Tüm alıştırma soruları

3551 soru

Soru 2461Soru

A Linux administrator is troubleshooting a web service failure where an application fails to start because network port 80 is already in use by another process. The administrator needs to run a command-line utility to identify the open network socket and display the specific Process ID (PID) bound to that port. Which of the following utilities should the administrator run?

Cevabı ve açıklamayı göster

Cevap: lsof

Cevap

The lsof command-line utility should be used to list open files and network sockets associated with process IDs.
The lsof (list open files) command is used in Linux and macOS environments to report a list of all open files and the processes that opened them. Because network sockets are treated as files in Unix-like operating systems, running lsof -i :80 allows an administrator to quickly view which Process ID (PID) is currently bound to port 80.

Adım Adım Çözüm

1
Identify the goal of the troubleshooting task.
The technician needs to locate which Process ID (PID) is actively bound to TCP port 80.
An existing process is occupying port 80, preventing the web service from starting.
2
Evaluate the functional capabilities of standard Unix/Linux command-line tools.
The lsof command (specifically lsof -i :80) lists open files and internet sockets, directly revealing the process name and PID holding port 80.
In Unix-like systems, network sockets are treated as open files.

Anahtar Kavram

macOS and Linux CLI System Monitoring and Inspection Utilities
Soru 2462Soru

An IT technician is configuring a dedicated security workstation running Windows. To assist an analyst in identifying potential malware disguised as benign document files, the technician needs to ensure that full file extensions are explicitly shown for all recognized file formats. Which Control Panel applet should the technician use to configure this setting?

Cevabı ve açıklamayı göster

Cevap: File Explorer Options

Cevap

File Explorer Options is the correct applet because it manages folder behavior, file display settings, and file extension visibility across the operating system.
The File Explorer Options applet controls folder navigation behavior, hidden file/folder visibility, and file extension display settings. Opening File Explorer Options and accessing the View tab allows technicians to disable 'Hide extensions for known file types'.

Adım Adım Çözüm

1
Identify the system administration goal from the scenario
The requirement is to display file extensions for known file types to help spot executable files disguised with double extensions.
By default, Windows hides file extensions for registered file types.
2
Determine the Control Panel utility responsible for file and folder appearance
File Explorer Options (formerly Folder Options) contains the View tab with the setting 'Hide extensions for known file types'.
Unchecking this option forces Windows to display the complete file extension for every file.

Anahtar Kavram

Windows Control Panel Utilities - File Explorer Options
Soru 2463Soru

A system administrator is reviewing a Python script (`.py`) created to process automated security alerts. The script receives a threshold parameter representing failed login attempts as the string value "5", but requires an integer data type to perform a mathematical comparison against a numeric counter variable. Which Python construct correctly converts the string value to an integer?

Cevabı ve açıklamayı göster

Cevap: int("5")

Cevap

The int() function in Python is used to cast or convert a string representation of a number into an integer data type.
In Python, the int() built-in function is the standard construct for casting string representations of whole numbers into integer data types, allowing them to be evaluated in numeric comparisons.

Adım Adım Çözüm

1
Identify the scripting language and requirement
The target environment is Python (.py) and the requirement is to convert a string data type ("5") into an integer data type.
Mathematical comparisons in Python require compatible numeric data types.
2
Evaluate Python built-in type conversion functions
The built-in function int() accepts a string argument containing digits and returns an integer object.
Calling int("5") changes the data type from str to int.

Anahtar Kavram

Basic Data Types and Casting in Python Scripting
Tahmini Süre:1m 0s
Soru 2464Soru

A technician is building a small-form-factor (SFF) workstation for a client who requires a dedicated PCIe x16 graphics card and dual-channel memory. The custom desktop enclosure selected by the client strictly limits internal motherboard dimensions to 6.7 inches×6.7 inches6.7\text{ inches} \times 6.7\text{ inches} (17 cm×17 cm17\text{ cm} \times 17\text{ cm}). Which of the following motherboard form factors must the technician select to meet these physical constraints while supporting a single expansion slot?

Cevabı ve açıklamayı göster

Cevap: Mini-ITX

Cevap

Mini-ITX is the correct form factor because it measures exactly 6.7 inches by 6.7 inches (17 cm by 17 cm) and features a single expansion slot.
The Mini-ITX form factor is standardized at 6.7×6.7 inches6.7 \times 6.7 \text{ inches} (17×17 cm17 \times 17 \text{ cm}). It is specifically designed for small-form-factor cases, offering two RAM slots (supporting dual-channel configurations) and exactly one PCIe expansion slot, which fits the client's requirement for a dedicated graphics card.

Adım Adım Çözüm

1
Identify the dimensional requirements from the scenario stem.
The target enclosure requires a motherboard measuring 6.7 in×6.7 in6.7\text{ in} \times 6.7\text{ in} (17 cm×17 cm17\text{ cm} \times 17\text{ cm}).
Matching physical dimensions ensures the motherboard aligns with case mounting standoffs and I/O shield cutouts.
2
Evaluate standard desktop motherboard form factor specifications against the required footprint.
Mini-ITX is defined specifically as 6.7 in×6.7 in6.7\text{ in} \times 6.7\text{ in} (17 cm×17 cm17\text{ cm} \times 17\text{ cm}), featuring 2 memory slots and 1 PCIe expansion slot.
Micro-ATX (9.6 in×9.6 in9.6\text{ in} \times 9.6\text{ in}) and Standard ATX (12 in×9.6 in12\text{ in} \times 9.6\text{ in}) are too large, while Nano-ITX (4.7 in×4.7 in4.7\text{ in} \times 4.7\text{ in}) lacks full-sized desktop expansion slots.

Anahtar Kavram

Motherboard Form Factor Dimensions and Slot Capabilities
Tahmini Süre:1m 0s
Soru 2465Soru

A desktop support technician is constructing an automated maintenance script to compress oversized log files located within a system directory. To ensure proper execution without runtime errors, which sequence represents the correct logical order of these scripting constructs from top to bottom?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct logical order begins with initializing environment variables, followed by constructing a loop construct to process target files, placing a conditional branch inside the loop to test file size, and executing the compression action command inside the conditional block.
In standard scripting across administrative environments (such as Bash, PowerShell, or Python), scripts follow a top-down execution model. First, environment variables establishing paths and threshold values must be declared. Next, a loop construct is defined to traverse the directory. Inside the loop, a conditional branch evaluates each item against the variable threshold. Finally, the execution command (file compression) is placed inside the conditional block to execute only when the condition evaluates to true.

Adım Adım Çözüm

1
Define variables
Establishes reference variables for paths and parameters before they are used in control flow statements.
Referencing undefined environment variables causes script failure or unintended behavior.
2
Establish the iteration loop construct
Creates the repetition block (e.g., `for` or `while` loop) to traverse the file collection.
A loop construct is necessary to systematically process multiple files in sequence.
3
Add conditional decision logic inside the loop
Evaluates each file's size against the previously defined variable threshold.
Conditional branching (`if/then`) ensures actions only target files meeting specific criteria.
4
Place the target action statement inside the conditional block
Compresses or archives only the log files that trigger a true evaluation result.
Action statements must be nested within the conditional block to prevent indiscriminate file modification.

Anahtar Kavram

Logical execution flow of scripting constructs (variable initialization, loop constructs, conditional branching, and action execution)
Tahmini Süre:1m 30s
Soru 2466Soru

An IT security consultant is upgrading the wireless infrastructure for a regional healthcare clinic. To ensure compliance with patient data privacy regulations, the new network must provide centralized authentication using unique user credentials rather than a shared passphrase, while enforcing mutual authentication to protect against rogue access point attacks. Which of the following security controls and authentication mechanisms should the consultant implement? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise operating with an 802.1X RADIUS server; EAP-TLS authentication utilizing client and server digital certificates

Cevap

WPA3-Enterprise operating with an 802.1X RADIUS server, and EAP-TLS authentication utilizing client and server digital certificates.
WPA3-Enterprise combined with an 802.1X RADIUS server allows central user management and individual account authentication. Implementing EAP-TLS satisfies the mutual authentication requirement because both the server and client validate each other's digital certificates before establishing the encrypted session.

Adım Adım Çözüm

1
Identify the authentication requirement for individual credentials
Selecting WPA3-Enterprise (or WPA2-Enterprise) provides 802.1X integration with a central RADIUS server, ensuring individual user authentication instead of a shared passphrase.
Enterprise modes move away from Pre-Shared Keys (PSK) to central directory service authentication.
2
Identify the protocol requirement for mutual authentication against rogue access points
Selecting EAP-TLS enforces mutual authentication using digital certificates on both server and client.
EAP-TLS validates both the RADIUS server certificate on the client side and the client certificate on the server side, preventing connection to unauthorized rogue access points.

Anahtar Kavram

Enterprise Wireless Authentication and Mutual Security Controls
Tahmini Süre:1m 30s
Soru 2467Soru

A systems engineer is preparing a change request to update the host hypervisor software across a cluster supporting mission-critical virtualized applications. The engineer has defined the scope of change, documented the business purpose, and completed a comprehensive risk analysis. Which of the following is the MOST critical required component that must be included in the change proposal prior to submitting it to the Change Advisory Board (CAB) for approval?

Cevabı ve açıklamayı göster

Cevap: A documented rollback plan specifying recovery procedures if the hypervisor update causes system failure

Cevap

A documented rollback plan specifying recovery procedures if the hypervisor update causes system failure
Under standard IT operational procedures, a formal change proposal submitted for CAB evaluation must include the scope of change, purpose, risk assessment, and a documented rollback plan. The rollback plan ensures that technicians can quickly revert infrastructure to a functional state if the upgrade encounters unexpected faults.

Adım Adım Çözüm

1
Analyze the current stage of the change management workflow in the scenario.
The systems engineer is preparing the change proposal prior to submitting it to the Change Advisory Board (CAB).
Complete change documentation is required before the CAB can evaluate risks and grant approval.
2
Identify missing mandatory change request components based on standard CompTIA change control procedures.
Scope, purpose, and risk analysis are complete, but back-out/rollback procedures have not been specified.
A formal rollback plan is essential to ensure systems can be restored to a known good state if the change fails.
3
Select the choice representing the necessary pre-submission requirement.
Developing and attaching a documented rollback plan to the request.
Rollback planning directly mitigates service disruption during major software and system updates.

Anahtar Kavram

Change Management Process Documentation Requirements
Soru 2468Soru

A desktop computer powers on normally and operates smoothly during light administrative tasks. However, whenever a technician runs a heavy processor benchmark, system performance slows down dramatically and the CPU cooling fan accelerates to maximum speed. Hardware monitoring software shows CPU temperatures exceeding 90C90^\circ\text{C} while clock speeds decrease. Which of the following is the most likely cause of this behavior?

Cevabı ve açıklamayı göster

Cevap: Thermal paste between the CPU and heatsink has degraded or the heatsink is improperly seated.

Cevap

Thermal paste between the CPU and heatsink has degraded or the heatsink is improperly seated.
When thermal paste degrades or the CPU heatsink becomes unseated, heat cannot effectively transfer away from the processor. Under load, the CPU reaches thermal safety thresholds and automatically throttles its clock speed while pushing fan speeds to maximum to prevent physical damage.

Adım Adım Çözüm

1
Analyze the observed hardware symptoms.
The CPU temperature spikes under load, fan speed maxes out, and processor clock speed drops.
Modern CPUs perform automatic thermal throttling (reducing clock frequency) to prevent permanent hardware damage when thermal limits are crossed.
2
Identify the primary cooling component failure.
Heat is unable to dissipate from the processor integrated heat spreader to the heatsink fins.
Degraded thermal compound or incomplete contact between the heatsink base and CPU package isolates heat at the CPU die.

Anahtar Kavram

CPU Thermal Throttling and Heat Dissipation
Tahmini Süre:1m 0s
Soru 2469Soru

A technician is preparing to decommission several legacy magnetic hard disk drives (HDDs) that previously stored confidential employee records. Company policy mandates that the magnetic fields on the drive platters must be completely disrupted to render the stored data unrecoverable before the drives are removed from the facility. Which of the following data sanitization methods best fulfills this policy requirement?

Cevabı ve açıklamayı göster

Cevap: Degaussing

Cevap

Degaussing is the correct method because it subjects magnetic storage media to a powerful magnetic field, neutralizing the magnetic alignment on the platters and destroying the data.
Degaussing exposes magnetic storage media such as HDDs and magnetic tapes to a strong magnetic field. This process neutralizes the magnetic alignment on the platters, making stored data permanently unrecoverable.

Adım Adım Çözüm

1
Identify the storage media type and the mandated security mechanism
The media consists of magnetic hard disk drives (HDDs), and the policy requires magnetic domain disruption.
Selecting the proper sanitization method depends on matching physical media characteristics to appropriate destruction techniques.
2
Evaluate sanitization methods against the requirement for magnetic neutralization
Degaussing exposes magnetic platters to a high-density magnetic field, rendering all magnetic patterns unreadable.
Degaussing specifically targets and neutralizes magnetic charges on hard drive platters and backup tapes.

Anahtar Kavram

Degaussing for Magnetic Storage Media
Tahmini Süre:1m 0s
Soru 2470Soru

A helpdesk technician verifies that a corporate desktop is actively infected with malware that is attempting to communicate with an external command-and-control server. According to the CompTIA standard malware removal procedure, which of the following actions should the technician perform NEXT?

Cevabı ve açıklamayı göster

Cevap: Quarantine the infected system by disconnecting it from the network.

Cevap

Quarantine the infected system by disconnecting it from the network.
According to the official CompTIA 7-step malware removal process, after verifying malware symptoms (Step 1), the immediate next step is to isolate/quarantine the infected system (Step 2). Disconnecting the system from the corporate network prevents the malware from propagating or communicating with malicious servers.

Adım Adım Çözüm

1
Identify current status in the removal process
The technician has confirmed and verified the malware symptoms (Step 1).
The problem scenario states that malware symptoms and active communication were verified.
2
Determine the mandatory next step in the CompTIA 7-step malware removal process
Step 2 is to isolate/quarantine the infected system.
Disconnecting the workstation from Ethernet and Wi-Fi immediately prevents network propagation and data exfiltration.

Anahtar Kavram

CompTIA 7-Step Malware Removal Procedure (Step 2: Quarantine/Isolate)
Soru 2471Soru

An online ticketing organization is optimizing its public cloud architecture to handle high-demand event releases. The infrastructure team needs the system to automatically scale compute capacity up or down in real-time based on incoming web traffic demands without manual intervention. Additionally, the development team must be able to provision and configure new testing server instances instantly through a web portal without submitting service request tickets to the cloud service provider. Which of the following cloud characteristics directly describe these two operational capabilities? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Rapid elasticity; On-demand self-service

Cevap

Rapid elasticity and On-demand self-service
The scenario highlights two distinct operational features: dynamic real-time scaling of compute capacity based on workload traffic (Rapid elasticity) and the capability for administrators to self-provision compute instances without cloud provider ticket requests (On-demand self-service).

Adım Adım Çözüm

1
Analyze the requirement for automatic, real-time scaling of compute resources in response to traffic surges.
Identified that automatically expanding or contracting capacity dynamically corresponds to rapid elasticity.
Rapid elasticity ensures resources automatically scale seamlessly to handle fluctuating operational workloads.
2
Analyze the requirement for developers to launch and configure virtual servers instantly without vendor intervention.
Identified that self-provisioning resources on demand without administrator approval corresponds to on-demand self-service.
On-demand self-service allows clients to allocate compute resources autonomously as needed.

Anahtar Kavram

Essential Cloud Computing Characteristics
Tahmini Süre:1m 15s
Soru 2472Soru

A point-of-sale (POS) technician is troubleshooting a direct thermal receipt printer that produces receipts with faint, streaked text along one edge of the paper, while the other side prints crisp black text. The paper roll is verified to be fresh and installed in the correct orientation. Which of the following actions should the technician take first to resolve the print quality issue?

Cevabı ve açıklamayı göster

Cevap: Clean the thermal printhead heating elements using isopropyl alcohol and a lint-free swab.

Cevap

Clean the thermal printhead heating elements using isopropyl alcohol and a lint-free swab.
Direct thermal printers operate by pressing heat-sensitive paper against a thermal printhead containing tiny heating elements. Over time, paper dust and heat-activated chemicals accumulate on the printhead pins, insulating them and causing uneven or faint printing across portions of the page. Cleaning the printhead with isopropyl alcohol removes this residue and restores proper heat contact.

Adım Adım Çözüm

1
Identify the printer technology being used.
The printer is a direct thermal receipt printer, which applies heat directly to heat-sensitive paper without ink or toner.
Understanding the technology eliminates components associated with laser printers (fusers, corona wires) or thermal transfer printers (ink ribbons).
2
Diagnose the cause of faint text along one edge.
Buildup of paper dust, adhesive, or residue on specific heating elements along the printhead prevents proper heat transfer.
Direct thermal paper requires direct, clean contact with the heated pins/elements of the printhead to activate the chemical coating.
3
Determine the correct maintenance procedure.
Clean the printhead surface with high-purity isopropyl alcohol and a non-abrasive, lint-free swab or cleaning pen.
This is standard preventative maintenance to remove accumulated residue without damaging the delicate heating pins.

Anahtar Kavram

Direct Thermal Printer Maintenance
Tahmini Süre:1m 15s
Soru 2473Soru

A system technician needs to prepare a newly installed secondary hard drive for Windows file storage using the DiskPart command-line utility. Arrange the following DiskPart sub-commands in the correct execution sequence to target the disk, clear existing partition data, create a partition, apply the file system, and mount the volume for operating system access.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct operational order for disk initialization using DiskPart is: select disk 1, clean, create partition primary, format fs=ntfs quick, and assign.
The sequential workflow of disk management in the DiskPart CLI strictly follows target selection (`select disk 1`), disk clearing (`clean`), partition creation (`create partition primary`), file system formatting (`format fs=ntfs quick`), and volume mounting (`assign`). Each step depends directly on the successful context and output of the preceding step.

Adım Adım Çözüm

1
Set execution context to target disk
Disk 1 becomes the active focus for DiskPart commands.
DiskPart requires a target disk selection before performing structural modifications to protect active system drives.
2
Wipe disk partition tables
The target disk is completely cleared and marked as unallocated space.
Existing partition records must be removed before creating a fresh primary partition layout.
3
Generate primary storage volume structure
A raw primary partition is established across the unallocated disk space.
The operating system requires a defined partition boundaries before a file system can be formatted.
4
Format partition with target file system
The primary partition is formatted with the NTFS file system metadata.
Windows native drives require a compatible file system such as NTFS to store files and security permissions.
5
Mount volume and allocate drive letter
The formatted partition receives an available drive letter (e.g., E:) and becomes accessible in Windows Explorer.
Without assigning a drive letter or mount point, users cannot access the storage volume through standard operating system paths.

Anahtar Kavram

Windows DiskPart command-line drive initialization and partitioning workflow
Soru 2474Soru

A system administrator needs to configure a standalone Windows 11 Pro computer so that standard users are prompted to enter administrator credentials on the secure desktop whenever an action requires administrative privilege elevation. Place the steps required to configure this policy using the Local Security Policy snap-in in the correct sequential order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with launching secpol.msc, navigating to Local Policies > Security Options, opening the policy 'User Account Control: Behavior of the elevation prompt for standard users', selecting 'Prompt for credentials on the secure desktop', and finally clicking OK to save the changes.
To modify specific UAC behaviors in Windows, the technician must first open the Local Security Policy snap-in (secpol.msc). From there, navigating to Local Policies > Security Options exposes the granular UAC policies. Opening 'User Account Control: Behavior of the elevation prompt for standard users', selecting 'Prompt for credentials on the secure desktop', and clicking OK properly sets and saves the elevation security rule.

Adım Adım Çözüm

1
Launch the management tool
The Local Security Policy management console opens.
Administrative security policy modifications require opening secpol.msc.
2
Navigate the policy console tree
The Security Options policy settings are displayed in the right pane.
UAC security policies reside inside Local Policies > Security Options.
3
Open the target policy properties
The policy configuration window opens.
The technician must open the specific policy controlling elevation behavior for standard user accounts.
4
Configure the policy value
The setting is changed to 'Prompt for credentials on the secure desktop'.
This setting forces UAC to require administrator credentials on the secure desktop during elevation requests.
5
Save policy configuration
The policy is updated and applied.
Clicking OK saves the policy setting to the local security database.

Anahtar Kavram

Configuring User Account Control (UAC) policy settings using Local Security Policy (secpol.msc)
Tahmini Süre:1m 30s
Soru 2475Soru

A desktop support technician is troubleshooting a Windows 11 workstation where opening the web browser via the desktop shortcut continuously launches an unwanted advertising website alongside the standard homepage. When launching the browser executable directly from the installation directory in Program Files, the advertising site does not load. The technician has already cleared the browser cache and disabled all active extensions. Which of the following is the MOST likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The target field in the browser desktop shortcut properties has been appended with a malicious URL parameter.

Cevap

The target field in the browser desktop shortcut properties has been appended with a malicious URL parameter.
Malware often alters the Target property of desktop shortcut links by appending a URL parameter after the executable path. When launched via the shortcut, the browser processes the URL parameter and opens the site. Launching the executable file directly from the file system bypasses the modified shortcut parameters, explaining why the issue only occurs when using the desktop icon.

Adım Adım Çözüm

1
Analyze the difference in browser behavior between the two launch methods.
The unwanted advertising site opens ONLY when launched via the shortcut icon, but NOT when running the executable directly.
Isolating launch triggers narrows the problem specifically to shortcut properties rather than global system or browser-wide settings.
2
Inspect the properties of the browser desktop shortcut file.
The Target field shows extra arguments after the executable path, such as appending a URL to the launch command.
Malware frequently modifies shortcut parameters so that a specific web page is passed as a command-line argument during browser startup.
3
Determine the appropriate remediation step.
Remove the unwanted URL string from the shortcut Target field or delete and recreate the shortcut icon.
Cleaning the shortcut Target path restores normal browser launching without executing extra URL arguments.

Anahtar Kavram

Browser Hijacker Shortcut Parameter Manipulation
Tahmini Süre:1m 30s
Soru 2476Soru

A company is implementing a Bring Your Own Device (BYOD) policy for mobile sales representatives accessing corporate customer records. The security team requires a solution that isolates corporate data from personal data, prevents copy-paste functions between managed and unmanaged applications, and allows administrators to remove all corporate records upon employee departure without erasing personal photos or applications. Which of the following Mobile Device Management (MDM) and Mobile Application Management (MAM) configuration strategies should the systems administrator implement?

Cevabı ve açıklamayı göster

Cevap: Deploy Mobile Application Management (MAM) containerization with encrypted data vaults and selective wipe rules.

Cevap

Deploy Mobile Application Management (MAM) containerization with encrypted data vaults and selective wipe rules.
Implementing MAM containerization creates an isolated, encrypted workspace on mobile endpoints. This architecture allows administrators to enforce Data Loss Prevention (DLP) controls (such as blocking copy-paste functions between corporate and personal applications) and perform a selective wipe that removes only corporate assets when an employee leaves the company.

Adım Adım Çözüm

1
Analyze the technical requirements of the scenario.
Identified key constraints: storage isolation between corporate and personal apps, data loss prevention (preventing copy-paste leakage), and targeted data removal upon employee offboarding on BYOD hardware.
BYOD environments demand strict separation between corporate data and personal user data to maintain privacy while ensuring data protection.
2
Evaluate mobile security architectures against the requirements.
MAM containerization establishes a secure, encrypted boundary (container) for corporate applications, allowing administrators to restrict inter-app data sharing and perform a selective wipe.
Selective wipe targets only the enterprise containerized storage, leaving personal photos, apps, and OS settings completely unaffected.
3
Compare against incorrect alternative controls.
Full device wipes destroy personal data; geofencing does not restrict clipboard functions or partition storage; wireless encryption only protects network transport.
Only application containerization and selective wipe satisfy all BYOD compliance and management objectives.

Anahtar Kavram

Mobile Application Management (MAM) Containerization and Selective Wipe
Tahmini Süre:2m 0s
Soru 2477Soru

A security technician is configuring local group policies for corporate laptops issued to field auditors who frequently operate in untrusted, public environments. The technician must reduce the attack surface against unauthorized physical access when unattended and mitigate brute-force risks against default local credentials. Which of the following workstation hardening measures should the technician implement to meet these security requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure an screen saver lockout policy that requires password re-authentication after a short period of inactivity; Disable the local Guest account and rename the default local Administrator account

Cevap

The correct hardening measures are configuring an inactive screen saver lockout requiring password re-authentication, and disabling the local Guest account while renaming the default Administrator account.
Implementing an inactivity screen saver lock requiring password re-authentication protects unattended endpoints from physical access. Disabling the default Guest account and renaming the default local Administrator account minimizes local account exploitation risks.

Adım Adım Çözüm

1
Identify physical/unattended access risks in public environments.
Determined that an automatic lock screen policy with re-authentication prevents unauthorized local access if a device is left unattended.
Screen saver lockout policies mitigate physical session hijacking.
2
Identify default account risks on local endpoints.
Determined that disabling Guest and renaming the default Administrator account mitigates baseline credential exploitation.
Default accounts with well-known SIDs/names are primary targets for automated malicious scripts.

Anahtar Kavram

Workstation Hardening via Account Management and Inactivity Lockout Policies
Soru 2478Soru

A Linux system administrator needs to configure permissions for a newly deployed web application directory at `/var/www/app`. The administrator must recursively change the ownership of all files and subdirectories within `/var/www/app` to the user `appuser` and the group `webgroup`. Additionally, the administrator must recursively restrict directory access so that only the owner has full read, write, and execute permissions, while group and other users have no permissions. Which TWO of the following commands must the administrator execute to fulfill these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: chown -R appuser:webgroup /var/www/app; chmod -R 700 /var/www/app

Cevap

The administrator must execute `chown -R appuser:webgroup /var/www/app` to set file ownership recursively and `chmod -R 700 /var/www/app` to set file permissions recursively.
The command `chown -R appuser:webgroup /var/www/app` correctly updates the user and group ownership recursively across the directory structure. The command `chmod -R 700 /var/www/app` correctly sets read, write, and execute rights for the owner while revoking all permissions for group and others across all contained files and directories.

Adım Adım Çözüm

1
Change user and group ownership recursively
`chown -R appuser:webgroup /var/www/app` assigns ownership to `appuser` and `webgroup` for all contained items.
The `-R` flag specifies recursive traversal, and the `owner:group` syntax updates both owners simultaneously.
2
Set strict owner-only access permissions recursively
`chmod -R 700 /var/www/app` applies octal mode 700 (`rwx------`) recursively.
Octal 7 grants full read (4), write (2), and execute (1) permissions to the user owner, while 0 grants no permissions to group or others.

Anahtar Kavram

Linux recursive file access control using chown and chmod
Tahmini Süre:1m 30s
Soru 2479Soru

An IT manager is establishing a local hands-on laboratory on desktop PCs for new helpdesk trainees to practice dangerous operating system configuration changes and recovery procedures without risking damage to the host system. Which client-side virtualization purpose is primary in this deployment scenario?

Cevabı ve açıklamayı göster

Cevap: Sandboxing and isolated training environment

Cevap

Sandboxing and isolated training environment
Client-side virtualization provides isolated sandboxing and training environments on local desktop PCs. This isolation allows users to execute unsafe commands, alter operating system parameters, or run untrusted software without risking damage or instability to the host operating system.

Adım Adım Çözüm

1
Analyze the operational requirements
The scenario requires providing a safe local desktop environment to perform high-risk actions (OS registry and configuration changes, remediation testing) without affecting the workstation's host operating system.
Defining the core requirement isolates the intended functional use case of the virtual machine environment.
2
Evaluate client-side virtualization purposes
Virtual machine isolation (sandboxing) separates guest OS execution from the host OS, preventing host OS corruption or system-wide disruption during testing or training.
Client-side hypervisors enforce strong boundary isolation between guest and host operating systems.
3
Identify the corresponding use case
Deploying sandboxed training environments directly meets the objective of providing a zero-risk educational space on local hardware.
Sandboxing isolates experimental changes from host production software.

Anahtar Kavram

Client-side virtualization for sandboxing and training environments
Soru 2480Soru

An IT support technician at a hospitality management company is troubleshooting a Windows 11 front-desk workstation that is displaying unauthorized security warnings and redirecting web browser traffic to malicious domains. The technician confirms that active rogue security software is present on the system. According to the CompTIA standard 7-step malware remediation process, which of the following actions should the technician take NEXT?

Cevabı ve açıklamayı göster

Cevap: Quarantine the infected workstation by disconnecting its network cable and disabling wireless interfaces.

Cevap

Quarantine the infected workstation by disconnecting its network cable and disabling wireless interfaces.
After identifying malware symptoms (Step 1), the immediate next action required by the standard CompTIA 7-step malware remediation process is to quarantine the infected host (Step 2). Disconnecting Ethernet cables and disabling Wi-Fi prevents lateral infection of other network assets and stops active malware from exfiltrating data or receiving remote commands.

Adım Adım Çözüm

1
Identify the completed step in the CompTIA 7-step malware remediation workflow.
The technician confirmed rogue software symptoms on the Windows 11 host (Step 1: Identify malware symptoms).
Establishing the current phase ensures proper operational sequence during incident remediation.
2
Determine the mandatory next action in the remediation sequence.
Execute Step 2: Quarantine the infected system.
Isolating network interfaces prevents the infection from spreading across the local subnet or communicating with external command-and-control servers.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process - System Isolation / Quarantine
Tahmini Süre:1m 15s
ÖncekiSayfa 124 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin