All practice questions

3551 questions

Question 941Question

A desktop user reports that their computer has recently become very slow to boot and makes repetitive clicking noises during disk access. Upon inspecting the system with a diagnostic utility, a technician observes a S.M.A.R.T. attribute alert indicating an unrecoverable self-test failure and a high count of reallocated sectors on the primary mechanical hard drive. What is the MOST appropriate immediate action the technician should take?

Show answer & explanation

Answer: Perform an immediate backup of critical data from the drive and prepare a replacement drive.

Answer

Perform an immediate backup of critical data from the drive and prepare a replacement drive.
Loud repetitive clicking noises (often referred to as the 'click of death') signal physical failure of the drive's read/write head assembly or drive motor. Coupled with S.M.A.R.T. self-test warnings regarding reallocated sectors, complete drive failure is imminent. The primary immediate response must be securing a verified backup of critical data while the drive remains partially accessible, followed by drive replacement.

Step-by-Step Solution

1
Analyze symptoms and diagnostic output
Repetitive clicking noises (click of death) and high S.M.A.R.T. reallocated sector counts confirm physical mechanical drive failure.
S.M.A.R.T. warnings combined with acoustic anomalies indicate that complete disk crash is imminent.
2
Determine the highest priority troubleshooting step
Backing up user data to an external location or network storage takes precedence before taking the system offline.
Any intense software operations or delay could cause total media collapse, permanently locking out data access.
3
Formulate remediation plan
Replace the failing mechanical hard drive with a healthy storage drive and restore the backed-up data.
Physical drive defects cannot be fixed via software maintenance.

Key Concept

Recognizing Hard Drive Mechanical Failure Symptoms and S.M.A.R.T. Errors
Question 942Question

Match each organizational requirement scenario on the left with the minimum Windows 11 edition on the right that satisfies all listed feature and hardware requirements.

Click a left item, then click its matching right item

Items

Requires joining an Active Directory domain, encrypting local storage with BitLocker, and accepting inbound Remote Desktop Protocol (RDP) connections, but does not require enterprise deployment features like AppLocker.
Requires system hardware support for 4 physical CPU sockets, persistent memory (NVDIMM-N) modules, and advanced ReFS volume creation.
Requires corporate security management capabilities including AppLocker application control policies, BranchCache WAN bandwidth optimization, and Credential Guard.
Used for general office productivity, but natively lacks access to the Local Group Policy Editor (gpedit.msc), Domain Join, and inbound RDP server hosting.

Matches

Show answer & explanation

Answer

Matching assignments: Domain Join, BitLocker, & RDP host -> Windows 11 Pro; 4 physical CPUs, ReFS, & NVDIMM-N -> Windows 11 Pro for Workstations; AppLocker, BranchCache, & Credential Guard -> Windows 11 Enterprise; Lacks Local Group Policy & Domain Join -> Windows 11 Home.
Each operational requirement correlates to the minimum edition threshold defined by Microsoft based on security capabilities, management utilities, and hardware upper limits.

Step-by-Step Solution

1
Evaluate standard business management requirements.
Features like Domain Join, BitLocker, and RDP hosting require at minimum Windows 11 Pro.
Windows 11 Home does not include domain management or encryption features.
2
Evaluate advanced hardware socket and storage architecture requirements.
Support for 4 physical CPUs, NVDIMM-N memory, and ReFS requires Windows 11 Pro for Workstations.
Standard Windows 11 Pro supports a maximum of 2 physical CPU sockets.
3
Identify enterprise-grade security and policy enforcement requirements.
AppLocker, BranchCache, and Credential Guard require Windows 11 Enterprise.
These advanced management features are restricted to Enterprise and Education editions.
4
Determine consumer edition feature restrictions.
The absence of Local Group Policy Editor (gpedit.msc) and inbound RDP hosting signifies Windows 11 Home.
Windows 11 Home focuses on basic consumer operations and lacks enterprise administration tools.

Key Concept

Windows 11 Edition Feature and Hardware Boundaries
Question 943Question

A systems administrator is setting up a corporate smartphone for a remote user. The cellular network provider requires the unique 15-digit physical hardware number tied directly to the phone's mobile device chassis and baseband radio to provision network access, independently of the subscriber's SIM card. Which of the following identifiers should the administrator provide?

Show answer & explanation

Answer: International Mobile Equipment Identity (IMEI)

Answer

The administrator should provide the International Mobile Equipment Identity (IMEI).
The International Mobile Equipment Identity (IMEI) is a unique 15-digit code used by cellular networks to identify valid physical mobile devices. It is permanently burned into the device radio hardware and remains constant regardless of which SIM card is inserted.

Step-by-Step Solution

1
Identify the requirement in the scenario.
The cellular carrier requires a unique hardware-level 15-digit identifier associated with the physical mobile device chassis.
Hardware tracking on cellular networks relies on physical equipment identity numbers.
2
Differentiate between cellular equipment identifiers and subscriber identifiers.
The International Mobile Equipment Identity (IMEI) identifies the physical hardware, whereas the International Mobile Subscriber Identity (IMSI) identifies the subscriber account bound to the SIM card.
Understanding the distinction prevents registering subscriber data when hardware provisioning is required.

Key Concept

Mobile Device Cellular Hardware Identification (IMEI vs. IMSI)
Question 944Question

A cybersecurity technician is designing a physical security baseline for an enterprise datacenter facility and employee workstations. Match each physical security control to the specific threat or unauthorized physical security risk it is engineered to prevent.

Click a left item, then click its matching right item

Items

Faraday cage
Mantrap
Privacy filter
Cable lock

Matches

Show answer & explanation

Answer

Faraday cage pairs with blocking electromagnetic field emissions; Mantrap pairs with eliminating tailgating via interlocking doors; Privacy filter pairs with mitigating shoulder surfing by narrowing screen viewing angles; Cable lock pairs with preventing physical hardware theft by anchoring devices.
Each control directly mitigates its paired physical vulnerability: Faraday cages suppress electromagnetic waves, mantraps control physical human access cadence to prevent piggybacking, privacy filters restrict screen viewing line-of-sight against observation, and cable locks mechanically bind equipment against unauthorized removal.

Step-by-Step Solution

1
Analyze each physical security control's operational mechanism.
Identified the primary defense domain for each control (RF shielding, access control, visual privacy, physical theft prevention).
Understanding the physical property targeted by each control allows proper alignment with corresponding threat mitigations.
2
Map Faraday cage to wireless/electromagnetic threat mitigation.
Faraday cage matches the prevention of electromagnetic field signal eavesdropping.
Conductive enclosures restrict ingress and egress of RF signals.
3
Map Mantrap to physical entry control.
Mantrap matches eliminating tailgating using interlocking access doors.
Two-stage access control requires individual verification before allowing access into secured areas.
4
Map Privacy filter to visual threat protection.
Privacy filter matches mitigating shoulder surfing.
Polarized films limit monitor visibility exclusively to direct viewing positions.
5
Map Cable lock to equipment theft prevention.
Cable lock matches preventing opportunistic device theft by anchoring to fixed objects.
Physical cables mechanically tether hardware components to solid structures.

Key Concept

Physical Security Controls and Threat Mitigation
Question 945Question

A desktop technician is tasked with configuring a newly deployed workstation to dual-boot Windows 11 Pro and a 64-bit Linux distribution on a single system drive utilizing UEFI firmware and a GUID Partition Table (GPT). Windows 11 Pro is currently installed and fully configured with BitLocker enabled. Which of the following operational steps must the technician take to ensure a valid and functional dual-boot environment? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Suspend or disable BitLocker encryption on the Windows system drive before shrinking the partition to make unallocated space for Linux.; Install Windows prior to installing Linux to allow the Linux bootloader installer (such as GRUB) to automatically detect Windows and configure dual-boot options.

Answer

To configure a dual-boot setup with an existing BitLocker-encrypted Windows installation, the technician must suspend or turn off BitLocker before repartitioning the storage drive. Additionally, installing Windows first allows the subsequent Linux installation to install a bootloader (like GRUB) that detects Windows and enables a multi-boot choice menu upon startup.
Suspending BitLocker before partition modification ensures encryption keys and volume structures remain intact during partition resizing. Furthermore, installing Windows before Linux is standard operating procedure because the Windows boot setup typically overwrites third-party bootloaders, while Linux installers (GRUB) are designed to integrate existing Windows installations into their boot sequence.

Step-by-Step Solution

1
Disable or suspend BitLocker protection on the active Windows volume.
Unlocks the volume state so partition management tools can safely shrink the partition without causing encryption failure or data corruption.
Shrinking active encrypted partitions without suspending encryption can cause boot failure and lockout.
2
Shrink the Windows volume in Disk Management to create unallocated space.
Prepares dedicated unallocated disk space on the GPT drive for Linux partitions.
Linux requires dedicated non-NTFS partitions (e.g., ext4 and swap).
3
Boot into the Linux installation media and complete the installation using the unallocated space.
Installs Linux and its bootloader (GRUB).
Linux installers automatically detect existing Windows boot managers on UEFI systems and register GRUB as the primary boot manager with entry options for both operating systems.

Key Concept

Multiboot OS Configuration Prerequisites and BitLocker Management
Question 946Question

A desktop support technician needs to upgrade a user's computer from Windows 10 Home to Windows 10 Pro. The user requires that all existing applications, files, and personal settings remain intact after the upgrade process. Which of the following installation methods should the technician perform?

Show answer & explanation

Answer: An in-place upgrade

Answer

An in-place upgrade should be performed.
An in-place upgrade is used to update an existing operating system installation or change to a supported higher edition (such as Home to Pro) while preserving all user accounts, installed applications, drivers, and personal files.

Step-by-Step Solution

1
Analyze the user's requirements for the operating system change.
The goal is to change the Windows edition from Home to Pro while keeping all applications, personal files, and settings intact.
Identifying the requirement to preserve current data rules out methods that reformat or overwrite drive partitions.
2
Determine the appropriate installation method that supports changing OS editions on an active system.
An in-place upgrade allows the system to transition from Windows 10 Home to Windows 10 Pro without reformatting or reinstalling software.
In-place upgrades install newer system components or higher edition features directly over the existing installation state.

Key Concept

In-place upgrade vs Clean installation characteristics
Estimated Time:45s
Question 947Question

A systems administrator is setting up Windows 11 Pro workstations for a software development team. The team utilizes legacy 32-bit database applications that require custom Data Source Names (DSNs) and also requires long-term, historical tracking of disk queue lengths and latency metrics. Which TWO of the following tools or utilities should the administrator configure to satisfy these specific operational requirements?

Select all that apply

Show answer & explanation

Answer: The 32-bit ODBC Data Source Administrator utility located in C:\Windows\SysWOW64\odbcad32.exe; Performance Monitor (perfmon.msc) to build custom Data Collector Sets for logging disk counters over time

Answer

The administrator must use the 32-bit ODBC Data Source Administrator utility in C:\Windows\SysWOW64\odbcad32.exe to configure DSNs for 32-bit software, and Performance Monitor (perfmon.msc) with Data Collector Sets for logging historical disk queue metrics.
The correct tools are the 32-bit ODBC Data Source Administrator in the SysWOW64 directory and Performance Monitor. On 64-bit Windows systems, 32-bit applications require DSNs configured via C:\Windows\SysWOW64\odbcad32.exe. Performance Monitor (perfmon.msc) is the built-in utility specifically designed for configuring long-term historical performance counter logs through Data Collector Sets.

Step-by-Step Solution

1
Identify the proper ODBC administration binary architecture.
Recognize that on 64-bit Windows editions, 32-bit applications require DSNs created via C:\Windows\SysWOW64\odbcad32.exe rather than the default 64-bit utility in System32.
32-bit database drivers and applications interact exclusively with 32-bit registry entries created by the 32-bit ODBC manager.
2
Select the appropriate administrative tool for long-term historical resource logging.
Choose Performance Monitor (perfmon.msc) to define custom Data Collector Sets targeting physical and logical disk performance counters.
Task Manager provides live resource visualization but lacks functionality for historical data collection, whereas Performance Monitor supports persistent counter logging.

Key Concept

Windows 32-bit vs 64-bit Administrative Utilities and Performance Counter Logging
Question 948Question

A desktop support technician is performing a clean installation of Windows 11 Pro on a workstation configured with a dedicated hardware NVMe RAID array. When reaching the partition selection screen ("Where do you want to install Windows?"), no target drives or storage volumes are displayed in the list, even though the RAID array is reported as healthy in the system's UEFI setup. Which of the following is the best next step for the technician to take to make the volume available for installation?

Show answer & explanation

Answer: Insert a flash drive containing the storage controller driver and select the Load Driver option on the installation screen.

Answer

Provide the appropriate mass storage controller driver by inserting removable media containing the manufacturer driver files and clicking the Load Driver option during disk selection.
During Windows installation on custom or enterprise hardware RAID storage controllers, the standard Windows Setup media may lack native inbox drivers for the controller. Selecting 'Load Driver' and pointing to removable media containing the manufacturer's storage controller driver allows setup to properly communicate with the controller and display the attached storage volume.

Step-by-Step Solution

1
Identify the cause of missing storage volumes during OS setup
Recognize that hardware RAID controllers often require vendor-specific mass storage drivers that are not included in the standard Windows installation image.
Without the matching storage controller driver, the Windows Setup environment cannot communicate with the RAID array.
2
Obtain and prepare the storage driver files
Place the uncompressed driver files (.inf, .sys, .cat) onto an accessible USB flash drive.
Windows Setup requires raw driver files to load the storage interface during the partition phase.
3
Load the driver in Windows Setup
Click 'Load Driver' on the disk selection screen, browse to the USB drive location, and select the compatible RAID controller driver.
Once loaded, the installer can communicate with the controller and display the RAID volume as an available installation target.

Key Concept

Third-party storage controller driver injection during Windows Setup
Estimated Time:1m 30s
Question 949Question

A network technician needs to manually assign a static IPv4 address, subnet mask, and default gateway on a Windows client workstation using the classic Network Connections applet. Place the configuration steps in the correct sequential order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence to manually configure a static IPv4 address using Network Connections is: 1) Open the Run dialog box, enter ncpa.cpl, and press Enter; 2) Right-click the active network interface card (NIC) and select Properties; 3) Select Internet Protocol Version 4 (TCP/IPv4) from the list of components and click Properties; 4) Select the 'Use the following IP address' option and type the assigned IPv4 address, subnet mask, and default gateway.
Configuring a static IPv4 address requires opening the Network Connections management interface via ncpa.cpl, accessing the properties of the active adapter, opening the Internet Protocol Version 4 (TCP/IPv4) properties, and selecting the option to manually enter the IP address, subnet mask, and default gateway.

Step-by-Step Solution

1
Launch the Network Connections applet by running ncpa.cpl in the Run dialog.
The Network Connections window opens displaying available physical and virtual adapters.
Executing ncpa.cpl directly opens the adapter control panel menu.
2
Open the configuration properties of the specific network adapter.
The Ethernet Properties dialog box appears.
Protocol bindings and network settings are managed on a per-adapter basis.
3
Locate and open the properties for the IPv4 protocol stack.
The Internet Protocol Version 4 (TCP/IPv4) Properties window opens.
Static IP addresses, subnet masks, and default gateways are configured within IPv4 properties.
4
Enable manual IP assignment and populate the network fields.
The workstation is assigned a static IPv4 configuration.
By default, Windows uses dynamic addressing (DHCP); selecting 'Use the following IP address' enables manual parameter entry.

Key Concept

Windows Client Static IPv4 Address Configuration
Question 950Question

A desktop technician is attempting to install a 64-bit video editing application on a workstation running a 32-bit edition of Windows 10. The installer fails immediately with an incompatibility error. Which of the following explains why this application cannot be installed on the workstation?

Show answer & explanation

Answer: A 32-bit operating system architecture cannot execute 64-bit application binaries.

Answer

A 32-bit operating system architecture cannot execute 64-bit application binaries.
The correct answer highlights that a 32-bit operating system cannot execute 64-bit binaries. Operating systems compiled for 32-bit architecture lack the ability to handle 64-bit memory addresses and instructions. While 64-bit Windows can run 32-bit software via emulation (WOW64), a 32-bit Windows system cannot run 64-bit software under any circumstances.

Step-by-Step Solution

1
Identify the system architecture of the target operating system
The target workstation is running a 32-bit edition of Windows 10.
System architecture determines what register sizes and instruction sets the OS can manage.
2
Compare the application requirements with the system architecture
The software is compiled specifically for 64-bit CPU architectures.
64-bit applications use 64-bit memory addresses and instructions that 32-bit operating systems cannot interpret or execute.
3
Determine the necessary resolution
Select the option stating that a 32-bit OS cannot execute 64-bit application binaries.
While a 64-bit OS can run 32-bit applications using WOW64, the reverse is impossible.

Key Concept

Application Architecture Compatibility (32-bit vs. 64-bit)
Estimated Time:45s
Question 951Question

A system administrator is troubleshooting a Windows 11 Pro workstation where a background service periodically stops responding. Standard Task Manager metrics do not provide the detailed file handle paths or thread wait chain information required to isolate the application freeze. Additionally, the administrator needs to record disk queue length and memory metrics continuously over a 24-hour period to establish a performance baseline. Which TWO Windows administrative tools should the administrator use to accomplish these tasks?

Select all that apply

Show answer & explanation

Answer: Resource Monitor (resmon.exe) to inspect real-time file handles, active disk activities, and thread wait chains for the unresponsive process; Performance Monitor (perfmon.msc) to configure a Data Collector Set for logging system performance counters continuously over extended time periods

Answer

The administrator should use Resource Monitor (resmon.exe) to analyze real-time process thread wait chains and file handles, and Performance Monitor (perfmon.msc) to configure Data Collector Sets for long-term performance counter logging.
Resource Monitor (resmon.exe) allows administrators to examine real-time process threads, file handle locks, and Analyze Wait Chain details to troubleshoot unresponsive programs. Performance Monitor (perfmon.msc) enables the creation of Data Collector Sets that log performance counters into log files across extended intervals (e.g., 24 hours) for trending and baseline measurement.

Step-by-Step Solution

1
Identify the real-time diagnostic tool required for granular process handle and wait chain analysis
Resource Monitor (resmon.exe) is selected because it displays active process dependencies, open file handles, and thread wait states beyond basic Task Manager metrics
Task Manager only offers high-level CPU, memory, disk, and network percentages without showing specific thread wait chains or open file handles causing process lockups
2
Identify the tool required for continuous baseline logging over an extended duration
Performance Monitor (perfmon.msc) is selected to create a User Defined Data Collector Set
Performance Monitor provides historical log collection capabilities via performance counters configured to record metrics such as disk queue lengths over hours or days

Key Concept

Selecting Windows Administrative Tools (Resource Monitor vs. Performance Monitor)
Question 952Question

A helpdesk technician receives a call from an individual claiming to be an executive support specialist who urgently needs a user's network password to resolve a critical server outage. Which type of social engineering attack is being attempted?

Show answer & explanation

Answer: Vishing

Answer

The attack being attempted is vishing (voice phishing).
Vishing is a social engineering attack performed over the telephone where an attacker impersonates a trusted authority to extract sensitive data or login credentials.

Step-by-Step Solution

1
Identify the communication vector used in the scenario.
The attacker is contacting the target via a direct telephone call.
Social engineering attack types are distinguished by their delivery mechanisms.
2
Analyze the attacker's method and purpose.
The attacker uses voice communication and impersonation to trick the technician into disclosing network passwords.
Phishing conducted specifically through voice telephone calls is defined as vishing.

Key Concept

Vishing (Voice Phishing)
Question 953Question

Match each enterprise physical security control to the specific threat vector or physical security risk it is designed to mitigate.

Click a left item, then click its matching right item

Items

Faraday Cage
Physical Port Lock
Kensington Cable Lock
Security Bollard

Matches

Show answer & explanation

Answer

Each physical security control maps to its corresponding defense mechanism: Faraday Cage blocks RF emissions; Physical Port Lock blocks unauthorized interface connections; Kensington Cable Lock physically anchors devices to prevent theft; Security Bollard protects perimeters against vehicle ramming attacks.
Each physical security control addresses a distinct domain of security: Faraday cages block electromagnetic and wireless signal interception; physical port locks block hardware interface manipulation; Kensington cable locks prevent physical device theft; security bollards protect against vehicle impact.

Step-by-Step Solution

1
Analyze electromagnetic and wireless isolation mechanisms.
Identified that enclosure technologies shielding against RF/signals correspond to the Faraday Cage control.
Faraday cages prevent external signal interception and internal RF leakage.
2
Examine device port protection controls.
Matched physical port locks with blocking unused hardware interfaces against unauthorized media connection.
Unsecured USB ports are primary vectors for physical data exfiltration and badUSB attacks.
3
Evaluate endpoint anti-theft anchoring mechanisms.
Paired Kensington cable locks with mechanical anchoring to fixed office furniture.
Cable locks increase the time and effort required to steal portable computer hardware.
4
Identify perimeter vehicle protection controls.
Associated bollards with anti-ramming structural protection at entry points.
Bollards absorb kinetic impact from vehicles attempting to breach building perimeters.

Key Concept

Physical Security Controls and Threat Mitigation Functions
Question 954Question

A field technician installs a IP-based security camera at the far end of a logistics warehouse. The camera is connected back to a PoE switch port using a single continuously run Category 6 Ethernet cable measuring 120 meters (394 feet). Upon powering on the system, the camera intermittently reboots, drops packets, and experiences severe video signal degradation. Testing the cable run with a standard wire mapper shows that all eight pin continuity connections match the T568B termination standard. Which of the following is the MOST likely cause of the network instability?

Show answer & explanation

Answer: The Ethernet cable run length exceeds the 100-meter maximum distance specification for copper twisted-pair cabling.

Answer

The Ethernet cable run length exceeds the 100-meter maximum distance specification for copper twisted-pair cabling.
The standard maximum distance specification for copper Ethernet cabling (Cat 5e, Cat 6, Cat 6a) is 100 meters (328 feet), typically configured as 90 meters of solid horizontal cabling and 10 meters of stranded patch cables. A 120-meter cable run causes severe signal attenuation (loss of signal strength) and Power over Ethernet (PoE) voltage drop, leading to packet loss, latency, and intermittent device reboots.

Step-by-Step Solution

1
Analyze the physical layer specifications provided in the scenario.
The Category 6 Ethernet cable run length is 120 meters (394 feet).
Standard Ethernet specifications (802.3) limit copper twisted-pair cable runs (including patch cables and horizontal cabling) to a maximum length of 100 meters (328 feet).
2
Evaluate the reported symptoms against physical distance limitations.
Signals traveling over 100 meters suffer from severe attenuation and voltage drop over Power over Ethernet (PoE).
Attenuation degrades data packets causing loss, while voltage drop causes the camera to intermittently lose power and reboot.
3
Select the root cause matching the physical layer violation.
Exceeding the 100-meter maximum distance limitation is the root cause.
A Ethernet repeater, PoE extender, or fiber optic link must be used for runs exceeding 100 meters.

Key Concept

Ethernet Maximum Cable Length Limitations and Attenuation
Question 955Question

Match each physical security control to the specialized security risk or intrusion vector it is primarily designed to mitigate.

Click a left item, then click its matching right item

Items

Faraday cage enclosure
Access control vestibule with anti-passback
Heavyweight steel bollards
Protected Distribution System (PDS)

Matches

Show answer & explanation

Answer

The Faraday cage enclosure matches RF eavesdropping mitigation; the Access control vestibule with anti-passback matches tailgating and credential-sharing prevention; Heavyweight steel bollards match vehicle ramming attack prevention; and the Protected Distribution System (PDS) matches physical cable wiretapping protection.
Each physical security control addresses a distinct attack vector: Faraday cages protect against RF eavesdropping; access control vestibules with anti-passback eliminate tailgating and badge-sharing; bollards defeat vehicle ramming attacks; and Protected Distribution Systems secure cabling runs against physical wiretapping.

Step-by-Step Solution

1
Identify the primary defensive characteristic of a Faraday cage.
Recognize that continuous conductive shielding blocks electromagnetic induction and radio frequency transmission.
Faraday cages prevent signals from entering or escaping shielded environments, mitigating RF eavesdropping.
2
Evaluate an access control vestibule enforcing anti-passback rules.
Determine that interlocking doors regulate physical movement while anti-passback prevents a single credential from being passed back to admit a secondary individual.
This combination directly stops tailgating/piggybacking and badge reuse.
3
Analyze the structural role of steel bollards.
Understand that bollards serve as reinforced physical barriers situated outside facility entrances.
Their primary function is to prevent vehicles from breaching building perimeters through ramming.
4
Determine the protective scope of a Protected Distribution System (PDS).
Identify that PDS encapsulates telecommunications cabling in secure conduits or alarm-monitored raceways.
PDS prevents unauthorized physical access and wiretapping along vulnerable cable pathways.

Key Concept

Physical Security Controls & Threat Alignment
Question 956Question

A system technician receives an automated alert indicating that a single drive has failed within a server's hot-swappable hardware RAID 5 array, causing the array to operate in a degraded state. Place the necessary steps for replacing the faulty drive and restoring array redundancy in the correct sequential order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The proper sequence begins with identifying the specific faulty drive via the controller software and chassis lights, followed by removing the failed drive, inserting a replacement drive of equal or greater capacity, and finally verifying that the automated RAID rebuild completes.
Correct RAID servicing requires identifying the exact failed disk first to prevent removing an active member disk. Once confirmed, the hot-swappable drive carrier is unlatched and removed. Inserting a qualified replacement drive triggers the hardware controller's automated parity reconstruction, which must be monitored until completion to confirm full redundancy has been restored.

Step-by-Step Solution

1
Locate the specific failed disk drive using status LEDs and hardware controller software.
The exact physical bay containing the faulted drive is verified without disrupting healthy operational drives.
Removing an active healthy drive from a degraded RAID 5 array will result in total array failure and data loss.
2
Disengage the drive latch mechanism and extract the failed disk from the hot-swap enclosure.
The failed physical media is separated from the backplane connector.
Hot-swappable hardware allows disengaging drive carriers while the system remains powered on.
3
Slide the replacement drive into the empty bay and lock the retention lever.
The new drive establishes physical and electrical connection with the RAID controller backplane.
The controller requires a functional physical disk of equal or greater storage capacity to write reconstructed parity data.
4
Access the RAID controller management interface to check rebuilding status.
The controller parity reconstruction process completes, returning the volume state from Degraded to Optimal.
Verifying completion ensures full fault tolerance is successfully restored.

Key Concept

Hot-Swappable RAID 5 Failed Drive Replacement Sequence
Question 957Question

A system administrator is configuring a desktop computer for a new staff member at a regional branch office. The computer must be capable of hosting incoming Remote Desktop Protocol (RDP) connections for remote administrative access and joining the corporate Active Directory domain. Which edition of Windows 11 is the minimum version required to support these features?

Show answer & explanation

Answer: Windows 11 Pro

Answer

Windows 11 Pro is the minimum edition required because it includes support for Active Directory domain join and incoming Remote Desktop host services.
Windows 11 Pro is the minimum edition designed for business environments that includes essential business management features such as Active Directory domain join, Group Policy management, and hosting incoming Remote Desktop Protocol (RDP) sessions.

Step-by-Step Solution

1
Identify the key operational requirements specified in the scenario.
The requirements are joining an Active Directory domain and hosting incoming Remote Desktop (RDP) connections.
Determining the minimum OS feature set requires matching specific enterprise features to Windows 11 edition boundaries.
2
Evaluate Windows 11 Home capabilities against these requirements.
Windows 11 Home supports outgoing RDP client connections but does not support incoming RDP hosting or Active Directory domain join.
Home edition is intended for consumer use and omits business management features.
3
Determine the lowest tier edition that meets all requirements.
Windows 11 Pro provides native support for domain join, Local Group Policy Editor, and incoming RDP hosting.
Selecting Windows 11 Pro satisfies all technical requirements while remaining the minimum required licensing tier.

Key Concept

Windows 11 Edition Feature Boundaries (Domain Join & RDP Server)
Estimated Time:1m 0s
Question 958Question

A facility manager notices that unauthorized visitors are entering a secure office building by closely following authorized employees through the main entrance door before it closes. Which physical security control should be implemented to specifically prevent this practice?

Show answer & explanation

Answer: An access control vestibule

Answer

An access control vestibule
An access control vestibule consists of a small space with two interlocking doors. When an authorized person passes through the first door, it must close completely before the second door unlocks and opens. This physical barrier ensures that only one person can enter per authentication event, directly stopping tailgaters.

Step-by-Step Solution

1
Identify the physical security threat described in the scenario.
The issue is tailgating (or piggybacking), where an unauthorized individual closely follows an authorized person through a secure doorway.
Selecting the correct physical security measure requires identifying the specific access control vulnerability.
2
Evaluate the available security mechanisms to determine which one restricts entryway throughput to one authenticated person at a time.
An access control vestibule creates an enclosed double-door checkpoint that isolates individuals during access attempts.
The interlocking mechanism ensures the outer door shuts completely before allowing entry through the inner door, neutralizing tailgating attempts.

Key Concept

Physical Access Controls and Tailgating Prevention
Question 959Question

A desktop support technician is configuring a static IPv4 connection on a multi-homed Windows 11 workstation. The Ethernet adapter connects directly to an isolated local storage network (10.50.0.0/24) with no internet access, while the Wi-Fi adapter connects to the corporate network with internet access. After the technician enters static IP settings (10.50.0.25) and populates the IP address, subnet mask, default gateway, and DNS fields on the Ethernet adapter, the computer can reach the storage servers but completely loses internet access across all applications. Which modification to the Ethernet adapter's TCP/IP properties will resolve the issue?

Show answer & explanation

Answer: Remove the Default Gateway entry from the Ethernet IPv4 configuration.

Answer

Removing the Default Gateway entry from the Ethernet IPv4 configuration resolves the routing conflict and restores internet access.
In Windows client networking, defining a Default Gateway instructs the operating system where to send traffic destined for IP addresses outside the local subnet. When a computer has two active network adapters (dual-homed) and both have default gateways defined, Windows creates multiple default routes (0.0.0.0/0). If internet traffic is sent out the adapter connected to an isolated storage network, the packets cannot reach the internet. Removing the default gateway from the isolated storage interface ensures that all non-local and internet traffic is sent exclusively through the Wi-Fi adapter's gateway.

Step-by-Step Solution

1
Analyze the dual-homed network setup and routing behavior.
Identified that both network adapters have a default gateway configured, creating competing default routes in the Windows routing table.
When multiple default gateways exist, Windows selects a gateway based on route metrics. If outbound internet traffic is routed through the storage adapter's gateway, packets are dropped because that subnet has no internet connectivity.
2
Determine the role of the Ethernet adapter.
The Ethernet adapter only needs to reach local subnet hosts on 10.50.0.0/24.
Subnets without an external exit router do not require a default gateway.
3
Select the appropriate TCP/IP configuration fix.
Clearing the default gateway field on the storage adapter leaves the Wi-Fi adapter's gateway as the sole default route for out-of-subnet and internet traffic.
This guarantees internet traffic routes through Wi-Fi while storage traffic remains local to the Ethernet adapter.

Key Concept

Dual-Homed Default Gateway Routing Conflicts
Question 960Question

A system administrator needs to upgrade several workstations currently running 32-bit Windows 10 Home to 64-bit Windows 11 Pro to allow integration into the corporate Active Directory domain. Which of the following conditions and procedures must the administrator observe during this deployment? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: A clean installation must be performed because direct in-place architecture upgrades from 32-bit to 64-bit are not supported.; The Windows edition must be upgraded to Pro or Enterprise because Windows Home edition does not support joining an Active Directory domain.

Answer

A clean installation is required when migrating from a 32-bit to a 64-bit system architecture, and an edition upgrade from Home to Pro or Enterprise is necessary to join an Active Directory domain.
Moving from a 32-bit operating system to a 64-bit operating system fundamentally requires a clean installation, as in-place architectural upgrades are unsupported. Additionally, Windows Home edition does not support joining an Active Directory domain, requiring a product key or edition upgrade to Windows Pro or Enterprise.

Step-by-Step Solution

1
Evaluate the architectural path requirement when moving from 32-bit Windows 10 to 64-bit Windows 11.
Identified that an in-place upgrade across architectures is unsupported.
Microsoft Windows requires a clean installation (formatting the target volume) when changing architecture from 32-bit to 64-bit.
2
Evaluate the Windows edition requirements for corporate network integration.
Identified that Windows Home edition cannot be joined to an Active Directory domain.
Domain join functionality is an administrative management feature reserved for Windows Pro, Enterprise, and Education editions.

Key Concept

OS Upgrade Paths and Windows Edition Feature Matrix
PreviousPage 48 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin