All practice questions

3551 questions

Question 921Question

A Tier 2 support technician is troubleshooting a Windows workstation that fails to start, displaying the message 'Boot Configuration Data is missing or contains errors.' The technician boots into the Windows Recovery Environment (WinRE) Command Prompt and needs to perform a full scan of all connected storage drives for compatible Windows installations, while also interactively prompting to rebuild and add missing installations to the BCD store. Which command and switch combination should the technician execute?

Show answer & explanation

Answer: bootrec /rebuildbcd

Answer

The command `bootrec /rebuildbcd` is the correct selection.
Executing `bootrec /rebuildbcd` scans all attached disks for Windows installations compatible with Windows 10/11 and allows the administrator to manually select which detected operating systems to add to the BCD store, successfully restoring boot functionality.

Step-by-Step Solution

1
Identify the primary recovery objective from the scenario.
The technician needs to locate missing Windows installations across all disks and interactively add them to repair the missing or corrupted Boot Configuration Data (BCD) store.
Resolving BCD startup failure requires updating the BCD database entries with detected OS installations.
2
Evaluate the capabilities of bootrec recovery switches.
While `bootrec /scanos` identifies compatible operating systems without modifying the BCD, `bootrec /rebuildbcd` actively scans all drives and gives the administrator the choice to rebuild the BCD entries.
Selecting the interactive rebuild switch ensures complete remediation of missing boot entries.

Key Concept

Windows Boot Recovery Utility (bootrec.exe)
Estimated Time:1m 30s
Question 922Question

A technician is troubleshooting a user's workstation in an office breakroom area. The user reports intermittent wireless network disconnections whenever a nearby microwave oven is operating. The laptop is currently connected to a 2.4 GHz Wi-Fi network. Which of the following is the BEST action to resolve this connectivity issue?

Show answer & explanation

Answer: Migrate the workstation connection to a 5 GHz wireless network band.

Answer

Migrate the workstation connection to a 5 GHz wireless network band.
Migrating the client device to the 5 GHz band completely bypasses the 2.4 GHz spectrum where microwave ovens produce high-power electromagnetic noise, restoring reliable wireless communication.

Step-by-Step Solution

1
Identify the source and frequency of the interference.
Microwave ovens operate in the 2.4 GHz industrial, scientific, and medical (ISM) band, generating non-802.11 RF noise.
Determining the frequency range of the interference source explains why the 2.4 GHz Wi-Fi connection drops.
2
Select an alternative non-interfering frequency band.
The 5 GHz band operates on a higher frequency spectrum that avoids 2.4 GHz microwave noise entirely.
Shifting the wireless client to 5 GHz provides a clear RF channel and restores stable connectivity.

Key Concept

Wireless RF Interference and Frequency Selection
Question 923Question

A systems administrator is troubleshooting a Windows 11 Pro workstation where a critical line-of-business service intermittently stops unexpectedly. The administrator needs to configure the system to automatically attempt to restart the service on the first two failures, and execute a custom cleanup script located at C:\Scripts\reset_app.bat if a third failure occurs. Which of the following administrative utilities should the administrator use to configure these specific failure response actions directly?

Show answer & explanation

Answer: Services console (services.msc), by editing the Recovery tab properties of the target service

Answer

The Services console (services.msc) via the Recovery tab in the properties of the service.
The Services snap-in (services.msc) includes a Recovery tab inside each service's properties dialog. This tab allows system administrators to configure specific sequential actions when a service crashes, such as restarting the service on the first and second attempts and executing a custom program or script on subsequent failures.

Step-by-Step Solution

1
Identify the administrative tool responsible for individual service property settings.
The Windows Services console (services.msc) provides full administrative management over system background services.
Service-specific behavior and failure handling are built into the Service Control Manager database managed via services.msc.
2
Locate the specific configuration tab within the service properties.
Open the properties of the target service and select the Recovery tab.
The Recovery tab explicitly defines actions for 'First failure', 'Second failure', and 'Subsequent failures'.
3
Configure the required failure responses.
Set First failure and Second failure to 'Restart the Service', and set Subsequent failures to 'Run a Program' pointing to C:\Scripts\reset_app.bat.
This directly fulfills the operational requirement for multi-stage automated recovery without third-party tools or complex external scripting.

Key Concept

Configuring Service Failure Recovery Actions in Windows Services Snap-in
Estimated Time:2m 0s
Question 924Question

A system administrator needs to build a customized Microsoft Management Console (MMC) for junior help desk technicians that consolidates system diagnostic utilities while preventing the technicians from adding or removing snap-ins. What is the correct sequence of steps to create, configure, and save this custom console?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence begins with launching an empty MMC console (mmc.exe), adding the target administrative snap-ins via Add/Remove Snap-in, configuring the console mode to 'User mode - limited access' under Options to lock down modifications, and finally saving the customized file with a .msc extension.
To create a restricted custom administrative tool set, an administrator must first open mmc.exe, add the necessary snap-ins to the console tree, adjust the Console Mode in Options to 'User mode - limited access' to prevent structure modifications, and finally save the file with a .msc extension.

Step-by-Step Solution

1
Launch mmc.exe as administrator.
An empty Microsoft Management Console opens in Author Mode.
Building a custom console requires starting with a baseline MMC executable before adding tools.
2
Select File > Add/Remove Snap-in and add specific management utilities.
The target tools (e.g., Event Viewer, Performance Monitor) are added to the console tree.
Snap-ins provide the actual management capabilities within the custom MMC file.
3
Navigate to File > Options and select 'User mode - limited access'.
The console layout is locked, preventing users from altering snap-in selections or viewing author-mode controls.
Setting user mode ensures junior technicians cannot reconfigure or add unauthorized snap-ins.
4
Select File > Save As and save the file with a .msc extension.
A reusable console file is created for deployment.
Saving as a .msc file allows the customized console to be distributed and launched by help desk personnel.

Key Concept

Microsoft Management Console (MMC) Author Mode vs User Mode Configuration
Estimated Time:1m 30s
Question 925Question

A technician needs to manually initialize and prepare a secondary unformatted hard drive (Disk 1) with an NTFS volume using the Windows DiskPart command-line utility. Arrange the following DiskPart commands in the correct order to complete this task.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct execution order in DiskPart is: select disk 1, clean, create partition primary, format fs=ntfs quick, and assign.
In DiskPart, task execution requires setting focus first using the selection command for Disk 1. Next, clearing old configuration data prepares the drive. Creating a primary partition establishes the volume boundary, formatting with NTFS writes the file system structures, and assigning a drive letter makes the partition accessible in Windows.

Step-by-Step Solution

1
Set focus to the target physical disk
Disk 1 becomes the active target in DiskPart.
Explicit context selection prevents accidentally modifying the primary operating system disk.
2
Clear existing disk configuration
All partition and volume information is removed from Disk 1.
Wiping the disk structure ensures a clean initialization state.
3
Build a primary partition
An unformatted primary partition is created.
File systems require a partition container to reside on.
4
Format the volume
The partition is formatted with the NTFS file system.
Formatting creates file allocation structures necessary for operating system file storage.
5
Mount the volume with a drive letter
Windows assigns the next available drive letter to the volume.
Assigning a drive letter exposes the drive to Windows File Explorer.

Key Concept

DiskPart command sequence for disk preparation
Question 926Question

A systems administrator is deploying a newly released proprietary database client application to standard domain users across a corporate network. During post-deployment testing, users encounter two main operational failures: they cannot save custom report configurations to the network share path `\\FS1\Reports`, and the application crashes on launch when attempting to update local configuration state stored within `HKLM\SOFTWARE\DataCorp\Client`. The administrator must resolve these issues while adhering to the principle of least privilege. Which TWO of the following configurations should the administrator perform? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Grant the Domain Users group Modify permissions on the shared network folder directory.; Adjust the Access Control List (ACL) on the HKLM\SOFTWARE\DataCorp\Client registry key to grant Write access to Domain Users.

Answer

The administrator should grant the Domain Users group Modify permissions on the network share directory and adjust the ACL on the application's specific HKLM registry key to grant Write access.
To resolve network file saving errors and application launch crashes while respecting least privilege, the administrator must target only the specific resources requested by the application. Granting Modify permissions on the shared network folder allows file creation and editing. Granting granular Write access specifically on the application's subkey within HKEY_LOCAL_MACHINE permits required registry updates without making users full local administrators.

Step-by-Step Solution

1
Analyze the file path access requirement for saving reports.
Identified that standard users require write/create capabilities on `\\FS1\Reports`, requiring Modify NTFS/Share permissions.
Standard users cannot save or modify files on network resources if restricted by share or NTFS permissions.
2
Analyze the registry access failure under `HKLM\SOFTWARE\DataCorp\Client`.
Identified that `HKEY_LOCAL_MACHINE` is protected and restricted to Read-only for non-administrators by default.
Granting granular Write access specifically to the application's registry path solves the launch crash without elevating overall user account privileges.
3
Evaluate remaining options against security best practices.
Rejected administrative group membership and OS edition upgrades.
Local administrative membership violates least privilege, and Windows edition upgrades do not bypass native security access control lists.

Key Concept

Granular permission management for application deployment under the principle of least privilege.
Question 927Question

A security technician is securing a dedicated equipment cabinet within a third-party colocation data center. The organization's security baseline requires preventing physical access to server hardware ports to block unauthorized hardware keyloggers, as well as containing electromagnetic emissions from critical cryptographic servers to prevent signal interception. Which combination of physical security controls directly addresses both of these specific requirements?

Show answer & explanation

Answer: Physical port blockers combined with a Faraday cage enclosure

Answer

Physical port blockers combined with a Faraday cage enclosure
Physical port blockers physically lock unused USB, Ethernet, or serial ports to prevent unauthorized hardware keyloggers or rogue devices from being inserted. A Faraday cage enclosure provides electromagnetic shielding to prevent unwanted signal leakage and RF interception from sensitive computing equipment.

Step-by-Step Solution

1
Analyze requirement 1: Prevent physical access to server hardware ports to stop unauthorized keyloggers or flash drives.
Identify physical port blockers (USB/RJ-45 locks) as the control designed to physically cap and disable open hardware ports.
Port blockers physically occupy ports and require a special key to remove, preventing unauthorized physical hardware attachments.
2
Analyze requirement 2: Prevent electromagnetic emissions and signal interception from sensitive server hardware.
Identify a Faraday cage (or RF shielding enclosure) as the control that absorbs or reflects electromagnetic radiation.
Faraday cages block radio frequency signals and electromagnetic emanations from leaving or entering an enclosure.
3
Synthesize the two required controls.
The correct combination is physical port blockers and a Faraday cage enclosure.
This pair directly mitigates both hardware port tampering and RF/electromagnetic leakage.

Key Concept

Physical Security Controls for Hardware and Electromagnetic Protection
Estimated Time:1m 30s
Question 928Question

A technician is troubleshooting a high-performance workstation that abruptly shut down during a heavy rendering task. When the power button is pressed, the system power LED blinks briefly and cooling fans turn for a fraction of a second before the system immediately shuts off. Toggling the wall outlet power switch is required before the power button responds again. What is the correct sequential order of troubleshooting steps the technician should perform to isolate this hardware failure?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The technician must first discharge flea power to reset the PSU safety latching circuit, test the power supply independently to verify voltage stability, reduce the computer to a minimal POST configuration inside the case, and finally remove the motherboard to perform a bench test on a non-conductive surface to rule out chassis grounding shorts.
The standard hardware troubleshooting sequence moves from non-invasive resetting to isolated component verification: first discharge residual flea power to clear the PSU safety latch; second, test the standalone PSU outputs; third, reduce internal hardware to a minimal POST configuration; fourth, extract the motherboard to bench-test for chassis grounding shorts.

Step-by-Step Solution

1
Unplug the AC power cord and press/hold the chassis power button for 15-30 seconds.
Discharges flea power from motherboard capacitors and clears the PSU over-current safety latch.
Modern power supplies latch off when a short or thermal event is detected; this latch must be cleared before re-testing.
2
Disconnect all internal power leads from components and test the PSU with a dedicated power tester or multimeter.
Verifies that the power supply can turn on and maintain correct output voltages without triggering instant shutdown.
Confirming power supply integrity prevents misdiagnosing a dead or out-of-spec power unit as a motherboard issue.
3
Reconnect power connectors only to essential components (motherboard, CPU, single RAM module) while keeping all secondary devices disconnected.
Isolates whether an auxiliary peripheral (such as a graphics card or storage drive) is pulling down a voltage rail.
Minimal boot isolation efficiently identifies faulty add-in hardware without unnecessary teardown.
4
Remove the motherboard from the metal chassis and conduct a bare-bones bench test on a non-conductive mat.
Eliminates chassis contact as a cause of electrical short circuits and allows close visual inspection of power distribution components.
If minimal boot fails inside the case, removing the board isolates grounded standoff shorts and board-level component damage.

Key Concept

CompTIA sequential hardware troubleshooting for power latching and short-circuit isolation
Question 929Question

A network administrator is deploying new high-density servers into a shared multi-tenant colocation facility. Facility personnel provide outer perimeter security and entry logging, but technicians from other companies frequently work in the same server room. To protect the company's hardware from unauthorized direct console access and physical tampering at the device level, which physical security control should the administrator implement?

Show answer & explanation

Answer: Locked server rack enclosures

Answer

Implementing locked server rack enclosures is the correct physical security control.
Locked server rack enclosures provide physical containment at the individual cabinet level, preventing unauthorized personnel who have general access to a shared colocation floor from opening the server chassis, plugging in rogue USB devices, or accessing local console ports.

Step-by-Step Solution

1
Analyze the physical security scope requirement
The requirement focuses on securing hardware equipment at the individual device level inside a shared room.
Outer perimeter controls are already managed by the facility provider, but internal multi-tenant access poses a risk to specific racks.
2
Evaluate candidate physical security controls against internal unauthorized tampering
Locked rack cabinets restrict physical access to servers, power units, and local ports exclusively to authorized personnel possessing keys or rack-level biometric credentials.
Other room-level controls permit authorized room visitors to walk up to unshielded equipment.

Key Concept

Physical Hardware Isolation and Device Security Controls
Estimated Time:1m 0s
Question 930Question

A technician boots a non-responsive Windows workstation into the Windows Recovery Environment (WinRE) Command Prompt to repair system file corruption on the main Windows installation volume (drive D:). Place the following administrative command-line steps in the correct chronological order to safely check disk integrity, restore the offline component store, and repair system files.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order of operations is: first, identify the OS drive letter in WinRE; second, run chkdsk D: /f to fix filesystem errors; third, execute dism /image:D:\ /cleanup-image /restorehealth to restore the component store; fourth, run sfc /scannow /offbootdir=D:\ /offwindir=D:\windows to repair system binaries.
Systematic offline troubleshooting requires identifying the active OS volume letter, ensuring disk filesystem stability with chkdsk, repairing the servicing repository via dism /image:D:\ /cleanup-image /restorehealth, and finally replacing corrupt system files using sfc with /offbootdir and /offwindir flags.

Step-by-Step Solution

1
Determine drive letter assignment for the Windows installation volume in WinRE.
The target volume is verified as drive D:.
WinRE dynamically assigns partition letters that may differ from standard online drive letters.
2
Run chkdsk D: /f.
Volume sector anomalies and file record errors on drive D: are resolved.
Running image repair tools on a corrupted filesystem can crash utilities or lead to incomplete repairs.
3
Run dism /image:D:\ /cleanup-image /restorehealth.
The offline WinSxS component store on drive D: is scanned and restored to health.
SFC depends on a healthy component store to serve as the reference source for corrupt file replacement.
4
Run sfc /scannow /offbootdir=D:\ /offwindir=D:\windows.
Protected Windows system files on drive D: are scanned and restored using clean files from the component store.
With the reference component store repaired, SFC can successfully replace corrupted system binaries.

Key Concept

Offline Windows Command-Line System Repair Sequence
Question 931Question

A system administrator is configuring a corporate network installation to deploy a customized Windows operating system image to target computers located on a different IP subnet than the deployment server. To ensure the reference image can be safely cloned to multiple workstations without SID conflicts and that target computers can successfully locate and download the network bootloader, which of the following actions MUST be performed? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Run the sysprep.exe utility with the /generalize switch on the reference computer prior to image capture.; Configure DHCP Option 66 and DHCP Option 67 on the local subnet's DHCP server.

Answer

The correct actions are running the sysprep.exe utility with the /generalize switch on the reference machine before image capture, and configuring DHCP Option 66 alongside DHCP Option 67 on the local DHCP server.
Preparing a reference computer with sysprep.exe /generalize removes unique SIDs and system-specific data so the captured WIM image can be deployed to multiple target computers. Additionally, configuring DHCP Options 66 (TFTP server hostname/IP) and 67 (bootfile name) provides PXE clients on remote subnets with the necessary parameters to locate the network installation server and initiate boot.

Step-by-Step Solution

1
Generalize the master reference installation
Hardware-specific drivers and unique system Security Identifiers (SIDs) are removed from the image.
Executing sysprep.exe with /generalize prepares the OS image so that every destination system generates a unique SID during initial setup.
2
Configure network boot redirection across IP subnets
PXE client machines receive boot server location details during IP address lease negotiation.
Setting DHCP Option 66 (TFTP server) and Option 67 (bootfile name) directs network boot requests across routers/subnets to the deployment server.

Key Concept

PXE network deployment requirements and image generalization via Sysprep.
Estimated Time:2m 0s
Question 932Question

A network technician is setting up a network-based operating system deployment environment to install Windows on several new bare-metal desktop computers across a local network using PXE (Preboot Execution Environment). Which of the following network services are required to enable PXE boot and deliver the initial boot image to the client computers? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: DHCP (Dynamic Host Configuration Protocol) server; TFTP (Trivial File Transfer Protocol) server

Answer

The two required network services are DHCP (Dynamic Host Configuration Protocol) server and TFTP (Trivial File Transfer Protocol) server.
PXE network installations rely on DHCP to assign temporary TCP/IP configurations and point the network adapter to the boot server. TFTP is then used by the PXE client firmware to fetch the network bootloader file (such as pxeboot.n12 or bootmgr.efi).

Step-by-Step Solution

1
Identify client network boot initialization requirement
The bare-metal PXE client requires an IP address and PXE options (boot server identity and boot file path).
DHCP supplies network TCP/IP settings along with PXE boot parameters.
2
Identify file download protocol requirement for pre-boot environment
The client requires a lightweight file transfer protocol to download the Windows Preinstallation Environment (WinPE) image.
TFTP provides the unauthenticated, fast file transfer mechanism required by system firmware during network boot.

Key Concept

PXE Network Deployment Prerequisites
Question 933Question

A desktop support technician needs to manually install a new line-of-business application on a user's Windows 11 workstation. What is the correct sequence of steps the technician should follow from initial preparation through final verification?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence begins with checking system architecture and hardware compatibility, followed by launching the installer using elevated administrative credentials, completing the wizard steps to install files, and ending with opening the application to verify operational readiness.
The correct operational sequence follows standard IT support practice: prerequisites are checked first, elevation is requested second, software options are configured and installed third, and functionality is verified last.

Step-by-Step Solution

1
Verify hardware and operating system compatibility.
Ensures the operating system supports the application installer.
Attempting to install incompatible software (such as 64-bit software on a 32-bit OS) will fail.
2
Elevate setup file execution using 'Run as administrator'.
Bypasses standard user restrictions and grants necessary system write permissions.
Standard user privileges cannot modify system registry hives or protected directory trees.
3
Navigate through the setup wizard options.
Copies application binaries to disk and registers system shortcuts.
Application components must be completely extracted and written to target locations before execution.
4
Open the application to verify functionality.
Confirms the application initializes without runtime errors.
Post-installation verification ensures the installation process succeeded end-to-end.

Key Concept

Standard Application Installation and Configuration Workflow
Question 934Question

A system administrator is creating a technical reference guide for help desk personnel who manage Windows client network configurations. Match each Windows client networking troubleshooting objective on the left with its corresponding command-line command or utility switch on the right.

Click a left item, then click its matching right item

Items

Reset the TCP/IP protocol stack to rebuild corrupted registry keys and restore default IP interface settings.
Purge local hostname lookup entries from RAM and immediately initiate dynamic registration of host DNS records.
Perform a targeted hostname resolution query directly against a specific DNS server IP address.
Export saved client Wi-Fi connection configurations to XML format for deployment across corporate devices.

Matches

Show answer & explanation

Answer

1. Reset TCP/IP stack matches 'netsh int ip reset'
2. Purge DNS cache and re-register records matches 'ipconfig /flushdns && ipconfig /registerdns'
3. Targeted DNS query matches 'nslookup [hostname] [dns_server_ip]'
4. Export wireless profiles matches 'netsh wlan export profile key=clear'
Each troubleshooting task maps directly to its official Windows CLI command: 'netsh int ip reset' restores default TCP/IP stack registry keys; combining 'ipconfig /flushdns' and 'ipconfig /registerdns' flushes local DNS cache before registering host records with the server; specifying a target IP address in 'nslookup' queries an explicit name server; and 'netsh wlan export profile' saves client Wi-Fi configurations to XML files.

Step-by-Step Solution

1
Identify the CLI utility designed to rebuild corrupted TCP/IP stack registry keys
Select 'netsh int ip reset', which restores fundamental IPv4 and IPv6 network stack components.
When network stack registry configuration becomes damaged, resetting the interface via netsh rewrites the protocol configuration files.
2
Identify the multi-step ipconfig switches required to flush local DNS cache and trigger dynamic DNS registration
Select 'ipconfig /flushdns && ipconfig /registerdns'.
The /flushdns switch clears local name cache entries, and /registerdns initiates dynamic DNS update requests with the configured primary DNS server.
3
Determine the proper syntax for querying an alternate DNS server directly
Select 'nslookup [hostname] [dns_server_ip]'.
Adding a second argument containing a DNS server's IP address overrides the workstation's default DNS server for testing resolution.
4
Select the netsh context utility for managing and exporting wireless network settings
Select 'netsh wlan export profile key=clear'.
The netsh wlan context exposes wireless network management functions, including profile export to XML files.

Key Concept

Windows Network CLI Diagnostics and Netsh Context Configuration
Question 935Question

A help desk technician is configuring a workstation running Windows 11 Pro in a standalone workgroup environment. The organization requires that a critical custom background database service automatically restarts the service process upon its first and second unexpected failures, but executes a full system reboot if it encounters a third failure. Which administrative utility and configuration tab should the technician use to establish these failure responses?

Show answer & explanation

Answer: Services (services.msc) using the Recovery tab

Answer

The technician should open Services (services.msc) and configure the failure responses under the Recovery tab of the target service.
The Services snap-in (services.msc) provides detailed properties for every background service installed in Windows. Under the Recovery tab, administrators can define specific actions for the first failure, second failure, and subsequent failures. Options include 'Take No Action', 'Restart the Service', 'Run a Program', or 'Reboot the Computer'.

Step-by-Step Solution

1
Identify the administrative tool responsible for controlling system background processes and service startup/failure configurations.
Services console (services.msc) is selected.
The Service Control Manager in Windows manages background services and their lifecycle properties.
2
Open the properties of the target service and navigate to the Recovery tab.
Access configuration options for First failure, Second failure, and Subsequent failures.
The Recovery tab specifically allows custom actions for sequential service crashes.
3
Configure 'First failure' to 'Restart the Service', 'Second failure' to 'Restart the Service', and 'Subsequent failures' to 'Reboot the Computer'.
The automated crash recovery actions match the organizational requirements.
This satisfies the exact failover sequence specified in the scenario.

Key Concept

Windows Service Recovery Configuration
Question 936Question

A network technician is troubleshooting a wired desktop client that has completely lost network access. Sequence the following diagnostic and troubleshooting steps according to the standard bottom-up OSI model methodology.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct troubleshooting sequence follows the standard bottom-up approach: first inspect physical Ethernet cables and NIC link lights, second execute `ipconfig /all` to check IP addressing, third ping the local default gateway, and fourth ping an external FQDN to test DNS resolution.
Following the standard bottom-up OSI troubleshooting approach requires inspecting physical layer components (cables and link status lights) first, verifying local IP configuration settings (`ipconfig`), confirming local gateway reachability (`ping gateway`), and lastly testing higher-level services like DNS name resolution (`ping FQDN`).

Step-by-Step Solution

1
Inspect physical connections and LED indicators
Verifies Layer 1 physical media connectivity.
Physical layer issues (such as unplugged cables or unlit link lights) must be identified and resolved prior to higher-layer testing.
2
Execute `ipconfig /all`
Displays network configuration parameters.
Determines if the client holds a valid static/DHCP IP address or an automatic private IP address (APIPA).
3
Ping the default gateway
Tests local network ICMP reachability.
Confirms that the workstation can successfully communicate across the local network switch to the router.
4
Ping external domain name (FQDN)
Verifies name resolution (DNS) and WAN connectivity.
Validates that high-level network services and Internet routing functions operate properly.

Key Concept

Bottom-up network troubleshooting methodology for wired network issues.
Question 937Question

A technician needs to enable corporate domain join and Remote Desktop host capabilities on a user's computer that is currently running a 64-bit edition of Windows 11 Home. The computer contains critical user files and application settings that cannot be removed. Which procedure should the technician execute to upgrade the operating system edition while preserving all existing user data and applications?

Show answer & explanation

Answer: Open the Activation settings page in Windows and enter a valid Windows 11 Pro product key.

Answer

The technician should open the Activation settings page within Windows 11 and enter a valid Windows 11 Pro product key to perform an immediate in-place edition upgrade.
Upgrading from Windows 11 Home to Windows 11 Pro can be accomplished in-place by entering a valid Pro product key in the Activation settings menu. This process unlocks Pro-specific features such as Domain Join and Remote Desktop Host without removing existing personal files, applications, or user configurations.

Step-by-Step Solution

1
Identify the upgrade path requirements
Recognize that the current system is running Windows 11 Home 64-bit and needs Windows 11 Pro features (Domain Join and RDP Host) while keeping user data intact.
Windows Home edition does not support Domain Join or RDP Host features, requiring an edition upgrade to Pro.
2
Determine the least disruptive upgrade method
Selecting an in-place edition upgrade via product key entry allows unlocking Pro features without reinstalling the OS.
Windows supports direct edition upgrades from Home to Pro by validating a Pro product key, which unlocks built-in features without deleting files or apps.
3
Execute the product key change
Navigating to Settings > System > Activation and entering the new key upgrades the OS seamlessly.
This is the standard, vendor-supported procedure for Windows edition upgrades.

Key Concept

Windows Edition In-Place Upgrade via Product Key
Estimated Time:1m 30s
Question 938Question

A IT support technician is troubleshooting a desktop computer that experiences random system crashes and blue screen errors during heavy multitasking. The technician interviewed the user, examined the crash dump files pointing to memory addresses, performed a full system backup, and established a theory that one of the newly added RAM modules is defective or incompatible. Which of the following actions should the technician perform NEXT according to the CompTIA troubleshooting methodology?

Show answer & explanation

Answer: Run a memory diagnostic tool on each RAM module individually to test the hypothesis.

Answer

Run a memory diagnostic tool on each RAM module individually to test the hypothesis.
According to the standard CompTIA troubleshooting methodology, once a technician has identified the problem and established a theory of probable cause (Step 2), the mandatory NEXT step is to test the theory to determine the cause (Step 3). Running a diagnostic test on each RAM module directly tests the established hypothesis.

Step-by-Step Solution

1
Analyze the current stage of the troubleshooting process.
The technician has completed Step 1 (Identify the problem, interview user, review logs, perform backup) and Step 2 (Establish a theory of probable cause: defective or incompatible RAM).
Determining the current stage dictates what action must immediately follow according to the CompTIA methodology.
2
Identify the next sequential step in the CompTIA 6-step framework.
Step 3 is 'Test the theory to determine the cause'.
The technician must confirm or disconfirm the established hypothesis before creating a plan of action or implementing changes.
3
Select the option that represents testing the RAM hypothesis.
Running a standalone memory diagnostic tool on individual RAM modules isolates and tests the specific hypothesis.
Isolating modules with a diagnostic utility objectively confirms whether a specific RAM stick is failing.

Key Concept

CompTIA Troubleshooting Methodology Order (Step 3: Test the theory to determine cause)
Estimated Time:1m 15s
Question 939Question

A network security administrator is tasked with designing physical access controls for an enterprise server vault containing sensitive financial data. The audit requirements demand a solution that physically restricts access to one authenticated individual at a time using an interlocking dual-door entry system, while strictly preventing employees from scanning their access credential and immediately passing it back to an unauthenticated colleague to enter behind them. Which of the following physical security implementations best addresses all of these requirements?

Show answer & explanation

Answer: An access control vestibule configured with anti-passback enforcement

Answer

An access control vestibule configured with anti-passback enforcement is the optimal physical control.
An access control vestibule (also known as a mantrap) consists of a specialized space between two interlocking doors where the first door must close and lock before the second door unlocks, physically restricting access to one person at a time and preventing tailgating. Anti-passback is a logical access control feature implemented on card readers that prevents a badge from being scanned for entrance twice in succession without an intervening exit scan, directly stopping authorized users from passing their credentials back to unauthorized individuals.

Step-by-Step Solution

1
Analyze the entry restriction requirement
Identified the need for a physical barrier restricting entry to one individual at a time using interlocking doors (access control vestibule / mantrap).
An access control vestibule prevents unauthorized individuals from physically tailgating authorized personnel through dual interlocking doors.
2
Analyze the credential reuse requirement
Identified the requirement to block badge sharing or passing back credentials at the entryway.
Anti-passback rules require an exit badge scan before a credential can be scanned for entry again, preventing badge sharing.
3
Synthesize and select the combined physical control
Selected the option combining an access control vestibule with anti-passback enforcement.
This combination satisfies both the structural interlocking door requirement and the badge reuse control policy.

Key Concept

Physical Access Control Mechanisms (Access Control Vestibules & Anti-Passback)
Question 940Question

A network administrator needs to enhance the physical security of a network closet. Specifically, the administrator must prevent unauthorized users from plugging unauthorized Ethernet cables into open wall jacks and prevent physical theft of sensitive magnetic backup tapes stored in the room. Which of the following physical security controls should be implemented to meet these two goals? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: RJ45 port locks; Locking media safe

Answer

The correct physical security controls to implement are RJ45 port locks and a locking media safe.
RJ45 port locks directly prevent unauthorized physical connections into open network jacks, and a locking media safe prevents unauthorized individuals from taking physical backup tapes.

Step-by-Step Solution

1
Identify the control needed to secure open network wall jacks
RJ45 port locks insert into unused Ethernet jacks and require a special key to remove, physically blocking unauthorized connections.
Prevents unauthorized network access via physical cabling.
2
Identify the control needed to protect physical backup tapes against theft
A locking media safe provides a dedicated, locked enclosure for physical backup tapes.
Prevents physical removal and theft of data storage media.

Key Concept

Selecting appropriate physical security controls for port protection and data media storage.
PreviousPage 47 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin