Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 2561Soru →

A desktop computer fails to complete POST and continuously restarts every few seconds without displaying video or emitting audible beep codes. A technician suspects a memory installation or hardware issue. Which TWO of the following initial troubleshooting steps should the technician perform? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Test the motherboard using a single known-good memory module in the primary slot; Verify that all memory modules are firmly seated and the slot retention clips are locked

Cevap

The technician should test the motherboard using a single known-good memory module in the primary slot and verify that all memory modules are firmly seated and the slot retention clips are locked.
Verifying physical memory seating and performing single-module testing with known-good hardware are standard hardware isolation procedures to resolve POST reboot loops caused by faulty or unseated RAM.

Adım Adım Çözüm

1
Check physical seating of memory modules
Ensures electrical pin connectivity with the motherboard socket.
Unseated or loose memory modules prevent the motherboard from completing POST, often causing continuous reboot loops.
2
Perform single-module testing with known-good RAM
Determines if one specific memory module or slot is defective.
Testing with one known-good module simplifies hardware isolation before checking secondary slots or modules.

Anahtar Kavram

Initial Hardware Diagnostics for RAM and POST Failure Isolation
Soru 2562Soru →

A Windows 11 workstation running a legacy inventory application experiences frequent crashes upon startup. A CompTIA A+ technician reviews the Windows Logs in Event Viewer and identifies an Application Error entry with Event ID 1000. The log details specify a faulting module path of C:\Windows\System32\msvcp140.dll and an exception code of 0xc0000005 (Access Violation). Which of the following actions should the technician perform first to resolve the application crash?

Cevabı ve açıklamayı göster

Cevap: Repair or reinstall the Microsoft Visual C++ 2015-2022 Redistributable package on the workstation.

Cevap

Repair or reinstall the Microsoft Visual C++ 2015-2022 Redistributable package on the workstation.
The correct action is to repair or reinstall the Microsoft Visual C++ Redistributable package. In Event Viewer, Event ID 1000 combined with a faulting module of msvcp140.dll indicates that the application crashed because of a corrupted, missing, or incompatible C++ runtime library. Repairing the Redistributable package via Settings/Control Panel restores the proper DLL files without disrupting the operating system.

Adım Adım Çözüm

1
Analyze the Event Viewer Application Error log details.
Identified Event ID 1000, faulting module msvcp140.dll, and exception code 0xc0000005.
Event ID 1000 logs application crashes, and msvcp140.dll indicates a dependency on the C++ runtime environment.
2
Determine the underlying software component associated with the faulting module.
Recognized msvcp140.dll as a component of Microsoft Visual C++ Redistributable packages.
Applications compiled with C++ rely on shared redistributable DLL files in System32 to execute code properly.
3
Apply targeted remediation by repairing or reinstalling the redistributable package.
The missing or corrupted DLL is replaced, resolving the access violation crash without altering the operating system core.
Targeted package repair directly fixes the root cause identified in the crash log.

Anahtar Kavram

Troubleshooting Windows Application Crashes via Event Viewer Faulting Module Analysis
Tahmini Süre:1m 30s
Soru 2563Soru →

An enterprise logistics company hosts its routing calculation platform in a cloud environment. During morning dispatch periods, processing demands spike significantly, prompting the cloud infrastructure to automatically provision additional compute capacity to maintain performance. Once dispatch calculations complete, the system automatically decommissions the extra compute nodes. Which cloud characteristic does this operational deployment demonstrate?

Cevabı ve açıklamayı göster

Cevap: Rapid elasticity

Cevap

Rapid elasticity is demonstrated because computing resources are automatically provisioned and decommissioned in response to real-time workload fluctuations.
Rapid elasticity refers to the capability of a cloud system to automatically provision and release computing resources dynamically according to demand. Because the scenario describes compute nodes expanding automatically during peak dispatch surges and contracting when traffic normalizes, rapid elasticity is the characteristic demonstrated.

Adım Adım Çözüm

1
Analyze the workload requirement described in the scenario.
The infrastructure automatically provisions additional processing capacity during demand surges and releases that capacity when demand subsides.
Identifying automated allocation and release of computing resources pinpoints the cloud feature in use.
2
Map the observed infrastructure behavior to NIST cloud characteristics.
Automated expansion and contraction of compute nodes without manual intervention corresponds directly to rapid elasticity.
Rapid elasticity ensures application performance during workload spikes while preventing resource waste during baseline periods.

Anahtar Kavram

Rapid Elasticity
Soru 2564Soru →

A Windows 10 workstation fails to boot into the desktop environment and displays a blue screen stating that critical boot files are missing. A technician boots the system from Windows installation media to open the Windows Recovery Environment (WinRE). Which option under Advanced options should the technician select to automatically diagnose and fix boot file errors?

Cevabı ve açıklamayı göster

Cevap: Startup Repair

Cevap

Startup Repair
Startup Repair is the standard Windows Recovery Environment utility designed to automatically detect and repair missing or damaged boot files, BCD entries, and system partition boot records.

Adım Adım Çözüm

1
Boot the computer from Windows installation media and select Repair your computer to enter WinRE.
The Windows Recovery Environment menu opens.
WinRE provides access to recovery tools when the main OS cannot boot.
2
Navigate to Troubleshoot > Advanced options.
A menu of recovery utilities (Startup Repair, Startup Settings, Command Prompt, System Restore) is presented.
Locates the appropriate diagnostic tools.
3
Select Startup Repair.
The utility scans the disk for boot configuration and file issues, automatically attempting repairs.
Startup Repair is the automated built-in tool for resolving Windows startup and boot file issues.

Anahtar Kavram

Automated Windows Boot Repair via WinRE Startup Repair
Soru 2565Soru →

A technician is troubleshooting a Windows 11 workstation where a custom background processing service slowly degrades overall system performance over several hours of execution until the system becomes unresponsive. During performance monitoring, physical RAM utilization reaches 98%, and disk activity spikes significantly. The technician suspects that a memory leak in the service is consuming available RAM and forcing the operating system into heavy virtual memory paging. Which TWO of the following metrics or administrative tool views would best help the technician confirm this diagnosis? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Monitoring the Commit Charge and Private Working Set of the service process over time to verify continuous memory accumulation; Checking the Hard Faults/sec metric in Resource Monitor under the Memory tab to confirm RAM saturation is causing heavy page file access

Cevap

Monitoring the process's Commit Charge and Private Working Set over time, along with checking the Hard Faults/sec metric in Resource Monitor, confirms a memory leak and excessive virtual memory paging.
Monitoring process memory counters (Commit Charge and Private Working Set) shows continuous unreleased memory allocation typical of a memory leak. Inspecting Hard Faults/sec in Resource Monitor verifies that RAM exhaustion is causing heavy read/write activity to the page file on disk, leading to system slowness.

Adım Adım Çözüm

1
Analyze memory allocation metrics for the suspected process over time.
Confirm whether the process continuously increases its Private Working Set and Commit Charge without releasing memory.
A memory leak is characterized by unreleased RAM allocations that grow over the runtime of an application.
2
Examine system-wide memory thrashing indicators in Resource Monitor.
Observe high Hard Faults/sec under the Memory tab as physical RAM is exhausted.
When RAM fills completely, the OS actively swaps memory pages to disk (pagefile.sys), resulting in elevated hard fault counts and severe I/O degradation.

Anahtar Kavram

Identifying memory leaks and virtual memory paging using process memory counters and Hard Fault metrics.
Soru 2566Soru →

A desktop support technician is remediating an enterprise workstation experiencing severe browser hijacking, unexpected ad pop-ups, and forced website redirects. Place the following remediation steps in the correct order to resolve the browser compromise and verify system integrity.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of remediation is: First, isolate the workstation from the network. Second, terminate active browser processes via Task Manager. Third, remove rogue browser extensions and reset browser defaults. Fourth, check system proxy settings and the hosts file for unauthorized redirect rules. Fifth, run a full anti-malware scan and reconnect the network to verify system functionality.
The correct remediation sequence follows standard incident containment and malware removal procedures: first isolating the machine to stop malicious data transfer, stopping active processes to release file locks, clearing localized browser extensions and settings, auditing OS-level redirect mechanisms (hosts file and proxy settings), and finally scanning for secondary payloads while verifying clean connectivity.

Adım Adım Çözüm

1
Isolate the compromised system from the network.
Network communication between the host and malicious external servers is halted.
CompTIA best practices dictate containing the incident prior to active remediation.
2
Close malicious or frozen browser tasks using Task Manager.
Browser memory is freed and open lock handles on profile files are released.
Terminating processes stops ongoing pop-ups and allows profile resetting without file access conflicts.
3
Remove rogue extensions and perform a browser reset.
Adware addons, hijacked homepages, and altered search engines are removed.
Unwanted extensions are the primary vector for persistent browser redirects and ad injections.
4
Inspect Windows hosts file (C:\Windows\System32\drivers\etc\hosts) and system proxy settings.
System-wide redirect configurations and loopback/proxy hijack entries are identified and purged.
Hijackers frequently alter proxy settings or append malicious static IP mappings into the hosts file to maintain redirects across browsers.
5
Perform anti-malware scanning and functional verification.
Secondary payload components are removed and browser behavior is confirmed clean under active network conditions.
Final scanning ensures no rootkit or trojan dropper remains, while live testing confirms full resolution.

Anahtar Kavram

Browser Security and Hijack Remediation Workflow
Soru 2567Soru →

A systems administrator is planning the hardware provisioning for a hypervisor host system that will run two distinct workloads: 55 database virtual machines (VMs) allocated 8 GB8\text{ GB} of RAM each, and 1010 web server VMs allocated 2 GB2\text{ GB} of RAM each. The host hypervisor operating system requires 4 GB4\text{ GB} of dedicated physical RAM to operate, and the virtualization platform requires an additional 5%5\% of the total allocated guest RAM for management overhead. What is the minimum total host RAM, in GB\text{GB}, required to provision all VMs without memory overcommitment?

Cevabı ve açıklamayı göster

Cevap: 67

Cevap

The minimum total host RAM required is 67 GB67\text{ GB}.
To accurately provision a virtualization host without overcommitment, technicians must calculate the total memory assigned to guest VMs ((5×8 GB)+(10×2 GB)=60 GB(5 \times 8\text{ GB}) + (10 \times 2\text{ GB}) = 60\text{ GB}), calculate hypervisor overhead (5%5\% of 60 GB=3 GB60\text{ GB} = 3\text{ GB}), and include the host OS base requirement (4 GB4\text{ GB}). Adding these together (60 GB+3 GB+4 GB60\text{ GB} + 3\text{ GB} + 4\text{ GB}) yields a total of 67 GB67\text{ GB}.

Adım Adım Çözüm

1
Calculate the total RAM allocated to all guest virtual machines.
5×8 GB+10×2 GB=40 GB+20 GB=60 GB5 \times 8\text{ GB} + 10 \times 2\text{ GB} = 40\text{ GB} + 20\text{ GB} = 60\text{ GB}
Each virtual machine requires its assigned memory dedicated from the host pool.
2
Calculate the hypervisor management overhead based on total guest RAM.
5% of 60 GB=0.05×60 GB=3 GB5\% \text{ of } 60\text{ GB} = 0.05 \times 60\text{ GB} = 3\text{ GB}
Hypervisors consume additional system memory to track state, manage virtual hardware tables, and handle guest processes.
3
Sum guest RAM, hypervisor overhead, and dedicated host operating system RAM.
60 GB+3 GB+4 GB=67 GB60\text{ GB} + 3\text{ GB} + 4\text{ GB} = 67\text{ GB}
Combining guest requirements, overhead, and base host OS usage determines total physical host RAM needed to prevent performance degradation or overcommitment.

Anahtar Kavram

Virtual Machine Resource Requirements and Host RAM Capacity Planning
Soru 2568Soru →

A desktop support technician is configuring a newly deployed macOS laptop for an executive who frequently travels for business. According to company policy, all local user data stored on the laptop's internal drive must be encrypted at rest to protect sensitive information if the device is lost or stolen. Which of the following native macOS features should the technician enable to meet this security requirement?

Cevabı ve açıklamayı göster

Cevap: FileVault

Cevap

The technician should enable FileVault, which is the native full-disk encryption utility in macOS.
FileVault is the built-in full-disk encryption feature included with macOS. Enabling FileVault encrypts the entire startup drive to protect local files and system contents from unauthorized physical access.

Adım Adım Çözüm

1
Identify the administrative requirement in the scenario.
The requirement is to encrypt all data at rest on the internal macOS storage drive to prevent unauthorized access.
Security compliance requires data protection against physical loss or theft of the laptop.
2
Evaluate the native macOS storage and security tools available.
FileVault encrypts the entire startup volume using strong encryption standards.
FileVault secures the user's data by requiring authentication upon booting or waking the device.

Anahtar Kavram

macOS Security Features and Data Protection
Soru 2569Soru →

An IT technician at a regional freight logistics hub observes unauthorized file encryption and suspicious outbound network traffic on a dispatcher's Windows 11 workstation. The technician immediately disconnects the system from the network. Place the subsequent remediation steps in the correct order according to CompTIA's standard 7-step malware removal process.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order follows CompTIA's official 7-step malware removal process: 1. Disable System Restore in Windows, 2. Update anti-malware definition signatures, 3. Perform a full system anti-malware scan and remove detected threats, 4. Re-enable System Restore and create a clean restore point, 5. Educate the dispatcher on recognizing email phishing and security awareness.
CompTIA defines a strict 7-step malware remediation procedure: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems (a. Update anti-malware software/signatures, b. Scan and use removal techniques), 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, and 7. Educate the end user. Since the scenario states the malware has been identified and isolated (Steps 1 & 2), the correct subsequent sequence begins with disabling System Restore, updating signatures, scanning and removing threats, re-enabling System Restore to create a clean restore point, and concluding with end-user training.

Adım Adım Çözüm

1
Analyze initial condition
The threat has been identified (Step 1) and isolated/quarantined from the network (Step 2).
The next required action in sequence is Step 3: Disable System Restore.
2
Disable System Restore (Step 3)
System Restore and shadow copies are turned off.
Prevents malware files from being saved into system restore snapshots during cleanup.
3
Remediate - Update signatures (Step 4a)
Definition files are updated to current versions.
Ensures the scanner has the most up-to-date detection logic.
4
Remediate - Scan and isolate/remove (Step 4b)
Infected system files are cleaned or deleted.
Removes active malware components from the system.
5
Re-enable System Restore and create restore point (Step 6)
System protection is re-engaged with a clean state snapshot.
Establishes a healthy baseline post-remediation.
6
Educate the end user (Step 7)
Dispatcher receives security training.
Completes the process by reinforcing preventive behavior.

Anahtar Kavram

CompTIA 7-Step Malware Removal Process
Soru 2570Soru →

A system administrator for a regional healthcare provider is reviewing cloud deployment features. Match each scenario on the left with the NIST cloud computing characteristic on the right that best describes it.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A patient records system dynamically adjusts compute resources up or down automatically during high-volume clinic hours without administrative delay.
Multiple clinical departments access data hosted on shared physical hardware server racks where storage and memory are dynamically reassigned based on demand.
A medical research team provisions new testing virtual machines using a cloud administration panel without submitting an IT ticket or requiring human provider intervention.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Rapid Elasticity matches automatic resource scaling according to real-time demand; Resource Pooling matches shared physical infrastructure dynamically allocated across tenants; On-Demand Self-Service matches user self-provisioning via portal without administrative interaction.
Rapid elasticity allows systems to expand and contract automatically based on workload. Resource pooling aggregates multi-tenant resources on shared hardware. On-demand self-service permits users to deploy resources independently through automated web dashboards.

Adım Adım Çözüm

1
Analyze the patient records system scenario that scales automatically up and down during workload surges.
Matched to Rapid Elasticity.
Rapid elasticity refers to the automated provisioning and deprovisioning of cloud capacity in real-time.
2
Analyze the clinical departments sharing physical hardware resources allocated dynamically.
Matched to Resource Pooling.
Resource pooling aggregates physical computing resources to serve multiple consumers in a multi-tenant model.
3
Analyze the medical research team independently provisioning server capacity through a portal.
Matched to On-Demand Self-Service.
On-demand self-service allows users to request and deploy cloud services automatically without interacting with cloud support staff.

Anahtar Kavram

Cloud Characteristics and Features (Elasticity, On-Demand, Resource Pooling)
Soru 2571Soru →

An IT technician is configuring dedicated handheld barcode scanners running a customized Android OS for use in a manufacturing warehouse. Warehouse workers have been downloading and installing unauthorized third-party applications directly via APK files using the embedded web browser. The technician needs to prevent users from installing unvetted software while maintaining centralized administrative control. Which of the following policies should the technician enforce?

Cevabı ve açıklamayı göster

Cevap: Disable installation of applications from unknown sources (sideloading)

Cevap

Disable installation of applications from unknown sources (sideloading)
Disabling application installations from unknown sources (sideloading) prevents users from executing manual APK files downloaded from third-party websites or web browsers, ensuring only vetted applications managed by IT can be installed.

Adım Adım Çözüm

1
Analyze the problem scenario
Identify that warehouse users are manually downloading APK files via web browsers and executing them to bypass standard app store controls.
Installing apps directly from unofficial sources outside managed app stores is known as sideloading.
2
Evaluate the appropriate Mobile Device Management (MDM) endpoint control
Determine that disabling the 'Unknown Sources' setting via MDM policy blocks execution and installation of third-party APK packages.
This policy restriction enforces application vetting and limits installation exclusively to administrator-approved repositories.

Anahtar Kavram

Mobile Device Management (MDM) Sideloading Restrictions
Soru 2572Soru →

A network administrator is configuring security policies for corporate Windows 11 Pro workstations. To mitigate the risk of users attempting unauthorized software installations, the administrator wants standard user accounts to be completely restricted from receiving credential prompt pop-ups when elevation is requested; instead, all elevation requests from standard users must fail automatically. Which User Account Control (UAC) security policy setting should be modified in Local Security Policy?

Cevabı ve açıklamayı göster

Cevap: User Account Control: Behavior of the elevation prompt for standard users — set to Automatically deny elevation requests

Cevap

Configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' in Local Security Policy.
Setting 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' enforces a strict policy where standard user accounts cannot elevate privileges or be presented with a credential prompt dialog, immediately failing any process requiring administrative rights.

Adım Adım Çözüm

1
Identify the target requirement.
Standard user accounts must be prevented from seeing credential prompts and have elevation requests denied automatically.
The administrator wishes to eliminate helpdesk friction and prevent unauthorized administrative attempts by standard users.
2
Open Local Security Policy (secpol.msc) and navigate to Security Settings > Local Policies > Security Options.
Access the granular User Account Control policy options.
UAC behavior settings are managed centrally via Security Options in Windows Professional, Enterprise, and Education editions.
3
Locate 'User Account Control: Behavior of the elevation prompt for standard users' and change its value to 'Automatically deny elevation requests'.
Elevation requests initiated by standard users fail silently or with an automatic access denied notification without showing a password entry dialog.
This policy directly controls standard user UAC elevation behavior.

Anahtar Kavram

User Account Control Elevation Behavior Policies for Standard Users
Soru 2573Soru →

Match each wireless security implementation or authentication component on the left with its defining operational mechanism or technical requirement on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

WPA3-Personal
EAP-TLS
RADIUS Server
Captive Portal

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

WPA3-Personal matches with Simultaneous Authentication of Equals (SAE); EAP-TLS matches with mutual certificate authentication; RADIUS Server matches with centralized AAA 802.1X validation; Captive Portal matches with guest web page redirection.
WPA3-Personal uses Simultaneous Authentication of Equals (SAE) for robust password-based authentication. EAP-TLS delivers strong mutual authentication using digital certificates on both the RADIUS server and client devices. A RADIUS server acts as a centralized AAA service verifying 802.1X user credentials against active directory or database services. A Captive Portal intercepts HTTP traffic to present terms or web login screens to guest users.

Adım Adım Çözüm

1
Identify the key security mechanism of WPA3-Personal.
Recognize that WPA3-Personal utilizes Simultaneous Authentication of Equals (SAE) to prevent offline brute-force attacks.
SAE replaces traditional PSK four-way handshakes with Dragonfly key exchange.
2
Determine the certificate requirements for EAP-TLS.
Identify that EAP-TLS enforces mutual authentication using PKI certificates on both endpoints.
Unlike PEAP or EAP-TTLS, EAP-TLS mandates client-side X.509 certificates in addition to server certificates.
3
Identify the infrastructure role of a RADIUS server.
Associate RADIUS with backend centralized AAA validation in an 802.1X wireless architecture.
Wireless access points act as authenticators and delegate user authentication to the RADIUS server.
4
Analyze the purpose of a Captive Portal.
Associate Captive Portals with HTTP/HTTPS session redirection for guest access management.
It forces unauthenticated web traffic to a portal landing page prior to authorizing outbound network access.

Anahtar Kavram

Wireless Authentication Protocols and Access Control Components
Soru 2574Soru →

A technician is assembling a desktop computer and has connected the 24-pin ATX power cable from the power supply unit to the motherboard. When the power button is pressed, the internal LEDs light up and the cooling fans spin, but the system fails to complete POST and provides no power to the processor. Which of the following power connections did the technician most likely omit?

Cevabı ve açıklamayı göster

Cevap: The 4-pin or 8-pin EPS12V / CPU power connector located near the CPU socket

Cevap

The 4-pin or 8-pin EPS12V / CPU power connector located near the CPU socket
The correct option is the choice specifying the 4-pin or 8-pin EPS12V connector. Modern motherboards require a separate 4-pin or 8-pin power connection located near the processor socket to power the CPU voltage regulator circuits. Connecting only the 24-pin main ATX power cable provides power to board components and cooling fans, but leaves the processor unpowered, causing POST to fail.

Adım Adım Çözüm

1
Analyze the reported system symptoms
System receives baseline power (LEDs and fans turn on via the 24-pin main ATX connection), but CPU does not initialize and POST fails.
The 24-pin ATX connector supplies power to motherboard circuitry, RAM, and PCIe slots, but modern CPUs require a dedicated power source.
2
Identify the missing required motherboard connector
Identify the 4/8-pin EPS12V auxiliary CPU power connector.
The EPS12V (or ATX12V) connector provides dedicated +12V lines specifically for the CPU voltage regulator module (VRM).

Anahtar Kavram

Motherboard Power Connectors and CPU Power Requirements
Soru 2575Soru →

A technician replaces a faulty power supply in a desktop workstation. After connecting the 24-pin main ATX power connector to the motherboard and powering on the system, the case LEDs light up briefly, but the computer does not POST and the CPU fan fails to spin. Which of the following is the most likely reason for this failure?

Cevabı ve açıklamayı göster

Cevap: The 4-pin/8-pin EPS12V CPU power cable was not connected to the motherboard.

Cevap

The 4-pin/8-pin EPS12V CPU power cable was not connected to the motherboard.
Modern CPUs require dedicated power provided by an auxiliary 4-pin or 8-pin ATX12V/EPS12V connector. Connecting only the 24-pin main power connector provides standby power to motherboard LEDs, but leaves the CPU completely unpowered, preventing the CPU fan from spinning and preventing POST.

Adım Adım Çözüm

1
Identify system power requirements
Recognize that desktop motherboards require both the main 24-pin ATX power connector and an auxiliary 4/8-pin CPU power connector.
The processor draws power from dedicated motherboard VRMs powered by the auxiliary EPS12V/ATX12V connector.
2
Analyze reported symptoms
Main 24-pin power delivers standby voltage to case LEDs, but the processor receives no power.
Without auxiliary CPU power, the CPU remains unpowered, halting POST and keeping CPU fan headers disabled.
3
Determine corrective action
Plug the auxiliary 4-pin or 8-pin power cable from the power supply into the CPU power header on the motherboard.
Connecting all required power leads restores complete power delivery to the system.

Anahtar Kavram

CPU Auxiliary Power Connection
Soru 2576Soru →

A desktop computer running Windows 10 on a legacy Master Boot Record (MBR) partitioned system drive fails to start following a sudden power outage. Immediately after the Power-On Self-Test (POST), the system halts and displays a black screen with the message 'Invalid partition table'. The hard drive is correctly identified in the system Firmware/BIOS settings, but the operating system fails to initialize. A technician boots the machine using Windows 10 installation media and opens the Command Prompt within the Windows Recovery Environment (WinRE). Which of the following commands should the technician execute to repair the master boot code and rewrite the partition boot sector? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: bootrec /fixmbr; bootrec /fixboot

Cevap

The technician should execute 'bootrec /fixmbr' and 'bootrec /fixboot' to repair the Master Boot Record and write a clean boot sector to the system partition.
The 'Invalid partition table' error at POST indicates corrupt bootloader instructions in the Master Boot Record or volume boot sector on legacy MBR disks. Running 'bootrec /fixmbr' repairs the master boot code, and running 'bootrec /fixboot' writes a compliant volume boot sector to ensure the OS bootloader can start.

Adım Adım Çözüm

1
Diagnose the boot failure stage and error message.
The 'Invalid partition table' error occurring immediately after POST on an MBR disk indicates corrupt boot code in the Master Boot Record or damaged volume boot sector code.
Identifying that the error occurs prior to OS initialization isolates the issue to low-level disk boot structures rather than system files or BCD entries.
2
Execute 'bootrec /fixmbr' in the WinRE Command Prompt.
The Master Boot Record is updated with valid master boot code compatible with Windows 10.
This repairs damaged or missing MBR code caused by power loss without disrupting the partition entries.
3
Execute 'bootrec /fixboot' in the WinRE Command Prompt.
A fresh boot sector compatible with the system partition is written.
This ensures the volume boot code can properly locate and initiate the Windows Boot Manager (BOOTMGR).

Anahtar Kavram

Legacy MBR and Boot Sector Repair via WinRE Bootrec
Soru 2577Soru →

A technician is troubleshooting a legacy BIOS system that fails to start due to corrupted boot files and a missing boot configuration. Place the WinRE command-line recovery steps in the correct chronological order to repair the boot infrastructure using the bootrec tool.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order starts by booting into WinRE Command Prompt, followed by running bootrec /fixmbr, then bootrec /fixboot, then bootrec /scanos, and concluding with bootrec /rebuildbcd.
Troubleshooting begins by accessing WinRE Command Prompt. Next, repairing disk MBR code (bootrec /fixmbr) and partition boot sector code (bootrec /fixboot) restores critical low-level boot loaders. Scanning for OS installations (bootrec /scanos) detects existing Windows installations. Finally, rebuilding the Boot Configuration Data (bootrec /rebuildbcd) incorporates those installations into a fresh startup configuration.

Adım Adım Çözüm

1
Boot into Windows Recovery Environment (WinRE) Command Prompt.
Access to offline boot repair tools is established.
Boot repair utilities must be executed in an offline environment when the main OS fails to launch.
2
Run bootrec /fixmbr to restore the MBR.
Master Boot Record code is updated on the primary partition table.
Restoring the MBR fixes disk-level boot loader corruption necessary for initial system handoff.
3
Run bootrec /fixboot to restore the partition boot sector.
A new partition boot sector compatible with Windows Boot Manager is written.
The partition boot sector hands off execution control from the MBR to bootmgr.
4
Run bootrec /scanos to locate installed operating systems.
All compatible Windows installations missing from the current BCD are detected.
Scanning locates OS installations required to rebuild the BCD configuration.
5
Run bootrec /rebuildbcd to regenerate the Boot Configuration Data file.
The BCD store is fully restored with valid OS startup parameters.
Rebuilding BCD allows Windows Boot Manager to present and load the operating system upon reboot.

Anahtar Kavram

Windows Bootrec Diagnostic and Repair Sequence
Soru 2578Soru →

A technician is troubleshooting a Windows 11 workstation where a custom line-of-business application, DBReport.exeDBReport.exe, becomes completely unresponsive whenever a user initiates a heavy data export. To investigate the hang, the technician opens Resource Monitor, navigates to the CPU tab, right-clicks DBReport.exeDBReport.exe (PID 5240)(PID\ 5240), and selects Analyze Wait Chain. The Wait Chain Traversal window indicates that DBReport.exeDBReport.exe is waiting for thread response from spoolsv.exespoolsv.exe (PID 1420)(PID\ 1420). Which of the following is the most appropriate next action to isolate and resolve the application freeze without restarting the workstation?

Cevabı ve açıklamayı göster

Cevap: Terminate or restart the blocking process (spoolsv.exespoolsv.exe) to clear the deadlock condition.

Cevap

Terminate or restart the blocking process (spoolsv.exe) to clear the deadlock condition.
Analyzing the Wait Chain in Resource Monitor shows precisely which process thread is causing an application to freeze. When an application is waiting on a unresponsive secondary process (like spoolsv.exe), ending or restarting that specific blocking process frees the hung application threads without destroying un-saved application data or requiring a full system reboot.

Adım Adım Çözüm

1
Analyze the Resource Monitor Wait Chain results
Identified that DBReport.exe (PID 5240) is blocked waiting for spoolsv.exe (PID 1420).
Wait Chain Traversal reveals thread dependencies and pinpoints which specific process holds the locks blocking execution.
2
Determine the appropriate targeted remediation action
Target spoolsv.exe (the Print Spooler service) for termination or service restart.
Ending or restarting the blocking process releases the lock held on shared system threads, resolving the hang without forcing a system reboot.

Anahtar Kavram

Resource Monitor Wait Chain Traversal and Process Deadlock Isolation
Soru 2579Soru →

A user reports that an accounting application on a Windows 11 workstation frequently crashes during peak business hours. The user mentions that the issue began earlier in the week, but cannot recall the exact date. A technician needs to inspect a day-by-day visual timeline displaying a stability index alongside correlated events such as application failures, system updates, and driver installations. Which of the following tools should the technician use?

Cevabı ve açıklamayı göster

Cevap: Reliability Monitor

Cevap

Reliability Monitor is the correct tool because it generates a chronological line graph (System Stability Index) correlating application failures with software updates and hardware changes over time.
Reliability Monitor (perfmon /rel) is specifically designed to provide a historical overview of system stability. It charts a daily Stability Index rating and groups events into categories such as Application failures, Windows failures, Miscellaneous failures, Warnings, and Information (such as software and driver installations), making it easy to spot correlations between a crash trend and a recent update.

Adım Adım Çözüm

1
Identify the diagnostic requirement
The technician needs a tool that maps application crash history visually over time alongside system modification events like updates and driver installations.
Correlating the onset of crashes with recent system changes is essential to identifying root causes without reviewing raw event logs manually.
2
Evaluate Windows Administrative Tools
Reliability Monitor (accessible via perfmon /rel or Security and Maintenance) presents a daily stability graph rated from 1 to 10 with categorised icons for crashes, updates, and warnings.
Reliability Monitor synthesises event log data into a user-friendly timeline specifically designed to track system stability trends.

Anahtar Kavram

Using Reliability Monitor to correlate application crash trends with system changes and updates.
Soru 2580Soru →

A Windows 11 workstation hosting an analytics database client experiences severe system unresponsiveness and application freezes during large dataset exports. A technician analyzes Resource Monitor and observes that the Average Disk Queue Length on the system volume continuously exceeds 14, Disk Active Time remains at 100%, and memory utilization reaches 95% with high Page Faults/sec. Windows System logs display Event ID 2004 (Resource-Exhaustion-Detector), indicating that the system low virtual memory threshold was reached because the pagefile size was manually pinned to a small static limit. Which TWO of the following actions should the technician perform to diagnose and resolve this performance issue?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Modify the Virtual Memory performance settings in System Properties to enable system-managed paging file size on the primary drive.; Use Task Manager or Performance Monitor to identify and terminate or reconfigure the specific application process causing excessive committed memory usage.

Cevap

The technician should adjust the Virtual Memory configuration to automatically manage the paging file size and use Task Manager or Performance Monitor to locate and isolate the application process driving high memory commit charge.
Event ID 2004 (Resource-Exhaustion-Detector) alongside high disk queue length and 100% active disk time signifies severe disk thrashing caused by memory pagination constraints. Allowing Windows to automatically manage the pagefile size removes the artificial memory ceiling. Concurrently, using Task Manager or Performance Monitor allows the technician to locate and address the specific process responsible for the high commit charge.

Adım Adım Çözüm

1
Analyze system telemetry and event logs.
High Average Disk Queue Length combined with high Page Faults/sec and Event ID 2004 indicates that physical RAM is exhausted and the static pagefile is preventing virtual memory expansion, causing disk thrashing.
When RAM and the pagefile fill up completely, Windows cannot fulfill memory commit requests, leading to application freezes and severe disk I/O bottlenecks.
2
Adjust Virtual Memory configuration in Windows System Properties.
Setting the paging file size to system-managed allows Windows to allocate sufficient disk space dynamically as memory commit demand increases.
This prevents virtual memory exhaustion errors and relieves disk queue bottlenecks.
3
Identify resource-heavy processes using performance analysis tools.
Checking Task Manager (Details tab) or Performance Monitor isolates the specific analytics thread or application leak responsible for consuming system memory.
Isolating the culprit process allows targeted remediation such as restarting the service, updating the application, or adjusting batch processing settings.

Anahtar Kavram

Windows Virtual Memory and Pagefile Management under Resource Exhaustion (Event ID 2004)
ÖncekiSayfa 129 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin