All practice questions
3551 questions
A security administrator must harden standalone Windows 11 Pro workstations in a financial audit unit. Company compliance mandates two specific User Account Control (UAC) security controls: standard user accounts must be completely blocked from receiving elevation credential prompts (automatically denying elevation attempts), and administrative accounts operating in Admin Approval Mode must be forced to re-enter their administrative passwords on an isolated screen during any privilege elevation attempt rather than clicking a simple consent prompt. Which TWO configuration settings in Local Security Policy (secpol.msc) under Security Options must the administrator implement to satisfy these mandates?
Select all that apply
A system administrator is configuring security baselines on standalone Windows 11 Pro workstations. Company policy dictates that standard users must never be prompted to enter administrator credentials when attempting tasks that require elevated privileges; instead, any privilege elevation attempt by a standard user must be silently rejected by default. Which Local Security Policy setting under Security Options should the administrator modify to meet this requirement?
A Linux system administrator is troubleshooting a non-responsive background application process named `data_sync` with process ID (PID) 5412. The administrator previously attempted to stop the process using the standard `kill 5412` command, but the process continues to run and consume system resources. Which command should the administrator execute to force the immediate termination of the process by sending a non-catchable signal?
Match each observed printer defect or operational symptom on the left to its most probable underlying hardware cause on the right.
Click a left item, then click its matching right item
Items
Matches
Following a severe hardware malfunction in a storage array, a technician receives three magnetic hard disk drives (HDDs) with physically broken read/write head assemblies. Corporate policy requires that all drive platters be sanitized of sensitive corporate data before the physical chassis components are submitted for scrap recycling. Because software-based sanitization tools cannot communicate with the non-functional drive controllers, which method will effectively purge the data from these magnetic drives?
An IT security technician is investigating a multi-stage security incident at a corporate facility. The investigation reveals that an attacker contacted a junior financial accountant via a phone call, posing as an internal IT service desk engineer to trick the accountant into verifying their credentials and approving an unauthorized multi-factor authentication (MFA) push notification. Additionally, physical security footage indicates that the attacker entered the restricted server room by closely following an authorized employee through a badge-protected security door before it latched. Which of the following social engineering threat types were executed during this incident? (Select TWO.)
Select all that apply
A system administrator notices that a dedicated graphics rendering node periodically undergoes sudden hard reboots during heavy rendering jobs. Operating system event logs show no crash dumps or blue screen errors, displaying only unexpected power-loss event entries. During a physical inspection of the motherboard, the technician observes that several electrolytic capacitors surrounding the CPU voltage regulator module (VRM) have distended, bulging tops and traces of dried brownish residue. Which of the following is the most appropriate corrective action to resolve this issue?
A technician needs to sanitize several retired magnetic hard disk drives (HDDs) containing sensitive company data. The technician wants to completely disrupt and neutralize the magnetic domains on the drive platters so the data cannot be recovered. Which of the following methods should the technician use?
A desktop technician is repairing a Windows workstation that fails to boot into the operating system, displaying an error stating that the Boot Configuration Data file is missing required information. The technician boots the system into the Windows Recovery Environment (WinRE) and opens Command Prompt. Which command should the technician execute to scan all connected disks for compatible Windows installations and rebuild the BCD store?
A security administrator needs to harden a standalone Windows 11 Pro system by enforcing credential prompts on the Secure Desktop for administrative elevations and enabling Admin Approval Mode for the local Built-in Administrator account using administrative tools. In what correct sequential order should the technician execute these administrative steps from start to finish?
Drag items to arrange them in the correct order
A user logged in with a standard user account on a Windows workstation attempts to run a software installer that modifies system files. Before the installation can start, a User Account Control (UAC) dialog box appears requesting administrator credentials. Which of the following explains why this prompt was displayed?
An IT technician is preparing to deploy a standardized Windows 11 image across 50 enterprise desktop computers using PXE network boot and Windows Deployment Services. Which of the following tasks must be completed to ensure client systems can locate the deployment server and receive a deployment image without network SID conflicts? (Select TWO.)
Select all that apply
A desktop technician is troubleshooting a workstation used by a CAD designer. The monitor displays flickering visual artifacts and line distortion whenever the system performs 3D rendering tasks. The technician takes a screenshot of the corrupted screen output using the operating system's built-in utility and opens the saved image file on a separate known-good display, where the image renders perfectly without any distortion. Which of the following is the MOST likely cause of the issue?
A systems technician must secure an organization's dedicated hardware equipment housed inside a shared colocation data center floor. Although the facility provides general building perimeter security, the technician must prevent unauthorized personnel from opening server enclosures to access internal components, as well as prevent unauthorized physical cable connections into unused network ports on rack-mounted switches. Which TWO of the following physical security controls should the technician deploy to meet these objectives?
Select all that apply
A desktop technician needs to shrink an existing NTFS partition and create a new simple volume on a secondary hard drive on a Windows 11 Pro workstation. Which of the following Windows administrative tools or management snap-ins can be used to perform these disk partitioning tasks? (Select TWO.)
Select all that apply
A network technician is configuring wireless access for specialized barcode scanners in a distribution warehouse. The primary corporate wireless network relies on WPA3-Enterprise with 802.1X/RADIUS authentication using EAP-TLS client certificates. The new handheld scanners cannot store digital certificates or perform 802.1X authentication, but they fully support WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE). Company policy requires network isolation for non-802.1X devices while maintaining the strongest possible wireless security controls without lowering the authentication requirements of the primary corporate network. Which of the following is the BEST solution for the technician to implement?
A desktop technician needs to configure a standalone Windows 11 workstation to the maximum User Account Control (UAC) security level using the Graphical User Interface (GUI). Place the following steps in the correct chronological order to complete this task.
Drag items to arrange them in the correct order
A systems administrator is maintaining a fleet of Windows workstations and recently updated several security Group Policy Objects (GPOs). The administrator needs to force an immediate reapplication of all computer and user policy settings on a target workstation without restarting the computer or logging off the active user. Additionally, the administrator wants to display a summary report of the currently applied GPOs directly within the Command Prompt window. Which TWO command-line actions should the administrator perform to accomplish these tasks? (Select TWO.)
Select all that apply
A security administrator is hardening corporate Windows 11 Pro workstations against potential malware threats. Company security policy mandates that User Account Control (UAC) must strictly enforce Public Key Infrastructure (PKI) validation, automatically denying elevation requests for any executable file or setup installer that lacks a verified, trusted digital signature. Which policy setting under Local Security Policy (secpol.msc) directly achieves this requirement?
A systems engineer is responding to a security incident involving a Windows 11 point-of-sale terminal that was flagged for stealthy spyware behavior. The engineer has identified the infection symptoms and successfully isolated the system by disabling all network interfaces and unplugging physical connections. According to the standard CompTIA 7-step malware remediation process, which action must the engineer perform NEXT prior to updating anti-malware signatures or initiating a scan?