Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 2501Soru →

A technician is troubleshooting a Windows 11 workstation hosting a localized database service that experiences severe responsiveness degradation during peak data processing hours. Using Resource Monitor, the technician observes that the hard faults per second for `dbengine.exe` frequently exceed 800/sec, and the Average Disk Queue Length on the primary storage volume (C:C:) remains continuously above 12. However, Task Manager indicates total physical RAM utilization is at only 60%. Further inspection reveals that an automated script recently disabled `pagefile.sys` on the primary drive. Which of the following actions will best resolve the performance degradation and high disk latency?

Cevabı ve açıklamayı göster

Cevap: Re-enable a system-managed virtual memory paging file on the primary SSD drive.

Cevap

Re-enable a system-managed virtual memory paging file on the primary SSD drive.
High hard faults/sec combined with excessive disk queue length indicate severe virtual memory paging pressure on the storage subsystem. Disabling `pagefile.sys` forces the Windows Memory Manager to discard executable code pages from memory and repeatedly reload them from disk when needed, generating continuous disk reads and thrashing. Re-enabling a system-managed paging file on the primary SSD restores proper virtual memory mapping, drastically reducing hard fault latency.

Adım Adım Çözüm

1
Analyze the observed diagnostic metrics in Resource Monitor.
High hard faults/sec (>800/sec) combined with a high Average Disk Queue Length (>12) on drive C:C: indicates heavy thrashing between physical RAM and storage due to missing virtual memory space.
Hard faults occur when a process requests data from memory that is not present in RAM and must be fetched from disk. Completely disabling the paging file causes Windows to repeatedly discard and re-read code pages from disk under active load.
2
Evaluate root cause based on configuration findings.
The disabled `pagefile.sys` prevents the OS memory manager from properly backing modified pages and virtual allocation structures.
Windows requires a paging file for optimal memory management, crash dump creation, and backing virtual addresses regardless of available physical RAM size.
3
Determine the appropriate remediation step.
Re-enabling a system-managed pagefile on the fast primary SSD allows proper paging operations and clears the disk queue bottleneck.
Allowing Windows to manage the pagefile size automatically provides sufficient virtual memory space dynamically scaled to system demand.

Anahtar Kavram

Windows Virtual Memory and Pagefile Misconfiguration
Soru 2502Soru →

A helpdesk technician is investigating performance complaints on a Windows workstation used for local database processing. While monitoring the system under load using Performance Monitor, the technician observes that the PhysicalDisk\Avg. Disk Queue Length counter consistently stays between 5.0 and 7.0. Meanwhile, CPU Utilization averages 18% and Available RAM is recorded at 62%. Which of the following is the most likely bottleneck causing the performance degradation?

Cevabı ve açıklamayı göster

Cevap: Storage subsystem throughput

Cevap

Storage subsystem throughput is the primary bottleneck because the Average Disk Queue Length significantly exceeds the normal baseline threshold while CPU and RAM utilization remain low.
In Windows Performance Monitor, the PhysicalDisk\Avg. Disk Queue Length counter measures the average number of read and write requests queued for the selected disk drive. A sustained value greater than 2 per physical drive indicates that the storage drive cannot keep up with the volume of I/O requests, creating a system performance bottleneck. Because CPU utilization (18%) and Available Memory (62%) indicate plenty of available system capacity, the storage subsystem throughput is the sole bottleneck.

Adım Adım Çözüm

1
Analyze CPU and Memory metrics from Performance Monitor log data.
CPU utilization (18%) and Available RAM (62%) confirm that processor capacity and system memory are well within healthy operational limits.
Eliminating low-utilization resources isolates the bottleneck to other system hardware components.
2
Evaluate the PhysicalDisk\Avg. Disk Queue Length counter metric.
The observed value of 5.0 to 7.0 exceeds the recommended threshold of 2.0 per physical spindle/disk.
A high disk queue length indicates that disk read/write requests are waiting in a queue faster than the storage controller/drive can process them.
3
Formulate the correct diagnostic conclusion.
Identify the storage subsystem as the constrained resource.
Sustained high queue lengths directly correlate with disk I/O bottlenecks and drive latency.

Anahtar Kavram

Identifying storage bottlenecks using Performance Monitor disk queue length metrics
Soru 2503Soru →

A computer running Windows fails to start due to a corrupted Boot Configuration Data (BCD) file. Arrange the following repair steps in the correct sequential order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence is: 1) Boot using Windows installation USB media and select Repair your computer, 2) Navigate to Troubleshoot > Advanced options and launch the Command Prompt, 3) Execute the bootrec /scanos command, and 4) Execute the bootrec /rebuildbcd command.
The recovery sequence must begin by loading Windows Recovery Environment (WinRE) from external installation media because the corrupted BCD prevents normal booting. Opening the Command Prompt from Advanced options allows access to repair utilities. Running 'bootrec /scanos' scans connected drives to detect valid operating systems. Finally, running 'bootrec /rebuildbcd' rebuilds the BCD store and adds the detected installation back to the boot menu.

Adım Adım Çözüm

1
Insert Windows installation media and boot the system into the Windows Recovery Environment (WinRE).
Access to external system repair menus is achieved.
A corrupt BCD prevents normal local booting, requiring repair tools to load from media.
2
Select Troubleshoot, open Advanced options, and click Command Prompt.
An elevated command-line window opens in the recovery environment.
Bootrec commands require a command-line prompt within WinRE.
3
Run bootrec /scanos to locate Windows installations.
All connected storage drives are scanned for active Windows installations.
Verifying existing installations ensures the utility detects the OS before updating BCD references.
4
Run bootrec /rebuildbcd to recreate the BCD store.
The Boot Configuration Data file is reconstructed with valid boot entries.
This step writes the new boot configuration entries so Windows can locate the operating system loader upon startup.

Anahtar Kavram

Rebuilding Boot Configuration Data (BCD) using WinRE command-line tools
Soru 2504Soru →

A desktop computer powers on when the power button is pressed, but the fans spin continuously at maximum speed, no video signal is sent to the display, and the system fails to complete the Power-On Self-Test (POST). Upon inspecting the motherboard, a technician notices that while the 24-pin main ATX power cable is securely attached, an 8-pin header located near the CPU socket remains unpopulated. Which of the following power supply connectors should the technician plug into this motherboard header?

Cevabı ve açıklamayı göster

Cevap: EPS12V 8-pin (4+4 pin) power connector

Cevap

EPS12V 8-pin (4+4 pin) power connector
The EPS12V 8-pin connector (frequently split into a 4+4 pin configuration for backward compatibility) is specifically designed to provide dedicated +12V power to the motherboard's CPU power delivery circuits located adjacent to the CPU socket.

Adım Adım Çözüm

1
Identify the unpopulated motherboard connector location and its function
The unpopulated 8-pin header near the CPU socket is responsible for supplying dedicated auxiliary 12V power to the processor.
Modern CPUs draw substantial power that cannot be supplied safely through the primary 24-pin ATX main power connector alone.
2
Match the correct power supply unit (PSU) cable to the motherboard CPU power header
The EPS12V 8-pin (or 4+4-pin split) cable matches the keying and voltage layout of the socket.
EPS12V connectors deliver ground and +12V power to the processor's power delivery phase components.

Anahtar Kavram

Motherboard Power Connectors and CPU Auxiliary Power
Soru 2505Soru →

A network technician is hardening several newly installed, Ethernet-connected embedded digital signage appliances deployed in a public facility. The appliances run a lightweight embedded operating system and receive display content from a central server. Which combination of security controls best protects these embedded systems from local tampering and network compromise?

Cevabı ve açıklamayı göster

Cevap: Disable unused physical ports, change default administrative credentials, and isolate the appliances on a dedicated network VLAN.

Cevap

Disable unused physical ports, change default administrative credentials, and isolate the appliances on a dedicated network VLAN.
Hardening embedded appliances in public areas relies on minimizing the physical and network attack surfaces. Disabling unused physical ports prevents local unauthorized access, changing default management credentials prevents credential-guessing attacks, and placing the devices on an isolated VLAN limits the potential blast radius if a device is compromised.

Adım Adım Çözüm

1
Identify the device category and operational environment.
The target devices are dedicated embedded systems operating in a public area over a wired Ethernet connection.
Embedded appliances often have limited security software capabilities and must be hardened at the system and network infrastructure layers.
2
Determine the appropriate hardening controls for embedded systems.
Restrict local access by disabling unused USB/serial ports and altering factory default passwords; restrict network access by placing devices on an isolated VLAN.
Default credentials and open physical ports are primary attack vectors on public-facing IoT and embedded devices.
3
Evaluate alternative controls to rule out misapplications.
MAM containerization applies to mobile BYOD devices, WPA2 applies to wireless media, and physical screen filters do not secure system software.
Security controls must match the architecture and physical reality of the hardware being protected.

Anahtar Kavram

Embedded System Hardening and Network Segmentation
Soru 2506Soru →

A database technician is preparing a formal change request to migrate a mission-critical database server to a newer engine version. The technician has defined the scope of change, performed a comprehensive risk analysis, and scheduled the maintenance window during off-peak hours. Which of the following required components must also be documented in the proposal before submitting it to the Change Advisory Board (CAB) for approval?

Cevabı ve açıklamayı göster

Cevap: A detailed rollback plan specifying the exact steps to restore the database to its previous working state if the migration fails

Cevap

A detailed rollback plan specifying the exact steps to restore the database to its previous working state if the migration fails
In standard ITIL and CompTIA change management workflows, every formal change request submitted to the Change Advisory Board (CAB) must include a documented rollback plan. This plan outlines specific technical steps and backup recovery procedures to restore systems to their last known good state if the proposed change fails or causes critical disruptions.

Adım Adım Çözüm

1
Identify the mandatory elements required in a formal change management request prior to CAB submission.
The core elements include scope of change, risk analysis, purpose of change, rollback plan, end-user notification, and scheduling.
The Change Advisory Board needs complete documentation to evaluate risk and ensure the organization can recover if the change causes an outage.
2
Evaluate the current state of the technician's proposal against required documentation elements.
The technician has established scope, risk analysis, and scheduling, but is missing a contingency strategy if the migration encounters fatal errors.
Without a rollback plan, an unexpected failure during deployment could lead to prolonged downtime without a clear path back to normal operations.
3
Select the option representing the missing mandatory pre-approval component.
The rollback plan must be prepared prior to submission.
It ensures technical feasibility of reverting changes before authorization is granted.

Anahtar Kavram

Change Management Documentation and Rollback Planning
Soru 2507Soru →

A technician is performing an on-site hardware upgrade on a laptop. The technician attempts to install a newly purchased memory module but discovers that the module is physically too long to fit into the motherboard slot. Which RAM form factor should the technician order to properly fit the laptop?

Cevabı ve açıklamayı göster

Cevap: SO-DIMM

Cevap

The technician should order an SO-DIMM (Small Outline Dual In-line Memory Module) module.
Laptops require SO-DIMM (Small Outline DIMM) memory modules due to space limitations inside portable chassis. SO-DIMMs are roughly half the length of standard desktop DIMMs and match the physical dimensions of laptop memory slots.

Adım Adım Çözüm

1
Identify the physical hardware constraint
The target machine is a laptop, which requires compact internal hardware components.
Laptops use small form factor components to minimize physical space.
2
Match the RAM form factor to the laptop memory slot
SO-DIMM modules are approximately half the length of standard desktop DIMM modules.
Selecting SO-DIMM ensures physical compatibility with laptop memory slots.

Anahtar Kavram

RAM Form Factors for Laptops vs Desktops
Tahmini Süre:45s
Soru 2508Soru →

Match each wireless security protocol or implementation component on the left with its corresponding operational requirement or security characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

EAP-TLS
WPA3-Personal
RADIUS Server
Captive Portal

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

EAP-TLS matches with mutual certificate requirement; WPA3-Personal matches with Simultaneous Authentication of Equals (SAE); RADIUS Server matches with centralized 802.1X AAA authentication service; Captive Portal matches with web traffic interception for guest authentication/AUP.
Each wireless security technology matches its specific operational feature: EAP-TLS provides mutual authentication using client and server digital certificates. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) to resist offline dictionary attacks on pre-shared keys. RADIUS serves as the central AAA server in 802.1X wireless environments. A Captive Portal redirects unauthenticated web sessions to a landing page for credential entry or acceptable use policy acceptance.

Adım Adım Çözüm

1
Identify authentication mechanisms requiring client-side certificates vs pre-shared keys.
EAP-TLS strictly requires digital certificates on both client and server, whereas WPA3-Personal relies on a passphrase secured via SAE.
Enterprise EAP methods differ fundamentally in certificate requirement for client devices.
2
Determine the backend component responsible for centralized credential validation in enterprise wireless.
RADIUS acts as the authentication server validating 802.1X requests against an identity provider like Active Directory.
Access points forward EAP messages to a backend RADIUS server during 802.1X authentication.
3
Identify web-based guest network access mechanisms.
Captive portals intercept HTTP/HTTPS requests to present policy agreements or web login forms before granting access.
Guest wireless deployments routinely implement web redirection instead of 802.1X or static PSKs.

Anahtar Kavram

Wireless Authentication Protocols and Enterprise Access Controls
Soru 2509Soru →

An IT manager is reviewing essential cloud computing characteristics to align organizational requirements with cloud deployment features. Match each cloud characteristic on the left with its correct operational description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Rapid Elasticity
On-Demand Self-Service
Resource Pooling
Measured Service

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Rapid Elasticity matches automatic dynamic scaling outward and inward based on demand. On-Demand Self-Service matches provisioning computing resources automatically without human interaction. Resource Pooling matches serving multiple clients via a multi-tenant model with shared physical infrastructure. Measured Service matches monitoring and reporting usage transparently based on metered metrics.
Each cloud characteristic corresponds to a distinct NIST standard cloud feature: Rapid Elasticity provides automated real-time scaling; On-Demand Self-Service allows user provisioning without provider interaction; Resource Pooling aggregates infrastructure for multi-tenancy; and Measured Service meters usage for transparent tracking and billing.

Adım Adım Çözüm

1
Analyze the core function of Rapid Elasticity.
Identify that rapid elasticity focuses on dynamic automated scaling up and down according to workload spikes or drops.
Elasticity emphasizes adaptability and dynamic scaling capability.
2
Analyze the core function of On-Demand Self-Service.
Identify that on-demand self-service enables users to independently provision resources via administrative portals without contacting support technicians.
Self-service eliminates provider interaction bottlenecks during provisioning.
3
Analyze the core function of Resource Pooling.
Identify that resource pooling involves aggregating physical infrastructure across multiple tenants to dynamically allocate capacity.
Pooling relies on multi-tenancy to maximize hardware utilization.
4
Analyze the core function of Measured Service.
Identify that measured service involves metered monitoring of resource consumption for billing and transparency.
Measured service provides usage tracking analogous to utility meters.

Anahtar Kavram

Core Cloud Computing Characteristics (NIST Definition)
Soru 2510Soru →

After isolating an infected Windows workstation and disabling System Restore, a technician successfully remediates the system by running a full anti-malware scan and removing all detected threats. Which action should the technician take NEXT according to the standard CompTIA 7-step malware removal procedure?

Cevabı ve açıklamayı göster

Cevap: Schedule recurring anti-malware scans and operating system updates

Cevap

Schedule recurring anti-malware scans and operating system updates
Under the standard CompTIA 7-step malware removal process, Step 5 (Schedule scans and run updates) must immediately follow Step 4 (Remediate infected systems). Scheduling future anti-malware scans and verifying operating system updates ensures long-term protection before turning System Restore back on.

Adım Adım Çözüm

1
Identify current progress within the CompTIA 7-step malware removal process
The scenario indicates that Step 4 (Remediate infected systems) has just been completed.
Knowing the exact step completed allows selection of the next sequential action.
2
Determine the action required for Step 5
Step 5 requires scheduling automatic scans and installing system updates.
Automating scans and updating software ensures the system is protected against new threats before system restore baseline points are established.

Anahtar Kavram

CompTIA 7-Step Malware Removal Process (Step 5: Schedule scans and run updates)
Soru 2511Soru →

An IT support technician is troubleshooting a departmental laser printer that suddenly produces completely solid black pages on every print job. Inspecting the printed output shows that toner covers the paper from edge to edge uniformly. Which of the following components is most likely failing or disconnected to cause this specific symptom?

Cevabı ve açıklamayı göster

Cevap: Primary charge roller

Cevap

The primary charge roller is most likely failing or disconnected, preventing the drum from receiving a uniform negative charge.
During the conditioning phase of the electrophotographic (EP) printing process, the primary charge roller (PCR) conditions the photosensitive drum with a high uniform negative charge (typically around -600V). In standard write-black laser systems, toner carries a negative charge and is repelled by charged drum areas while adhering to discharged areas exposed by the laser. If the primary charge roller loses power or fails, the drum receives no negative charge, causing the negatively charged toner to stick to the entire drum surface, resulting in solid black pages.

Adım Adım Çözüm

1
Analyze the reported defect symptom.
The printer produces edge-to-edge solid black output on every sheet.
Understanding the image defect identifies which electrophotographic printing step is malfunctioning.
2
Evaluate drum charging dynamics in electrophotographic printing.
In EP printing, toner is negatively charged and attracted to discharged (less negative) areas of the drum created by the laser. If the primary charge roller fails, the drum receives no negative charge, making the entire drum surface attractive to toner.
Determining why toner is adhering to the entire drum surface pinpoints the conditioning stage component.
3
Conclude the root cause based on component roles.
A faulty primary charge roller (or primary corona) directly leads to solid black pages.
Eliminates other components that cause blank pages, smudging, or light prints.

Anahtar Kavram

Electrophotographic (EP) Laser Printing Conditioning Stage and Drum Charging
Soru 2512Soru →

A technician is troubleshooting a Windows 11 workstation. The user reports receiving frequent pop-up advertisements styled to resemble legitimate operating system security alerts in the bottom-right corner of the desktop, even when all web browser windows are closed. Full system antivirus and anti-malware scans complete with zero infected files detected. Which of the following is the MOST likely cause of these pop-ups?

Cevabı ve açıklamayı göster

Cevap: The user granted website notification permissions to a malicious domain within the web browser settings.

Cevap

The user granted website notification permissions to a malicious domain within the web browser settings.
The correct answer identifies that modern browsers utilize Web Push APIs integrated into the operating system notification framework. Websites frequently prompt users to allow notifications; if granted to a malicious or rogue site, advertisements formatted like system security warnings will appear on the desktop even when browser windows are closed, and antivirus scans will come up clean because no local malicious executable is installed.

Adım Adım Çözüm

1
Analyze the reported symptoms and diagnostic findings.
Pop-ups resemble OS notifications, appear in the bottom-right corner, occur while browsers are closed, and anti-malware scans show clean results.
This indicates a legitimate system feature is being exploited rather than file-based malware residing on the local disk.
2
Evaluate browser push notification mechanisms.
Web browsers use background service workers to deliver push notifications registered under site permissions, displaying them using native OS notification UI even when the browser application interface is closed.
Deceptive websites often trick users into clicking 'Allow' on notification prompts under the guise of CAPTCHA verification or video playback.
3
Determine the remediation steps.
Navigate to the browser's privacy and security settings under 'Site Configuration / Notifications' and revoke permission for all untrusted or suspicious domains.
Revoking the domain's notification permission immediately stops the background push notifications without needing OS reinstallations or malware removal tools.

Anahtar Kavram

Browser Site Permissions and Web Push Notification Security
Soru 2513Soru →

A desktop technician is configuring a host workstation to run 3 concurrent guest virtual machines (VMs) for software testing using client-side virtualization. Each guest VM requires a minimum of 4 GB4\text{ GB} of RAM. The host operating system requires 4 GB4\text{ GB} of RAM to maintain stable performance without relying on virtual memory paging. What is the minimum amount of physical RAM that must be installed in the host workstation to support this configuration?

Cevabı ve açıklamayı göster

Cevap: 16 GB16\text{ GB}

Cevap

16 GB16\text{ GB} of physical RAM is the minimum requirement.
To determine total physical host RAM required, sum the memory requirements of all concurrent guest virtual machines (3×4 GB=12 GB3 \times 4\text{ GB} = 12\text{ GB}) and add the host operating system overhead requirement (4 GB4\text{ GB}), resulting in a minimum total of 16 GB16\text{ GB}.

Adım Adım Çözüm

1
Calculate total memory required for all guest virtual machines
3 VMs×4 GB/VM=12 GB3 \text{ VMs} \times 4\text{ GB/VM} = 12\text{ GB}
Each guest VM requires dedicated RAM allocated for its guest operating system and application workload.
2
Add host operating system RAM overhead
12 GB (guests)+4 GB (host OS)=16 GB12\text{ GB (guests)} + 4\text{ GB (host OS)} = 16\text{ GB}
The hypervisor host OS requires dedicated physical RAM to avoid memory overcommitment and disk thrashing.

Anahtar Kavram

Virtual Machine Memory Sizing and Host Overhead
Soru 2514Soru →

A desktop technician at a regional retail pharmacy chain is troubleshooting a Windows 11 workstation used for prescription tracking. The system is showing unauthorized pop-up messages and experiencing extreme system slowdown. The technician verifies the presence of rogue adware and immediately disconnects the Ethernet cable to isolate the system from the internal network. According to the CompTIA 7-step malware remediation process, what is the NEXT step the technician should perform?

Cevabı ve açıklamayı göster

Cevap: Disable System Restore in Windows.

Cevap

Disable System Restore in Windows before proceeding with malware removal.
The correct step is to disable System Restore in Windows. In the CompTIA 7-step malware remediation process (1. Identify symptoms, 2. Quarantine system, 3. Disable System Restore, 4. Remediate infected system, 5. Schedule updates, 6. Enable System Restore/create restore point, 7. Educate user), disabling System Restore immediately follows quarantining the system to ensure clean restore points later.

Adım Adım Çözüm

1
Identify current state in the CompTIA 7-step malware remediation workflow.
The technician has completed Step 1 (Identify and verify malware symptoms) and Step 2 (Quarantine infected systems by disconnecting network access).
Tracking current progress ensures remediation steps occur in proper logical sequence.
2
Determine the next sequential remediation requirement.
Step 3 dictates disabling Windows System Restore prior to initiating scanning or removal tools.
If System Restore remains enabled during remediation, infected files or registry keys might be backed up automatically or restored later.
3
Select the correct technician action.
Disable System Restore in Windows.
Prepares the machine for safe malware remediation in Step 4.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process
Tahmini Süre:1m 0s
Soru 2515Soru →

A system administrator manages a mixed corporate network consisting of macOS workstations and Linux servers. Match each native operating system tool or terminal command to its correct administrative function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

sw_vers
iwconfig
killall
du

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The correct matches associate sw_vers with displaying macOS version info, iwconfig with Linux wireless interface configuration, killall with terminating processes by name, and du with directory disk space estimation.
Each tool matches its specific administrative function: sw_vers reports macOS system version metadata; iwconfig adjusts Linux wireless settings; killall halts programs by process name; and du reports directory storage consumption.

Adım Adım Çözüm

1
Identify the primary function of the macOS sw_vers utility.
Map sw_vers to displaying installed macOS version and build details.
sw_vers stands for software version and is native to macOS CLI environment.
2
Analyze Linux wireless networking commands.
Map iwconfig to configuring Linux wireless interfaces.
iwconfig specifically targets wireless interface parameters like SSID and encryption keys.
3
Evaluate process management commands in Linux and macOS.
Map killall to ending processes using process names.
Unlike kill which requires a PID number, killall targets matching process binary names.
4
Differentiate storage analysis utilities.
Map du to estimating file space consumption.
du (disk usage) summarizes file and folder size usage, whereas df (disk free) checks overall volume availability.

Anahtar Kavram

macOS and Linux Command-Line Utilities and Administrative Tools
Soru 2516Soru →

A system administrator is hardening security policies on Windows 11 Pro workstations. The administrator must ensure that standard users are explicitly required to enter administrator credentials whenever privilege elevation is requested, and that all prompt dialogs take place in an isolated desktop environment protected from background process interference. Which TWO settings in Local Security Policy (secpol.msc) should be configured to fulfill these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Prompt for credentials on the secure desktop'; Set 'User Account Control: Switch to the secure desktop when prompting for elevation' to 'Enabled'

Cevap

The correct options are the setting to set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Prompt for credentials on the secure desktop' and the setting to set 'User Account Control: Switch to the secure desktop when prompting for elevation' to 'Enabled'.
To satisfy both requirements, the administrator must configure two specific Local Security Policy settings under Security Options: setting 'User Account Control: Behavior of the elevation prompt for standard users' to prompt for credentials ensures unprivileged users cannot elevate without administrator credentials, while setting 'User Account Control: Switch to the secure desktop when prompting for elevation' to Enabled guarantees the prompt opens in an isolated desktop context protected against background interference.

Adım Adım Çözüm

1
Identify the standard user elevation requirement
Configuring 'User Account Control: Behavior of the elevation prompt for standard users' to prompt for credentials ensures standard users cannot elevate without entering administrator credentials.
By default or under strict policies, standard users must authenticate with administrative credentials to perform privileged system modifications.
2
Identify the isolated desktop environment requirement
Enabling 'User Account Control: Switch to the secure desktop when prompting for elevation' dims the screen and isolates the elevation dialog.
The secure desktop runs in a separate desktop context that background malware or user-space applications cannot capture or inject keystrokes into.

Anahtar Kavram

Windows Local Security Policy UAC elevation prompt behavior and secure desktop isolation
Tahmini Süre:1m 30s
Soru 2517Soru →

A Windows 11 workstation used for 3D rendering experiences severe system latency and frequent application crashes during heavy rendering tasks. Diagnostics show that the Paging File % Usage routinely reaches 98%, Task Manager displays high Hard Faults/sec rates, and Event Viewer logs Event ID 2004 (Resource-Exhaustion-Detector) indicating that virtual memory is depleted. Further inspection reveals that the system drive hosting pagefile.sys has less than 500 MB of remaining free space, preventing the paging file from expanding further. Which of the following initial actions should the technician take to resolve the virtual memory bottleneck and stabilize system performance?

Cevabı ve açıklamayı göster

Cevap: Modify Virtual Memory settings in System Properties to relocate the paging file to a non-system volume with ample free storage space.

Cevap

Modify Virtual Memory settings in System Properties to relocate the paging file to a non-system volume with ample free storage space.
When a Windows system experiences high Hard Faults/sec and Event ID 2004 (Resource-Exhaustion-Detector), the operating system's virtual memory capacity is depleted. Since the drive hosting pagefile.sys has less than 500 MB of free space, the paging file cannot grow to meet system demand. Moving the paging file to a drive volume with sufficient space via System Properties restores proper virtual memory functionality and stops application crashes caused by memory allocation failures.

Adım Adım Çözüm

1
Analyze diagnostic indicators
Event ID 2004, high hard fault rate, and 98% paging file usage point to virtual memory exhaustion caused by low disk space on the drive hosting the pagefile.
Windows uses pagefile.sys on the hard drive to supplement physical RAM; when the underlying disk runs out of free space, virtual memory cannot expand, leading to app crashes and thrashing.
2
Determine the appropriate administrative configuration utility
Virtual memory settings are adjusted via Advanced System Settings (System Properties) under the Performance options.
Relocating the paging file to a secondary drive with adequate free space allows Windows to expand virtual memory as needed without running out of disk space.
3
Execute the remediation action
The paging file is successfully moved to a secondary volume with adequate space, resolving memory allocation failures.
Providing a volume with ample storage space eliminates the virtual memory starvation causing high hard fault rates and application crashes.

Anahtar Kavram

Troubleshooting Windows Virtual Memory Exhaustion and Pagefile Bottlenecks
Soru 2518Soru →

A technician is configuring a host workstation to run virtual machines (VMs) for software compatibility testing across multiple operating systems. Upon attempting to launch a 64-bit guest OS within the client-side hypervisor, an error indicates that hardware-assisted virtualization and memory virtualization features are disabled. Which of the following features must be enabled in the motherboard's UEFI/BIOS setup to satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Intel VT-x or AMD-V (Hardware-assisted virtualization); Second Level Address Translation (SLAT / EPT / NPT)

Cevap

The technician must enable Hardware-assisted virtualization (Intel VT-x or AMD-V) and Second Level Address Translation (SLAT / EPT / NPT) in the host system's UEFI/BIOS settings.
Enabling Intel VT-x or AMD-V grants the hypervisor direct access to CPU hardware extensions required to execute guest operating systems efficiently. Enabling Second Level Address Translation (SLAT) provides hardware-based memory translation (Extended Page Tables or Nested Page Tables), significantly reducing memory management overhead for guest virtual machines.

Adım Adım Çözüm

1
Determine the CPU requirement for running 64-bit guest operating systems in a hypervisor.
Identify that hardware-assisted virtualization (Intel VT-x or AMD-V) must be enabled in host UEFI/BIOS.
Hypervisors depend on direct hardware virtualization instruction extensions on the CPU to isolate and execute guest OS code.
2
Determine the hardware feature responsible for managing virtual machine memory page tables.
Identify Second Level Address Translation (SLAT / EPT / NPT) as the memory hardware feature.
SLAT offloads virtual-to-physical memory mapping from hypervisor software directly to the memory controller hardware.

Anahtar Kavram

Virtual Machine Resource Requirements and Hardware Support
Tahmini Süre:1m 30s
Soru 2519Soru →

A technician is troubleshooting a Windows 11 workstation where a specialized financial reporting application regularly hangs during data processing and subsequently crashes. Place the following troubleshooting steps in the correct sequence to systematically isolate the hanging process, identify the failing module, eliminate software conflicts, and repair corrupted system dependencies.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence is: 1) Analyze the process wait chain in Task Manager, 2) Inspect the Event Viewer Application log for Event ID 1000 entries, 3) Perform a clean boot via System Configuration (msconfig), and 4) Run the System File Checker utility (sfc /scannow).
The correct sequence adheres to CompTIA troubleshooting best practices: start with real-time process diagnostics (Task Manager wait chain analysis), follow with historical log examination (Event Viewer Application log Event ID 1000), proceed to third-party conflict isolation (clean boot via msconfig), and conclude with system dependency repair (sfc /scannow).

Adım Adım Çözüm

1
Analyze the process wait chain in Task Manager while the app is unresponsive.
Identifies immediate blocking threads, child processes, or deadlocks in real time.
Live diagnostic data gathering must occur before restarting or terminating the process.
2
Examine Event Viewer Application logs for Event ID 1000.
Reveals the faulting module name, faulting application path, and exception code.
Provides historical log evidence regarding specific file crash dependencies.
3
Execute a clean boot using System Configuration (msconfig).
Disables all non-essential third-party services and startup apps.
Isolates whether background third-party software or service conflicts are triggering the failure.
4
Execute sfc /scannow in an elevated Command Prompt.
Verifies system file integrity and replaces corrupted system binaries.
Ensures core operating system dependencies identified in the log analysis are healthy.

Anahtar Kavram

Systematic isolation and remediation sequence for Windows application hangs and crashes using native diagnostic tools.
Soru 2520Soru →

A desktop application on a Windows workstation freezes unexpectedly during startup. As a CompTIA A+ technician, in what order should you execute the following troubleshooting steps to isolate the root cause and remediate the application crash?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence begins with analyzing Event Viewer logs (Event ID 1002/1000), using Resource Monitor's Analyze Wait Chain feature to identify blocking threads, terminating the blocking process, and performing a system file repair using sfc /scannow.
CompTIA A+ troubleshooting protocol requires collecting diagnostic evidence prior to making system modifications. The technician first checks Event Viewer Application logs for Event ID 1000 (Application Error) or 1002 (Application Hang) to confirm the faulting module. Next, Resource Monitor's Analyze Wait Chain feature is used to pinpoint the exact thread or child process causing the freeze. The blocking process is then terminated to resolve the active deadlock. Finally, System File Checker (sfc /scannow) is executed to repair any underlying system file corruption.

Adım Adım Çözüm

1
Examine Event Viewer Application logs for Event ID 1000 or 1002.
Determines the specific application executable, faulting module, and exception code.
Log investigation provides baseline empirical diagnostic information without altering system state.
2
Launch Resource Monitor and select Analyze Wait Chain for the application.
Discovers thread deadlocks and pinpoints which secondary process holds required resources.
Wait chain inspection isolates active process dependencies causing the freeze.
3
End the blocking child process or thread in Resource Monitor.
Clears the process deadlock and restores immediate system/application responsiveness.
Targeted termination clears the immediate hang without requiring a reboot.
4
Run sfc /scannow in an elevated Command Prompt.
Scans protected system files and replaces corrupted binaries with cached copies.
System repair ensures long-term stability and resolves corrupted OS dependency files.

Anahtar Kavram

Sequencing diagnostic and remediation steps for application hangs in Windows using Event Viewer, Resource Monitor Wait Chain analysis, and System File Checker.
ÖncekiSayfa 126 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin