Examkin

All practice questions

3551 questions

All types3,551Multiple choice1,809Multiple select786Numeric12Matching521Ordering423
Question 1721Question →

A helpdesk technician is repairing a Windows 11 computer where built-in operating system tools intermittently fail to launch. The technician executes `sfc /scannow` in an elevated Command Prompt, but the process fails with a message indicating that Windows Resource Protection found corrupt files but was unable to fix them because the local recovery payload is damaged. Which command should the technician run NEXT to resolve this issue?

Show answer & explanation

Answer: dism /online /cleanup-image /restorehealth

Answer

Running `dism /online /cleanup-image /restorehealth` repairs the corrupted Windows component store payload so system binaries can be replaced.
Executing `dism /online /cleanup-image /restorehealth` scans the operating system for component store corruption and performs repair operations automatically by downloading required files through Windows Update or a specified source image. Once DISM repairs the component store, running `sfc /scannow` will successfully replace corrupted system binaries.

Step-by-Step Solution

1
Identify the cause of the System File Checker (SFC) repair failure
The error message confirms that SFC identified corrupted files but could not repair them because the local source files within the Windows Component Store (WinSxS) are also corrupted.
SFC relies on a clean local component store to replace damaged system files.
2
Select the appropriate utility to repair the Windows Component Store
Executing `dism /online /cleanup-image /restorehealth` scans the component store for corruption and automatically downloads healthy replacement files via Windows Update or a designated WIM/VHD repair source.
DISM must repair the component store payload before SFC can successfully substitute damaged operating system files.
3
Re-run System File Checker after DISM completion
Executing `sfc /scannow` now successfully restores corrupted operating system binaries from the newly repaired component store.
Completing DISM restoration restores SFC's source files.

Key Concept

Deployment Image Servicing and Management (DISM) Component Store Repair
Estimated Time:1m 15s
Question 1722Question →

An IT technician is dispatched to an on-site ticket for a department director whose desktop workstation repeatedly freezes during financial reporting deadlines. Upon arrival, the director is visibly agitated, interrupts the technician, and demands that the technician immediately replace the internal drive and system board without running diagnostics, threatening to escalate the ticket to executive leadership if the hardware is not replaced within ten minutes. Which of the following is the most appropriate initial communication response for the technician to take?

Show answer & explanation

Answer: Listen actively without interrupting, acknowledge the director's time constraints, and calmly explain why standard diagnostics are necessary to resolve the issue effectively while setting realistic expectations.

Answer

Listen actively without interrupting, acknowledge the director's time constraints, and calmly explain why standard diagnostics are necessary to resolve the issue effectively while setting realistic expectations.
The correct response combines active listening, empathy, and clear expectation-setting. When interacting with an upset user under time pressure, a technician should allow the user to express their concerns without interruption, validate their situation, and explain the need for standard diagnostic protocols without using dismissive language or jargon.

Step-by-Step Solution

1
Practice active listening and maintain a calm demeanor.
The user feels heard, which helps de-escalate emotional tension.
CompTIA professional communication guidelines emphasize active listening and remaining calm during high-pressure user interactions.
2
Acknowledge the user's business impact and time constraints.
Demonstrates empathy and professional alignment with organizational priorities.
Validating the user's situation builds trust without compromising technical protocols.
3
Explain the necessary diagnostic workflow clearly without jargon and set realistic timeframes.
Maintains proper troubleshooting methodology while managing customer expectations transparently.
Clear communication sets expectations and avoids unauthorized or ineffective repair actions.

Key Concept

Professional Customer De-escalation and Active Listening Protocols
Question 1723Question →

A tier 1 service desk technician determines that an endpoint security issue reported by a workstation user involves an unpatched vulnerability requiring a custom registry modification managed exclusively by the Systems Engineering team. According to standard IT service management and ticketing workflow procedures, which of the following actions should the technician perform NEXT to escalate the issue properly?

Show answer & explanation

Answer: Document all troubleshooting steps completed, append the relevant system log snippets, and reassign the ticket to the Systems Engineering queue.

Answer

Document all troubleshooting steps completed, append the relevant system log snippets, and reassign the ticket to the Systems Engineering queue.
When escalating an incident ticket to a specialized escalation group, standard ticketing procedures require documenting all diagnostic steps, error codes, and troubleshooting results prior to transfer. This ensures seamless ticket handoffs and prevents duplicate work.

Step-by-Step Solution

1
Identify the need for escalation based on operational scope and administrative boundary restrictions.
Determined that Tier 2 / Systems Engineering intervention is required.
Tier 1 technicians must escalate tasks exceeding their assigned authorization or technical scope.
2
Record detailed work notes and attach diagnostic evidence.
Initial findings, error logs, and attempted fixes are clearly documented in the ticket body.
Comprehensive documentation prevents duplicate diagnostic effort by the receiving tier and preserves historical context.
3
Reassign the ticket to the appropriate functional escalation queue.
The ticket is successfully transferred to the Systems Engineering queue within the ticketing system.
Adheres to ITIL and service management handoff protocols for SLA tracking and workload visibility.

Key Concept

Incident Escalation and Documentation Workflows
Estimated Time:1m 30s
Question 1724Question →

A fleet logistics supervisor reports that a proprietary route-dispatch application on an enterprise Android tablet frequently freezes and stops responding during peak sync cycles. All other applications on the tablet, including web browsers and cloud storage, operate without performance degradation. Which of the following troubleshooting actions should the technician execute FIRST to adhere to the least-invasive troubleshooting methodology?

Show answer & explanation

Answer: Force stop the application and clear its temporary application cache.

Answer

Force stop the application and clear its temporary application cache.
The correct action is to force stop the application and clear its temporary application cache. CompTIA troubleshooting methodology requires starting with the least invasive resolution. Force stopping the process terminates frozen execution threads, and clearing the app cache removes temporary corrupted files without losing account credentials or saved data.

Step-by-Step Solution

1
Isolate the scope of the problem.
Identified that only the route-dispatch app is freezing while other network apps function normally, pointing to an application-specific resource or cache issue rather than OS or hardware failure.
Troubleshooting should target the narrowest affected component.
2
Apply the CompTIA least-invasive troubleshooting procedure for mobile applications.
Select force stopping the app and clearing its application cache.
Clearing cache removes stale/corrupted temporary data and halts unresponsive threads without destroying local user settings or app data.
3
Reserve invasive steps for secondary escalation.
Avoid clearing app data, reinstalling, or factory resetting until basic cache clearing proves ineffective.
Preserves user settings and minimizes device downtime.

Key Concept

Mobile App Troubleshooting Methodology (Least Invasive First)
Estimated Time:1m 30s
Question 1725Question →

A lead cloud infrastructure administrator is preparing to deploy an automated identity provider (IdP) federation update that affects single sign-on (SSO) access for all global corporate users. The administrator has fully documented the business justification, established the scope of the change, conducted a formal risk assessment, detailed the implementation steps, and validated a comprehensive rollback plan. Which of the following actions must the administrator take NEXT to adhere to standard change management procedures prior to seeking Change Advisory Board (CAB) authorization?

Show answer & explanation

Answer: Draft and schedule an end-user notification detailing the scheduled maintenance window, potential service disruptions, and support contact details.

Answer

Draft and schedule an end-user notification detailing the scheduled maintenance window, potential service disruptions, and support contact details.
In enterprise IT environments, a complete change proposal submitted to the Change Advisory Board (CAB) must include all required documentation elements: purpose, scope, risk assessment, implementation plan, rollback plan, and the end-user notification schedule. Preparing the end-user notification prior to CAB review ensures that stakeholders are aware of upcoming maintenance windows and potential service downtime, allowing the board to evaluate both technical risk and operational impact.

Step-by-Step Solution

1
Analyze the change management stage presented in the scenario.
The administrator has already completed the purpose/justification, scope, risk analysis, implementation plan, and rollback plan.
Understanding which documentation components are completed isolates what remains required prior to CAB submission.
2
Identify the missing prerequisite for a complete formal change request.
End-user notification planning (informing stakeholders of downtime schedules and impact) is a key component required alongside technical plans.
The Change Advisory Board (CAB) reviews communication plans to ensure business operations and users are adequately prepared before granting authorization.
3
Evaluate the choices to eliminate policy violations.
Deploying directly to production, running destructive rollback tests on production infrastructure, or falsely declaring an emergency bypass standard change governance.
Standard operational procedures prohibit unauthorized production changes and misuse of emergency change lanes.

Key Concept

Change Management Processes & Documentation Requirements
Estimated Time:1m 30s
Question 1726Question →

A support technician is dispatched to an employee's desk to perform an on-site hardware maintenance procedure on a workstation. Place the technician's professional customer interaction steps in the correct chronological order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The proper sequence begins with greeting the customer and verifying a suitable work time, followed by actively listening to their issue, explaining the repair scope and obtaining permission, performing the service professionally, and finally confirming solution success with the user while documenting the ticket.
The correct order follows standard CompTIA operational procedures for desk-side support: initial greeting and schedule confirmation must occur first, followed by active listening to gather symptoms, communicating the repair plan to gain explicit consent, executing the repair with respect to privacy and environment, and concluding with user verification and ticket documentation.

Step-by-Step Solution

1
Initiate the interaction
Technician introduces self, states visit purpose, and confirms timing with user.
Establishes rapport and avoids unexpected disruption to the user's workload.
2
Gather problem details
Technician listens actively without interruption.
Allows the user to explain symptoms fully and avoids miscommunication.
3
Set expectations and seek consent
Technician provides non-technical overview of repair steps and estimated downtime, obtaining user consent.
Maintains transparency and prevents unauthorized downtime on active systems.
4
Execute maintenance
Technician completes hardware repair while respecting workspace confidentiality and cleanliness.
Protects customer privacy and physical assets during service execution.
5
Verify and close ticket
User tests the workstation, technician answers questions, and the work log is completed.
Ensures complete resolution satisfaction and proper institutional record-keeping.

Key Concept

Professional On-Site Communication and User Interaction Lifecycle
Estimated Time:1m 30s
Question 1727Question →

During a security audit at a branch office, an IT administrator observes that several corporate smartphones are exhibiting abnormal routing behavior, where internal web applications display security certificate warnings. Further investigation reveals that a malicious utility sideloaded by users created an unauthorized local VPN profile and added an untrusted Root CA certificate to the system trust store, causing the Mobile Device Management (MDM) system to mark the devices as non-compliant and quarantine them. Which of the following actions should the technician perform FIRST to remediate the security compromise on these devices?

Show answer & explanation

Answer: Remove the unauthorized local VPN configuration, delete the untrusted Root CA certificate, and uninstall the sideloaded application.

Answer

Remove the unauthorized local VPN configuration, delete the untrusted Root CA certificate, and uninstall the sideloaded application.
Removing the untrusted local VPN profile, purging the malicious Root CA certificate from the mobile OS trust store, and uninstalling the sideloaded application directly eliminates the unauthorized access vector. Once these items are removed, the device complies with corporate security policies, allowing the MDM server to lift the quarantine.

Step-by-Step Solution

1
Identify the cause of the security non-compliance alert.
Discovered an unauthorized VPN profile, a user-installed untrusted Root CA certificate, and a sideloaded application causing traffic interception.
Understanding the precise vector of compromise is necessary for proper remediation.
2
Remove the malicious profiles, untrusted credentials, and application from the operating system.
The device no longer routes traffic through the untrusted local VPN gateway or trusts spoofed certificates.
Eliminating the rogue configuration restores the device to a secure operating state.
3
Re-evaluate compliance status with the MDM server.
The MDM server confirms device compliance and restores access to enterprise resources.
Quarantine restrictions are automatically removed once all security non-compliance triggers are resolved.

Key Concept

Remediating Mobile Device Security Profile and Certificate Interception
Question 1728Question →

In what sequence should an IT technician carry out standard customer interaction steps during a support engagement, from initial contact to ticket closure? Place the steps in the correct order.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence begins with greeting and active listening, followed by clarifying the problem, setting clear expectations and timeframes, executing the technical resolution with progress updates, and concluding with customer verification and ticket documentation.
The standard CompTIA customer communication lifecycle follows a structured sequence: 1) Greet the customer and practice active listening without interrupting; 2) Ask clarifying questions and restate the issue in non-technical terms to ensure mutual understanding; 3) Set proper customer expectations by explaining planned steps and providing time estimates; 4) Perform the work while providing periodic updates; and 5) Verify issue resolution directly with the customer before documenting details in the ticketing system and closing the case.

Step-by-Step Solution

1
Greet the customer and actively listen
Establishes professional rapport and gathers initial information without interrupting.
Listening first prevents miscommunication and ensures the customer feels heard.
2
Ask clarifying questions and restate the problem
Confirms understanding in plain language.
Restating the problem verifies that the technician accurately understands the user's issue before proceeding.
3
Set clear expectations and timeframes
Aligns customer expectations with actual technical procedures and scope.
Users need to know estimated completion times and expected downtime before work begins.
4
Execute the technical solution
Resolves the underlying technical issue while keeping the customer informed of any unexpected delays.
Performing work after establishing expectations minimizes user disruption and confusion.
5
Verify satisfaction and document resolution
Ensures the customer agrees the problem is fixed and creates an audit trail in the ticketing system.
A ticket should only be closed after user verification and complete documentation.

Key Concept

Best practices for professional user communication and support interaction lifecycle.
Question 1729Question →

A tier-2 IT support specialist at a regional educational institution is configuring a new administrative workstation for an employee in the registrar's office. The office handles student academic transcripts, federal student loan application records, and campus bookstore credit card payments. The specialist must ensure that access controls on the workstation comply with relevant privacy laws. Which of the following technical or administrative controls is specifically mandated by FERPA when managing access to student educational records on this system?

Show answer & explanation

Answer: Enforce strict role-based access controls to limit record access exclusively to school officials with a legitimate educational interest.

Answer

Enforce strict role-based access controls to limit record access exclusively to school officials with a legitimate educational interest.
The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. It requires educational institutions to implement controls ensuring that non-directory information and transcripts are disclosed only to school officials who have been determined to have legitimate educational interests.

Step-by-Step Solution

1
Identify the target regulation and data type in the scenario.
The scenario focuses on student educational records (academic transcripts) handled by an educational institution, which falls under the scope of FERPA (Family Educational Rights and Privacy Act).
Different compliance frameworks apply to distinct data types such as PHI, PII, cardholder data, or student records.
2
Evaluate the technical and administrative requirements of FERPA.
FERPA requires educational agencies and institutions to protect the privacy of student education records and mandates that access be limited to individuals with a verified, legitimate educational interest.
Proper access management prevents unauthorized disclosure of student PII and academic history.
3
Differentiate FERPA requirements from other compliance frameworks mentioned in the distractor options.
Cardholder data management relates to PCI-DSS, health notification workflows relate to HIPAA, and data erasure rights relate to GDPR.
Selecting the correct compliance control requires distinguishing FERPA's scope from healthcare, payment card, and international data privacy regulations.

Key Concept

Regulatory Compliance Scopes (FERPA vs. PCI-DSS, HIPAA, and GDPR)
Estimated Time:1m 30s
Question 1730Question →

Place the standard stages of an IT service desk incident ticket lifecycle in the correct order, from the initial reporting of an issue to the final ticket status update.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order of the ticketing workflow lifecycle is: Ticket Intake and Creation, Triage and Categorization, Troubleshooting and Work Log Update, User Resolution Verification, and Ticket Closure and Knowledge Capture.
In standard IT service management (ITIL/CompTIA best practices), an incident begins with Ticket Intake and Creation to record user details. It moves to Triage and Categorization for routing and priority assessment, followed by Troubleshooting and Work Log Update during active resolution. Once resolved technically, User Resolution Verification confirms satisfaction, and lastly, Ticket Closure and Knowledge Capture formally finishes the lifecycle.

Step-by-Step Solution

1
Identify the initial entry point of a ticket.
Ticket Intake and Creation must occur first to capture contact details and the initial symptom description.
Work cannot begin until the incident is formally captured in the ticketing system.
2
Determine how the ticket is prioritized and routed.
Triage and Categorization follows initial creation.
Categorizing and prioritizing ensures high-severity issues are addressed promptly by the right team.
3
Identify the active resolution phase.
Troubleshooting and Work Log Update takes place next.
Technicians investigate the issue and record their progress in the ticket work log.
4
Determine the quality assurance check before administrative completion.
User Resolution Verification must occur before closing.
Standard IT service management practices require confirming with the user that their problem is resolved.
5
Identify the final phase.
Ticket Closure and Knowledge Capture is the last step.
Final documentation and marking the ticket status as Closed completes the workflow.

Key Concept

Standard Incident Management Ticket Lifecycle Workflow
Question 1731Question →

An IT department follows standard IT service management (ITSM) guidelines for handling support incidents. Place the following stages of the incident ticket workflow in the correct sequential order from initial occurrence to final administrative completion.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence for the incident ticket workflow is: 1) Ticket Logging and Categorization, 2) Initial Investigation and Triage, 3) Ticket Escalation, 4) Resolution and User Verification, and 5) Documentation and Ticket Closure.
The standard ITSM incident management workflow begins with ticket logging and categorization upon user contact, followed by initial investigation and triage by Tier 1 technicians. If unresolved, the ticket is escalated to Tier 2 with detailed notes. Once solved, the technician implements the resolution and verifies functionality with the user, ending with final documentation and official ticket closure.

Step-by-Step Solution

1
Identify the initial ticket entry requirement
Ticket Logging and Categorization is the first step.
An incident must be formally documented, prioritized, and categorized in the ITSM platform upon initial user report.
2
Identify the preliminary troubleshooting stage
Initial Investigation and Triage follows ticket creation.
Tier 1 technicians investigate symptoms and record preliminary work notes to evaluate the problem.
3
Identify the escalation workflow step
Ticket Escalation occurs after Tier 1 diagnostics are recorded.
When an issue requires specialized knowledge, it is transferred to Tier 2 with complete diagnostic history attached.
4
Identify post-repair requirements
Resolution and User Verification takes place after applying the technical solution.
Technicians must verify with the end user that the issue is fixed prior to finalizing the ticket.
5
Identify final ticket administrative completion
Documentation and Ticket Closure is the final stage.
Recording final resolution details, updating knowledge bases, and closing the ticket record completes the workflow.

Key Concept

ITSM Incident Management and Ticket Lifecycle
Question 1732Question →

A network administrator needs to establish a secure, encrypted text-based command-line session to manage a remote Linux server over TCP port 22. Which of the following remote access protocols should the administrator use?

Show answer & explanation

Answer: SSH

Answer

SSH (Secure Shell) is the correct protocol because it provides encrypted command-line access over TCP port 22.
SSH (Secure Shell) is specifically designed to provide secure, encrypted command-line sessions over TCP port 22.

Step-by-Step Solution

1
Identify the required operational characteristics from the scenario.
The requirement calls for a secure, encrypted command-line session over TCP port 22 to manage a Linux server.
Matching the protocol to both its port number and security features identifies the proper tool.
2
Evaluate the protocol matching TCP port 22 and encryption.
SSH operates over TCP port 22 and encrypts all traffic, satisfying all requirements.
SSH is the standard protocol for secure remote command-line administration.

Key Concept

SSH operates over TCP port 22 to provide encrypted command-line access for remote system management.
Question 1733Question →

A network administrator is servicing a Windows workstation experiencing recurring system instability. Running the System File Checker utility (`sfc /scannow`) returns an error message indicating that Windows Resource Protection found corrupt files but was unable to repair them because the local Windows component store (Side-by-Side/WinSxS store) is damaged. The workstation has an active internet connection to online updates. Which TWO command-line operations must the administrator run to repair the component store corruption and then successfully restore the system files? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: dism /online /cleanup-image /restorehealth; sfc /scannow

Answer

The technician must execute 'dism /online /cleanup-image /restorehealth' to repair the damaged component store, followed by 'sfc /scannow' to repair corrupt system files.
When Windows Resource Protection detects system corruption but cannot repair it due to a corrupted component store (WinSxS directory), Deployment Image Servicing and Management (DISM) must be executed first using the '/restorehealth' switch. Because the machine has internet access, DISM uses Windows Update to repair the local component store. Once the component store is repaired, re-running System File Checker via 'sfc /scannow' allows SFC to replace corrupted protected system files successfully.

Step-by-Step Solution

1
Run DISM with the RestoreHealth parameter
DISM connects to Windows Update to retrieve healthy copies of component payloads and fixes the local WinSxS store corruption.
SFC relies on the local component store as its healthy source repository; SFC cannot fix corrupt system files if the component store itself is corrupt.
2
Re-run SFC with the scannow parameter
System File Checker compares operating system binaries against the now-repaired component store and replaces corrupted files.
Once the component store is healthy, SFC has valid source files to perform the replacement.

Key Concept

DISM and SFC Repair Sequence for System File Corruption
Question 1734Question →

A user reports that after a recent hardware driver update, their Windows computer experiences display flickering and intermittently reports missing system DLL files upon booting. Which TWO of the following troubleshooting steps should a technician take to resolve these driver and system file issues? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Execute the sfc /scannow command from an elevated Command Prompt to repair corrupted operating system files.; Use Device Manager to perform a driver rollback to the previously installed driver version.

Answer

The technician should execute sfc /scannow from an elevated Command Prompt to replace corrupted system files, and use Device Manager to roll back the hardware driver to its previous stable version.
Executing sfc /scannow scans protected system files and replaces corrupted DLLs with intact cached copies. Using Driver Roll Back within Device Manager restores the working driver previously used before the problematic update was applied.

Step-by-Step Solution

1
Address system file corruption using System File Checker
Protected Windows system files and DLLs are scanned and replaced if corrupted.
Running sfc /scannow verifies system file integrity and automatically restores missing or damaged core system files.
2
Revert the problematic hardware driver using Device Manager
The device driver returns to the previous working configuration.
Driver Roll Back in Device Manager quickly replaces an unstable updated driver with the previously installed functional driver.

Key Concept

System File and Driver Recovery Utilities
Question 1735Question →

A field service technician is troubleshooting an enterprise Android tablet used by delivery drivers. A key line-of-business navigation application frequently freezes and becomes unresponsive during route updates. Arrange the troubleshooting steps in the correct sequence from least invasive to most invasive.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence from least invasive to most invasive is: Force stop the unresponsive navigation application, perform a soft reset of the mobile tablet, clear the application cache and local app data, uninstall and reinstall the navigation application, and perform a full factory reset on the mobile tablet.
CompTIA troubleshooting best practices dictate progressing from the least invasive action to the most invasive action. Force stopping the stuck application process is least disruptive as it does not restart the system or alter stored data. Performing a soft reset is second because it reboots the OS and clears RAM without modifying files. Clearing app cache/data is third because it deletes local app state and configurations. Reinstalling the app is fourth because it replaces all core app files. Finally, factory resetting the device is the most invasive step because it wipes all user data and settings across the entire operating system.

Step-by-Step Solution

1
Terminate the frozen application process.
Force stopping the application stops the hung thread without affecting system memory or persistent settings.
Always begin troubleshooting by isolating the specific process before taking disruptive measures.
2
Reboot the mobile operating system.
Performing a soft reset reboots the OS and flushes volatile RAM without deleting files.
If process termination fails, rebooting clears OS-level memory leaks or frozen system services.
3
Reset local application storage state.
Clearing the app cache and data removes corrupt temporary data files that persist across process restarts.
This modifies saved application state and stored settings, making it more invasive than rebooting.
4
Replace damaged application binaries.
Uninstalling and reinstalling downloads a fresh installation package.
This replaces core binary files, requiring full app setup and credential re-entry.
5
Execute system-wide factory restoration.
Performing a factory reset erases all user data, applications, and configurations.
Factory resets restore the device to out-of-box defaults and should strictly serve as a last resort.

Key Concept

Least-invasive troubleshooting methodology for mobile OS application performance and freezing issues
Question 1736Question →

Match each remote access technology or protocol on the left with its defining port number and operational characteristics on the right.

Click a left item, then click its matching right item

Items

Remote Desktop Protocol (RDP)
Secure Shell (SSH)
Telnet
Microsoft Remote Assistance (MSRA)

Matches

Show answer & explanation

Answer

Remote Desktop Protocol (RDP) pairs with TCP port 3389 and Windows Pro/Enterprise/Education host requirement; Secure Shell (SSH) pairs with TCP port 22 encrypted command-line management; Telnet pairs with TCP port 23 cleartext transmission; Microsoft Remote Assistance (MSRA) pairs with invitation-based interactive desktop session sharing.
Each remote access technology is accurately matched to its standard default network port, encryption status, and operating system hosting requirements per standard educational guidelines.

Step-by-Step Solution

1
Identify default ports and OS hosting requirements for GUI remote desktop tools.
RDP uses TCP 3389 and requires Windows Pro, Enterprise, or Education to accept incoming connection hosting requests.
Windows Home edition includes the RDP client software but lacks the inbound RDP host server feature.
2
Compare command-line remote access protocols based on security and port numbers.
SSH uses TCP port 22 for encrypted CLI access, while Telnet uses TCP port 23 without encryption.
SSH was specifically designed to secure shell communications over public or untrusted networks.
3
Identify the operational mechanism of Microsoft Remote Assistance (MSRA).
MSRA establishes a collaborative desktop connection requiring a user invitation.
Unlike RDP which locks the physical workstation monitor, MSRA keeps the local session active for dual control.

Key Concept

Remote Access Technologies, Ports, and Capabilities
Estimated Time:1m 30s
Question 1737Question →

A systems administrator is auditing administrative scripts across a heterogeneous corporate network. Match each script code snippet or syntax requirement on the left to its correct scripting language environment, file extension, and execution rule on the right.

Click a left item, then click its matching right item

Items

A script snippet referencing `$env:COMPUTERNAME` and using `Get-ChildItem -Path C:\Logs` to process system events.
A script snippet using `%SYSTEMROOT%` environment variables with `IF EXIST` conditional syntax and `REM` for documentation lines.
A script snippet starting with `#!/bin/bash`, utilizing `$1` for positional input arguments and `#` for inline comments.
A legacy automation script using `WScript.Echo` to prompt users, using a single quote `'` for comments and execution via `cscript.exe`.

Matches

Show answer & explanation

Answer

The script snippet using `env:COMPUTERNAME‘and‘Get−ChildItem‘matchesPowerShell(‘.ps1‘).Thescriptusing‘env:COMPUTERNAME` and `Get-ChildItem` matches PowerShell (`.ps1`). The script using `%SYSTEMROOT%`, `IF EXIST`, and `REM` matches Windows Batch (`.bat`). The script starting with `#!/bin/bash` and using ` 1` matches Bash Shell (`.sh`). The script using `WScript.Echo` and single quote comments matches VBScript (`.vbs`).
Each script snippet relies on unique syntax constructs and execution environments defined in CompTIA A+ Core 2 objectives: PowerShell uses `$env:` and cmdlets (`.ps1`); Batch uses `%VAR%` and `REM` (`.bat`); Bash uses shebang directives `#!/bin/bash` and `#` comments (`.sh`); VBScript uses `WScript` runtime objects and single-quote comments (`.vbs`).

Step-by-Step Solution

1
Analyze variable notation and cmdlet syntax for the first snippet
Identified `$env:` syntax and `Get-ChildItem` cmdlet as PowerShell characteristics (`.ps1`).
PowerShell standardizes environment variable access through the `$env:` provider.
2
Analyze conditional syntax and comment markers for the second snippet
Identified `%VAR%` expansion and `REM` keyword as Windows Command Shell batch script features (`.bat`).
Legacy command-prompt scripts require percent sign wrapping for environment variables.
3
Analyze shebang header and positional parameters for the third snippet
Identified `#!/bin/bash` shebang line and `$1` parameter reference as Bash shell script features (`.sh`).
Unix-like systems utilize shebang interpreter directives to locate the execution binary.
4
Analyze runtime engine objects and comment delimiters for the fourth snippet
Identified `WScript.Echo` and `cscript.exe` host requirement as VBScript characteristics (`.vbs`).
VBScript relies on Windows Script Host (WSH) COM objects for input/output operations.

Key Concept

Basic Scripting Languages, File Extensions, and Environmental Syntax
Question 1738Question →

A technician boots an unstartable Windows 11 system into the Windows Recovery Environment (WinRE) Command Prompt to resolve severe system file corruption. The offline Windows installation is mounted on drive letter C:. Which TWO command-line parameters must the technician include to successfully target and repair the offline operating system instance rather than the active recovery environment? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The /image:C:\ parameter when executing DISM to repair the offline component store; The /offbootdir=C:\ and /offwindir=C:\windows parameters when executing SFC scannow

Answer

To repair an unbootable Windows system from WinRE, the technician must use /image:C:\ with DISM to repair the offline component store, and /offbootdir=C:\ /offwindir=C:\windows with SFC to target the offline system files.
When repairing an offline Windows installation from WinRE Command Prompt, standard online utility execution fails because the active operating system is WinRE (X: drive). Using the /image:C:\ switch with DISM directs component store repairs to the target drive. Similarly, adding /offbootdir=C:\ and /offwindir=C:\windows allows SFC to locate and repair protected system files on the offline drive.

Step-by-Step Solution

1
Identify the drive letter assigned to the target Windows installation within WinRE.
Drive letter C: is confirmed as the target system directory.
WinRE assigns dynamic drive letters that may differ from standard boot drive assignments.
2
Execute DISM with offline target pathing.
The command DISM /image:C:\ /cleanup-image /restorehealth services the offline component store.
The /image switch directs repair operations to the offline system store rather than the online X: drive environment.
3
Execute SFC with offline boot and directory switches.
The command sfc /scannow /offbootdir=C:\ /offwindir=C:\windows verifies protected files against the restored component store.
Explicit directory switches prevent SFC from erroneously scanning the temporary WinRE kernel.

Key Concept

Offline System File and Component Store Repair Switches
Question 1739Question →

A systems engineer is auditing remote administration tools across a corporate environment. The audit mandates two specific operational constraints:
1. Command-line interface (CLI) management of remote Linux database servers across public WAN connections must be encrypted.
2. Support technicians assisting logged-in Windows 11 Enterprise users must view and share screen interaction in real time without locking out or disconnecting the local user's active desktop session.

Which combination of remote access tools and protocols satisfies both operational constraints?

Show answer & explanation

Answer: Secure Shell (SSH) over TCP port 22 for server administration, and Microsoft Remote Assistance (MSRA) for user desktop support

Answer

Secure Shell (SSH) over TCP port 22 for server administration, and Microsoft Remote Assistance (MSRA) for user desktop support
Secure Shell (SSH) uses public-key cryptography over TCP port 22 to provide secure, encrypted command-line management across untrusted networks. Microsoft Remote Assistance (MSRA) allows a technician to view and control a user's desktop session collaboratively in real time while keeping the local user logged in and active.

Step-by-Step Solution

1
Analyze Requirement 1: Encrypted remote CLI management over public WAN links.
Identify Secure Shell (SSH) using TCP port 22 as the secure protocol, eliminating Telnet (TCP port 23) due to its unencrypted plaintext transmission.
Telnet sends credentials and data in cleartext, making it unsuitable for public network traversal.
2
Analyze Requirement 2: Real-time desktop assistance for Windows 11 Enterprise without disconnecting the local user.
Select Microsoft Remote Assistance (MSRA) or Quick Assist over Remote Desktop Protocol (RDP).
On Windows client operating systems (including Pro and Enterprise), initiating an inbound RDP session locks or terminates the active local user session. MSRA enables concurrent screen sharing and control with user permission.
3
Combine the compliant solutions.
SSH over TCP port 22 combined with MSRA fulfills both security and operational requirements.
This combination satisfies both transport security standards and Windows session management behavior.

Key Concept

Remote access protocol security mechanisms and Windows desktop session limitation behaviors (SSH vs. Telnet and MSRA vs. RDP)
Estimated Time:2m 0s
Question 1740Question →

An employee working remotely at a coffee shop connects a mobile device to an open public Wi-Fi network. Shortly after connecting, the user notices repeated SSL/TLS certificate warnings when navigating to secure corporate websites, accompanied by unexpected prompts to re-enter login credentials. Which of the following is the MOST likely cause of this security issue?

Show answer & explanation

Answer: The mobile device is connected to a rogue access point performing a man-in-the-middle attack.

Answer

The mobile device is connected to a rogue access point performing a man-in-the-middle attack.
When a mobile device connects to an untrusted rogue access point configured as a man-in-the-middle proxy, the malicious gateway attempts to decrypt HTTPS traffic using its own certificate. Because the client browser does not trust the proxy's certificate, it generates SSL/TLS certificate warnings. The attacker may also inject fake login pages to harvest user credentials.

Step-by-Step Solution

1
Analyze the symptoms described in the scenario
The user is on an open public Wi-Fi network, experiencing SSL/TLS certificate warnings on HTTPS sites and unexpected credential prompts.
These indicators strongly point toward active traffic interception.
2
Evaluate potential wireless security threat vectors
An attacker operating a rogue access point (Evil Twin) intercepts traffic, presenting invalid SSL certificates to decrypt HTTPS sessions and prompt for credentials via man-in-the-middle (MitM).
This directly explains both the browser certificate errors and the credential harvesting attempts.
3
Select the correct root cause
Connecting to a rogue access point conducting a man-in-the-middle attack matches all observed symptoms.
Other options represent misdiagnoses regarding cellular outages, wireless encryption standards, or app permissions.

Key Concept

Rogue Access Points and Man-in-the-Middle (MitM) Attacks
PreviousPage 87 / 178Next
All practice questions — CompTIA A+ (Core 1 & Core 2) | Examkin