Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 2541Soru →

A field technician is configuring wireless access points for a corporate branch office. The company's security policy requires authenticating each user individually through an active central RADIUS server rather than utilizing a shared pre-shared key, while enforcing high-grade modern encryption. Which of the following security options should the technician select on the access points to satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise operational mode; 802.1X authentication framework

Cevap

The technician should select WPA3-Enterprise operational mode and 802.1X authentication framework.
WPA3-Enterprise mode combined with 802.1X port-based authentication allows wireless access points to offload user identity verification to an enterprise RADIUS server, satisfying the requirement for individual domain credentials and strong modern encryption.

Adım Adım Çözüm

1
Identify the authentication requirement
Individual user authentication via a central RADIUS server requires an enterprise-level mode using the 802.1X port-based access control standard.
Personal modes (PSK/SAE) rely on a single shared passphrase for all connected devices and cannot authenticate individual domain users.
2
Identify the modern wireless encryption requirement
WPA3-Enterprise provides modern, robust encryption methods suitable for high-security corporate environments.
WPA3 is the current wireless security standard, replacing older protocols such as WPA2 and WEP/TKIP.

Anahtar Kavram

Wireless Security Modes and Enterprise Authentication (802.1X / RADIUS)
Tahmini Süre:1m 15s
Soru 2542Soru →

A technician is servicing a Windows 10 computer that fails to start due to a corrupted boot configuration. After booting from Windows installation media into the Windows Recovery Environment (WinRE) command prompt, which TWO bootrec utility commands should the technician execute to write a new boot sector to the system partition and rebuild the boot configuration store? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: bootrec /fixboot; bootrec /rebuildbcd

Cevap

The correct commands to write a new boot sector and rebuild the BCD store are bootrec /fixboot and bootrec /rebuildbcd.
The command bootrec /fixboot writes a new boot sector to the system partition, and bootrec /rebuildbcd scans connected drives for Windows installations and regenerates the BCD configuration file. Together, these two steps address boot sector corruption and missing BCD settings.

Adım Adım Çözüm

1
Boot into WinRE and open the Command Prompt.
Access to administrative Windows CLI recovery tools.
WinRE provides offline access to system repair utilities when the installed OS cannot boot.
2
Run bootrec /fixboot to repair the boot sector.
A fresh boot sector is written to the system partition.
This resolves startup issues caused by damaged or incompatible boot sector code.
3
Run bootrec /rebuildbcd to scan and rebuild boot entries.
Identified Windows installations are added to the BCD store.
This repairs corrupted BCD files and allows the boot loader to locate the Windows installation.

Anahtar Kavram

Using bootrec switches in WinRE to repair system partition boot sectors and rebuild the BCD database.
Soru 2543Soru →

A technician is troubleshooting a legacy line-of-business application on a Windows 11 workstation. The application crashes immediately upon startup for standard domain users with exception code 0xc0000005 (Access Violation), but it launches and runs properly when logged in as a local administrator. Event Viewer logs confirm an Application Error (Event ID 1000) indicating that the process failed while attempting to create a log file inside `C:\Program Files\LegacyVendorApp\Logs`. Which of the following is the most appropriate action to resolve the crash while adhering to the principle of least privilege?

Cevabı ve açıklamayı göster

Cevap: Grant standard users Modify permissions specifically to the `C:\Program Files\LegacyVendorApp\Logs` folder.

Cevap

Grant standard users Modify permissions specifically to the application's working log folder (`C:\Program Files\LegacyVendorApp\Logs`).
The exception code 0xc0000005 indicates an Access Violation, which occurs when a process attempts to read or write to a memory or storage location to which it does not have permission. Because standard users do not have Write/Modify permissions in `C:\Program Files` by default, adjusting NTFS security permissions on the specific `Logs` subfolder grants the necessary access without compromising the security of the rest of the application files or the system.

Adım Adım Çözüm

1
Analyze the crash symptoms and diagnostic indicators in Event Viewer.
Event ID 1000 with exception code 0xc0000005 (Access Violation) combined with successful execution under an Administrator account confirms a privilege/permission restriction during file creation in `C:\Program Files\LegacyVendorApp\Logs`.
By default, standard users have Read & Execute access to `C:\Program Files`, but lack Write permissions.
2
Evaluate potential remediation options against security governance standards.
Granting Modify permissions to only the `Logs` directory addresses the application's requirement while maintaining security controls on all executable files in the root folder.
Applying targeted NTFS permissions upholds the principle of least privilege instead of granting standard users broad local administrator rights.

Anahtar Kavram

Troubleshooting Application Crashes and NTFS Permission Restrictions
Tahmini Süre:2m 0s
Soru 2544Soru →

An online educational institution operates a learning portal that experiences sudden, unpredictable surges in student activity during examination cycles. The system automatically provisions additional server capacity to preserve performance during spikes and automatically releases those resources when traffic normalizes. Additionally, the underlying cloud infrastructure dynamically serves multiple client organizations from a shared physical hardware infrastructure without disclosing exact hardware locations to end users. Which of the following essential cloud characteristics are demonstrated in this scenario? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Rapid elasticity; Resource pooling

Cevap

Rapid elasticity and Resource pooling
Rapid elasticity is demonstrated by the system's ability to automatically expand resources during unpredictable examination surges and contract when traffic subsides. Resource pooling is demonstrated by the provider using shared physical hardware dynamically allocated across multiple organization workloads without revealing specific physical details.

Adım Adım Çözüm

1
Analyze the automatic scaling behavior during user spikes.
Identified rapid elasticity as the feature that seamlessly expands and contracts computing resources based on workload requirements.
Rapid elasticity ensures computing resources scale dynamically and automatically to handle sudden spikes without manual intervention.
2
Analyze the shared multi-tenant hardware arrangement.
Identified resource pooling as the mechanism where vendor hardware is dynamically allocated among multiple tenants.
Resource pooling pools physical computing power, memory, and storage across multiple clients transparently.

Anahtar Kavram

Cloud Characteristics and Features (Rapid Elasticity and Resource Pooling)
Tahmini Süre:1m 15s
Soru 2545Soru →

A Linux administrator is setting up a shared folder at `/data/projects`. The requirement states that group ownership of the directory must belong to `devgroup`, and all newly created files inside this directory must automatically inherit `devgroup` as their group owner. Which of the following commands must the administrator execute to fulfill both requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: chgrp devgroup /data/projects; chmod g+s /data/projects

Cevap

The administrator must execute `chgrp devgroup /data/projects` to assign group ownership and `chmod g+s /data/projects` to enable SetGID group permission inheritance for newly created files.
To set the group ownership of a directory in Linux, the `chgrp devgroup /data/projects` command is used. To ensure that any newly created files automatically inherit the parent directory's group ownership rather than inheriting the creating user's default primary group, the SetGID bit must be assigned to the directory using `chmod g+s /data/projects`.

Adım Adım Çözüm

1
Assign directory group ownership
Group ownership of `/data/projects` changes to `devgroup`
Running `chgrp devgroup /data/projects` directly changes the target group owner.
2
Enable SetGID bit on the directory
The directory permission mode includes `g+s`
Setting SetGID on a Linux directory causes newly created files within it to inherit the directory's group instead of the user's primary group.

Anahtar Kavram

Linux File Ownership and SetGID Bit Directory Inheritance
Tahmini Süre:1m 30s
Soru 2546Soru →

A user reports that a CAD rendering application unexpectedly crashes every time a 3D model export is initiated on a Windows 11 workstation. The technician inspects the Windows Event Viewer Application log and identifies Event ID 1000 indicating an application crash with faulting module `nvlddmkm.sys` and exception code `0xc0000005`. Task Manager confirms that overall CPU and system RAM usage remain below 35% prior to the crash. Which of the following is the most appropriate next step to resolve the application crash?

Cevabı ve açıklamayı göster

Cevap: Update or perform a clean reinstallation of the dedicated graphics card driver.

Cevap

Update or perform a clean reinstallation of the dedicated graphics card driver.
In Windows Event Viewer, Event ID 1000 signifies an application crash and specifies the faulting module name. The file extension `.sys` and prefix `nvlddmkm` point directly to the Nvidia graphics driver subsystem. Because resource monitoring showed low RAM and CPU usage, hardware exhaustion is ruled out, making a clean reinstallation or update of the graphics display driver the correct targeted solution.

Adım Adım Çözüm

1
Analyze Event Viewer logs and Task Manager resource metrics.
Identified Event ID 1000 with faulting module `nvlddmkm.sys` (Nvidia display driver) while CPU and RAM utilization remained normal.
Event ID 1000 provides the specific executable or driver component causing the crash, isolating the fault to the display sub-system.
2
Correlate the faulting module with the appropriate software layer.
Determined that `nvlddmkm.sys` is associated with the graphics processing unit (GPU) display driver.
Applications performing 3D rendering rely heavily on GPU driver calls. Access violations (`0xc0000005`) in driver DLL/sys files signal corrupted or incompatible driver software.
3
Apply targeted remediation by updating or performing a clean driver installation.
The graphics driver is updated to a stable version, resolving the crash during 3D exports.
Clean installing vendor drivers restores corrupted binary files and registry configurations specific to hardware acceleration.

Anahtar Kavram

Troubleshooting Application Crashes using Event Viewer Log Analysis
Soru 2547Soru →

A technician installs a new PCIe x4 M.2 solid-state drive into a motherboard's primary M.2 slot. Upon booting the system, the technician notices that the new M.2 SSD is functioning correctly, but two SATA hard drives previously connected to motherboard ports SATA5 and SATA6 are no longer detected by the BIOS/UEFI. The technician verifies that all power and data cables are securely attached. Which of the following best explains why the two SATA drives are no longer recognized?

Cevabı ve açıklamayı göster

Cevap: The motherboard shares bus bandwidth between the M.2 slot and specific SATA ports, automatically disabling those SATA ports when an M.2 drive is populated.

Cevap

The motherboard shares bus bandwidth between the M.2 slot and specific onboard SATA ports, automatically disabling those SATA ports when the M.2 slot is populated.
On many desktop motherboards, internal bandwidth limitations dictate that certain expansion interfaces share controller lanes. When an M.2 SSD is installed into a slot that shares bandwidth with onboard SATA ports, the motherboard automatically disables those specific SATA ports (in this case, SATA5 and SATA6). Moving the SATA drives to unaffected ports restores their connectivity.

Adım Adım Çözüm

1
Analyze the reported hardware symptom following the component installation.
The new M.2 SSD operates normally, but specific SATA ports (SATA5 and SATA6) suddenly stop detecting drives despite secure physical cabling.
Determining why functional hardware loses connection specifically after adding an M.2 device.
2
Evaluate motherboard system architecture regarding lane routing and bandwidth sharing.
On modern motherboards, high-speed M.2 slots share PCIe or SATA controller lanes with designated onboard SATA ports.
When an M.2 device is detected in a shared slot, motherboard multiplexers disable the corresponding SATA ports to allocate bandwidth to the M.2 drive.
3
Identify the correct resolution for the technician.
The technician should relocate the SATA data cables from ports SATA5 and SATA6 to unshared SATA ports (such as SATA1 through SATA4).
This resolves the detection issue without removing the M.2 drive.

Anahtar Kavram

Motherboard Lane Sharing and M.2/SATA Bandwidth Multiplexing
Soru 2548Soru →

A technician turns on a desktop workstation and hears a series of repetitive audible beeps during startup while the screen remains completely blank. Which of the following actions should the technician take FIRST to resolve this pre-boot failure?

Cevabı ve açıklamayı göster

Cevap: Reseat the system memory modules in their motherboard slots.

Cevap

Reseat the system memory modules in their motherboard slots.
Audible beep codes emitted upon starting a computer signal hardware diagnostic warnings during the Power-On Self-Test (POST). Loose or improperly seated memory modules frequently prevent system startup and trigger these warnings, making reseating the memory modules the correct immediate action.

Adım Adım Çözüm

1
Analyze the failure symptom of audible beeps prior to display output.
Identify that the failure occurs during the Power-On Self-Test (POST) phase.
POST errors indicate physical hardware communication issues before the OS or storage media load.
2
Determine the common hardware cause for early POST beep code warnings.
Identify memory (RAM) seating or detection failures as a primary root cause.
Motherboards emit POST beep codes when RAM is missing, improperly seated, or corrupt.
3
Select the initial, non-destructive physical troubleshooting action.
Reseat the memory modules firmly into the motherboard DIMM slots.
Ensuring electrical contact restores proper memory communication and enables POST to complete.

Anahtar Kavram

POST Beep Code Diagnostics and RAM Seating
Soru 2549Soru →

A help desk technician receives a call from an employee who cannot access a secure corporate intranet application. When the employee navigates to the application URL, the web browser displays a security warning stating that the SSL/TLS certificate name does not match the requested domain name (NET::ERR_CERT_COMMON_NAME_INVALID). Other users on the same subnet can access the internal site without any certificate errors. Which of the following should the technician check FIRST on the affected computer?

Cevabı ve açıklamayı göster

Cevap: The local hosts file for unauthorized static domain IP mappings

Cevap

The technician should first inspect the local hosts file for unauthorized static domain IP mappings.
Inspecting the local hosts file is the correct initial step because static entries in C:\Windows\System32\drivers\etc\hosts override DNS queries. When a single workstation experiences a certificate domain mismatch for a site that works for all other users, an incorrect IP mapping in the hosts file redirects traffic to an unexpected web server presenting a different SSL certificate.

Adım Adım Çözüm

1
Analyze the reported browser symptom and scoping details.
The issue is isolated to a single computer receiving a certificate common name mismatch error for an internal URL.
Because other users on the same subnet access the site normally, the issue resides locally on the specific workstation rather than on the server or network infrastructure.
2
Identify potential local name resolution tampering mechanisms.
The local Windows hosts file (C:\Windows\System32\drivers\etc\hosts) overrides DNS resolution for specific hostname entries.
If malicious software or improper configuration modified the hosts file, the domain name resolves to an incorrect destination server, triggering an SSL/TLS common name mismatch warning.
3
Determine the appropriate troubleshooting priority step.
Inspecting and restoring the local hosts file directly targets the root cause of single-host domain redirection.
Clearing cache or altering browser GUI preferences will not rectify localized static DNS hijack entries.

Anahtar Kavram

Host File Redirection and Name Resolution Troubleshooting
Tahmini Süre:1m 0s
Soru 2550Soru →

A desktop support technician at a biotechnology research facility is remediating a Windows 11 workstation infected with a keylogger. The technician has already identified the malware symptoms, disconnected the system from the local network to quarantine it, and disabled System Restore. According to the CompTIA standard 7-step malware remediation process, which of the following actions should the technician perform NEXT?

Cevabı ve açıklamayı göster

Cevap: Update the anti-malware software signature definitions.

Cevap

Update the anti-malware software signature definitions.
According to the CompTIA 7-step malware remediation process, once System Restore is disabled (Step 3), the technician must proceed to Step 4: Remediate the infected system. The very first action in remediation is updating the anti-malware software and signature definitions (Step 4a) before scanning and removing the malware (Step 4b).

Adım Adım Çözüm

1
Review the current stage of the CompTIA 7-step malware remediation process.
The technician has completed Step 1 (Identify malware symptoms), Step 2 (Quarantine the infected system), and Step 3 (Disable System Restore).
Tracking completed steps identifies what step follows sequentially.
2
Determine the first substep of Step 4 (Remediate the infected system).
Step 4a requires updating the anti-malware software signatures before running scans (Step 4b).
Anti-malware tools require current definition files to effectively detect and remove modern malware threats.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process Sequence
Soru 2551Soru →

A desktop technician is assembling a workstation that will run four concurrent guest virtual machines using a client-side hypervisor. Each guest virtual machine requires 6 GB6\text{ GB} of RAM. The host operating system requires 4 GB4\text{ GB} of RAM, and the hypervisor itself requires an additional 2 GB2\text{ GB} of host memory for management overhead. To prevent system instability and performance issues caused by memory overcommitment, what is the minimum total amount of physical host RAM required?

Cevabı ve açıklamayı göster

Cevap: 30 GB30\text{ GB}

Cevap

The minimum total amount of physical host RAM required is 30 GB30\text{ GB}.
The total physical RAM required on the host system must account for all guest virtual machines, the host operating system, and the hypervisor overhead. Multiplying four guest virtual machines by 6 GB6\text{ GB} yields 24 GB24\text{ GB}. Adding 4 GB4\text{ GB} for the host operating system and 2 GB2\text{ GB} for hypervisor management overhead results in a minimum host requirement of 30 GB30\text{ GB}.

Adım Adım Çözüm

1
Calculate total RAM required for all guest virtual machines
4 \times 6\text{ GB} = 24\text{ GB}
Each of the four guest virtual machines requires 6 GB6\text{ GB} of RAM.
2
Identify host operating system and hypervisor memory overhead requirements
4\text{ GB} \text{ (Host OS)} + 2\text{ GB} \text{ (Hypervisor Overhead)} = 6\text{ GB}
The host system must reserve memory for its own operating system and hypervisor management processes.
3
Sum total RAM requirements to determine minimum host physical memory
24\text{ GB} + 6\text{ GB} = 30\text{ GB}
Sufficient physical memory prevents host memory swapping, resource overcommitment, and system performance degradation.

Anahtar Kavram

Virtual machine host RAM allocation and avoiding memory overcommitment
Soru 2552Soru →

A helpdesk technician is troubleshooting a third-party screen-recording application on a standalone Windows 11 Pro computer. The application crashes whenever the display dims to show the User Account Control (UAC) prompt. To prevent the screen dimming while preserving elevation prompts for application changes, what is the correct sequence of steps to reconfigure the UAC notification level?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts by opening Control Panel, opening User Accounts and selecting Change User Account Control settings, moving the slider down to 'Notify me only when apps try to make changes to my computer (do not dim my desktop)', clicking OK, and finally confirming the elevation prompt by selecting Yes.
To modify UAC settings in the Windows GUI, a technician must open Control Panel, navigate to User Accounts, and select 'Change User Account Control settings'. To prevent the display driver from dimming the screen (which causes third-party screen recorders to crash), the technician moves the slider to 'Notify me only when apps try to make changes to my computer (do not dim my desktop)'. Clicking OK and approving the UAC elevation consent prompt finalizes the change.

Adım Adım Çözüm

1
Launch Control Panel from the Start Menu.
Control Panel navigation options become available.
UAC configuration applets for account management are located in Control Panel.
2
Navigate to User Accounts and select 'Change User Account Control settings'.
The User Account Control Settings dialog opens with the vertical configuration slider.
This applet provides the graphical interface for setting system-wide UAC notification levels.
3
Adjust the slider to the second notch from the top: 'Notify me only when apps try to make changes to my computer (do not dim my desktop)'.
Secure desktop dimming is disabled while UAC prompts remain active for application installer/configuration actions.
This specific UAC state stops Windows from switching to the isolated Secure Desktop, resolving display driver conflicts with screen recording tools.
4
Select OK at the bottom of the User Account Control Settings window.
Windows prepares to update registry keys under HKEY_LOCAL_MACHINE.
Submitting the dialog requests system privilege elevation to apply the change.
5
Select Yes when prompted by User Account Control to confirm the security setting update.
The new UAC notification state is saved and applied immediately without requiring a reboot.
Modifying UAC settings requires administrative approval to prevent unauthorized tampering.

Anahtar Kavram

Configuring User Account Control (UAC) notification levels and Secure Desktop behavior.
Soru 2553Soru →

A network administrator is reconfiguring the wireless network for a growing company. Currently, all employees connect to the internal wireless network using a single shared passphrase. Management is concerned that departed employees retain access after leaving the organization. The administrator needs to implement a wireless security solution that allows each employee to authenticate using their individual central network domain credentials. Which of the following configurations best satisfies this requirement?

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise using 802.1X authentication integrated with a RADIUS server

Cevap

WPA3-Enterprise using 802.1X authentication integrated with a RADIUS server
WPA3-Enterprise implements the IEEE 802.1X authentication standard, delegating user authentication to an enterprise RADIUS server. This setup allows employees to log into the wireless network using their unique domain credentials, enabling immediate revocation of wireless access when an employee account is disabled.

Adım Adım Çözüm

1
Analyze the operational requirement
The company needs per-user authentication tied to central domain accounts to prevent offboarded staff from retaining access.
Shared passphrases (Personal/PSK mode) cannot revoke access for individual users without updating the passphrase on all company devices.
2
Evaluate wireless authentication models
WPA2/WPA3 Enterprise modes mandate the use of the IEEE 802.1X port-based authentication framework, which communicates with a Remote Authentication Dial-In User Service (RADIUS) server.
RADIUS integrates with corporate directory services (such as Active Directory or LDAP) to authenticate individual user accounts.
3
Select the modern, secure configuration
WPA3-Enterprise providing 802.1X authentication with RADIUS fulfills all security requirements.
It secures network access per individual user while applying strong modern encryption standards.

Anahtar Kavram

Distinction between WPA Personal (PSK) and WPA Enterprise (802.1X/RADIUS) authentication modes
Soru 2554Soru →

A desktop technician is following standard CompTIA procedures to remediate a malware infection on an enterprise workstation. Arrange the following steps of the malware removal process in the correct order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of the malware remediation procedure is: Disconnect the infected workstation from the network, Disable System Restore in Windows, Run anti-malware scans and removal tools to clean the system, and Enable System Restore and create a new restore point.
Under standard CompTIA malware removal procedures, the technician must first isolate the system (disconnect network) to prevent lateral spread, disable System Restore to clear infected restore points, execute remediation tools to eliminate active malware, and finally re-enable System Restore and build a fresh restore point once the environment is clean.

Adım Adım Çözüm

1
Isolate the infected machine from the environment.
Network communication is terminated, stopping potential lateral malware propagation.
Workstation isolation must occur immediately after identifying malware symptoms.
2
Disable System Restore.
Existing restore points containing malware are removed or locked from reinfecting the system.
Disabling restore functionality prevents malware from surviving remediation through system rollbacks.
3
Remediate the infected system using updated anti-malware utilities.
Malicious code and files are quarantined or deleted.
Remediation cleans active threats from local drives.
4
Re-enable System Restore and generate a clean restore point.
A clean recovery baseline is established for future system protection.
System Restore is re-enabled only after full remediation and system updates are complete.

Anahtar Kavram

CompTIA 7-Step Malware Removal Process
Soru 2555Soru →

A field technician is tasked with configuring power settings and maintenance practices for a deployment of modern laptops powered by Lithium-ion batteries. The company wishes to maximize battery health and service life over a three-year cycle. Which of the following actions should the technician implement to achieve this goal? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure firmware battery charging thresholds to cap maximum charge levels at 80%; Ensure laptops operate on hard surfaces during charging to maintain airflow and minimize heat build-up

Cevap

The technician should configure charging thresholds in firmware to limit max charge capacity to 80% and ensure laptops operate on hard, flat surfaces during charging to mitigate heat degradation.
The correct responses involve capping the maximum charge capacity (typically around 80%) via BIOS/UEFI or manufacturer utility and maintaining proper thermal management by keeping vents clear on hard surfaces. Lithium-ion batteries degrade faster under high ambient temperatures and sustained high-voltage states (100% charged).

Adım Adım Çözüm

1
Analyze optimal maintenance practices for Lithium-ion laptop batteries.
Identified that limiting sustained high voltage state (80% cap) and preventing high temperature exposure preserve battery cell health.
Lithium-ion chemistry degrades fastest when exposed to high heat and held continuously at 100% state of charge.
2
Evaluate distractor practices against Lithium-ion characteristics.
Determined that deep discharge cycles, port restriction myths, and form-factor mismatches are invalid maintenance steps.
Lithium-ion batteries lack memory effect, USB Power Delivery automatically negotiates correct voltages across USB-C/Thunderbolt ports, and DIMMs do not physically fit in laptop slots.

Anahtar Kavram

Lithium-ion Battery Lifespan Management
Soru 2556Soru →

A systems administrator is establishing security profiles for personal smartphones enrolled in an enterprise Bring Your Own Device (BYOD) deployment. The policy must ensure that corporate data is isolated so it can be wiped independently of personal files, and it must prevent users from installing unverified software from unauthorized third-party sources. Which TWO of the following configurations or controls should the administrator enforce?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy application containerization for corporate storage and apps.; Configure Mobile Device Management (MDM) policies to prohibit application sideloading.

Cevap

Deploying application containerization and prohibiting application sideloading via MDM policies.
Application containerization isolates enterprise applications and data into a secure partition, permitting selective remote wipes while preserving personal user data on BYOD devices. Disabling sideloading prevents users from installing unvetted applications from third-party sources outside official app stores.

Adım Adım Çözüm

1
Identify requirement for protecting personal data while allowing corporate data removal.
Containerization isolates business applications and storage from personal storage, enabling selective wipes.
Full-device wipes destroy personal user files, whereas containerization allows surgical removal of corporate assets.
2
Identify requirement for preventing unverified app installations.
Disabling sideloading forces devices to obtain applications solely through managed or trusted store repositories.
Sideloading bypasses security vetting mechanisms inherent in official app distribution platforms.

Anahtar Kavram

BYOD Mobile Containerization and Sideloading Protection
Soru 2557Soru →

A desktop technician confirms that a Windows 11 workstation in a corporate office is infected with rogue anti-spyware software. The technician has already disconnected the network cable to isolate the system from the corporate network. According to the standard CompTIA 7-step malware removal procedure, which action should the technician take NEXT?

Cevabı ve açıklamayı göster

Cevap: Disable System Restore in Windows.

Cevap

Disable System Restore in Windows.
The standard CompTIA 7-step malware removal process follows a specific order: 1) Identify symptoms, 2) Isolate infected systems, 3) Disable System Restore, 4) Remediate infected systems, 5) Schedule scans and updates, 6) Enable System Restore and create a restore point, 7) Educate end user. Because the system has already been identified and isolated, disabling System Restore is the required next step.

Adım Adım Çözüm

1
Identify the current step in the CompTIA 7-step malware removal process.
The scenario describes Step 1 (Identify malware symptoms) and Step 2 (Isolate infected systems) as already completed.
The technician confirmed the infection and disconnected the network cable to isolate the system.
2
Determine the mandatory next step in sequence.
Step 3 is to disable System Restore.
Disabling System Restore deletes existing restore points so malicious files cannot be restored accidentally during or after remediation.

Anahtar Kavram

CompTIA 7-Step Malware Removal Procedure Sequence
Tahmini Süre:45s
Soru 2558Soru →

A desktop computer running Windows 11 fails to start after a technician cloned the OS drive from a legacy MBR disk to a new NVMe SSD utilizing GPT partitioning for UEFI booting. On startup, the screen displays 'An operating system wasn't found.' The technician boots into the Windows Recovery Environment (WinRE) command prompt and attempts to run `bootrec /fixboot`, but receives an 'Access is denied' error message. Which of the following command sequences should the technician perform to repair the boot files?

Cevabı ve açıklamayı göster

Cevap: Use `diskpart` to assign a drive letter to the EFI System Partition, then run the `bcdboot` command pointing to the Windows installation directory and target partition.

Cevap

Use `diskpart` to assign a drive letter to the EFI System Partition, then execute the `bcdboot` utility referencing the Windows installation path and target volume.
On modern UEFI systems utilizing GPT disks, the standard legacy boot repair tool `bootrec /fixboot` frequently fails with an 'Access is denied' error because the boot files reside within a separate FAT32 EFI System Partition (ESP). The appropriate resolution involves using `diskpart` within WinRE to assign a letter to the hidden ESP and running `bcdboot C:\Windows /s <letter>: /f UEFI` to re-create the Boot Configuration Data (BCD) environment.

Adım Adım Çözüm

1
Identify the environment and root cause of the error
The target disk uses GPT/UEFI architecture following a clone, meaning legacy MBR repair tools like `bootrec /fixboot` will fail or return 'Access is denied'.
UEFI boot relies on files stored inside a dedicated FAT32 EFI System Partition (ESP) rather than an MBR boot sector.
2
Mount the EFI System Partition using `diskpart` in WinRE
Select the system disk, select the hidden FAT32 partition (ESP), and execute `assign letter=S:` (or another available volume letter).
Assigning a drive letter makes the hidden ESP accessible to command-line repair utilities.
3
Recreate the EFI boot environment using `bcdboot`
Execute `bcdboot C:\Windows /s S: /f UEFI` to copy fresh boot files to the ESP and generate new BCD boot entries.
The `bcdboot` utility compiles all essential UEFI boot configuration data required to initialize Windows from a GPT drive.

Anahtar Kavram

Troubleshooting UEFI/GPT Windows Boot File Corruption via BCDBoot and Diskpart
Tahmini Süre:2m 30s
Soru 2559Soru →

A graphics rendering application on a Windows 11 workstation periodically freezes and crashes during large batch renders. A technician monitors the system during a render job and notes the following metrics: Physical RAM utilization reaches 98%, Resource Monitor displays sustained Hard Faults/sec exceeding 600/sec, system drive C: has less than 250 MB of free storage remaining, and System Event Viewer logs repeatedly record Event ID 2004 (Resource-Exhaustion-Detector). Which TWO of the following troubleshooting steps should the technician take to resolve the root causes of the application crashes and system unresponsiveness? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Free disk space on drive C: or expand its storage volume to allow the dynamic virtual memory paging file (pagefile.sys) to expand properly.; Increase the physical RAM installed in the workstation to accommodate the rendering workload and reduce excessive hard page faults.

Cevap

The technician should free disk space on drive C: to ensure pagefile expansion and install additional physical RAM to mitigate severe page faulting.
The combination of 98% RAM utilization, high hard fault counts, and Event ID 2004 signifies severe memory depletion. Windows relies on the pagefile (pagefile.sys) on the C: drive for virtual memory expansion. Because the C: drive has less than 250 MB free, the pagefile cannot grow, triggering application crashes. Freeing disk space allows virtual memory allocation to function properly. Furthermore, adding physical RAM addresses the root hardware limitation, reducing the reliance on disk paging and eliminating high hard fault rates.

Adım Adım Çözüm

1
Analyze diagnostic telemetry metrics from Resource Monitor and Event Viewer.
Identified 98% RAM saturation, >600 hard faults/sec, Event ID 2004 (virtual memory exhaustion), and C: drive space critically low (<250 MB).
Event ID 2004 paired with low disk space indicates the system cannot expand pagefile.sys to handle memory demands.
2
Remediate virtual memory paging constraints.
Clearing space on drive C: allows Windows to allocate and expand the paging file as virtual memory.
Without sufficient free disk space, virtual memory manager allocation requests fail, forcing application crashes.
3
Remediate physical hardware bottlenecks.
Adding physical RAM reduces the need for constant memory swapping (hard faults).
Hard faults occur when data requested by an application is not in RAM and must be retrieved from disk; more RAM keeps active rendering data in memory.

Anahtar Kavram

Troubleshooting Windows Virtual Memory Exhaustion and RAM Bottlenecks
Tahmini Süre:2m 0s
Soru 2560Soru →

A technician is inventorying motherboard connections while assembling a custom computer system. Match each motherboard internal connector or header to its correct functional description.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

24-pin ATX Main Connector
8-pin EPS12V Connector
USB 3.2 Gen 2 (Type-E) Header
Front Panel System Header

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The 24-pin ATX Main Connector matches with delivering primary multi-rail DC power (+3.3V, +5V, +12V) to motherboard logic circuits. The 8-pin EPS12V Connector matches with supplying dedicated +12V power directly to the CPU VRM. The USB 3.2 Gen 2 (Type-E) Header matches with connecting chassis front-panel USB Type-C ports up to 10 Gbps. The Front Panel System Header matches with connecting chassis wiring for switches and LEDs.
Each motherboard internal connector has a specific role: the 24-pin ATX connector delivers main power to motherboard components; the 8-pin EPS12V connector delivers dedicated +12V power to the CPU; the USB 3.2 Gen 2 Type-E header drives chassis USB-C front ports; and the front panel system header links chassis switches and activity LEDs.

Adım Adım Çözüm

1
Distinguish between main motherboard power and CPU-specific power connectors.
The 24-pin ATX connector supplies overall motherboard logic and bus power (+3.3V, +5V, +12V), while the 8-pin EPS12V supplies dedicated +12V power for the CPU VRM.
Modern CPUs consume substantial power requiring dedicated +12V power leads separate from main motherboard traces.
2
Identify high-speed internal peripheral data headers versus chassis control pin blocks.
The USB 3.2 Gen 2 Type-E header provides front-panel USB-C port connectivity, whereas the front panel system header uses individual pin pairs for power/reset switches and status LEDs.
Front-panel headers separate high-speed data throughput interfaces from basic low-voltage mechanical switches and diagnostic indicator LEDs.

Anahtar Kavram

Motherboard Power Connectors and Header Pinouts
ÖncekiSayfa 128 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin