Examkin

All practice questions

3551 questions

All types3,551Multiple choice1,809Multiple select786Numeric12Matching521Ordering423
Question 1061Question →

A network technician is configuring a secure Wi-Fi network for a corporate office. The security policy requires each employee to authenticate using their individual domain credentials rather than sharing a single pre-shared key. Which of the following wireless security standards should the technician implement?

Show answer & explanation

Answer: WPA3-Enterprise

Answer

WPA3-Enterprise
WPA3-Enterprise implements 802.1X authentication, which integrates with an enterprise authentication server (such as RADIUS) to verify each user's unique credentials before granting network access.

Step-by-Step Solution

1
Identify the authentication requirement from the scenario.
The requirement states that users must log in with individual domain credentials rather than a shared password.
Enterprise wireless security modes integrate with 802.1X/RADIUS RADIUS servers for central user authentication.
2
Evaluate the available wireless security modes against the requirement.
WPA3-Enterprise provides 802.1X authentication support, while Personal modes (WPA2/WPA3-Personal) use a shared passphrase.
Selecting the Enterprise variant fulfills the requirement for unique individual account authentication.

Key Concept

Enterprise vs. Personal Wireless Security Modes (802.1X / RADIUS)
Estimated Time:45s
Question 1062Question →

A network technician is preparing to upgrade several workstation computers in a remote satellite office from Windows 11 Home to Windows 11 Pro to satisfy centralized management and security compliance requirements. Which of the following administrative and security features will become natively available on these workstations as a result of upgrading to Windows 11 Pro? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Ability to join an Active Directory domain and utilize Group Policy Management; Full-volume storage encryption using BitLocker Drive Encryption

Answer

Upgrading to Windows 11 Pro natively enables Active Directory domain join (with Group Policy management) and BitLocker Drive Encryption.
Upgrading from Windows 11 Home to Windows 11 Pro grants access to business infrastructure management features—specifically Active Directory domain membership with Local/Domain Group Policy support—and enterprise data protection via BitLocker Drive Encryption.

Step-by-Step Solution

1
Analyze the feature set differences between Windows 11 Home and Windows 11 Pro.
Identify that Windows 11 Home lacks business management capabilities such as Domain Join, Group Policy management, Remote Desktop Server, and BitLocker Drive Encryption.
Windows Home is intended for consumer use, whereas Windows Pro provides essential management and encryption features for business environments.
2
Evaluate the management and encryption options.
Confirm that Active Directory Domain Join and BitLocker Drive Encryption become natively available upon upgrading to Windows 11 Pro.
These features meet the requirements for centralized management and full-disk protection.
3
Evaluate enterprise-exclusive features against Windows 11 Pro capability bounds.
Rule out AppLocker application control and LTSC update channels.
AppLocker enforcement and LTSC OS builds require Windows Enterprise or specialized enterprise licenses.

Key Concept

Windows Edition Capabilities & Feature Boundaries
Question 1063Question →

A CAD designer reports that their desktop workstation display exhibits random colored line artifacts and flickering geometric patterns specifically while rendering complex 3D models. The display functions normally during standard desktop tasks like email and web browsing. Which of the following actions should the technician take to diagnose and address the root cause of this issue? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Inspect and clean GPU cooling fans and heat sinks to eliminate thermal throttling and overheating.; Test the workstation using a known-good dedicated graphics card or run a specialized VRAM diagnostic utility.

Answer

The technician should inspect and clean GPU cooling components to resolve thermal issues, and test the workstation with a known-good graphics card or run VRAM diagnostics to verify hardware degradation.
Visual artifacts such as colored lines or flickering geometry that manifest specifically during intense 3D rendering are classic symptoms of graphics hardware degradation or GPU/VRAM overheating. Recommended diagnostic steps include verifying GPU cooling fan functionality and heatsink cleanliness, as well as testing with a known-good graphics card or running VRAM diagnostics to confirm hardware integrity.

Step-by-Step Solution

1
Analyze symptom patterns
Identified that visual artifacts (colored lines, flickering geometry) occur solely during heavy 3D rendering workloads while normal desktop tasks remain unaffected.
Hardware components such as GPU cores and VRAM draw significantly higher power and generate excess heat under 3D workloads, pointing toward thermal or physical hardware faults.
2
Inspect thermal hardware conditions
Check for dust buildup, fan failures, or high operating temperatures on the graphics card.
Overheating GPU silicon or faulty VRAM chips produce visual artifacts as thermal safety thresholds are approached.
3
Isolate hardware components
Swap the graphics card with a known-good card or run dedicated memory test utilities on video RAM.
Replacing or stress-testing the GPU confirms whether physical VRAM corruption or GPU degradation is present.

Key Concept

Identifying physical hardware faults and thermal issues (GPU/VRAM) as causes for load-dependent video artifacts
Estimated Time:1m 30s
Question 1064Question →

A helpdesk technician is troubleshooting a network color laser printer. Users report that standard text documents print quickly without issue, but attempting to print high-resolution architectural blueprints results in incomplete print jobs and an 'Out of Memory' error displayed on the printer's LCD panel. Which of the following actions should the technician take to resolve this problem?

Show answer & explanation

Answer: Install additional RAM into the memory expansion slot on the printer.

Answer

Install additional RAM into the memory expansion slot on the printer.
Laser printers operate as page printers, meaning they must construct and hold the entire bitmap image of a page in memory before feeding paper through the imaging drum. Highly detailed graphics and high-resolution images require substantial RAM. Installing additional onboard RAM provides the necessary memory buffer for the printer to render complex print jobs without generating memory overflow errors.

Step-by-Step Solution

1
Analyze the reported symptom and context.
Basic text documents print fine, but complex graphic files trigger an 'Out of Memory' error on the printer hardware.
Laser printers must rasterize the entire page image in internal memory before physical printing begins.
2
Identify the resource bottleneck.
High-resolution graphic files require a larger frame buffer than basic text files, exceeding the printer's current onboard memory capacity.
Complex graphics demand significant memory for page description language processing and image buffer storage.
3
Determine the appropriate corrective hardware action.
Upgrade the printer's installed onboard memory (RAM).
Expanding the printer's physical memory allows it to process large, dense print jobs without throwing memory overflow errors.

Key Concept

Laser Printer Memory Management and Rasterization
Question 1065Question →

An IT administrator is configuring a master Windows 11 reference system to create a standardized image for automated network deployment across a company's workstations. Which tool and option must the administrator run prior to capturing the image to remove system-specific parameters, such as unique Security Identifiers (SIDs) and hardware details?

Show answer & explanation

Answer: Run Sysprep with the Generalize option

Answer

Run Sysprep with the Generalize option
Running Sysprep with the Generalize option removes machine-specific information, such as the computer SID, user-specific data, and hardware configurations, allowing the image to be deployed cleanly to multiple destination computers without SID collisions.

Step-by-Step Solution

1
Identify the goal of removing hardware-specific configurations and unique Security Identifiers (SIDs) from a master reference OS image.
Recognize that a generalized image is required before capturing and deploying to multiple target machines.
Deploying an ungeneralized image causes SID duplicate conflicts and driver mismatches across host machines on a domain.
2
Evaluate the available Windows system deployment tools.
Select the System Preparation Tool (sysprep.exe) configured with the Generalize parameter.
The Generalize switch removes unique machine state, resetting hardware detection and user SID data for clean deployment.

Key Concept

Sysprep Generalization for Automated OS Image Deployment
Question 1066Question →

A network administrator is deploying a standardized Windows 11 Enterprise image across new workstations using Preboot Execution Environment (PXE) through Windows Deployment Services (WDS). During initial testing, UEFI-based workstations successfully obtain an IP address from the DHCP server and locate the WDS server, but fail during the initial boot loader download with an architecture mismatch error. Legacy BIOS-based workstations on the same network subnet complete the PXE boot process without any issues. Which of the following configuration changes on the network deployment services should the administrator make to resolve this boot failure for the UEFI endpoints?

Show answer & explanation

Answer: Configure DHCP vendor class identifier options to specify bootmgfw.efi as the Network Boot Program (NBP) for UEFI clients instead of pxeboot.n12

Answer

Configure DHCP vendor class identifier options to specify bootmgfw.efi as the Network Boot Program (NBP) for UEFI clients instead of pxeboot.n12.
Preboot Execution Environment (PXE) booting relies on the target machine downloading a Network Boot Program (NBP) via TFTP. Legacy BIOS systems use NBP files designed for x86/x64 legacy boot (such as pxeboot.n12 or wdsnbp.com). Modern UEFI machines require EFI binaries (such as bootmgfw.efi or wdsmgfw.efi). Configuring the network DHCP server or WDS deployment scope with proper vendor class policies ensures UEFI endpoints receive the correct .efi boot loader file.

Step-by-Step Solution

1
Analyze the boot failure symptom and environment details.
Identified that legacy BIOS machines boot successfully, while UEFI machines fail at the TFTP file download stage due to an architecture mismatch.
Legacy BIOS systems require 16-bit/32-bit real-mode Network Boot Programs such as pxeboot.n12, whereas UEFI firmware requires 64-bit EFI boot loaders like bootmgfw.efi or wdsmgfw.efi.
2
Evaluate PXE boot architecture requirements for DHCP and WDS configuration.
Determined that the DHCP server options (DHCP Option 67) must dynamically assign the correct Network Boot Program based on the client's architecture type identifier (Option 93).
Without vendor class filters or proper WDS boot policy definitions, UEFI devices receive legacy BIOS boot files which fail to execute in UEFI mode.
3
Select the correct administrative remediation step.
Assigning bootmgfw.efi as the NBP file for UEFI architecture clients allows the target systems to load the Windows PE boot environment successfully over PXE.
This directly resolves the architecture mismatch during network OS deployment.

Key Concept

PXE Deployment and UEFI vs. Legacy BIOS Network Boot Programs
Question 1067Question →

A systems administrator needs to perform several maintenance, backup, and diagnostic tasks across macOS and Linux endpoints. Match each macOS tool or Linux command-line utility to its corresponding administrative function.

Click a left item, then click its matching right item

Items

dd
rsync
Keychain Access
Console

Matches

Show answer & explanation

Answer

dd matches low-level byte-by-byte copying; rsync matches incremental file synchronization preserving metadata; Keychain Access matches secure management of encrypted passwords and certificates; Console matches monitoring real-time system logs and diagnostic reports.
Each utility corresponds to its primary administrative function: dd for block-level data duplication, rsync for delta-based file sync with metadata retention, Keychain Access for encrypted credential storage, and Console for real-time macOS system diagnostics.

Step-by-Step Solution

1
Analyze low-level disk copy requirements.
Identify dd as the tool that operates on raw block devices for byte-level cloning.
dd is designed for direct bit-stream transfers without filesystem structure overhead.
2
Analyze efficient file transfer and sync requirements.
Identify rsync as the utility that performs delta transfers while preserving file attributes.
rsync minimizes network bandwidth and maintains Linux/macOS metadata during synchronization.
3
Analyze macOS credential storage requirements.
Identify Keychain Access as the secure repository.
Keychain Access manages encrypted keychains storing passwords, keys, and certificates in macOS.
4
Analyze macOS logging and diagnostic requirements.
Identify Console as the log aggregation utility.
Console provides real-time log viewing and report inspection for macOS system processes.

Key Concept

macOS and Linux Administrative Tools and CLI Utilities
Question 1068Question →

A network technician is troubleshooting a newly relocated workstation in a branch office. The user reports that the computer can successfully communicate with local network printers and shared folders on the same subnet (192.168.10.0/24), but cannot access any remote subnets or external websites. The technician runs `ipconfig /all` on the workstation and observes the following output:

IPv4 Address: 192.168.10.45
Subnet Mask: 255.255.255.0
Default Gateway:
DNS Server: 192.168.10.1

Which of the following is the MOST likely cause of this connectivity issue?

Show answer & explanation

Answer: The workstation network adapter is missing a default gateway address.

Answer

The workstation network adapter is missing a default gateway address.
The option identifying a missing default gateway address is correct because the default gateway is required for a host to send network traffic to destinations outside its local IP subnet. Since local communication works fine but remote traffic fails, and the diagnostic output shows an empty Default Gateway line, adding the gateway address will resolve the issue.

Step-by-Step Solution

1
Analyze the diagnostic tool output provided by ipconfig /all.
The IPv4 address is 192.168.10.45, Subnet Mask is 255.255.255.0, DNS Server is 192.168.10.1, and the Default Gateway field is blank.
Reviewing the current IP configuration identifies which mandatory parameter is missing.
2
Correlate symptoms with the missing configuration setting.
Local traffic within 192.168.10.0/24 works because it does not require a router. Traffic intended for external subnets fails because no default gateway exists to forward packets outside the local subnet.
The default gateway serves as the router interface that forwards packets off the local network segment.

Key Concept

Default Gateway Configuration in Wired Networks
Question 1069Question →

A security technician is establishing physical defense-in-depth controls for a newly constructed enterprise data center situated on the ground floor near a public street. The organization mandates protection against physical vehicle breach into the facility, anti-tailgating controls at the server room access point, and physical protection against internal disk theft from rack-mounted equipment. Which of the following physical security controls should be implemented to satisfy ALL of these requirements? (Select THREE.)

Select all that apply

Show answer & explanation

Answer: Reinforced concrete bollards positioned along the building's exterior perimeter; An access control vestibule equipped with biometric access authentication; Server cabinets with smart locks and integrated chassis locks

Answer

The technician must deploy reinforced concrete bollards along the exterior perimeter, install an access control vestibule with biometric authentication at the entrance, and secure hardware using server cabinets with smart locks and chassis locks.
Implementing concrete bollards, access control vestibules with biometrics, and locking server cabinets directly addresses all three requirements: preventing vehicle breaches, stopping tailgating during room entry, and protecting rack-mounted server hardware from drive theft.

Step-by-Step Solution

1
Identify the exterior physical security control requirement for vehicle breach prevention.
Selecting concrete bollards mitigates vehicle impact risk along ground-floor walls near public streets.
Bollards are heavy physical barriers designed specifically to block motorized vehicle intrusion.
2
Identify the physical access control mechanism required to mitigate tailgating/piggybacking.
Deploying an access control vestibule (mantrap) enforces single-person entry via biometrics.
Interlocking doors in a vestibule ensure the exterior door closes and locks before the interior door unlocks after authentication.
3
Identify the internal hardware-level physical security control required to prevent drive and component theft.
Using locked server cabinets with smart locks and chassis locks secures physical disks within the rack.
Chassis and rack locks restrict physical access to disk bays, preventing internal drive theft by unauthorized persons.

Key Concept

Layered Physical Security Controls (Bollards, Vestibules, Smart Rack Enclosures)
Question 1070Question →

A cybersecurity consultant is hardening a healthcare organization's wireless network infrastructure across multiple clinics. The organization must comply with strict data confidentiality standards and protect against rogue access point impersonation, rogue client connection, and offline password cracking attacks. The infrastructure includes a centralized RADIUS server infrastructure and PKI (Public Key Infrastructure). Which TWO of the following configuration options should be implemented on the enterprise wireless networks to satisfy these security mandates?

Select all that apply

Show answer & explanation

Answer: Configure WPA3-Enterprise using EAP-TLS authentication.; Deploy WPA3-Enterprise operating in 192-bit mode with GCMP-256 encryption.

Answer

The correct configurations are deploying WPA3-Enterprise utilizing EAP-TLS authentication and enabling WPA3-Enterprise 192-bit mode with GCMP-256 encryption.
WPA3-Enterprise with EAP-TLS enforces mutual certificate authentication using RADIUS and PKI, protecting against rogue AP attacks and unauthorized client connections. Furthermore, WPA3-Enterprise 192-bit mode utilizing GCMP-256 provides enterprise-grade cryptographic strength necessary for protecting sensitive regulatory data.

Step-by-Step Solution

1
Analyze mutual authentication requirements
EAP-TLS relies on digital certificates on both server and client side, satisfying 802.1X enterprise requirements and mitigating rogue AP impersonation.
Centralized RADIUS with PKI enables certificate-based authentication.
2
Evaluate top-tier cryptographic encryption requirements
WPA3-Enterprise 192-bit mode uses GCMP-256 to ensure robust high-strength encryption for sensitive corporate and healthcare data.
Standard pre-shared keys or deprecated algorithms (TKIP) fail compliance and high-security mandates.

Key Concept

Enterprise Wireless Authentication Protocols and Encryption Standards (WPA3-Enterprise, 802.1X/RADIUS, EAP-TLS)
Estimated Time:2m 0s
Question 1071Question →

A cybersecurity technician reviews logs following a security breach at a remote call center. The investigation reveals that an unauthorized individual telephoned several newly hired support representatives while impersonating an internal IT service desk manager conducting routine system maintenance. The caller established trust by referencing actual internal ticket numbers and supervisor names, subsequently convincing the representatives to divulge their domain credentials and active multi-factor authentication (MFA) push approval tokens. Which of the following social engineering techniques primarily describes the attacker's strategy of establishing a fabricated scenario to manipulate targets?

Show answer & explanation

Answer: Pretexting

Answer

Pretexting is the primary social engineering technique used when an attacker invents a scenario and persona to trick victims into sharing credentials or approving access.
Pretexting is defined by an attacker creating a fabricated story and assumed role (such as an IT manager executing routine maintenance) to gain the victim's trust and extract confidential credentials or authentication tokens. The scenario emphasizes the elaborate lie and fake persona built to manipulate staff.

Step-by-Step Solution

1
Analyze the attack vector presented in the scenario.
Identified that the attacker used voice communication (phone call) combined with an elaborated lie (impersonating IT management conducting maintenance with real ticket numbers) to build trust.
Understanding the underlying methodology helps differentiate between technical exploits, physical breaches, and psychological manipulation tactics.
2
Evaluate the core objective and method of the attacker.
The core method was creating a fake narrative (pretext) to convince support staff to hand over MFA tokens and login credentials voluntarily.
Pretexting specifically focuses on the false pretext or identity established by the attacker to bypass standard security caution.
3
Compare against distractor attack types.
Physical entry tactics, automated DNS manipulation, and executive-focused phishing do not match the phone-based scenario creation described.
Ruling out physical and technical attack vectors confirms the accurate social engineering classification.

Key Concept

Pretexting in Social Engineering
Question 1072Question →

A system administrator needs to inspect currently active processes and monitor system resource usage directly from a Linux or macOS terminal session. Which of the following terminal commands can be used to view process information? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: top; ps

Answer

The correct commands for viewing running processes are top and ps.
The top command provides an interactive, real-time view of system resources and running processes, while the ps command generates a static snapshot list of currently running processes. Both commands natively serve to inspect process status in macOS and Linux terminal environments.

Step-by-Step Solution

1
Identify the administrative requirement.
The requirement is to list or monitor active system processes from the terminal interface.
Process management utilities in Unix-like systems (Linux and macOS) allow administrators to observe resource allocation and identify unresponsive applications.
2
Evaluate the candidate process monitoring tools.
The top tool provides interactive, real-time monitoring of active tasks, while the ps tool lists running processes in a static snapshot format.
Both top and ps are standard Unix CLI utilities designed specifically for viewing process information.
3
Differentiate from non-process utilities.
The df tool inspects free disk space on filesystems, and grep parses text streams for regular expressions.
These utilities fulfill storage and text processing roles rather than process enumeration.

Key Concept

Linux and macOS Process Monitoring Utilities
Question 1073Question →

A facility security team is upgrading the exterior defenses of a corporate headquarters to protect ground-floor glass entrances and perimeter walls against physical vehicle ramming attacks. Which of the following physical security controls should be installed around the building perimeter to prevent vehicles from breaching the entryways?

Show answer & explanation

Answer: Bollards

Answer

Bollards are the appropriate physical security control to prevent vehicle ramming attacks.
Bollards are rigid, impact-resistant vertical posts installed outside building perimeters to physically prevent vehicles from driving into structures or pedestrian walkways while permitting normal foot traffic.

Step-by-Step Solution

1
Identify the primary threat specified in the scenario.
The threat is a physical vehicle ramming attack directed at ground-floor entrances.
Choosing an effective security control requires selecting a physical barrier capable of countering kinetic vehicular impact.
2
Evaluate the listed physical security mechanisms against vehicular threats.
Bollards are heavy-duty posts planted in the ground engineered to stop motor vehicles.
Other options protect against unauthorized human access, electromagnetic emissions, or visual eavesdropping.

Key Concept

Physical Barriers and Perimeter Defense (Bollards)
Question 1074Question →

A payroll specialist at a healthcare organization receives an unsolicited telephone call from an individual claiming to be a senior support engineer for the company's VoIP telephony provider. The caller claims that critical system upgrades are underway and requests that the specialist verify their network password over the phone to prevent service disruption. Which of the following social engineering threat types is occurring?

Show answer & explanation

Answer: Vishing

Answer

Vishing
Vishing (voice phishing) involves using phone calls or voice communication technology to manipulate victims into handing over confidential credentials or personal data.

Step-by-Step Solution

1
Analyze the communication channel described in the attack scenario.
The attacker initiated contact via a direct, interactive telephone call.
The delivery vector narrows down the specific social engineering classification.
2
Evaluate the tactic and objective of the attacker.
The attacker impersonated a technical authority figure to request login credentials over the phone.
Voice-based social engineering designed to harvest credentials is classified as vishing.

Key Concept

Vishing (Voice Phishing)
Estimated Time:1m 0s
Question 1075Question →

A support technician is troubleshooting a newly deployed Windows 11 workstation used by a financial analyst. A legacy custom database client displays corrupted characters and symbols instead of text in its UI menus because the software does not natively support Unicode. The Windows system display language and input methods are configured for English. Which Control Panel applet must the technician use to resolve this issue by configuring the system locale for non-Unicode applications?

Show answer & explanation

Answer: Region applet, by selecting the Administrative tab and configuring the System Locale settings

Answer

The technician must open the Region Control Panel applet, navigate to the Administrative tab, and select Change system locale.
The Region Control Panel applet contains an Administrative tab that specifically controls the 'Language for non-Unicode programs' setting (system locale). Changing the system locale enables Windows to emulate the appropriate language environment and code page for legacy applications that do not support Unicode, resolving character display corruption without altering the primary Windows UI display language.

Step-by-Step Solution

1
Identify the root cause of the application display issue.
The legacy application uses non-Unicode character encoding, causing font rendering failures (mojibake) under the default code page.
Non-Unicode applications rely on the Windows system locale to determine which language code page to use for rendering text.
2
Locate the correct Windows Control Panel utility for regional and code page settings.
Open the Region applet in Control Panel.
The Region utility controls date, time, currency formatting, and legacy non-Unicode program encoding.
3
Navigate to the Administrative settings tab within the Region applet.
Click 'Change system locale...' under the 'Language for non-Unicode programs' section.
This setting applies system-wide code page mapping required for non-Unicode software to render menu text correctly.

Key Concept

Windows Control Panel Region Utility and System Locale Configuration
Question 1076Question →

A help desk technician needs to centralize printer management across the organization's Windows network. The technician requires a single console to view all active print queues, manage driver updates for multiple print servers, and create custom printer status filters. Which of the following administrative utilities is best suited for this task?

Show answer & explanation

Answer: Print Management

Answer

Print Management is the correct administrative tool for centralized management of print servers, queues, and drivers.
Print Management (printmanagement.msc) is an administrative snap-in designed specifically for monitoring print queues, managing local and network print servers, updating print drivers, and organizing printer views via custom status filters across an enterprise network.

Step-by-Step Solution

1
Identify the administrative requirement
The scenario requires managing multiple network print servers, custom driver deployments, and print queue filters from a unified interface.
Enterprise printer administration demands tools built for multi-server management rather than single-workstation applets.
2
Evaluate candidate Windows administrative snap-ins
Print Management (printmanagement.msc) provides full MMC snap-in functionality for print server consolidation, driver migration, and custom filter creation.
Other tools like Device Manager or Devices and Printers are limited to basic local hardware viewing or client-side default printer assignment.

Key Concept

Windows Print Management MMC snap-in capabilities
Question 1077Question →

An IT technician needs to update an organization's wireless network configuration so that employees authenticate with their own individual domain credentials rather than using a single shared password. Which of the following options must be implemented to support this authentication method? (Select TWO).

Select all that apply

Show answer & explanation

Answer: WPA2 or WPA3 Enterprise mode on the wireless access points; A RADIUS server configured for 802.1X authentication

Answer

To implement individual user authentication on a wireless network, the administrator must configure the access points for Enterprise mode (WPA2/WPA3 Enterprise) and deploy a RADIUS server supporting 802.1X authentication.
Enterprise security modes (WPA2-Enterprise and WPA3-Enterprise) utilize 802.1X network access control. This setup relies on a RADIUS (Remote Authentication Dial-In User Service) server to validate individual user account credentials against a centralized directory service.

Step-by-Step Solution

1
Identify the authentication requirement
Individual user credentials are required instead of a single shared network key.
SOHO or Personal wireless modes rely on Pre-Shared Keys (PSK) shared by everyone, whereas Enterprise modes support 802.1X individual login verification.
2
Determine the necessary network infrastructure components
Configure access points to use Enterprise mode and point them to a RADIUS server.
Enterprise mode delegates authentication duties to an 802.1X RADIUS server, which checks each user's credentials against a directory database.

Key Concept

802.1X and RADIUS integration for WPA2/WPA3 Enterprise authentication
Question 1078Question →

A security technician is leading a training session on workplace security for a healthcare organization. The technician explains the difference between digital and physical attack vectors. Which of the following options represent physical social engineering attack methods? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: An unauthorized individual follows an employee through a badge-restricted door without authenticating.; An attacker searches through unlocked trash containers outside the facility to recover discarded paper documents.

Answer

The physical social engineering attack methods are: following an unauthorized individual through a badge-restricted door without authenticating, and searching through unlocked trash containers outside the facility to recover discarded paper documents.
Tailgating (gaining unauthorized physical entry by closely following an authorized employee) and dumpster diving (sifting through trash for sensitive documents) are classic physical social engineering vectors that rely on exploiting physical access and human behavior.

Step-by-Step Solution

1
Analyze each option to determine if it relies on physical human interaction or physical access control bypass.
Following an authorized employee through a door (tailgating) and looking through trash for sensitive documents (dumpster diving) both require physical presence and exploit physical security vulnerabilities.
Physical social engineering vectors specifically target physical boundaries, waste disposal, or human courtesy at physical entry points.
2
Distinguish physical social engineering methods from digital social engineering and network/malware threats.
Targeted phishing emails (spear phishing), rogue wireless access points, and script-based malware execution operate digitally over networks or endpoints rather than through physical social manipulation.
Digital vectors utilize electronic communication channels and software vulnerabilities rather than physical entry or waste retrieval.

Key Concept

Physical Social Engineering Threat Types
Estimated Time:1m 0s
Question 1079Question →

A technician is servicing a desktop computer after a user attempted a memory upgrade. Upon turning on the power, the system fans run continuously, but no video appears on the monitor and the motherboard emits a distinct POST beep pattern (one long beep followed by two short beeps). The user believes the operating system files were corrupted during the upgrade. Which of the following hardware issues is indicated by these symptoms?

Show answer & explanation

Answer: A memory module is improperly seated or defective.

Answer

A memory module is improperly seated or defective.
POST beep codes are emitted by the motherboard speaker during pre-boot initialization when hardware critical to basic startup fails testing. A failure pattern occurring immediately after a memory upgrade indicates that the newly installed RAM module is either defective or not seated completely in its socket.

Step-by-Step Solution

1
Analyze the diagnostic indicators present during power-on.
The system emits a POST beep code (one long, two short beeps) before video output or OS boot occurs.
Power-On Self-Test (POST) runs firmware-level hardware checks prior to loading the operating system.
2
Differentiate between firmware hardware indicators and software/OS errors.
Beep codes signify a critical hardware detection failure (commonly RAM or display adapter depending on BIOS vendor) rather than software corruption.
The OS is not accessed until POST completes successfully.
3
Determine the most probable root cause following a memory installation.
The newly added RAM module was likely not seated completely into the slot or is defective.
Physical installation errors are the most common trigger for new POST failures post-upgrade.

Key Concept

POST Beep Code Diagnostics and Hardware Initialization
Estimated Time:1m 0s
Question 1080Question →

A help desk technician is setting up a newly staged Windows 11 workstation for a user in a small office environment. The user reports that while internet access is working properly, the workstation cannot view other local computers or printers on the subnet, nor can other devices discover this workstation. Upon inspecting the network settings in Windows, the technician notices that the active connection is assigned the Public network profile. Which of the following actions should the technician take to resolve the issue?

Show answer & explanation

Answer: Change the network profile type from Public to Private in the Windows Settings app.

Answer

Change the network profile type from Public to Private in the Windows Settings app.
In Windows 10 and 11, network location profiles control predefined firewall security rules. When a connection is set to Public network, Windows treats the network as untrusted and turns off Network Discovery as well as File and Printer Sharing. Changing the connection profile to Private informs Windows that the network is inside a trusted office or home environment, which automatically enables local network device discovery.

Step-by-Step Solution

1
Analyze the reported symptom and current configuration.
Identify that the system has functional internet connectivity but lacks local peer discovery because its active connection uses the Public network profile.
The Public profile in Windows enforces restrictive firewall rules that turn off Network Discovery and file sharing to protect the system on untrusted networks.
2
Reconfigure the Windows network profile setting.
Navigate to Settings > Network & internet > Network properties and select the Private network option.
Setting the profile to Private notifies Windows that the network location is trusted, permitting inbound and outbound local network discovery traffic.

Key Concept

Windows Network Location Profiles (Public vs. Private)
PreviousPage 54 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin