Examkin

All practice questions

3551 questions

All types3,551Multiple choice1,809Multiple select786Numeric12Matching521Ordering423
Question 1321Question →

A field technician needs to replace a depleted fuser assembly on an enterprise laser printer after observing un-fused toner smudging on output pages. In what sequence should the technician perform the following maintenance steps from first to last?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The proper sequence begins with powering down and unplugging the printer, allowing the high-temperature fuser assembly to cool down, opening the access door to release retaining latches, swapping the old fuser module for the new one, and concluding by reconnecting power and resetting the printer's maintenance page counter.
The correct order follows standard CompTIA IT safety and procedural protocols: electrical safety first (power down and unplug), thermal safety second (cool down high-temperature fuser), physical disassembly third (release latches), component swap fourth (install new fuser), and final power restoration with administrative counter resets fifth.

Step-by-Step Solution

1
Ensure electrical safety
Printer is completely powered off and unplugged from the wall outlet.
Prevents high-voltage electrical hazards during hardware replacement.
2
Ensure thermal safety
The fuser assembly reaches a safe handling temperature.
Fusers melt toner using high heat and present a severe burn hazard if touched immediately after operation.
3
Unlock hardware access
Access door is open and fuser locking levers are disengaged.
Releases mechanical retaining clips holding the fuser unit inside the chassis.
4
Replace component
Old fuser is removed and new fuser is securely installed.
Replaces the worn fuser roller/heating element causing toner smudging.
5
Re-energize and calibrate software tracking
Printer powers up and resets its scheduled maintenance alert system.
Completes the repair and ensures accurate future maintenance reporting.

Key Concept

Laser Printer Fuser Replacement Safety and Maintenance Workflow
Estimated Time:1m 30s
Question 1322Question →

A technician needs to adjust the User Account Control (UAC) notification settings on a Windows 11 computer so that prompts still appear when programs try to make changes to the system, but the secure desktop screen dimming effect is disabled. Which setting on the UAC slider should the technician choose?

Show answer & explanation

Answer: Notify me only when apps try to make changes to my computer (do not dim my desktop)

Answer

The setting 'Notify me only when apps try to make changes to my computer (do not dim my desktop)' provides UAC prompts without dimming the desktop.
Selecting 'Notify me only when apps try to make changes to my computer (do not dim my desktop)' ensures that User Account Control still generates elevation prompts whenever software attempts system modifications, but it renders the prompt within the standard user desktop environment rather than dimming the screen via Secure Desktop.

Step-by-Step Solution

1
Identify the requirement
The goal is to receive notifications for application changes while eliminating the desktop dimming delay.
The Secure Desktop feature dims the screen, which can cause graphics performance issues on certain display drivers.
2
Evaluate the UAC slider options
The third slider level from the top explicitly specifies 'do not dim my desktop' while maintaining prompt notifications for application changes.
Selecting this level modifies the UAC behavior accordingly.

Key Concept

User Account Control (UAC) Slider Notification Levels
Question 1323Question →

A bench technician receives a point-of-sale terminal system that powers on, illuminates its status LEDs, and drives internal cooling fans, but emits a repeating pattern of beep codes during startup without displaying an image. The motherboard documentation indicates the specific beep sequence points to a memory failure during POST. Which of the following actions should the technician take FIRST?

Show answer & explanation

Answer: Reseat the existing memory modules and test them individually in different slots.

Answer

Reseat the existing memory modules and test them individually in different slots.
When a computer fails POST and outputs a motherboard memory error code, the proper CompTIA troubleshooting methodology requires isolating the RAM by powering off the system, reseating the memory modules, and testing single sticks in individual slots to locate the faulty component or slot.

Step-by-Step Solution

1
Interpret POST indicators
Confirm motherboard beep codes signal a RAM detection/initialization failure before video initialization.
POST errors occur at the hardware hardware verification layer before storage drives or display adapters are invoked.
2
Apply physical isolation methodology
Power down the system, unlatch and reseat the RAM module to rule out oxidation or displacement.
Poor electrical contact in memory slots is a primary cause of intermittent POST failures.
3
Systematically isolate components
If reseating fails, test one RAM stick at a time across available motherboard slots.
This determines whether a specific RAM module is faulty or a specific memory channel slot on the motherboard has failed.

Key Concept

Memory POST Beep Code Isolation
Estimated Time:1m 15s
Question 1324Question →

A desktop technician is performing maintenance on a Windows workstation that has been experiencing stability issues after a recent software installation. Company policy requires technicians to audit system file integrity and log any modified or corrupted protected files, but strictly prohibits making any automatic repairs or file replacements during the initial investigation phase. Which of the following command-line executions fulfills this requirement?

Show answer & explanation

Answer: sfc /verifyonly

Answer

The command 'sfc /verifyonly' scans the integrity of protected system files without attempting any automated repairs.
The 'sfc /verifyonly' command instructs System File Checker to scan all protected system files for integrity issues and write the diagnostic outcome to logs without repairing or modifying any files, satisfying the audit-only policy requirement.

Step-by-Step Solution

1
Identify the primary administrative objective and constraints.
The requirement is to audit and log system file corruption while adhering to a strict no-repair restriction.
Administrative policy dictates that no system files should be modified during the initial diagnostic step.
2
Evaluate the appropriate command-line utility for system file verification.
System File Checker (sfc.exe) is the Windows utility designed to inspect protected system files.
Selecting SFC isolates system file validation from disk sector checks or third-party file operations.
3
Select the switch that restricts SFC to non-destructive auditing.
The /verifyonly flag scans all protected system files and outputs integrity violations without replacing modified files.
Using /verifyonly meets the exact policy criteria of reporting findings without executing automated repairs.

Key Concept

Windows System File Checker (SFC) Command Switches
Estimated Time:1m 15s
Question 1325Question →

A technician needs to sanitize several solid-state drives (SSDs) containing sensitive company data. The drives must remain functional so they can be reassigned to non-sensitive workstations. Which of the following data sanitization methods should the technician perform?

Show answer & explanation

Answer: Perform an ATA Secure Erase or cryptographic erasure on the drives.

Answer

An ATA Secure Erase or cryptographic erasure should be performed on the solid-state drives.
Applying an ATA Secure Erase command or cryptographic erasure purges the contents of flash memory cells or destroys the cryptographic keys protecting the drive, ensuring the data is permanently unrecoverable while preserving the hardware for redeployment.

Step-by-Step Solution

1
Identify the media type and operational requirements.
The target devices are solid-state drives (SSDs) that must be preserved for reuse rather than physically destroyed.
Flash-based storage requires software-based sanitization techniques specifically designed for non-magnetic media.
2
Select a sanitization method compatible with flash storage reuse.
ATA Secure Erase or cryptographic erasure purges all stored data without damaging the underlying drive components.
Degaussing fails on solid-state media, and basic OS formatting leaves raw data readable by forensic utilities.

Key Concept

Sanitization Methods for Solid-State Storage
Question 1326Question →

A technician is troubleshooting a Windows 11 desktop that can successfully communicate with local printers on the 192.168.1.0/24 network, but cannot reach servers on remote corporate subnets (such as 192.168.2.50) or access the internet. Reviewing the static IPv4 configuration properties on the client reveals the following settings:

- IPv4 Address: 192.168.1.45
- Subnet Mask: 255.255.0.0
- Default Gateway: 192.168.1.1
- Preferred DNS: 192.168.1.2

Which of the following explains why traffic destined for remote subnets is failing?

Show answer & explanation

Answer: The misconfigured subnet mask causes the client to treat remote subnets as local network traffic, preventing it from forwarding packets to the default gateway.

Answer

The misconfigured subnet mask causes the host to view destination IPs in the 192.168.2.0/24 range as local rather than remote, leading the client to bypass the default gateway.
Subnet masks determine whether a destination IP address is local or remote. The expected subnet mask for a 192.168.1.0/24 network is 255.255.255.0. Because the subnet mask was entered as 255.255.0.0, the Windows client incorrectly calculates that 192.168.2.50 is on its local physical segment. Consequently, it attempts direct ARP requests for 192.168.2.50 rather than routing the traffic through the default gateway (192.168.1.1), causing communication to fail.

Step-by-Step Solution

1
Analyze the configured IPv4 address and subnet mask.
The IP address is 192.168.1.45 and the subnet mask is 255.255.0.0 (/16 network prefix).
The subnet mask defines the boundary between the network portion and host portion of an IP address.
2
Determine the local subnet range evaluated by the client.
With a /16 mask, the local network range spans from 192.168.0.0 through 192.168.255.255.
The first two octets (192.168) represent the network ID, so all addresses matching 192.168.x.x are treated as local on-link destinations.
3
Evaluate how traffic to remote destination 192.168.2.50 is handled.
The client assumes 192.168.2.50 is on the local segment and attempts ARP address resolution directly instead of encapsulating packets for the default gateway (192.168.1.1).
Hosts only forward packets to the default gateway when the destination IP address falls outside the local subnet boundary.

Key Concept

Subnet Mask Logic and Default Gateway Traversal
Question 1327Question →

As an IT security technician reviewing recently logged security events across the organization, match each security incident scenario to its corresponding social engineering or threat classification.

Click a left item, then click its matching right item

Items

Shoulder Surfing
Dumpster Diving
Watering Hole Attack
Typosquatting

Matches

Show answer & explanation

Answer

Shoulder Surfing matches the observation of PIN entry. Dumpster Diving matches searching un-shredded trash bins. Watering Hole Attack matches compromising a heavily visited industry website. Typosquatting matches mistyping a domain URL to land on a spoofed site.
Each attack vector accurately maps to its defined operation: shoulder surfing focuses on visual observation of data input; dumpster diving searches physical waste for information; watering hole attacks compromise trusted third-party sites; and typosquatting leverages common domain name spelling errors.

Step-by-Step Solution

1
Analyze physical observation threat vectors
Secretly observing credential input from across the room describes direct visual observation, which is shoulder surfing.
Recognizing physical visibility vulnerabilities.
2
Identify physical paper document theft methods
Searching through un-shredded corporate waste containers outside a facility fits the definition of dumpster diving.
Differentiating physical disposal security breaches from digital attacks.
3
Evaluate web-based targeted infection strategies
Compromising a third-party site known to be visited by targets to deliver malware is a strategic web compromise (watering hole attack).
Distinguishing strategic target compromise from mass phishing.
4
Evaluate domain mistyping attacks
Relying on user typing mistakes to present fake sites is typosquatting.
Connecting URL input errors with spoofing mechanisms.

Key Concept

Classification of physical and digital social engineering threat vectors
Question 1328Question →

A network security technician is updating firewall access control lists (ACLs) following a security policy enforcement mandate requiring all mail access to transition from unencrypted protocols to SSL/TLS encrypted standards. Users report that while outbound mail transmission works, email clients fail to synchronize folder structures and message status across multiple mobile and desktop devices. Diagnostics reveal that unencrypted IMAP traffic on TCP port 143 is being blocked as intended. Which port and transport protocol combination must be permitted through the perimeter firewall to restore encrypted, multi-device mail synchronization?

Show answer & explanation

Answer: TCP port 993

Answer

TCP port 993 must be permitted to allow IMAPS traffic for secure multi-device email synchronization.
IMAPS (Internet Message Access Protocol Secure) operates over TCP port 993 to establish an SSL/TLS encrypted session that enables seamless folder and status synchronization across multiple devices.

Step-by-Step Solution

1
Identify the required functional capability from the scenario.
The requirement demands multi-device folder and message state synchronization, which specifies the IMAP protocol family rather than POP3.
IMAP keeps messages on the server and synchronizes status (read, flagged, folders) across multiple clients, whereas POP3 downloads and removes/stores messages locally.
2
Determine the secure equivalent port for unencrypted IMAP.
Unencrypted IMAP uses TCP port 143, while IMAPS (IMAP over SSL/TLS) uses TCP port 993.
CompTIA A+ Core 1 standards require distinguishing between unencrypted protocols and their secure SSL/TLS port counterparts.
3
Verify the correct Layer 4 transport protocol.
Email retrieval protocols require reliable stream delivery, mandating TCP rather than UDP.
TCP guarantees ordered, loss-free packet delivery necessary for mailbox content retrieval.

Key Concept

Distinguishing secure vs. unencrypted mail retrieval protocols and their associated TCP/UDP port assignments.
Question 1329Question →

An IT compliance manager is preparing to decommission a fleet of enterprise laptops containing NVMe Solid State Drives (SSDs) that held sensitive financial data. The assigned technician suggests utilizing an electromagnetic degausser to sanitize the drives prior to sending them off-site for recycling. Which of the following best explains why the compliance manager should reject the technician's proposed method?

Show answer & explanation

Answer: Degaussing is ineffective on solid-state drives because data is stored in semiconductor flash memory microchips rather than magnetic media.

Answer

Degaussing is ineffective on solid-state drives because data is stored in semiconductor flash memory microchips rather than magnetic media.
Degaussing exposes storage media to high-intensity magnetic fields, neutralizing the magnetic alignment of data on hard disk drives (HDDs) and magnetic tapes. Solid State Drives (SSDs) contain non-volatile semiconductor flash memory chips without magnetic components, rendering electromagnetic degaussers completely ineffective for data sanitization.

Step-by-Step Solution

1
Identify the media type being decommissioned.
The target drives are NVMe Solid State Drives (SSDs), which rely on NAND flash memory storage.
Determining media architecture (solid-state vs. magnetic) is required to choose a valid sanitization method.
2
Analyze the mechanism of the proposed sanitization method (degaussing).
Degaussing uses powerful electromagnetic fields to demagnetize and scramble data on magnetic platters or tapes.
Degaussing relies entirely on magnetic susceptibility to remove data.
3
Evaluate why degaussing fails for the target media.
Flash memory cells store data electronically via electrical charges in floating-gate transistors, not magnetic domains.
Magnetic exposure leaves data on solid-state drives completely intact, requiring alternative methods such as physical shredding, cryptographic erase, or built-in secure purge utilities.

Key Concept

Data Destruction and Sanitization Compatibility across Storage Media Types
Question 1330Question →

An IT technician is preparing to perform a clean installation of Windows 11 on a newly built corporate workstation with an unformatted NVMe storage drive. Arrange the standard operating system deployment tasks in the correct chronological order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological order for a clean Windows OS installation is: 1) Configure UEFI firmware and boot order, 2) Boot installation media and partition target drive, 3) Complete OS file copying and initial setup restart, 4) Complete the Out-of-Box Experience (OOBE) configuration, 5) Install post-installation hardware drivers and updates.
The clean installation process follows a strict sequence: Firmware configuration (UEFI/TPM/Boot Order) → Installer startup & disk partitioning → Core setup file expansion & system restart → Out-of-Box Experience (OOBE) user customization → Post-installation hardware driver and Windows Update deployment.

Step-by-Step Solution

1
Configure hardware firmware environment.
Secure Boot, TPM, and boot priority are established.
Hardware settings must be verified and configured before installation media can boot properly.
2
Initialize storage and start installation.
Partitions are created on the target drive and installation begins.
The installer requires a configured disk target to deploy operating system files.
3
Execute main file copy and system setup restart.
Windows core files are expanded onto the local drive.
The core image must be expanded onto disk before localized user configuration can occur.
4
Perform Out-of-Box Experience (OOBE) setup.
Initial user profile and network/privacy settings are provisioned.
OOBE runs automatically on first boot to customize user account and localized settings.
5
Perform post-installation updates and optimization.
System features full hardware support and security updates.
Device drivers and Windows updates ensure hardware stability and vulnerability protection post-setup.

Key Concept

Chronological procedure for clean OS deployment
Question 1331Question →

A field technician is troubleshooting a Windows 11 desktop computer that was flagged for an active Trojan and spyware infection. The technician has already physically disconnected the network cable and turned off Wi-Fi to isolate the host. Which TWO of the following steps should the technician perform NEXT before initiating anti-malware scans and removal tools? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Disable System Protection on all local storage volumes.; Boot the system into Safe Mode or an isolated recovery environment.

Answer

The technician must disable System Protection on all local storage volumes and boot the system into Safe Mode or an isolated recovery environment.
Under the standard CompTIA 7-step malware remediation process, once symptoms are identified and the system is quarantined (isolated from the network), the technician must proceed to disable System Restore (Step 3) to clear infected recovery snapshots. Following this, the technician prepares for remediation (Step 4) by updating scanner definitions and booting into Safe Mode to prevent active malware processes from hooking into system memory.

Step-by-Step Solution

1
Analyze current progress within the CompTIA 7-Step Malware Remediation Process.
Step 1 (Identify malware) and Step 2 (Quarantine infected system) are complete.
The system was identified as infected and isolated from network connections.
2
Perform Step 3: Disable System Restore in Windows.
System Protection is turned off across all local drives, purging existing restore points.
Prevents malware from hiding in hidden system volume information folders or restoring itself after remediation.
3
Prepare for Step 4: Remediate infected systems by isolating execution context.
The machine is booted into Safe Mode.
Prevents malware persistence mechanisms and active rootkits from executing during scanner installation and execution.

Key Concept

CompTIA 7-Step Malware Remediation Procedure
Estimated Time:2m 0s
Question 1332Question →

A technician is setting up a ceiling-mounted projector in a conference room. When projecting a test pattern onto the flat screen, the image appears distorted as a trapezoid, where the top edge of the image is noticeably wider than the bottom edge. The projector is mounted securely and cannot be physically repositioned. Which of the following projector settings should the technician adjust to flatten the image into a proper rectangular shape?

Show answer & explanation

Answer: Keystone correction

Answer

Keystone correction should be configured on the projector to correct the trapezoidal image distortion.
Keystone correction is designed specifically to solve trapezoidal image distortion caused by angled projection when the projector lens is not perfectly perpendicular to the screen.

Step-by-Step Solution

1
Identify the type of display symptom.
The symptom is trapezoidal image distortion, where the top of the projected image is wider than the bottom.
This occurs when the optical axis of a projector is not perpendicular to the projection surface.
2
Select the appropriate feature on the projector.
Keystone correction adjusts the output shape to compensate for angle distortion.
When physical repositioning is not feasible, keystone settings digitally reshape the image back to a standard rectangular format.

Key Concept

Projector Keystone Correction
Question 1333Question →

Match each physical security control mechanism on the left with its primary protective objective on the right.

Click a left item, then click its matching right item

Items

Access control vestibule
Privacy filter
Vehicle bollard
Cable lock

Matches

Show answer & explanation

Answer

Access control vestibule matches with mitigating tailgating via interlocking doors. Privacy filter matches with narrowing screen viewing angles to prevent shoulder surfing. Vehicle bollard matches with preventing vehicular ramming attacks. Cable lock matches with anchoring hardware to immovable fixtures to prevent physical equipment theft.
Each physical security control serves a specific defense objective: access control vestibules prevent tailgating by enforcing single-person entry through interlocking doors; privacy filters block shoulder surfing by narrowing monitor viewing angles; vehicle bollards absorb vehicle impacts to protect building structures; and cable locks physically secure hardware assets to permanent fixtures to prevent physical equipment theft.

Step-by-Step Solution

1
Identify the primary protective function of an access control vestibule
Access control vestibules utilize dual interlocking doors to allow access to only one person at a time.
This directly mitigates tailgating (piggybacking) by unauthorized personnel into sensitive areas.
2
Identify the primary protective function of a privacy filter
Privacy filters polarize or restrict screen light output to narrow viewing angles.
This prevents visual eavesdropping or shoulder surfing by passersby.
3
Identify the primary protective function of a vehicle bollard
Bollards act as heavy vertical perimeter barriers engineered to withstand kinetic impact.
They protect building entrances and exterior walls from vehicle ramming attacks.
4
Identify the primary protective function of a cable lock
Cable locks secure computing hardware to sturdy, stationary objects.
They inhibit opportunistic physical theft of portable or stationary hardware assets.

Key Concept

Physical Security Controls
Estimated Time:1m 30s
Question 1334Question →

A cybersecurity technician is resolving a security incident on a corporate endpoint. The technician identified a stealth keylogger infection, isolated the system from the network, disabled System Restore, updated the security software in Safe Mode, and successfully completed malware removal and verification. Which of the following actions must the technician perform next to adhere to the standard CompTIA malware remediation process?

Show answer & explanation

Answer: Configure scheduled operating system updates and automated anti-malware scans.

Answer

Configure scheduled operating system updates and automated anti-malware scans.
According to the standard CompTIA 7-step malware remediation framework, the steps must be performed in exact sequence: 1) Identify symptoms, 2) Quarantine infected system, 3) Disable System Restore, 4) Remediate infected systems (update anti-malware and scan/remove), 5) Schedule updates and run recurring scans, 6) Enable System Restore and create a restore point, 7) Educate the user. Since the scenario completes Step 4 (remediation and removal), the immediate next step required is Step 5 (scheduling updates and recurring scans).

Step-by-Step Solution

1
Review the completed steps against the CompTIA 7-step malware remediation framework.
Steps 1 (Identify), 2 (Quarantine), 3 (Disable System Restore), and 4 (Remediate/Remove malware) have been performed.
Tracking completed steps identifies where the technician currently sits in the remediation workflow.
2
Identify the mandatory next sequence step following Step 4 (Remediate infected systems).
Step 5 is 'Schedule updates and run recurring scans'.
Scheduling updates and scans ensures continuous protection against recurring or unpatched vulnerabilities before enabling restore capabilities.
3
Select the option representing Step 5.
Configuring scheduled OS updates and automated anti-malware scans is selected.
This matches the exact procedural requirement of Step 5.

Key Concept

CompTIA 7-Step Malware Remediation Process
Question 1335Question →

An IT support technician receives a call from a remote employee experiencing a critical system failure right before a presentation deadline. Place the professional communication and customer interaction steps in the correct sequential order from initial greeting to issue resolution.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order of customer interaction steps is: First, actively listen to the user's initial description without interruption. Second, ask clarifying questions using plain, non-technical language. Third, establish clear expectations and offer temporary workarounds. Fourth, perform technical troubleshooting while respecting user data. Fifth, verify resolution directly with the user and document the issue in the ticketing system.
Standard CompTIA customer service protocol dictates that a technician must first practice active listening without interruption. Once the user is heard, the technician clarifies details without using jargon, sets clear timeline expectations and workarounds, executes the fix, and concludes by verifying satisfaction with the customer before completing documentation.

Step-by-Step Solution

1
Active Listening
De-escalates customer anxiety and gathers full initial problem context.
CompTIA professional standards emphasize allowing the user to complete their statement uninterrupted.
2
Jargon-Free Clarification
Identifies precise error symptoms without overwhelming the user.
Technical jargon causes miscommunication; plain language ensures accurate diagnostic details.
3
Setting Expectations & Workarounds
Establishes a realistic timeline and mitigates downtime impact.
Setting clear expectations prevents false assumptions and keeps the user informed.
4
Technical Remediation
Resolves the underlying technical issue efficiently.
Troubleshooting proceeds once the user understands and agrees to the resolution path.
5
User Verification & Documentation
Ensures complete customer satisfaction and logs solution knowledge.
Workflows require final confirmation from the end user before closing the incident ticket.

Key Concept

Professional Customer Interaction and Communication Workflow
Question 1336Question →

A desktop support specialist is hardening standalone Windows 11 Pro workstations located in a public library environment. To satisfy new compliance mandates, the specialist must ensure that standard account users are completely blocked from attempting privilege elevation, and that administrative users must explicitly type their password on a isolated screen whenever an elevation request occurs. Which TWO of the following policy settings in Local Security Policy (secpol.msc) under Security Options should the specialist configure?

Select all that apply

Show answer & explanation

Answer: Set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests'; Set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'

Answer

The technician must configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' and set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
Configuring 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' satisfies the requirement to prevent standard users from attempting privilege elevation. Setting 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop' ensures administrators must enter their full password on an isolated secure desktop screen before privilege elevation is granted.

Step-by-Step Solution

1
Analyze standard user requirement
Standard users must not be permitted to enter administrator credentials when an elevation prompt occurs.
Setting the standard user elevation policy to 'Automatically deny elevation requests' suppresses credential prompts and rejects unauthorized privilege escalation attempts immediately.
2
Analyze administrator user requirement
Administrative users must be forced to authenticate explicitly on an isolated screen.
Setting administrator behavior in Admin Approval Mode to 'Prompt for credentials on the secure desktop' forces password entry on the secure desktop, preventing malware interference.

Key Concept

Configuring Local Security Policy (secpol.msc) User Account Control security options for elevation prompt behaviors.
Question 1337Question →

A desktop support technician needs to configure a Windows workstation used by a security analyst. The analyst requires all file extensions to be explicitly visible and system files to be unhidden during file system inspections. Which Control Panel applet should the technician open to adjust these view settings?

Show answer & explanation

Answer: File Explorer Options

Answer

File Explorer Options is the correct utility because its View tab contains configuration settings for revealing hidden operating system files and displaying file extensions for known file types.
File Explorer Options (formerly Folder Options) is used to customize file and folder display behavior. Under the View tab, technicians can deselect 'Hide extensions for known file types' and select 'Show hidden files, folders, and drives' to reveal full filenames and hidden system items.

Step-by-Step Solution

1
Analyze the technical requirement.
The requirement is to show hidden system files and display file extensions across the operating system file structure.
Security auditing requires inspecting full file names and identifying hidden system files to analyze suspect directories accurately.
2
Select the appropriate Control Panel applet.
File Explorer Options directly manages file display behavior, general folder navigation options, and search indexing parameters.
The View tab in File Explorer Options specifically provides checkboxes to uncheck 'Hide extensions for known file types' and select 'Show hidden files, folders, and drives'.

Key Concept

Windows Control Panel Utilities - File Explorer Options
Estimated Time:1m 0s
Question 1338Question →

An IT technician is tasked with decommissioning a batch of enterprise magnetic hard disk drives (HDDs) containing sensitive corporate financial data. Place the administrative and technical steps in the correct chronological order from first to last to ensure compliance with data sanitization standards and chain of custody guidelines.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence is: 1) Log drive serial numbers and complete chain-of-custody forms, 2) Expose magnetic hard drives to high-density degaussing, 3) Transport sanitized drives via secure courier, 4) Perform physical industrial shredding and obtain a Certificate of Destruction, and 5) Update asset records and archive the Certificate of Destruction.
The proper decommission lifecycle requires logging serial numbers to establish chain of custody first, purging magnetic media via degaussing to prevent data exposure in transit, transporting the media securely under custody, executing physical destruction while securing a Certificate of Destruction, and finally closing asset records in the tracking system with attached validation certificates.

Step-by-Step Solution

1
Establish inventory baseline and documentation.
All drive serial numbers are cataloged with initial chain of custody established.
Proper inventory accounting before physical movement prevents lost or stolen media.
2
Perform local data purge via degaussing.
Magnetic fields on drive platters are completely demagnetized.
Degaussing purges data locally so unencrypted data is not exposed during off-site transportation.
3
Relocate media using tracked chain of custody.
Drives arrive safely at the third-party destruction facility.
Tracked courier services maintain accountability between company premises and vendor facilities.
4
Execute physical destruction and obtain validation.
Drives are shredded into fragments and a Certificate of Destruction is signed.
Physical destruction prevents hardware re-use, and the certificate serves as legal proof of disposal.
5
Finalize corporate inventory logs.
Asset database records drives as destroyed with linked audit documentation.
Completes corporate lifecycle procedures and fulfills compliance audit requirements.

Key Concept

Chain of Custody and Media Destruction Lifecycle
Estimated Time:2m 0s
Question 1339Question →

A desktop support technician needs to change the User Account Control (UAC) notification level on a standalone Windows 11 computer. In what sequential order should the technician perform the steps to complete this configuration?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence is to open the User Account Control settings applet from the Start menu, adjust the notification slider, click OK to submit the changes, and confirm the resulting administrative UAC elevation prompt.
To modify UAC settings in Windows, the technician must first open the configuration interface via Search or Control Panel. Next, the slider is moved to set the desired notification behavior. After setting the slider, clicking OK submits the changes, which triggers an administrative UAC prompt requiring explicit confirmation to save the new policy.

Step-by-Step Solution

1
Search for and open Change User Account Control settings from the Start menu.
The User Account Control Settings configuration window opens.
Accessing the applet interface is necessary before any settings can be modified.
2
Adjust the vertical slider to the target notification setting.
The desired UAC notification behavior is selected.
The slider defines when Windows notifies the user about application changes.
3
Click the OK button at the bottom of the window.
Windows initiates the process to apply the modified security policy.
Submitting the configuration form triggers the system validation process.
4
Click Yes on the User Account Control authorization prompt.
The new UAC setting is committed to the registry.
System-wide security policy adjustments require explicit administrative approval.

Key Concept

Configuring User Account Control settings using the Windows GUI
Question 1340Question →

An IT technician is preparing a batch of retired magnetic hard drives for permanent disposal according to organizational security procedures. Place the hardware decommission and disposal steps in the correct chronological order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence is: Log asset tags and serial numbers -> Degauss or purge drive data -> Subject drives to physical shredding -> Obtain and archive the Certificate of Destruction.
Proper data disposal protocol requires documenting asset serial numbers first to establish chain of custody. Next, the drives undergo data sanitization (such as degaussing magnetic platters) to ensure confidentiality during handling. The sanitized drives are then physically shredded. Finally, the vendor issues a formal Certificate of Destruction to confirm compliance and finalize the audit trail.

Step-by-Step Solution

1
Document assets for tracking
Serial numbers and asset tags are logged into the inventory tracking database.
Maintaining chain of custody requires recording asset details before performing any physical processing.
2
Sanitize media content
Magnetic media is degaussed or purged.
Data sanitization protects sensitive corporate information prior to physical movement or third-party handling.
3
Perform physical hardware destruction
Media is physically shredded into unrecoverable fragments.
Physical destruction completes the media disposition process.
4
Collect compliance validation
Signed Certificate of Destruction is received and stored for auditing.
Audit verification occurs only after physical disposal has taken place.

Key Concept

Hardware Decommissioning and Media Disposal Lifecycle
PreviousPage 67 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin