix in DNS for a specific NIC.
Reset the Windows Sockets and IP stack registry keys to default configurations to clear severe network driver corruption.

Matches

Show answer & explanation

Answer

The correct pairings match each administrative networking scenario with its precise Windows CLI command or TCP/IP configuration setting: static DNS assignment uses netsh interface ipv4 set dns; DNS zone SOA verification uses nslookup -type=SOA; disabling automatic dynamic DNS updates uses the Advanced TCP/IP DNS property setting; and complete TCP/IP protocol stack restoration uses netsh int ip reset.
Each administrative requirement corresponds directly to a specific Windows network management tool or setting. Static command-line DNS assignment requires 'netsh interface ipv4 set dns'. Specific DNS record lookups require 'nslookup' with record type parameters like '-type=SOA'. Dynamic DNS registration controls are managed via the Advanced TCP/IP DNS property tab. Core protocol stack corruption recovery is performed using 'netsh int ip reset'.

Step-by-Step Solution

1
Analyze static interface IP/DNS configuration commands
Identify 'netsh interface ipv4 set dns' as the command-line utility used to programmatically set static DNS addresses on specific interfaces.
GUI settings in Network Connections map directly to netsh context commands for scriptable configuration.
2
Analyze DNS diagnostic queries
Identify 'nslookup -type=SOA' as the syntax for inspecting domain authority records.
The nslookup utility allows query type filtering using the -type switch to diagnose DNS zone delegation and replication.
3
Evaluate client dynamic DNS (DDNS) registration behavior
Match the requirement to disable registration with the Advanced TCP/IP DNS tab setting.
Unchecking 'Register this connection's addresses in DNS' stops Windows from issuing DHCP Option 81 or direct DDNS updates to DNS servers.
4
Identify TCP/IP protocol repair commands
Match protocol stack baseline resetting with 'netsh int ip reset'.
This command overwrites System\CurrentControlSet\Services\Tcpip registry subkeys to recover from corrupt winsock or IP binding configurations.

Key Concept

Windows Client Network Adapter Configuration and Diagnostic CLI Commands
PreviousPage 35 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin