All practice questions

3551 questions

Question 1081Question

A field technician is deploying a ceiling-mounted projector in a conference room. After turning on the unit, the technician observes that the projected image displays noticeable geometric distortion, appearing significantly wider at the top edge than at the bottom edge. Because the ceiling mount is fixed in place, physical movement of the projector is not an option. Which of the following settings should the technician adjust on the projector to correct this image shape?

Show answer & explanation

Answer: Keystone correction

Answer

The technician should adjust the keystone correction setting on the projector menu.
Keystone correction is designed specifically to solve trapezoidal image distortion occurring when a projector cannot be placed completely perpendicular to the screen. Adjusting the digital keystone setting squishes or expands the edge matrix to render a rectangular picture.

Step-by-Step Solution

1
Identify the optical symptom described
Trapezoidal distortion (image wider at top than bottom) caused by an angled projection plane relative to the surface.
When a projector is tilted up or down relative to the screen plane, light travels further to reach the top edge than the bottom, expanding the top edge.
2
Determine the appropriate hardware/software feature to rectify image geometry without moving the physical mount
Keystone correction feature digitally scales the projected frame to restore a square 16:9 or 4:3 rectangle.
Keystone settings adjust horizontal and vertical image scaling compensation internally.

Key Concept

Projector Keystone Adjustment for Geometric Distortion
Question 1082Question

A technician is troubleshooting an impact dot-matrix printer used in a warehouse to print multi-part continuous shipping forms. The printer is running, but text on the carbon copy pages is faint and barely legible. Place the troubleshooting and corrective steps in the logical order they should be performed according to standard methodology.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The proper sequence begins with inspecting the ribbon consumable, followed by adjusting the mechanical platen gap for paper thickness, running a local hardware self-test page, and lastly replacing the printhead assembly if hardware fault is confirmed.
Standard CompTIA troubleshooting dictates beginning with simple physical checks (inspecting ribbon tension and condition), moving to mechanical adjustments specific to the media (setting the platen gap lever), performing standalone hardware tests (printing a self-test page), and executing component replacement (replacing the printhead) only after isolating a physical defect.

Step-by-Step Solution

1
Inspect the ink ribbon cassette for proper installation, proper ribbon tension, and excessive wear or dryness.
Confirms whether the ribbon is properly delivering ink to the paper surface upon pin impact.
Always check simple physical consumables first before modifying mechanical settings or replacing parts.
2
Adjust the printhead platen gap lever setting based on the thickness of the multi-part forms.
Positions the printhead at the correct distance to allow full pin impact force through carbon duplicate layers.
An incorrect platen gap setting prevents pins from exerting enough force on thicker multi-part paper.
3
Execute a built-in hardware self-test page from the printer control panel.
Determines if the physical mechanical components print correctly independent of computer drivers or print queues.
Isolates hardware print defects from host system driver configuration errors.
4
Replace the printhead assembly.
Restores pin matrix striking mechanism if specific pins are bent or broken.
Major hardware component replacement is performed only after isolating the fault to a broken internal assembly.

Key Concept

Impact Dot-Matrix Troubleshooting Methodology
Question 1083Question

A systems administrator is configuring a high-performance video editing workstation equipped with dual physical CPU sockets. After installing the operating system, Task Manager reports that only one physical CPU socket is active. The workstation currently runs Windows 11 Home. Which of the following represents the minimum Windows edition upgrade required to enable support for both physical CPU sockets?

Show answer & explanation

Answer: Windows 11 Pro

Answer

Windows 11 Pro is the minimum edition required because it expands hardware socket support from one physical CPU (supported by Home) to two physical CPUs.
Windows 11 Home is limited by software licensing to a single physical CPU socket. Windows 11 Pro increases this maximum socket limit to two physical CPUs and expands maximum RAM capacity to 2 TB, satisfying the hardware requirement at the lowest edition level.

Step-by-Step Solution

1
Identify current OS hardware limitations
Windows 11 Home is limited to 1 physical CPU socket and 128 GB of RAM.
Task Manager only detects one socket due to licensing constraints enforced by the Home edition.
2
Determine target hardware requirements
The workstation requires support for 2 physical CPU sockets.
The motherboard contains two physical processors that need to be actively utilized.
3
Compare Windows edition minimum capabilities
Windows 11 Pro supports up to 2 physical CPUs and 2 TB of RAM.
Upgrading to Pro fulfills the dual-socket requirement at the lowest edition tier without needing Pro for Workstations or Enterprise (which support up to 4 sockets).

Key Concept

Windows Edition Hardware Socket Limits
Question 1084Question

A desktop support technician needs to automate Windows deployments across several new workstations using an answer file. Arrange the steps involved in creating and executing an unattended Windows installation using Windows System Image Manager (SIM) in the correct chronological order.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence for an unattended Windows deployment using Windows SIM is: 1) Open install.wim in Windows SIM to generate a catalog file, 2) Create a new answer file and configure settings across configuration passes, 3) Validate the answer file in Windows SIM, 4) Save the answer file as autounattend.xml in the root folder of the USB installation media, and 5) Boot the target system from the USB drive.
The correct order follows the standard Windows System Image Manager (SIM) deployment workflow: First, generate or load a catalog (.clg) file from install.wim. Second, create the answer file and populate settings in configuration passes. Third, validate the answer file to check for configuration errors. Fourth, save the file as autounattend.xml in the root directory of the boot USB media. Finally, boot the target system from the media to execute the automated installation.

Step-by-Step Solution

1
Generate image catalog
A catalog file (.clg) is created from install.wim
Windows SIM requires a catalog file to index configurable settings for the specific Windows installation image.
2
Configure answer file settings
Components are added to configuration passes such as specialize and oobeSystem
Deployment settings must be populated into appropriate passes to automate setup prompts like user creation and network configuration.
3
Validate answer file
Answer file is checked for syntax errors and missing required elements
Validation confirms that the answer file structure is error-free before saving it to installation media.
4
Save autounattend.xml to media root
The file autounattend.xml is placed at the root level of the bootable USB drive
Windows Setup automatically searches for autounattend.xml at the root level of removable media during system boot.
5
Boot target workstation
Unattended installation executes automatically
Booting from the USB media causes Windows Setup to detect autounattend.xml and perform the installation silently.

Key Concept

Unattended OS Installation with Windows SIM and autounattend.xml
Question 1085Question

A Linux systems administrator needs to create a compressed gzip archive of the directory `/var/log/audit` named `audit_backup.tar.gz`. Once created, the administrator must assign ownership of the new file to the user `secadmin` and the group `auditteam`. Which of the following command sequences correctly completes both tasks?

Show answer & explanation

Answer: tar -czvf audit_backup.tar.gz /var/log/audit && chown secadmin:auditteam audit_backup.tar.gz

Answer

The command sequence tar -czvf audit_backup.tar.gz /var/log/audit && chown secadmin:auditteam audit_backup.tar.gz correctly creates the compressed archive and sets file ownership.
The `tar` utility with the `-czvf` options creates (`-c`), gzips (`-z`), verbosely logs (`-v`), and outputs to file (`-f`) the compressed archive from the specified directory. Following archive creation, `chown owner:group` is the standard Linux/macOS command to change both user and group ownership of the target file.

Step-by-Step Solution

1
Identify the proper command and flags to create a compressed archive.
Use `tar` with flags `-c` (create), `-z` (compress with gzip), `-v` (verbose output), and `-f` (filename argument). Target: `tar -czvf audit_backup.tar.gz /var/log/audit`.
Creating a gzipped archive in Linux/macOS CLI requires the standard tar compression syntax.
2
Identify the command to change file user and group ownership.
Use `chown secadmin:auditteam audit_backup.tar.gz`.
The `chown` command modifies user and group ownership using the `user:group` syntax.

Key Concept

Linux Archiving and Ownership Management
Question 1086Question

An IT technician is configuring an automated network-based deployment of Windows 11 Enterprise across several client workstations. The goal is to perform an unattended installation without requiring user interaction during setup for prompts such as language selection, partition creation, and local account configuration. Which of the following components or configurations are required to perform this unattended installation? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: An answer file (such as autounattend.xml) containing pre-configured installation responses must be included in the installation media or deployment share.; The target workstations must boot into a lightweight pre-installation environment (such as Windows PE) with network drivers loaded to access the installation image.

Answer

Unattended network deployments of Windows require an answer file (autounattend.xml) to bypass interactive setup prompts and a pre-installation environment (Windows PE) with network drivers to boot target systems and mount the deployment share.
For an automated, unattended OS installation over a network share, an XML answer file (such as autounattend.xml) is required to automatically respond to setup prompts without technician intervention. Furthermore, the client systems must boot into a minimal pre-installation environment (Windows PE) equipped with proper network drivers to establish a network connection and execute setup from the share.

Step-by-Step Solution

1
Identify the mechanism for bypassing interactive setup prompts during OS installation.
Recognize that an XML-based answer file (autounattend.xml) supplies predefined answers for regional, user account, and formatting configurations.
Without an answer file, setup halts at user configuration screens requiring manual input.
2
Identify the required boot environment for bare-metal target machines receiving a network deployment.
Determine that Windows PE must be booted on target workstations to load basic hardware drivers and establish network connectivity.
Bare-metal machines lack an installed operating system and require Windows PE to access remote setup files across the local network.
3
Evaluate distractor choices against valid Windows deployment constraints.
Eliminate choices involving 32-bit to 64-bit in-place paths, sfc utility usage on installation shares, and pre-installation BitLocker configuration on unsupported OS editions.
Architecture changes require clean installs, SFC repairs installed OS files, and BitLocker is unavailable on Windows Home.

Key Concept

Unattended Network OS Deployment Prerequisites
Estimated Time:2m 0s
Question 1087Question

A network administrator discovers that multiple employees in the legal department received text messages on their corporate mobile devices containing a link to reset their domain credentials due to a mandatory security update. The link directs users to a fraudulent web page whose URL replaces the letter 'o' with the digit '0' in the company's official domain name to harvest login details. Which of the following social engineering attack vectors did the threat actor combine to execute this attack?

Show answer & explanation

Answer: Smishing and typosquatting

Answer

Smishing and typosquatting
The correct answer combines smishing (using SMS text messages as the initial attack vector) and typosquatting (registering a fake domain with a subtle visual misspelling such as replacing 'o' with '0').

Step-by-Step Solution

1
Analyze the primary communication channel used by the threat actor.
The attack message was delivered via SMS text messages to mobile devices, which identifies the delivery vector as smishing (SMS phishing).
Phishing variants are categorized by their medium: email (phishing), voice calls (vishing), and SMS text messaging (smishing).
2
Examine the technical method used to host the deceptive web page.
The attacker registered a domain name replacing 'o' with '0' to mimic the official corporate domain, which defines typosquatting (URL hijacking).
Typosquatting relies on user typographical errors or visual character similarities in domain names to trick victims into providing credentials on fraudulent portals.
3
Combine the identified attack vectors to select the matching threat pair.
The combination of SMS-based delivery and misspelled domain spoofing equals smishing and typosquatting.
Both vectors must be correctly identified to accurately classify the composite attack scenario.

Key Concept

Classification of Social Engineering Delivery Mechanisms and Domain Spoofing Techniques
Estimated Time:1m 30s
Question 1088Question

A system administrator is upgrading an enterprise wireless network to meet a strict zero-trust compliance policy. The policy mandates full mutual authentication, requiring both the RADIUS authentication server and the connecting wireless client devices to present valid X.509 digital certificates before network access is granted. Additionally, the authentication protocol must not rely on password-based inner tunnel methods. Which Extensible Authentication Protocol (EAP) method must the administrator deploy on the network?

Show answer & explanation

Answer: EAP-TLS

Answer

EAP-TLS is the required protocol because it enforces mutual authentication using client-side and server-side X.509 digital certificates.
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) provides the highest level of 802.1X wireless security by mandating mutual authentication via PKI digital certificates on both the RADIUS server and every client endpoint. It does not rely on password-based inner tunnel authentication.

Step-by-Step Solution

1
Analyze authentication requirements specified in the security policy
Identified the need for mutual authentication where both server and client present digital certificates, explicitly avoiding password-based tunnel methods.
Enterprise wireless networks using 802.1X support various EAP types with distinct credential requirements.
2
Evaluate EAP implementation standards
EAP-TLS (Transport Layer Security) is the only standard EAP type that mandates client-side certificates alongside server-side certificates for TLS handshake authentication.
PEAP, EAP-TTLS, and EAP-FAST typically use server certificates or PACs with password-based inner authentication mechanisms.
3
Select the compliant authentication protocol
Confirm EAP-TLS as the correct selection for maximum authentication security.
EAP-TLS eliminates password-harvesting risks by using certificate-based mutual validation.

Key Concept

EAP-TLS Mutual Authentication and Wireless Security Standards
Estimated Time:1m 30s
Question 1089Question

A systems administrator needs to protect legacy database servers housed in a shared facility room where multiple third-party contractors have valid door key access. The administrator must ensure that any unauthorized physical opening of the server chassis to access internal drives is visibly detectable during audits, without requiring continuous electrical power or active network monitoring. Which of the following physical security controls should the administrator implement?

Show answer & explanation

Answer: Tamper-evident seals placed across the chassis panel seams

Answer

Tamper-evident seals placed across the chassis panel seams provide passive, visible detection of unauthorized physical opening of the server enclosure without relying on power or network connectivity.
Tamper-evident seals are designed specifically to indicate whether an enclosure or chassis panel has been opened or altered. When an unauthorized person attempts to remove the panel, the seal fractures or leaves a distinct patterned mark that cannot be reapplied seamlessly. Because they are completely passive, they require no power or network connections, perfectly matching the audit requirement.

Step-by-Step Solution

1
Analyze the physical security requirement.
The primary goal is to detect unauthorized physical opening of the server chassis to expose internal drives in an environment where room key access is shared.
Identifying the targeted threat (chassis opening) separates room access controls from component tamper detection.
2
Evaluate the environmental constraints.
The solution must operate passively without electrical power or active network monitoring.
Eliminating powered or network-dependent mechanisms rules out electronic chassis intrusion sensors and automated door access logging.
3
Select the appropriate physical security control.
Tamper-evident seals fracture or display permanent adhesive patterns when enclosure panels are removed.
Seals satisfy both the visual detection requirement and the zero-power constraint.

Key Concept

Tamper Detection and Physical Integrity Controls
Estimated Time:1m 30s
Question 1090Question

An IT security team is implementing physical defense controls across an enterprise facility. Match each physical security control mechanism on the left to its corresponding protective security objective on the right.

Click a left item, then click its matching right item

Items

USB Port Locks
Faraday Shielding
Biometric Scanner with Liveness Detection
Tamper-Evident Asset Tag

Matches

Show answer & explanation

Answer

USB Port Locks matches with preventing unauthorized physical insertion of removable media; Faraday Shielding matches with blocking radio frequency signals; Biometric Scanner with Liveness Detection matches with mitigating authentication spoofing attempts; Tamper-Evident Asset Tag matches with deterring unauthorized chassis opening and component swapping.
Each physical security control serves a specific technical function: USB port locks physically obstruct ports against unauthorized media insertion; Faraday shielding blocks RF wireless signals; liveness detection verifies real-time physical presence to defeat biometric spoofing; and tamper-evident asset tags reveal physical tampering or component theft.

Step-by-Step Solution

1
Analyze the primary purpose of USB Port Locks
Identified physical obstruction of unused system ports to block flash drive insertion.
Physical port locks restrict unauthorized peripheral connections.
2
Analyze the primary purpose of Faraday Shielding
Identified RF containment and signal blockage.
Faraday enclosures absorb or reflect external electromagnetic waves.
3
Analyze the role of Liveness Detection in biometric scanning
Identified detection of real-time physiological indicators (e.g., pulse, eye movement).
Liveness verification prevents spoofing with static photos or artificial replicas.
4
Analyze Tamper-Evident Asset Tags
Identified permanent damage patterns when disturbed.
Tamper indicators signal unauthorized physical access or component replacement.

Key Concept

Physical Security Controls and Threat Mitigation
Estimated Time:1m 30s
Question 1091Question

A desktop technician working on a Linux workstation needs to reassign the owner of a document from one user account to another. Which command-line utility should the technician use to modify the file ownership?

Show answer & explanation

Answer: chown

Answer

The chown utility is the correct command used to change user ownership of files and directories in Linux and macOS operating systems.
The chown command (short for 'change owner') allows system administrators and file owners to change the assigned user account or group associated with a file or directory in Unix-like operating systems.

Step-by-Step Solution

1
Identify the goal specified in the scenario
The goal is to change the owner of a file on a Linux workstation.
Different CLI tools manage permissions, processes, and file metadata separately.
2
Select the appropriate Linux/macOS command for file ownership
The chown (change owner) command is designed specifically for modifying file owner and group settings.
Understanding core command responsibilities ensures correct file administration.

Key Concept

Linux/macOS command-line utilities for file owner and permission management
Question 1092Question

Match each security threat or social engineering vector on the left with its corresponding attack scenario description on the right.

Click a left item, then click its matching right item

Items

Spear Phishing
Tailgating
Watering Hole Attack
Logic Bomb

Matches

Show answer & explanation

Answer

Spear Phishing matches targeted communications aimed at specific job roles; Tailgating matches unauthorized physical entry following close behind an employee; Watering Hole Attack matches compromising trusted third-party websites visited by target users; Logic Bomb matches dormant malicious code triggered by defined system conditions.
Each attack vector correctly matches its operational description: Spear Phishing uses customized communications aimed at specific roles; Tailgating physically circumvents access control doors; Watering Hole Attack compromises external trusted websites to target specific groups; and a Logic Bomb relies on specific logical triggers to detonate dormant malicious code.

Step-by-Step Solution

1
Identify the vector relying on customized digital communication targeting specific roles.
Spear Phishing corresponds to the tailored email targeting the payroll manager.
Spear phishing differs from general phishing because it is directed at a specific target individual or department with customized context.
2
Identify the physical security entry breach mechanism.
Tailgating corresponds to following an authorized employee into a secured building without badging in.
Tailgating exploits physical proximity and social courtesies to bypass physical access controls.
3
Identify the attack targeting trusted external websites.
Watering Hole Attack corresponds to infecting an industry news portal regularly visited by developers.
Watering hole attacks infect trusted third-party sites frequented by the target group to deliver malware.
4
Identify the software-based threat tied to specific conditional triggers.
Logic Bomb corresponds to dormant code executing upon a specific database condition or event.
Logic bombs remain inactive until predetermined logical criteria (such as dates, events, or missing file checks) occur.

Key Concept

Social Engineering Vectors and Malware Threat Classifications
Question 1093Question

A technician is troubleshooting a mobile workstation that experiences intermittent system reboots and memory-related blue screen errors during rendering workloads. Diagnostic testing indicates memory read/write errors that occur only when multiple memory modules are populated simultaneously across different slots. Which TWO of the following initial actions should the technician take to troubleshoot and resolve this issue?

Select all that apply

Show answer & explanation

Answer: Test each memory module individually in the designated primary slot to verify single-module integrity.; Verify that memory modules are installed in matching pairs according to motherboard dual-channel slot population guidelines.

Answer

The technician should test each memory module individually in the primary slot to verify module functionality and ensure modules are populated according to motherboard dual-channel documentation guidelines.
To systematically isolate memory instability on a mobile workstation, a technician must test memory modules individually to identify bad RAM sticks and verify that multiple modules follow the manufacturer's slot population rules for dual-channel architecture.

Step-by-Step Solution

1
Isolate individual memory modules by removing all but one module and testing it in the primary slot.
Determines whether a specific RAM stick is physically defective.
Running diagnostics on individual modules removes multi-channel memory controller variables.
2
Check motherboard documentation for correct memory slot population rules for dual-channel operations.
Ensures memory modules are seated in the proper paired slots.
Improperly paired RAM modules can cause bus timing errors and instability under heavy loads.

Key Concept

RAM Troubleshooting and Isolation Methodology
Question 1094Question

Match each wireless authentication protocol or security framework on the left with its correct operational requirement and cryptographic mechanism on the right.

Click a left item, then click its matching right item

Items

EAP-FAST
PEAP-MSCHAPv2
EAP-TLS
WPA3-SAE

Matches

Show answer & explanation

Answer

EAP-FAST matches with Protected Access Credentials (PACs) without mandatory PKI certificates; PEAP-MSCHAPv2 matches with server-side certificate tunneling user password authentication; EAP-TLS matches with mutual X.509 certificate authentication on both client and server; WPA3-SAE matches with dragonfly key exchange protecting against offline dictionary attacks.
Each protocol is accurately matched to its distinct architecture: EAP-FAST uses PACs in lieu of server certificates; PEAP-MSCHAPv2 uses a single server certificate to encrypt user password authentication; EAP-TLS enforces mutual authentication using digital certificates on both endpoints; WPA3-SAE implements Dragonfly zero-knowledge key exchange for pre-shared key environments.

Step-by-Step Solution

1
Analyze certificate requirements for enterprise EAP protocols
Identify that EAP-TLS mandates client and server digital certificates, PEAP-MSCHAPv2 requires only a server-side certificate, and EAP-FAST utilizes PACs to bypass standard PKI deployment.
Differentiating 802.1X/EAP authentication methods based on PKI complexity is essential for enterprise wireless deployments.
2
Analyze personal/SOHO WPA3 security improvements
Identify WPA3-SAE as the modern replacement for WPA2-PSK that uses the Dragonfly handshake to prevent offline brute-force attacks.
Understanding key exchange security enhancements distinguishes WPA3 personal security mechanisms from enterprise RADIUS-based solutions.
3
Map each authentication term to its corresponding requirement
Correlate EAP-FAST to PACs, PEAP-MSCHAPv2 to server-side certificate password tunneling, EAP-TLS to mutual certificate authentication, and WPA3-SAE to dragonfly key exchange.
Verifies precise conceptual matching across all four wireless security frameworks.

Key Concept

Wireless Authentication Protocols and EAP Frameworks
Question 1095Question

A user logged into a Windows 10 workstation with a standard user account attempts to install a hardware driver update. Immediately after double-clicking the installer, a User Account Control (UAC) dialog box appears asking for an administrator password. Which of the following best explains why this prompt is displayed?

Show answer & explanation

Answer: Installing system drivers requires administrative privileges to modify Windows system files and settings.

Answer

Installing system drivers requires administrative privileges to modify Windows system files and settings.
User Account Control (UAC) prevents unauthorized system changes by requiring elevated privileges for actions like installing drivers or modifying system settings. When a standard user attempts these actions, UAC prompts for administrator credentials.

Step-by-Step Solution

1
Identify the action being performed by the standard user.
The user is attempting to install a device driver.
Installing drivers modifies system-level components and configuration files.
2
Determine how Windows User Account Control (UAC) handles system modifications from standard accounts.
UAC halts the action and displays a prompt requesting administrator credentials.
Standard user accounts operate with limited privileges; UAC requires authorization from an administrator account to elevate privileges for system changes.

Key Concept

User Account Control (UAC) Privilege Elevation
Question 1096Question

A desktop technician is tasked with performing an in-place upgrade on several corporate workstations from 64-bit Windows 10 Pro to 64-bit Windows 11 Pro. During pre-upgrade inspection, the technician discovers that the system disks use the Master Boot Record (MBR) partition style and the machines are currently booting via Legacy BIOS. Company policy requires that all existing user files, installed applications, and local configurations must be preserved during the transition. Which of the following actions must the technician take first to satisfy Windows 11 installation prerequisites without losing data?

Show answer & explanation

Answer: Run the MBR2GPT command-line utility to convert the partition structure, and then reconfigure the system firmware from Legacy BIOS to UEFI mode.

Answer

Convert the partition structure using the MBR2GPT tool and change the system firmware mode from Legacy BIOS to UEFI.
Windows 11 mandates UEFI firmware and a GPT disk partition style. The MBR2GPT utility allows administrators to convert a Windows 10 system disk from Master Boot Record (MBR) to GUID Partition Table (GPT) without modifying or deleting data on the disk. After conversion, changing the motherboard firmware from Legacy BIOS mode to UEFI enables the system to boot properly and meet all Windows 11 in-place upgrade prerequisites.

Step-by-Step Solution

1
Analyze the Windows 11 system requirements and current system state.
Identified that Windows 11 requires UEFI, GPT partition style, and Secure Boot capability, whereas the system currently uses Legacy BIOS and MBR.
Windows 11 cannot be installed or upgraded on a drive configured with Legacy BIOS and MBR partition tables.
2
Identify the data-preserving conversion mechanism.
Selected the built-in Microsoft utility `mbr2gpt.exe` to convert the partition table.
Using `mbr2gpt` allows conversion from MBR to GPT partition layout without modifying or deleting data on the drive.
3
Reconfigure hardware firmware settings.
Switch firmware settings from Legacy BIOS (CSM) to UEFI mode in motherboard settings.
Once the disk is converted to GPT, the system must boot via UEFI to recognize the GPT system partition and meet Windows 11 upgrade prerequisites.

Key Concept

Windows 11 Upgrade Hardware & Firmware Prerequisites (MBR to GPT conversion via MBR2GPT utility)
Estimated Time:2m 0s
Question 1097Question

A technician is servicing a corporate laptop running Windows 11 Pro that suffers from persistent operating system instability caused by corrupted system components. The technician wants to repair the operating system while preserving all existing user profiles, personal files, and installed desktop applications. Which of the following installation methods should the technician perform?

Show answer & explanation

Answer: Perform an in-place upgrade using Windows installation media within the running operating system

Answer

Perform an in-place upgrade using Windows installation media within the running operating system.
Executing an in-place upgrade (repair install) by launching setup.exe from Windows installation media directly within the running operating system replaces damaged system files while preserving all user accounts, settings, and installed applications.

Step-by-Step Solution

1
Analyze the technical requirements
The goal is to repair corrupted operating system binaries while keeping user profiles, files, and installed applications intact.
Different installation methods handle existing data and applications differently.
2
Select the appropriate installation method
Running setup.exe from mounted Windows media while logged into the OS enables an in-place repair upgrade with the 'Keep personal files and apps' option selected.
This refreshes core Windows files without wiping user data or removing application registry keys.

Key Concept

In-Place Repair Upgrade vs. Clean Installation
Question 1098Question

A cybersecurity technician is reviewing recent security incident logs and physical security reports across an enterprise. Match each reported security incident scenario to its corresponding social engineering attack vector or threat classification.

Click a left item, then click its matching right item

Items

A Chief Financial Officer receives an urgent email appearing to originate from the CEO, instructing them to execute an immediate wire transfer to a vendor for an undisclosed corporate acquisition.
An unauthorized individual holding a stack of large boxes closely follows an employee through a card-swipe secured entry door without presenting credentials.
Employees seeking an internal benefits portal are redirected to a malicious web page after inadvertently entering 'corp-beneefits.com' into their browser navigation bar.
An attacker compromises a niche industry news site regularly visited by the company's defense research team in order to execute drive-by malware downloads on visitor systems.

Matches

Show answer & explanation

Answer

The executive wire transfer request matches Whaling, unauthorized entry past electronic doors behind an employee matches Tailgating, redirection due to misspelled URLs matches Typosquatting, and compromising an industry news website frequented by targeted personnel matches a Watering Hole Attack.
Each attack vector corresponds directly to its standardized security classification: executive-targeted email coercion matches Whaling, unauthorized physical door following matches Tailgating, domain misdirection based on typing errors matches Typosquatting, and strategic compromise of a niche website frequented by specific targets matches a Watering Hole Attack.

Step-by-Step Solution

1
Evaluate the incident involving targeted email fraud aimed at executive leadership for high-value financial theft.
Identify that spear phishing specifically directed at high-level executives is Whaling.
Whaling targets senior executives (such as CFOs or CEOs) to attempt high-profile financial fraud or data theft.
2
Evaluate the physical access security breach involving entry behind authorized personnel.
Identify that unauthenticated physical entry following an authorized person is Tailgating.
Tailgating relies on social courtesies or physical proximity to enter restricted areas without presenting credentials.
3
Evaluate the web redirection caused by user typographical errors in web addresses.
Identify that exploiting misspelled web domains to trick users is Typosquatting.
Typosquatting relies on user error when typing URLs into web browsers.
4
Evaluate the third-party website compromise strategy aimed at a specific employee demographic.
Identify that compromising a site frequently visited by the target audience is a Watering Hole Attack.
Watering hole attacks infect trusted third-party websites where intended targets naturally gather online.

Key Concept

Social Engineering Attack Vectors and Threat Classifications
Question 1099Question

A helpdesk technician is assisting users with standard operating system tools on macOS devices. Match each native macOS feature on the left to its primary system function on the right.

Click a left item, then click its matching right item

Items

Keychain Access
Spotlight
Time Machine
Boot Camp

Matches

Show answer & explanation

Answer

Keychain Access matches with password and certificate storage; Spotlight matches with fast system indexing search; Time Machine matches with automated incremental backups; Boot Camp matches with dual-booting Windows on Mac hardware.
Keychain Access securely stores user passwords and certificates; Spotlight provides indexing search services; Time Machine manages automated incremental system backups; Boot Camp configures disk partitioning for dual-booting Windows.

Step-by-Step Solution

1
Identify the primary administrative purpose of Keychain Access.
Keychain Access manages secure storage of passwords, keys, and certificates.
It acts as the macOS built-in credential repository.
2
Identify the primary function of Spotlight.
Spotlight indexes system data to enable fast search functionality across documents, apps, and settings.
It is invoked via Command + Space for instant system search.
3
Identify the primary function of Time Machine.
Time Machine performs automatic incremental backups of the operating system and user files.
It allows point-in-time recovery of deleted files or entire systems.
4
Identify the primary function of Boot Camp.
Boot Camp assists in setting up dual-boot configurations for running Microsoft Windows on Intel Macs.
It handles disk partitioning and driver setup for Windows operating systems.

Key Concept

macOS System Utilities and Administrative Tools
Question 1100Question

A desktop administrator needs to monitor for unauthorized physical opening of computer cases deployed in unattended remote branch offices. The administrator requires a solution that logs an immediate hardware-level event whenever an enclosure panel is removed. Which of the following physical security controls best satisfies this requirement?

Show answer & explanation

Answer: Chassis intrusion detection switch

Answer

Chassis intrusion detection switch
A chassis intrusion detection switch is an active physical security control consisting of a spring-actuated switch attached to the computer case and wired to the motherboard. When an unauthorized user removes the case cover, the switch releases and triggers a system event recorded in the BIOS/UEFI firmware, allowing administrators to audit physical case breaches.

Step-by-Step Solution

1
Analyze the technical requirement to detect the physical opening of a computer case and generate an active hardware event log.
Determine that the control must interface directly with internal motherboard hardware to trigger a system alert.
Passive physical controls cannot emit electronic alerts or software logs when a physical breach occurs.
2
Evaluate the mechanism of a chassis intrusion detection switch.
Recognize that a chassis switch connects to the motherboard sensor headers and changes state when the side panel is removed.
This action instantly records a hardware event in BIOS/UEFI log memory.

Key Concept

Chassis Intrusion Detection
PreviousPage 55 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin