Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 2441Soru →

A technician is installing a new motherboard and connecting cables from the power supply unit. Which TWO of the following motherboard connectors must be connected directly to the power supply to provide primary system board power and dedicated auxiliary processor power? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 24-pin ATX main power connector; 8-pin EPS12V power connector

Cevap

The 24-pin ATX main power connector and the 8-pin EPS12V power connector must both be connected from the power supply unit to the motherboard.
The 24-pin ATX main power connector provides primary power to the motherboard logic board and integrated circuits, while the 8-pin EPS12V connector provides dedicated +12V power to the processor VRMs.

Adım Adım Çözüm

1
Identify the connector responsible for delivering core motherboard and onboard component power.
The 24-pin ATX main power connector supplies main logic power voltages (+3.3V, +5V, +12V) to the motherboard.
Without the main 24-pin connector, the motherboard chipset and expansion buses cannot receive main power.
2
Identify the connector responsible for delivering dedicated power to the processor.
The 8-pin EPS12V (or 4-pin ATX12V) connector delivers auxiliary +12V power directly to the processor's VRMs.
Modern CPUs draw high currents that exceed what the 24-pin main connector can safely supply alone.

Anahtar Kavram

Motherboard Power Connectors (24-pin ATX and 8-pin EPS12V)
Soru 2442Soru →

A user reports that a desktop application has begun crashing intermittently after recent system updates. A technician wants to review a chronological timeline of application failures, Windows updates, and system warnings to identify when the instability started. Which Windows tool provides this historical stability view?

Cevabı ve açıklamayı göster

Cevap: Reliability Monitor

Cevap

Reliability Monitor
Reliability Monitor provides a graphical timeline that correlates application failures, system hangs, and software installation events, allowing technicians to quickly spot patterns or updates associated with application crashes.

Adım Adım Çözüm

1
Identify the technician's requirement
The technician needs a chronological timeline showing system stability, application crashes, and system events over days or weeks.
Tracking when crashes began relative to system updates helps isolate the root cause.
2
Evaluate Windows administrative tools
Reliability Monitor (perfmon /rel) tracks application failures, OS crashes, and software installation events on a day-by-day graph with stability index scores.
Reliability Monitor consolidates event history specifically designed for evaluating software stability trends.

Anahtar Kavram

Using Reliability Monitor to evaluate application crash history and system stability trends
Soru 2443Soru →

Match each macOS or Linux operating system feature or command-line utility to its primary administrative function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

diskutil
NVRAM
tar
sudo

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

diskutil matches managing storage drives and partitions; NVRAM matches storing persistent macOS system settings like boot selection; tar matches bundling and extracting archived files; sudo matches executing commands with elevated superuser privileges.
Each feature or utility is correctly paired with its function: diskutil handles macOS CLI disk and volume management; NVRAM stores persistent hardware and system configuration preferences; tar creates and extracts file archives; sudo executes commands with temporary root/superuser rights.

Adım Adım Çözüm

1
Identify the primary function of diskutil
Recognize that diskutil is a native macOS CLI tool used to format, partition, and modify disk storage.
diskutil provides disk management operations via Terminal in macOS.
2
Identify the primary function of NVRAM
Recognize that NVRAM holds non-volatile system state settings in macOS like screen resolution and startup disk preferences.
NVRAM maintains hardware configuration states across power cycles.
3
Identify the primary function of tar
Recognize that tar is an archiving utility in Linux and macOS used to package files together into archive files.
tar creates consolidated archive files (.tar, .tar.gz).
4
Identify the primary function of sudo
Recognize that sudo executes commands with elevated root/superuser security rights.
sudo elevates command privileges for authorized administrative operations.

Anahtar Kavram

macOS and Linux Operating System Features and Tools
Soru 2444Soru →

A desktop support specialist is customizing an automated system maintenance script with a .sh file extension to execute on Linux and macOS workstations. To document recent configuration updates, the specialist needs to insert internal documentation lines into the script that will be ignored by the shell command interpreter during execution. Which syntax must the specialist use to denote commented lines in this script?

Cevabı ve açıklamayı göster

Cevap: Prepend each commented line with the # character.

Cevap

Prepend each commented line with the # character.
In Bash shell scripts (.sh), placing a hash character (#) at the start of a line instructs the shell command interpreter to treat that text as a comment and ignore it during script execution.

Adım Adım Çözüm

1
Identify the scripting environment based on the file extension.
The file extension .sh indicates a Unix/Linux Bash shell script.
Scripting languages use distinct comment syntax depending on their execution runtime environment.
2
Determine the standard comment syntax for Bash shell scripting.
The hash symbol (#) designates a single-line comment in Bash scripts.
The shell interpreter ignores any line or portion of a line following the # symbol (except for the shebang line #! at the very top).

Anahtar Kavram

Scripting language syntax and comment conventions (.sh vs .bat vs .vbs vs .js)
Soru 2445Soru →

A senior identity engineer is planning an operating system upgrade across primary Active Directory domain controllers in an enterprise network. Place the following change management procedures in the correct chronological order from first step to final step.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of change management steps begins with conducting a risk analysis and drafting a rollback plan, followed by submitting the request to the CAB for approval, notifying affected end-users of the scheduled maintenance window, executing the upgrade during the maintenance window, and concluding with post-implementation testing and documentation.
The standard CompTIA change management lifecycle follows a structured sequence: initial documentation (scope, risk analysis, and rollback plan), formal authorization by the Change Advisory Board (CAB), end-user notification of the scheduled maintenance window, implementation during the maintenance window, and post-implementation testing alongside final documentation.

Adım Adım Çözüm

1
Identify the change preparation phase.
Performing a risk analysis and drafting a rollback plan is established as the initial step.
Before submitting any change for authorization, the technical scope, potential risks, and fallback procedures must be fully documented.
2
Identify the authorization phase.
Submitting the completed change request to the Change Advisory Board (CAB) follows initial preparation.
The CAB must review and authorize the plan and schedule before any implementation work or public announcements occur.
3
Identify the communication phase.
Notifying stakeholders and end-users of the upcoming maintenance window is the third step.
Users must be informed of expected service interruptions after authorization is granted but prior to starting the work.
4
Identify the deployment phase.
Executing the upgrade during the authorized maintenance window is the fourth step.
System modifications occur strictly within the designated maintenance window after all approval and communication prerequisites are satisfied.
5
Identify the post-deployment phase.
Conducting post-implementation testing and updating configuration documentation is the final step.
Testing validates that directory services function correctly, and final documentation updates complete the change lifecycle.

Anahtar Kavram

CompTIA A+ Change Management Lifecycle Order
Tahmini Süre:1m 30s
Soru 2446Soru →

A security technician is decommissioning magnetic hard disk drives (HDDs) containing sensitive financial files. Arrange the following steps in the correct chronological sequence for executing a compliant hardware sanitization and disposition lifecycle.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence begins with documenting chain of custody, followed by magnetic degaussing, physical shredding, and finally archiving the Certificate of Destruction.
The hardware disposition lifecycle follows a strict sequence: first, inventory logging establishes chain of custody; second, media sanitization (degaussing) renders the magnetic data unreadable; third, physical destruction (shredding) prevents hardware recovery; and fourth, administrative auditing secures a Certificate of Destruction.

Adım Adım Çözüm

1
Inventory and Chain of Custody
Drive serial numbers are recorded and tracked.
Maintaining regulatory compliance requires documenting the custody of sensitive storage assets before any action is taken.
2
Data Sanitization
The magnetic drive platters are demagnetized via degaussing.
Degaussing renders data unreadable while the drives remain intact.
3
Physical Destruction
The drive hardware is reduced to small metallic fragments.
Physical shredding guarantees that no hardware components can be recovered or reassembled.
4
Compliance Verification
A Certificate of Destruction is validated and archived.
The certificate serves as formal legal proof that the data disposal process was completed according to standards.

Anahtar Kavram

Hardware Disposition Lifecycle and Chain of Custody
Tahmini Süre:1m 30s
Soru 2447Soru →

A technician is troubleshooting a desktop computer that turns off immediately after being turned on. What is the correct sequence of steps the technician should follow to diagnose and resolve a suspected power supply issue according to standard troubleshooting procedures?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with verifying external power, checking internal motherboard cable seating, testing PSU rail voltages with a dedicated tester, and finally replacing the faulty power supply unit.
CompTIA troubleshooting methodology requires prioritizing simple external verifications before inspecting internal connections, taking tool-based measurements, and performing component replacement.

Adım Adım Çözüm

1
Verify external power sources and connections.
Ensures utility power is actively reaching the power supply inlet.
Standard troubleshooting dictates starting with simple external checks first.
2
Inspect internal power cable seating on the motherboard.
Confirms 24-pin ATX and 8-pin EPS connectors are fully latched.
Loose motherboard power leads can cause thermal trip or immediate power-off events.
3
Test power supply outputs using a multimeter or PSU tester.
Identifies if voltage rails (+12V, +5V, +3.3V) are within proper operating specs.
Direct measurement isolates PSU electrical failure before performing component swaps.
4
Swap out the bad PSU for a functional replacement unit.
Restores consistent power to all system hardware components.
Remediation via hardware replacement occurs after empirical failure verification.

Anahtar Kavram

Power Supply Diagnostics and Isolation Sequence
Soru 2448Soru →

A systems administrator is configuring a wireless access point for corporate employees. To comply with internal security policies, the wireless network must enforce individual credential authentication integrated with the central Active Directory domain, while disallowing vulnerable legacy protocols like TKIP. Which of the following security configurations should the administrator implement?

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise utilizing 802.1X authentication and RADIUS

Cevap

WPA3-Enterprise utilizing 802.1X authentication and RADIUS
WPA3-Enterprise requires an 802.1X RADIUS server infrastructure to authenticate users individually against central directory services like Active Directory. Furthermore, WPA3 enforces strong AES encryption standards, satisfying all security policy mandates.

Adım Adım Çözüm

1
Identify the authentication requirement
Individual domain credentials require an Enterprise security framework utilizing 802.1X and RADIUS rather than a shared passphrase.
Personal modes (PSK/SAE) share a single key among all users, preventing individual user accounting and domain integration.
2
Identify the encryption standard requirement
WPA3 mandates modern AES-based cipher suites (such as CCMP/GCMP) and disallows legacy TKIP.
TKIP has known cryptographic weaknesses and is deprecated across modern wireless security standards.
3
Select the matching configuration option
WPA3-Enterprise satisfies both individual authentication and secure encryption criteria.
It combines 802.1X network access control with strong mandatory AES encryption.

Anahtar Kavram

Enterprise Wireless Security (802.1X / RADIUS vs. Personal PSK/SAE)
Soru 2449Soru →

A user on a Windows 11 workstation reports that a legacy line-of-business application fails to save local configuration settings unless it is launched by right-clicking the icon and choosing 'Run as administrator'. The workstation is logged into by a Standard User account. The helpdesk technician wants to enable the user to save settings within the application without granting the account local administrator rights or lowering overall system User Account Control (UAC) security settings. Which of the following actions should the technician take?

Cevabı ve açıklamayı göster

Cevap: Grant the Standard User account explicit Modify permissions on the application's file folder and registry subkeys.

Cevap

Grant the Standard User account explicit Modify permissions on the application's file folder and registry subkeys.
Granting explicit Modify permissions to the specific folder and registry keys used by the application resolves write access errors under a Standard User account without elevating the user's overall system privileges or disabling system security controls.

Adım Adım Çözüm

1
Identify the cause of the UAC elevation requirement for the application.
Legacy applications often require administrative access because they attempt to write configuration data to protected directories such as C:\Program Files or HKEY_LOCAL_MACHINE.
Standard user accounts lack write/modify rights to system-protected locations by default.
2
Apply targeted permission changes using the principle of least privilege.
Updating NTFS permissions on the application folder and registry key permissions for the application's specific registry path enables file and registry modifications.
This resolves the application failure while keeping the user account at a standard privilege level and maintaining UAC protection system-wide.

Anahtar Kavram

Principle of Least Privilege and UAC Application Security
Tahmini Süre:1m 15s
Soru 2450Soru →

A technician suspects a Windows workstation is infected with malware after observing unexpected browser redirects and modified system settings. According to CompTIA's standard 7-step malware removal procedures, which of the following initial actions should the technician take before attempting to clean or scan the system? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Disconnect the computer from the wired and wireless network.; Disable System Restore in Windows.

Cevap

The correct actions are disconnecting the infected system from the network (Isolate) and disabling System Restore prior to remediation.
According to the official 7-step remediation process, after identifying malware symptoms (Step 1), the technician must isolate the infected system (Step 2) to contain the threat and disable System Restore (Step 3) so that restore points do not store infected files during remediation.

Adım Adım Çözüm

1
Isolate the infected machine
Network connectivity is severed (unplug Ethernet, turn off Wi-Fi).
Prevents malware propagation and communication with command-and-control servers.
2
Disable System Restore
System Protection is turned off and existing restore points are cleared.
Ensures malware is not backed up into restore points or reinjected during cleanup.

Anahtar Kavram

CompTIA 7-Step Malware Removal Procedure (Isolate infected system and Disable System Restore prior to remediation)
Soru 2451Soru →

An IT technician is reviewing corporate data handling standards and regulatory compliance requirements across various business units. Match each data privacy framework or data classification standard on the left with its corresponding operational mandate or primary data restriction on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

General Data Protection Regulation (GDPR)
Payment Card Industry Data Security Standard (PCI-DSS)
Health Insurance Portability and Accountability Act (HIPAA)
Personally Identifiable Information (PII)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

General Data Protection Regulation (GDPR) matches with granting EU citizens explicit rights to request deletion of personal records under the Right to Erasure. Payment Card Industry Data Security Standard (PCI-DSS) matches with prohibiting the storage of Sensitive Authentication Data (SAD), such as card validation codes (CVV/CVC), post-authorization. Health Insurance Portability and Accountability Act (HIPAA) matches with mandating administrative, physical, and technical safeguards for individually identifiable health data handled by covered entities. Personally Identifiable Information (PII) matches with defining standalone or combined data elements capable of uniquely identifying an individual.
Each regulation or standard targets a specific domain: GDPR protects EU data privacy rights like erasure; PCI-DSS restricts cardholder and sensitive authentication data storage; HIPAA safeguards protected health information (PHI); and PII classifies data capable of identifying an individual.

Adım Adım Çözüm

1
Analyze the scope of European data privacy legislation
Associate General Data Protection Regulation (GDPR) with EU data subject rights, specifically the Right to Erasure (Right to be Forgotten).
GDPR focuses on user consent, control, and data deletion rights for EU citizens.
2
Evaluate merchant payment processing standards
Associate Payment Card Industry Data Security Standard (PCI-DSS) with cardholder and authentication data protection rules.
PCI-DSS forbids saving sensitive authentication data like CVV or magnetic stripe contents after authorization.
3
Examine healthcare compliance standards
Associate Health Insurance Portability and Accountability Act (HIPAA) with Protected Health Information (PHI) safeguards.
HIPAA requires covered healthcare entities to enforce administrative, physical, and technical security controls.
4
Determine general data privacy definitions
Associate Personally Identifiable Information (PII) with attributes that uniquely identify a person.
PII serves as the broad classification for personal data requiring confidentiality controls across all IT systems.

Anahtar Kavram

Data Privacy Regulations and Classification Frameworks
Soru 2452Soru →

A technician is servicing a legacy Windows 10 computer that fails to start after an unexpected power outage. Upon powering on, the screen displays the error message 'Operating System not found'. The technician boots the system into the Windows Recovery Environment (WinRE) command prompt to repair the MBR boot code and the volume boot sector. Which TWO of the following bootrec commands should the technician execute to accomplish this? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: bootrec /fixmbr; bootrec /fixboot

Cevap

The technician should execute the bootrec /fixmbr and bootrec /fixboot commands.
The command bootrec /fixmbr writes a Windows-compatible Master Boot Record to the system partition to resolve MBR corruption, while bootrec /fixboot writes a new volume boot sector to repair damaged boot code on the system partition.

Adım Adım Çözüm

1
Identify the cause of the 'Operating System not found' error on an MBR system.
Determine that the Master Boot Record code or volume boot sector code is corrupted or missing.
Power outages can cause write interruptions that corrupt boot sectors on MBR partitions.
2
Select the appropriate bootrec command to repair the Master Boot Record.
Use bootrec /fixmbr to write a Windows-compatible MBR to the system partition.
This fixes corrupted MBR header/code without altering the partition table.
3
Select the appropriate bootrec command to write a new boot sector.
Use bootrec /fixboot to write a new boot sector to the system partition.
This repairs the volume boot sector required to launch the Windows Boot Manager.

Anahtar Kavram

Troubleshooting Windows OS Startup and Boot Errors using bootrec commands in WinRE
Soru 2453Soru →

A data analytics firm hosts its infrastructure in a cloud provider's facility. The provider maintains a large, multi-tenant infrastructure where physical compute cores, system memory, and storage drives from vast server racks are dynamically allocated and reallocated among multiple corporate clients according to real-time workload demands. Individual clients are unaware of the exact physical locations of the underlying hardware components supporting their workloads. Which cloud computing characteristic is described in this scenario?

Cevabı ve açıklamayı göster

Cevap: Resource pooling

Cevap

Resource pooling
Resource pooling is the cloud characteristic where the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand, while masking specific physical location details from the customer.

Adım Adım Çözüm

1
Analyze the key attributes presented in the scenario.
The scenario describes a multi-tenant model where physical compute, memory, and storage are dynamically allocated across multiple clients from a unified hardware base, location-independently.
Identifying the defining features of cloud infrastructure characteristics is necessary to classify the operational model.
2
Map the attributes to official cloud characteristics.
The concept of serving multiple customers using a shared pool of physical and virtual hardware resources without tenant knowledge of exact physical locations represents resource pooling.
NIST definitions specify resource pooling as multi-tenant allocation of location-independent physical and virtual assets.

Anahtar Kavram

Cloud Characteristics: Resource Pooling
Tahmini Süre:1m 0s
Soru 2454Soru →

A field technician is auditing print subsystem behavior on a commercial electrophotographic (EP) laser printer to identify where image corruption occurs during document creation. Place the following EP laser printing steps in the correct chronological order from the initial job receipt to the final paper output.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence for the electrophotographic (EP) printing process is: 1) Processing (rasterizing data in memory), 2) Charging (conditioning the drum with negative charge), 3) Exposing (writing the latent image via laser), 4) Developing (applying toner to exposed drum areas), 5) Transferring (attracting toner to paper using positive charge), and 6) Fusing (melting toner onto paper with heat and pressure).
The standard CompTIA electrophotographic (EP) printing process follows seven primary steps: Processing, Charging, Exposing, Developing, Transferring, Fusing, and Cleaning. Processing translates the document into a bitmap image in memory. Charging applies a high negative charge across the photosensitive drum. Exposing uses a laser to lower the voltage on specific areas of the drum, creating a latent electrostatic image. Developing transfers toner onto those exposed areas. Transferring uses positive charge on the back of the paper to pull toner off the drum onto the paper. Finally, Fusing uses heat and pressure rollers to permanently fuse toner into the paper fibers.

Adım Adım Çözüm

1
Identify the data rendering phase.
Processing is identified as the initial step where print commands are rasterized into a bitmap in memory.
The printer must build the page image in memory before physical drum manipulation can begin.
2
Identify the drum preparation phase.
Charging is placed second.
The primary charge roller conditions the photosensitive drum surface with a uniform negative charge.
3
Identify the optical writing phase.
Exposing is placed third.
The laser beam scans the drum to neutralize specific areas, leaving a latent electrostatic image.
4
Identify the toner application phase.
Developing is placed fourth.
Negatively charged toner moves from the developer roller to the higher potential (discharged) areas on the drum.
5
Identify the paper contact and image transfer phase.
Transferring is placed fifth.
The transfer roller charges the paper positively to pull toner particles off the drum onto the paper.
6
Identify the final bonding phase.
Fusing is placed sixth.
Heat and pressure melt and press the toner permanently into the paper fibers.

Anahtar Kavram

Electrophotographic (EP) Laser Printing Process Sequence
Soru 2455Soru →

A corporate workstation frequently displays persistent advertisement pop-ups and redirects Microsoft Edge web searches to an unapproved third-party search portal. The technician suspects malicious browser modifications and system settings changes. Which TWO of the following actions should the technician take to isolate and remediate the browser security issue?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Inspect and remove any unrecognized browser extensions and reset the web browser to its default configuration.; Verify system network settings to remove any unapproved manual proxy configurations or rogue proxy server entries.

Cevap

The technician should inspect and remove unrecognized browser extensions while resetting the browser settings, and check system network settings to clear unauthorized proxy server configurations.
Remediating persistent browser redirects and pop-ups requires removing malicious browser add-ons/extensions, resetting modified search defaults, and clearing unauthorized proxy server entries that reroute network connections.

Adım Adım Çözüm

1
Inspect browser add-ons and reset defaults
Unapproved extensions causing pop-ups and search hijacks are disabled and removed.
Browser hijackers often inject extensions that override search providers and generate pop-up windows.
2
Check local OS network proxy settings
Rogue proxy configurations routing web traffic to unwanted domains are removed.
Adware and malicious tools modify proxy settings so all HTTP/HTTPS requests are directed through adversary-controlled servers.

Anahtar Kavram

Browser Hijacking Remediation and Proxy Security Configuration
Soru 2456Soru →

A desktop support specialist at a corporate law firm is responding to an infected Windows 11 workstation exhibiting rogue security alerts and unauthorized background network traffic. The specialist has verified the malware infection and disconnected the system from the local network to quarantine it. Which TWO of the following actions should the specialist perform NEXT prior to running a full anti-malware remediation scan?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Disable System Restore in Windows to prevent infected system files from being archived in restore points.; Update the anti-malware software definitions using an external, uninfected source while keeping the machine offline.

Cevap

The technician should disable System Restore in Windows to eliminate infected restore points and update the anti-malware definitions using clean external media before scanning.
According to the official CompTIA 7-step malware remediation process, after identifying the malware (Step 1) and quarantining the infected system (Step 2), the technician must next disable System Restore (Step 3) to delete infected restore points and prevent reinfection. Following that, the technician must remediate the system (Step 4), which begins by updating the anti-malware engine and signature definitions (Step 4a). Since the system is isolated from the network, definitions should be obtained from an uninfected computer and loaded manually via external media.

Adım Adım Çözüm

1
Identify the current step in the CompTIA 7-Step Malware Remediation Process.
The scenario states that Step 1 (Identify malware symptoms) and Step 2 (Quarantine infected systems) have already occurred.
Knowing the starting phase determines the required sequential actions.
2
Execute Step 3 of the remediation framework.
Disable System Restore in Windows settings.
Disabling System Restore clears existing restore points so infected malware binaries cannot persist across recovery points.
3
Execute Step 4a of the remediation framework.
Update the anti-malware signatures/definitions.
Scans require the latest virus signatures to detect and remove modern threat strains effectively.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process Order
Tahmini Süre:1m 30s
Soru 2457Soru →

An IT security administrator is implementing security baseline policies on corporate workstations to reduce the system attack surface. To comply with defense-in-depth requirements, the administrator must secure local user account configurations and prevent unauthorized automated execution of software via external storage. Which of the following procedures should the administrator perform to achieve this objective?

Cevabı ve açıklamayı göster

Cevap: Disable the local Guest account, rename the built-in Administrator account, and configure Group Policy to disable AutoRun/AutoPlay for all removable media.

Cevap

Disable the local Guest account, rename the built-in Administrator account, and configure Group Policy to disable AutoRun/AutoPlay for all removable media.
Hardening a workstation involves minimizing its attack surface. Key practices include disabling unnecessary accounts (such as the default Guest account), renaming predictable accounts (such as the built-in Administrator account), and enforcing security policies like disabling AutoRun/AutoPlay via Group Policy to prevent automatic malware execution from external media.

Adım Adım Çözüm

1
Identify local account security risks
Disabling the Guest account and renaming the default Administrator account reduces the workstation attack surface by preventing baseline target exploitation.
Default account names are predictable targets for attackers attempting brute-force or credential stuffing attacks.
2
Identify autorun security risks
Disabling AutoRun and AutoPlay prevents malicious scripts from executing automatically when USB drives or external media are connected.
Automated media execution allows drive-by malware infections without user intervention.
3
Select the appropriate administrative configuration tool
Deploying these configurations via Group Policy enforces security baselines across endpoints consistently.
Group Policy Objects (GPO) allow system administrators to apply mandatory security settings centrally across Windows operating systems.

Anahtar Kavram

Workstation Hardening and Account Baseline Security
Soru 2458Soru →

A desktop technician is troubleshooting a Windows 11 workstation that experiences file read errors on an internal secondary magnetic hard drive (drive D:). The technician suspects physical bad sectors on the disk surface and needs to run a diagnostic tool that will locate these bad sectors, recover readable information, and fix detected file system errors on drive D:. Which of the following commands should the technician execute in an elevated Command Prompt?

Cevabı ve açıklamayı göster

Cevap: chkdsk D: /r

Cevap

Executing chkdsk D: /r in an elevated Command Prompt locates bad sectors, recovers readable data, and repairs file system errors on drive D:.
The chkdsk D: /r command is the correct choice because the /r switch scans the physical surface of the target drive (D:) for bad sectors, attempts to read and recover readable data from damaged areas, and implicitly performs all repairs included in the /f switch.

Adım Adım Çözüm

1
Identify the troubleshooting objective
The goal is to scan drive D: for physical bad sectors, recover readable data, and repair file system corruption.
Different command switches alter the depth and focus of disk diagnostics.
2
Evaluate the Windows Check Disk (chkdsk) switches
The /r switch performs a full physical surface scan for bad sectors and recovers readable information, while automatically implying and executing the repair functions of the /f switch.
Using /r provides a comprehensive surface scan and data recovery operation essential for magnetic storage issues.

Anahtar Kavram

Windows Check Disk (chkdsk) utility switches and capabilities
Soru 2459Soru →

An IT security administrator is auditing endpoint compliance and hardening policies across corporate-issued mobile devices and legacy embedded infrastructure. Match each mobile or embedded security implementation on the left to its correct operational objective on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Geofencing
Containerization
Selective Wipe
Embedded System Microsegmentation

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Geofencing matches with restricting features based on physical location; Containerization matches with segregating enterprise apps from personal data; Selective Wipe matches with removing corporate assets without touching personal data; Embedded System Microsegmentation matches with placing unpatchable legacy IoT devices on isolated network segments.
Each security control directly fulfills its designated administrative objective: Geofencing manages location-based access; Containerization ensures logical data separation for BYOD endpoints; Selective Wipe sanitizes corporate data without destroying personal content; Microsegmentation protects corporate networks from unpatchable embedded devices.

Adım Adım Çözüm

1
Analyze Geofencing functionality.
Identified that location-aware policy enforcement corresponds to tracking physical coordinates.
Geofencing relies on spatial boundaries to trigger security control restrictions dynamically.
2
Analyze Containerization functionality.
Identified that logical storage isolation separates corporate assets from user data.
Containerization prevents data leakage between enterprise and personal applications on mobile devices.
3
Analyze Selective Wipe functionality.
Identified that targeted sanitization deletes managed corporate profiles while retaining personal files.
Selective wipe specifically purges enterprise-controlled containers and certificates without performing a factory reset.
4
Analyze Embedded System Microsegmentation functionality.
Identified that placing legacy embedded devices on dedicated network zones limits blast radius.
Embedded systems frequently lack host security agents, requiring network-level containment controls.

Anahtar Kavram

Mobile Endpoint and Embedded System Security Control Enforcement
Soru 2460Soru →

A systems administrator is configuring client-side Type 2 hypervisors on local desktop workstations for a software quality assurance team. The team requires an environment where they can test proprietary software installer scripts across multiple operating system builds without altering the host configuration, and safely observe the behavior of experimental web browser plugins. Which of the following represent valid purposes for implementing client-side virtualization in this scenario? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Cross-platform and multi-OS compatibility testing; Security sandboxing for isolating experimental or untrusted software

Cevap

The valid purposes for implementing client-side virtualization in this scenario are cross-platform and multi-OS compatibility testing, as well as security sandboxing for isolating experimental or untrusted software.
Cross-platform/multi-OS compatibility testing and security sandboxing directly address the scenario requirements. Virtual machines allow technicians to execute different operating system builds on a single physical host to test software installer scripts, while sandboxing prevents untested browser plugins or potentially malicious code from altering or corrupting the underlying host environment.

Adım Adım Çözüm

1
Analyze the business requirements specified in the scenario
Identified two primary needs: testing software installers across different operating system builds without affecting host configuration, and safely running experimental browser plugins.
These operational goals map directly to host-based client-side virtualization use cases.
2
Evaluate the option regarding OS testing
Confirmed that running multiple guest OS environments concurrently on one host workstation fulfills multi-OS compatibility testing.
Client virtualization allows different OS versions to run simultaneously on host hardware.
3
Evaluate the option regarding security isolation
Confirmed that security sandboxing isolates unverified or potentially harmful software from the host operating system.
The virtual machine abstraction prevents changes within the guest environment from damaging the underlying host computer.

Anahtar Kavram

Client-side virtualization purposes include legacy software support, cross-platform testing, security sandboxing, and isolated training environments.
ÖncekiSayfa 123 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin