All practice questions

3551 questions

Question 1021Question

A user wants to update a desktop computer running Windows 10 Home to Windows 11 Home while preserving all existing applications, user settings, and personal files without erasing the local drive. Which OS installation method should a technician perform to achieve this?

Show answer & explanation

Answer: In-place upgrade

Answer

An in-place upgrade should be performed because it updates the operating system to a newer version while keeping all personal files, user settings, and installed applications.
An in-place upgrade allows an operating system to be updated to a newer version while maintaining the existing file system, installed applications, personal files, and user preferences without formatting the drive.

Step-by-Step Solution

1
Identify the user's goal
The user wants to transition from Windows 10 to Windows 11 without losing personal files or installed software.
Understanding the requirement determines whether data-destructive methods can be used.
2
Evaluate available installation methods
An in-place upgrade installs the new OS directly over the existing OS partition, retaining existing applications, configurations, and files.
Other methods like clean installs wipe existing data, requiring manual backup and app reinstallation.

Key Concept

OS Installation Methods (In-Place Upgrade vs. Clean Install)
Estimated Time:45s
Question 1022Question

Match each Windows command-line networking utility or switch to its corresponding configuration or diagnostic function.

Click a left item, then click its matching right item

Items

ipconfig /flushdns
netsh wlan show profile
nslookup
arp -a

Matches

Show answer & explanation

Answer

ipconfig /flushdns matches clearing the local DNS resolver cache; netsh wlan show profile matches displaying saved wireless network profiles; nslookup matches querying DNS servers directly; arp -a matches displaying the IPv4-to-MAC address resolution table.
Each tool maps to a specific networking sub-system: ipconfig /flushdns removes outdated DNS resolver cache records; netsh wlan show profile inspects stored Wi-Fi settings; nslookup issues diagnostic queries to DNS servers; arp -a displays physical hardware address mappings.

Step-by-Step Solution

1
Identify the command used for managing local host name resolution caching.
Recognize that 'ipconfig /flushdns' empties stale entries from the local DNS cache.
Flushdns targets client-side DNS cache resolution.
2
Identify the command used for inspecting saved wireless network configurations.
Determine that 'netsh wlan show profile' enumerates stored Wi-Fi connection settings.
The netsh shell context provides administrative access to wireless interface profiles.
3
Distinguish between active DNS server testing and Layer 2 address resolution inspection.
Pair 'nslookup' with DNS server query diagnostics and 'arp -a' with local MAC address table display.
Nslookup tests server-side name resolution performance, while arp inspects hardware address bindings.

Key Concept

Windows Networking Command-Line Diagnostic Utilities
Question 1023Question

Match each social engineering threat type on the left with its corresponding attack methodology on the right.

Click a left item, then click its matching right item

Items

Spear Phishing
Watering Hole Attack
Pretexting
Shoulder Surfing

Matches

Show answer & explanation

Answer

Spear Phishing matches with targeted, customized email communications; Watering Hole Attack matches with compromising frequently visited third-party websites; Pretexting matches with inventing a fabricated scenario to build trust; Shoulder Surfing matches with direct visual observation of screens or keyboards.
Each threat type is paired precisely with its defined attack vector: Spear phishing utilizes highly customized emails aimed at specific individuals, watering hole attacks infect websites frequently accessed by target groups, pretexting relies on fabricated scenarios to extract credentials, and shoulder surfing physically observes screens or keypads.

Step-by-Step Solution

1
Analyze digital versus physical social engineering attack vectors
Identified direct visual observation as shoulder surfing and customized email targeting as spear phishing.
Categorizing the operational vector isolates the specific threat definition.
2
Distinguish between strategic web compromises and identity fabrication scenarios
Watering hole attack targets shared web resources, whereas pretexting relies on impersonation and narrative creation.
Understanding the delivery mechanism differentiates watering hole attacks from pretexting scenarios.
3
Map each threat term to its exact operational description
All four threat pairs correctly aligned based on CompTIA threat taxonomy definitions.
Ensures accurate identification for security incident diagnosis and mitigation.

Key Concept

Social Engineering Threat Methodologies and Classifications
Question 1024Question

An IT support specialist is selecting the minimum Windows 11 edition required to fulfill specific hardware and feature deployment requirements for different user groups within an organization. Match each set of deployment requirements on the left with the minimum Windows 11 edition on the right that natively satisfies all specified conditions.

Click a left item, then click its matching right item

Items

Personal computing use with web browsing and multimedia playback, restricted to a maximum of 1 CPU socket and 128 GB RAM, lacking native Active Directory Domain Join and RDP Server capabilities.
Corporate desktop deployment requiring Active Directory Domain Join, BitLocker Drive Encryption, Client Hyper-V, and Remote Desktop Host capabilities.
High-performance data analysis workstation equipped with 4 physical CPU sockets and non-volatile dual in-line memory modules (NVDIMM-N).
Enterprise-managed endpoint requiring AppLocker application control policies, DirectAccess for seamless remote connectivity without VPN, and BranchCache optimization.

Matches

Show answer & explanation

Answer

Personal computing limited to 1 CPU socket/128GB RAM matches Windows 11 Home; Corporate features like Domain Join, BitLocker, and RDP Host match Windows 11 Pro; High-performance hardware with 4 CPUs and NVDIMM support matches Windows 11 Pro for Workstations; Enterprise management tools like AppLocker, DirectAccess, and BranchCache match Windows 11 Enterprise.
Each requirement scenario aligns directly with the feature set and hardware capabilities defined by Microsoft for Windows 11 editions: Home handles basic consumer tasks; Pro provides core business features like Domain Join, BitLocker, and RDP hosting; Pro for Workstations extends hardware scaling to 4 CPUs and NVDIMM memory; Enterprise delivers advanced administration tools like AppLocker, DirectAccess, and BranchCache.

Step-by-Step Solution

1
Analyze consumer hardware limits and administrative feature omissions.
Identify that 1 CPU socket max, 128 GB RAM limit, and absence of Domain Join or RDP Server define Windows 11 Home.
Windows Home editions cater to personal consumers and lack business-class management functionality.
2
Evaluate standard business management and encryption needs.
Determine that Active Directory Domain Join, BitLocker, Client Hyper-V, and RDP Host represent the feature set introduced in Windows 11 Pro.
Windows Pro is the standard minimum edition required for joining business networks and securing local data.
3
Assess high-end physical hardware capabilities such as multi-CPU sockets and persistent memory.
Match 4 physical CPUs and NVDIMM-N support to Windows 11 Pro for Workstations.
Standard Pro supports up to 2 CPUs and 2 TB RAM, whereas Pro for Workstations scales up to 4 CPUs, 6 TB RAM, and NVDIMM storage.
4
Identify specialized corporate compliance and remote access features.
Match AppLocker, DirectAccess, and BranchCache to Windows 11 Enterprise.
These advanced security, deployment, and bandwidth optimization features require an Enterprise volume license.

Key Concept

Windows 11 edition feature boundaries and hardware limits
Estimated Time:1m 30s
Question 1025Question

An IT technician is tasked with upgrading a user's workstation from 32-bit Windows 10 Home to 64-bit Windows 11 Pro. The user requests an in-place upgrade to preserve all personal files, desktop settings, and installed applications without performing a manual data backup and reinstall. Which of the following explains why the technician cannot perform this upgrade as requested?

Show answer & explanation

Answer: Cross-architecture upgrades from 32-bit to 64-bit operating systems cannot be performed as an in-place upgrade and require a clean installation.

Answer

Cross-architecture upgrades from 32-bit to 64-bit operating systems cannot be performed as an in-place upgrade and require a clean installation.
Microsoft Windows operating systems do not support in-place upgrades across differing CPU architectures (32-bit to 64-bit or vice versa). Moving from a 32-bit installation to a 64-bit installation requires backing up user data, performing a clean installation, and reinstalling all applications.

Step-by-Step Solution

1
Analyze the upgrade request parameters (32-bit Windows 10 Home to 64-bit Windows 11 Pro via in-place upgrade).
Identified an architecture transition from 32-bit (x86) to 64-bit (x64).
Windows operating system architecture dictates kernel structure, driver model, and system file organization.
2
Evaluate Windows OS upgrade path constraints regarding system architecture.
Confirmed that Microsoft Windows does not support direct in-place architecture migrations.
An in-place upgrade preserves existing system binaries and applications, which cannot translate 32-bit files and drivers into 64-bit equivalents.
3
Determine the required deployment procedure.
A clean installation is mandatory after backing up user data.
Switching from 32-bit to 64-bit requires reformatting the system drive, reinstalling the OS from 64-bit media, and re-installing applications.

Key Concept

Windows OS Architecture In-Place Upgrade Limitations
Question 1026Question

A technician is assigned to service a desktop workstation whose hardware RAID 1 array is operating in a degraded state due to a drive fault. The system hardware does not support hot-swapping. What is the correct order of steps the technician should take to replace the faulty drive and restore full redundancy to the array?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The proper sequence to replace a non-hot-swappable drive in a degraded RAID 1 array is to first identify the faulty drive using the RAID management utility, shut down the system and disconnect power, swap out the bad drive for a healthy replacement, power on the system and configure the controller to begin the rebuild, and finally verify that the rebuild finishes with an optimal array status.
When dealing with a non-hot-swappable system, procedures must be strictly ordered to preserve data integrity and system safety. First, diagnose and identify the exact drive that failed within the array controller management tool. Second, perform a clean shutdown and power removal to enable safe hardware access. Third, physically replace the failed disk with a compatible replacement. Fourth, power on and access the RAID utility to add the new disk to the array and trigger the sync/rebuild process. Finally, verify that the rebuild operation completes and the array transitions back to an optimal status.

Step-by-Step Solution

1
Identify the specific failed disk slot in the software console
Confirmed physical identity of the faulty drive
Prevents accidental removal of the surviving healthy drive, which would cause complete array failure.
2
Safely shut down the workstation and disconnect main power
System powered down safely for internal servicing
Cold-swap systems require complete power interruption before disconnecting internal data and power cables.
3
Unmount the failed drive and install the replacement drive
Fresh drive installed in the designated drive slot
Provides a functional disk of appropriate capacity to accept mirrored data.
4
Boot into the RAID controller utility and set the new drive to rebuild
Data rebuild process starts automatically or manually
The RAID controller must be commanded to copy existing data from the surviving drive to the new drive.
5
Verify that the rebuild process finishes completely
Array status changes from degraded to optimal
Confirms fault tolerance has been fully restored to the storage volume.

Key Concept

Cold-swappable RAID drive replacement and volume rebuild procedure
Question 1027Question

A systems administrator is performing administrative maintenance on macOS and Linux endpoints within an enterprise environment. The administrator needs to execute two specific command-line operations:

1. Recursively update both the user owner and group owner of the entire directory tree located at `/srv/appdata` to `sysadmin` on a Linux server.
2. Search through the system log `/var/log/auth.log` and display all lines that contain the exact phrase "Failed password" to audit security events.

Which of the following commands will successfully accomplish these tasks? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: sudo chown -R sysadmin:sysadmin /srv/appdata; grep "Failed password" /var/log/auth.log

Answer

The command 'sudo chown -R sysadmin:sysadmin /srv/appdata' successfully changes user and group ownership recursively, while 'grep "Failed password" /var/log/auth.log' searches for and extracts matching string entries from the designated authentication log.
Executing 'sudo chown -R sysadmin:sysadmin /srv/appdata' properly invokes superuser privileges to recursively change both the user owner and group owner of the specified directory path. Executing 'grep "Failed password" /var/log/auth.log' scans the authentication log file directly and outputs any lines containing the target string.

Step-by-Step Solution

1
Identify the proper tool for modifying user and group ownership recursively on Linux/macOS file systems.
Determine that 'chown' (change owner) with the '-R' (recursive) flag and the syntax 'owner:group' modifies directory ownership hierarchy.
The 'chmod' command controls access mode bits (rwx) rather than ownership identity.
2
Identify the proper command line utility for searching text contents within flat files in Linux/macOS environments.
Select 'grep' to search and print matching lines from '/var/log/auth.log'.
'grep' is the standard POSIX utility for matching regular expressions and plain strings inside log files, whereas 'ps' monitors running processes and 'findstr' is a Windows command.

Key Concept

macOS and Linux Command Line Utilities (chown, chmod, grep, ps)
Estimated Time:2m 0s
Question 1028Question

An IT technician is troubleshooting a shared network laser printer. Users report that every printed page has a sharp, continuous vertical black line running down the entire length of the paper. The technician replaces the toner cartridge, but the line remains in the exact same position on subsequent test prints. The printer utilizes separate toner cartridges and imaging drum units. Which of the following is the most likely cause of this issue?

Show answer & explanation

Answer: A scratched or damaged photosensitive imaging drum surface

Answer

A scratched or damaged photosensitive imaging drum surface
In electrophotographic (laser) printing, a continuous vertical line down the entire page is a classic symptom of a scratched photosensitive drum. The scratch prevents the drum from holding an electrical charge in that specific narrow band, attracting toner continuously during the development stage and transferring it onto the paper.

Step-by-Step Solution

1
Analyze the physical print defect symptom.
A continuous vertical black line along the direction of paper travel indicates a persistent surface anomaly during the exposure or charge stage of electrophotographic printing.
If the drum surface is physically gouged or scratched, it cannot hold an electrostatic charge, causing toner to continually adhere to the damaged strip.
2
Evaluate the outcome of replacing the toner cartridge.
Since replacing the toner cartridge did not resolve the line, and this printer uses modular separate drum units, the fault lies within the drum unit rather than the toner supply.
Isolating separate components confirms the photosensitive drum retains the physical damage.

Key Concept

Identifying laser printer print quality defects caused by drum surface physical damage versus fuser or driver failures
Estimated Time:1m 0s
Question 1029Question

A facilities security team is auditing physical access controls across a high-security corporate facility. Match each specialized physical security mechanism to the specific security risk it is primarily designed to mitigate.

Click a left item, then click its matching right item

Items

Faraday cage
Mantrap (Access Control Vestibule)
Bollards
Biometric scanner with anti-passback

Matches

Show answer & explanation

Answer

Each physical security control maps directly to its intended threat mitigation: Faraday cage mitigates electromagnetic emissions interception; Mantrap prevents tailgating/piggybacking; Bollards stop vehicle ramming attacks; Biometric scanner with anti-passback prevents credential pass-back and re-entry abuse.
Each physical security mechanism addresses a unique physical threat vector: Faraday cages block RF emissions, mantraps enforce single-person physical access, bollards prevent vehicle ramming, and anti-passback controls stop credential reuse.

Step-by-Step Solution

1
Analyze the protection mechanism of a Faraday cage
Identified that enclosure shielding stops RF emissions.
Faraday cages block electromagnetic signals, addressing eavesdropping or RF leakage.
2
Analyze the access control features of a mantrap (vestibule)
Identified interlocking door control.
Access control vestibules limit physical entry to one authenticated person at a time to prevent tailgating.
3
Analyze the structural role of bollards
Identified vehicle barrier capabilities.
Bollards are short posts designed to block vehicular access and absorb vehicle kinetic energy.
4
Analyze anti-passback security logic on biometric/card scanners
Identified exit/entry tracking constraint.
Anti-passback prevents an authenticated user from passing access credentials back to an unauthorized person to gain entry.

Key Concept

Physical Security Controls and Threat Mitigation Functions
Question 1030Question

A network administrator is designing an enterprise wireless infrastructure with varying security requirements across departments. Match each wireless authentication protocol or framework to its specific technical deployment requirement or operational security characteristic.

Click a left item, then click its matching right item

Items

EAP-TLS
PEAP
WPA3-Enterprise (192-bit Mode)
WPA2-Personal

Matches

Show answer & explanation

Answer

EAP-TLS pairs with server and client certificate requirement; PEAP pairs with server-side certificate creating a TLS tunnel for password authentication; WPA3-Enterprise (192-bit Mode) pairs with GCMP-256 encryption and HMAC-SHA384; WPA2-Personal pairs with PSK and CCMP vulnerable to offline dictionary attacks.
Each wireless framework is correctly matched based on standard 802.11 and 802.1X specifications: EAP-TLS mandates mutual PKI certificate verification; PEAP builds a server-authenticated TLS tunnel to protect user password challenges; WPA3-Enterprise (192-bit mode) elevates enterprise security with GCMP-256; and WPA2-Personal relies on static PSKs paired with CCMP encryption.

Step-by-Step Solution

1
Analyze certificate requirements for 802.1X EAP types
Identify that EAP-TLS strictly requires mutual authentication via digital certificates on both server and client endpoints, whereas PEAP requires a certificate only on the server.
Differentiating EAP-TLS from PEAP depends on evaluating certificate management complexity versus password authentication capabilities.
2
Evaluate high-security WPA3 suite specifications
Confirm that 192-bit WPA3-Enterprise specifies Suite B cryptographic standards including GCMP-256 cipher suites and SHA-384 message integrity.
Standard WPA2/WPA3 uses 128-bit CCMP/GCMP, whereas the optional 192-bit mode upgrades symmetric encryption to 256-bit GCMP.
3
Examine legacy SOHO security traits and attack vectors
Determine that WPA2-Personal relies on a static pre-shared key (PSK) with CCMP, which exposes the four-way handshake to offline dictionary attacks.
WPA3 replaced PSK with SAE to prevent offline dictionary attacks, making PSK vulnerability a key trait of WPA2-Personal.

Key Concept

Wireless Authentication Protocols and Enterprise Encryption Standards
Question 1031Question

A network technician receives reports that wireless clients in a open-plan office experience frequent dropped connections and severe latency whenever multiple users roam across the floor. An inspection shows that all wireless access points are set to broadcast on the 2.4 GHz band, share the same SSID, and are all manually locked to Channel 6 with maximum transmit power. Which of the following is the most likely cause of the network degradation?

Show answer & explanation

Answer: Severe co-channel interference caused by multiple overlapping access points operating on the exact same frequency channel

Answer

The most likely cause of network degradation is severe co-channel interference resulting from configuring all wireless access points on the same frequency channel (Channel 6).
Configuring all wireless access points on the same frequency channel (Channel 6) in close proximity causes co-channel interference (CCI). Because Wi-Fi uses CSMA/CA, access points and clients on Channel 6 must wait for the shared medium to clear before transmitting, resulting in packet delays, collisions, and dropped roaming sessions.

Step-by-Step Solution

1
Analyze the reported symptoms and environment configuration.
Identified that wireless access points are operating on the 2.4 GHz spectrum and all access points are fixed to Channel 6 at maximum power.
Understanding the physical wireless channel distribution is essential for diagnosing RF issues.
2
Evaluate the impact of uniform channel selection in the 2.4 GHz frequency band.
Multiple access points broadcasting on Channel 6 within range of each other contend for the same RF airtime, leading to packet collisions and high latency.
In 2.4 GHz Wi-Fi deployments, using the same channel on neighboring APs causes co-channel interference (CCI).
3
Determine the proper remediation strategy.
Reconfigure adjacent access points to alternate among the non-overlapping channels 1, 6, and 11, and adjust transmit power.
Distributing non-overlapping channels minimizes co-channel contention and facilitates smooth roaming.

Key Concept

Wireless Co-Channel Interference and Channel Selection
Estimated Time:1m 15s
Question 1032Question

A corporate executive frequently views confidential financial reports on a company laptop while traveling through busy airport lounges and public spaces. To mitigate the risk of shoulder surfing and unauthorized viewing of screen content by nearby individuals, which of the following physical security controls should be installed on the laptop screen?

Show answer & explanation

Answer: Privacy screen filter

Answer

Privacy screen filter
A privacy screen filter is designed specifically to restrict light transmission from side viewing angles, preventing onlookers from seeing sensitive data displayed on a monitor while maintaining clear visibility for the direct user.

Step-by-Step Solution

1
Identify the threat scenario described in the stem.
The primary threat is shoulder surfing (unauthorized visual inspection of screen content in public areas).
Choosing the correct control requires matching the physical security mechanism to the specific risk.
2
Evaluate the function of physical security controls against shoulder surfing.
A privacy screen filter narrows the viewing cone of the display screen, making it unreadable from side viewing angles.
This directly counteracts shoulder surfing while allowing the primary user to work normally.

Key Concept

Physical Security Controls - Privacy Filters
Question 1033Question

A systems administrator is configuring an automated deployment script to install an enterprise management tool across several Windows 11 Pro workstations. When executed remotely under the local SYSTEM account context, the installation process hangs indefinitely in the background because the executable defaults to an interactive setup wizard and attempts to trigger an immediate system reboot upon completion. Which of the following command-line switch combinations should the administrator append to the setup executable to ensure the installer completes unattended without prompting for user interaction or restarting the workstations?

Show answer & explanation

Answer: /quiet /norestart

Answer

The command-line switches /quiet /norestart should be appended to the setup executable.
Appending the /quiet switch suppresses the installation wizard GUI, allowing the installer to run completely unattended in non-interactive background sessions (such as under the SYSTEM account). Appending /norestart prevents the application setup from forcing an unannounced or immediate reboot on the target workstation upon completion.

Step-by-Step Solution

1
Analyze the deployment failure causes in the scenario.
The installer hangs because it expects user input in a hidden SYSTEM session GUI, and it disrupts endpoints by requesting an immediate reboot.
Remote automated background deployments run non-interactively, requiring all GUI prompts and automatic restarts to be explicitly disabled via installer switches.
2
Identify the required command-line switches for unattended application installation.
The switch /quiet (or /qn) suppresses the user interface and runs the setup silently, while /norestart prevents automated reboots.
Combining silent and reboot-suppression switches allows background script execution to complete cleanly.

Key Concept

Unattended Application Installation and Command-Line Switches
Estimated Time:1m 30s
Question 1034Question

A network technician discovers an rogue wireless router plugged into an active Ethernet wall jack in an unmonitored building lobby. To prevent visitors from physically attaching unauthorized devices to open network jacks in public areas without requiring major switch reconfiguration, which of the following physical security controls should be implemented?

Show answer & explanation

Answer: Physical RJ45 port locks

Answer

Physical RJ45 port locks
Physical RJ45 port locks fit inside unused network ports and require a special tool/key to remove. They provide a direct physical barrier preventing unauthorized hardware from connecting to active wall jacks in open or public spaces.

Step-by-Step Solution

1
Identify the primary threat vector
Unauthorized physical insertion of network hardware into open RJ45 wall outlets in a public area.
Publicly accessible Ethernet jacks present an open physical attack surface for rogue network access.
2
Evaluate physical security controls designed for open interfaces
RJ45 port locks physically cap and block unused Ethernet ports, requiring a physical key to remove.
This directly prevents unauthorized cable connections at the jack level without altering room permissions or tethering equipment.

Key Concept

Physical interface hardening via RJ45 port locks
Question 1035Question

A systems technician is preparing to deploy a 64-bit desktop application onto several Windows workstations. Which of the following architecture requirements and permission settings must be met for this application installation to succeed? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The host workstation must be running a 64-bit version of the Windows operating system.; Administrative privileges or UAC elevation must be granted if the installer writes to protected locations such as Program Files.

Answer

The correct prerequisites are that the target workstation must run a 64-bit version of Windows, and local administrator privileges or UAC elevation must be provided to modify protected system directories like Program Files.
Installing a 64-bit application requires a 64-bit operating system environment to handle the binary instructions. Additionally, because desktop application installers routinely write files to protected locations such as Program Files and modify the HKEY_LOCAL_MACHINE registry branch, User Account Control (UAC) elevation or administrative permissions are strictly required.

Step-by-Step Solution

1
Verify CPU and Operating System Architecture
Ensure the system runs a 64-bit OS, as 64-bit binaries cannot execute natively on a 32-bit operating system.
Architecture compatibility is a fundamental installer prerequisite.
2
Verify Administrative Permissions and UAC Requirements
Run the installer with elevated privileges (Run as administrator).
Application files placed in Program Files or System32 require local administrator rights.

Key Concept

Application Architecture and Permission Requirements
Estimated Time:1m 15s
Question 1036Question

A technician is troubleshooting a desktop workstation that suddenly powers off without any error messages during heavy CPU stress testing. Immediately pressing the power button afterwards yields no response or lights. However, after waiting several minutes, the workstation powers on normally, only to power off again when high processing loads are applied. Which of the following is the most likely cause of this behavior?

Show answer & explanation

Answer: The CPU thermal protection feature is initiating a thermal shutdown due to inadequate cooling or thermal paste failure.

Answer

The CPU thermal protection feature is initiating a thermal shutdown due to inadequate cooling or thermal paste failure.
Modern CPUs include integrated thermal sensors that trigger an immediate hard shutdown when operating temperatures exceed maximum thresholds. If the thermal compound has dried out or the CPU cooler fan has failed, high CPU load quickly pushes temperatures beyond critical limits. The mandatory delay before the system will turn back on is characteristic of thermal sensors resetting once the CPU heatsink dissipates enough ambient heat.

Step-by-Step Solution

1
Analyze the reported hardware symptom pattern.
The system powers down abruptly under load and fails to restart immediately, but restarts normally after a delay.
This specific delay cycle indicates a thermal component safety shutdown that requires cooling time before resetting thermal sensors.
2
Evaluate potential failure points matching thermal delay behavior.
CPU thermal throttling/shutdown mechanisms trigger under high load when heat dissipation fails.
Once the CPU temperature drops below critical safety cutoffs, thermal protection allows the system to initiate POST again.

Key Concept

CPU Thermal Throttling and Automatic Thermal Cutoff Shutdowns
Estimated Time:1m 15s
Question 1037Question

A cybersecurity technician is investigating a malware outbreak affecting several workstations in the research and development department. Network traffic logs indicate that all compromised devices recently accessed a trusted, niche vendor site commonly used by department employees for hardware specifications. Further analysis reveals that malicious actors infected the vendor site and embedded an exploit script specifically designed to target employees visiting from the organization's IP address range. Which of the following social engineering threat types best describes this attack vector?

Show answer & explanation

Answer: Watering hole attack

Answer

The correct threat type is a watering hole attack.
A watering hole attack targets a specific group by compromising a website they frequently visit and trust. Once the site is infected, the attacker delivers malware to visitors associated with the target organization.

Step-by-Step Solution

1
Analyze the incident symptoms and delivery mechanism.
Infection occurred when multiple employees visited a trusted, frequently accessed third-party vendor site.
Identifying the vector requires determining how the malicious payload reached the victim systems.
2
Evaluate the targeting method described in the scenario.
The legitimate site was compromised specifically to exploit users originating from the company's IP block.
This strategy targets a specific group by lying in wait at a place they naturally gather.
3
Match the observed behavior to CompTIA security threat classifications.
A compromised legitimate site used to target a specific organization defines a watering hole attack.
Distinguishing watering hole attacks from direct messaging techniques like spear phishing relies on identifying the passive, site-based compromise mechanism.

Key Concept

Watering Hole Attack
Estimated Time:1m 15s
Question 1038Question

A system administrator is provisioning workstations for a medical clinic. The compliance team mandates that individual local folders containing sensitive patient records must be encrypted using Encrypting File System (EFS) and that system restrictions must be configured locally using the Local Group Policy Editor (gpedit.msc). The workstations currently have Windows 11 Home installed. Which action should the administrator take to fulfill these requirements?

Show answer & explanation

Answer: Upgrade the operating system edition on the workstations to Windows 11 Pro.

Answer

Upgrade the operating system edition on the workstations to Windows 11 Pro.
Upgrading to Windows 11 Pro is necessary because Windows Home edition lacks both Encrypting File System (EFS) and the Local Group Policy Editor (gpedit.msc). Windows 11 Pro is the baseline edition designed for business environments requiring localized management tools and file-level encryption.

Step-by-Step Solution

1
Identify the required operating system features from the scenario.
The scenario requires Encrypting File System (EFS) for folder-level data protection and the Local Group Policy Editor (gpedit.msc) for local policy management.
Determining feature requirements establishes which Windows edition tier is mandatory.
2
Evaluate feature availability in the current Windows edition (Windows 11 Home).
Windows 11 Home does not support EFS, BitLocker management, Active Directory domain join, or Local Group Policy Editor.
Home edition is targeted at consumer workloads and omits corporate management tools.
3
Select the minimum qualifying Windows edition that provides both required features.
Windows 11 Pro includes native support for EFS, BitLocker, Local Group Policy Editor, Remote Desktop Server, and Domain Join.
Upgrading to Windows 11 Pro satisfies all compliance requirements without needing third-party workarounds.

Key Concept

Windows OS Edition Feature Boundaries (Home vs. Pro Capabilities)
Question 1039Question

A desktop support technician is configuring a non-domain-joined Windows 11 Pro workstation that requires persistent, automated access to several internal SMB network shares using distinct service account credentials. To ensure the local user is not repeatedly prompted for authentication credentials after system reboots, the technician must securely store these specific network login tokens in the operating system's Vault. Which Control Panel applet provides the necessary interface to add and manage these persistent Windows credentials?

Show answer & explanation

Answer: Credential Manager

Answer

Credential Manager is the correct Control Panel applet because it specifically manages stored Windows Credentials and Web Credentials used for authenticating to remote servers and SMB network shares.
Credential Manager is the dedicated Windows Control Panel utility used to store, modify, and back up authentication credentials (such as usernames and passwords) used to connect to websites, network shares, and mapped drives.

Step-by-Step Solution

1
Identify the technical requirement in the scenario.
The workstation needs persistent, non-interactive authentication credentials stored for SMB network share access.
Storing authentication tokens in the Windows Vault prevents repeated login prompts upon reboot.
2
Evaluate Control Panel utilities responsible for password and token vaulting.
Credential Manager contains the Windows Credentials tab specifically designed to save hostnames, usernames, and passwords for network resources.
Neither User Accounts nor System applets store resource-specific network vault credentials.

Key Concept

Windows Credential Manager Utility
Question 1040Question

A system administrator is investigating intermittent system crashes and application errors reported by a workstation user over the past two weeks. The administrator needs to view a timeline graph displaying application failures, Windows updates, and hardware warnings alongside a daily system stability index rated from 1 to 10. Which Windows administrative utility should the administrator use to review this continuous historical stability record?

Show answer & explanation

Answer: Reliability Monitor

Answer

Reliability Monitor is the correct utility because it tracks system events, software updates, and system crashes on a continuous daily timeline while computing a stability rating score.
Reliability Monitor is designed specifically to track system stability over time. It reviews system logs to chart software installations, driver updates, application crashes, and unexpected shutdowns on a daily graph with an overall stability rating from 1 to 10.

Step-by-Step Solution

1
Identify the required administrative capability
The requirement calls for a historical timeline showing past system failures, installation events, and a daily stability score.
Different Windows management tools target real-time metrics, raw event logging, or historical stability trends.
2
Evaluate the administrative utility features
Reliability Monitor (accessible via perfmon /rel or Control Panel Security and Maintenance) automatically compiles critical events, warnings, and updates into a visual 1–10 stability index timeline.
This specifically matches the administrator's requirement to correlate system crashes with past updates or application failures.

Key Concept

Reliability Monitor system stability tracking
PreviousPage 52 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin