Security

A IT technician needs to sanitize several high-performance NVMe solid-state drives (SSDs) that contain confidential financial data. The company plans to reassign these drives to non-sensitive internal workstations. Which of the following is the most appropriate data destruction method to render the data unrecoverable while leaving the drives fully operational for reuse?

Match each security incident description on the left with the corresponding social engineering or threat type on the right.

A corporate IT technician is reviewing several recent security incident logs and employee reports across different departments. Match each security incident scenario on the left with its corresponding social engineering or threat classification on the right.

An employee contacts the IT help desk reporting that their corporate desktop is displaying continuous pop-up advertisements and experiencing unusual performance delays. A support technician inspects the computer and identifies symptoms of an active adware infection. According to the CompTIA 7-step malware remediation process, which of the following actions should the technician take NEXT?

A technician is preparing to dispose of several retired solid-state drives (SSDs) that previously stored confidential company files. Which of the following methods will ensure that the data on these flash-based drives is completely unrecoverable?

Match each physical security control mechanism on the left with its primary protective function or implementation objective on the right.

A user contacts the help desk stating that whenever they attempt to run a software installer on their Windows workstation, the screen dims and a pop-up prompt asks for permission to allow the app to make changes to the device. Which Windows security feature generates this prompt to restrict unauthorized system modifications?

A systems technician is deploying a wireless network across several retail store locations. Management mandates that store associates log in using their individual Active Directory credentials. To protect against rogue access points, client handhelds must validate the RADIUS server's identity using a digital certificate. However, management explicitly prohibits the deployment and maintenance of individual client-side digital certificates due to administrative overhead. Which of the following wireless authentication configurations should the technician implement?

An enterprise desktop administrator is responding to a malware incident on a Windows 11 workstation. The host has already been physically isolated from the local network, and System Restore has been disabled to prevent malicious persistence in volume shadow copies. Upon attempting to launch the installed anti-malware software to update definition files and clean the system, the malware actively terminates the security application processes and blocks network adapter configuration changes. Which action should the administrator take next to successfully proceed with system remediation?

A tier-2 helpdesk technician is providing remote assistance to a user on a Windows 11 Enterprise workstation. Whenever an administrative command or application requiring privilege elevation is launched during the remote session, the technician's remote screen goes completely black, and control is temporarily lost until the local user interacts with the prompt. Corporate policy requires that User Account Control (UAC) remain active and continue prompting for elevation. Which Local Security Policy setting should the technician modify on the target workstation to allow remote management tools to display and interact with elevation prompts without turning off UAC?

A desktop administrator is configuring Local Security Policy and User Account Control (UAC) settings on standalone Windows 11 Pro workstations to harden end-user systems. Which TWO configuration settings or UAC behaviors accurately describe proper administrative enforcement in this environment? (Select TWO.)

An organization is preparing to permanently decommission a batch of legacy storage media containing sensitive customer information in compliance with corporate security governance. Arrange the following steps of the hardware decommissioning and sanitization lifecycle in the correct order from first to last.

A desktop technician is configuring Local Security Policy (secpol.msc) on a workstation running Windows 11 Pro in a shared lab environment. Management mandates that whenever a standard user account attempts an action requiring administrative privileges, Windows must automatically reject the elevation request without displaying a credential prompt. However, administrative users must retain the standard behavior of receiving a consent prompt on the Secure Desktop. Which Local Security Policy setting should the technician configure to meet the requirement for standard user accounts?

A logistics coordinator receives an automated SMS text message on their company-issued smartphone requesting an immediate credential verification via an included short link to prevent account termination. Upon clicking the link, the user is brought to a fake corporate portal that captures their credentials. Which of the following social engineering threat types best describes this attack vector?

Match each storage data destruction or sanitization method on the left with its corresponding operational description on the right.

A desktop technician has quarantined a Windows workstation that was infected with malware. Before executing a full anti-malware scan to clean the system, which TWO steps of the CompTIA 7-step malware remediation process must be performed?

A desktop technician needs to change the User Account Control (UAC) settings on a Windows workstation to prevent notification prompts when software installation occurs. Place the following steps in the correct order to complete this configuration using the Graphical User Interface (GUI).

An organization needs to secure the physical entrance of a sensitive server room to prevent tailgating, where an unauthorized person follows an authorized employee through a door. Which of the following physical security controls is designed specifically to enforce single-person entry and eliminate this risk?

A tier-2 desktop support technician is responding to an automated incident response alert on a Windows 11 domain-joined endpoint. The host machine is actively attempting unauthorized SMB connections to network shares and writing encrypted file headers across connected volumes. According to standard CompTIA malware remediation procedures, which of the following actions must the technician execute FIRST to properly contain the outbreak and prepare the operating system for remediation? (Select TWO.)

A field service technician receives an urgent SMS text message on their corporate-managed smartphone stating that their Mobile Device Management (MDM) profile has expired and network access will be terminated within one hour. The message directs the technician to tap a shortened URL to re-authenticate with their Active Directory domain credentials. Which of the following social engineering threat types is best illustrated by this attack vector?