Tüm alıştırma soruları

A workstation operating in a clinical laboratory was disconnected from the network after exhibiting persistent rogue browser redirects and unauthorized background network traffic. The technician has confirmed the malware infection and completed the isolation step. According to standard CompTIA malware removal procedures, which of the following actions should the technician perform prior to running a full anti-malware system scan? (Select TWO.)

A technician boots a UEFI-based Windows 11 computer into the Windows Recovery Environment (WinRE) command prompt to resolve a boot error caused by a corrupted Boot Configuration Data (BCD) store. Place the recovery steps in the correct chronological sequence to assign a drive letter to the EFI System Partition (ESP) and rebuild the boot files.

A cybersecurity specialist is configuring a virtual machine (VM) to serve as a malware analysis sandbox. To satisfy security policies, the VM must be able to send telemetry logs to a second virtual machine residing on the same hypervisor host, but it must be completely isolated from the host operating system itself and blocked from all external physical network communication. Which virtual network adapter configuration should be implemented?

A cybersecurity technician is dispatched to address a suspected malware outbreak on several Windows workstations controlling automated sorting equipment in a pharmaceutical distribution center. The systems are exhibiting severe performance degradation, unusual background network traffic, and rogue process executions. To strictly adhere to the standard CompTIA 7-step malware removal procedure, which of the following preliminary steps MUST be completed before executing anti-malware remediation scans on these systems? (Select TWO.)

A workstation user reports that a specialized reporting tool repeatedly locks up and stops responding without throwing an explicit error message whenever a batch process runs. A technician opens Resource Monitor to investigate the unresponsive application process. Which feature within Resource Monitor should the technician use first to determine whether the application is waiting on another process or locked resource?

An IT technician is configuring public-facing check-in terminals in a healthcare facility lobby. The terminals run Windows 11 and use a restricted local user account. The technician needs to prevent unauthorized software from automatically executing whenever a visitor connects an external flash drive to one of the terminals. Which of the following configurations best achieves this hardening goal?

A user reports that after a sudden power outage, their legacy MBR-based Windows 10 computer fails to start and displays the message 'BOOTMGR is missing'. The technician boots the system using Windows installation media and accesses the Command Prompt in the Windows Recovery Environment (WinRE). Which command should the technician execute first to restore the Master Boot Record boot code?

An IT support technician at a hotel reception network center is troubleshooting a Windows workstation affected by keylogger malware. The technician has confirmed the infection, isolated the machine from the network, and disabled System Restore. Which of the following actions should the technician perform NEXT according to the CompTIA standard 7-step malware remediation process?

An IT technician is building a multi-VM malware sandbox on a local workstation hypervisor. The guest virtual machines must be able to communicate with each other to test network-based malware propagation, but they must be completely isolated from both the host operating system and the physical corporate network. Additionally, the technician must minimize the risk of host compromise due to VM escape vulnerabilities. Which TWO of the following configurations or security practices should the technician implement to satisfy these requirements? (Select TWO)

A technician is troubleshooting an enterprise accounting application that periodically freezes and crashes on a Windows 11 workstation. Arrange the troubleshooting steps in the correct order to systematically identify and isolate the root cause of the application crash.

A security technician is developing an image baseline for mobile laptops used by traveling consultants. To protect systems against local privilege escalation and automated malware execution from untrusted removable drives, which TWO workstation hardening measures should the technician enforce?

A technician is troubleshooting a UEFI-based Windows 11 desktop computer that fails to boot following an sudden power disruption. The boot screen displays the error message: 'The Boot Configuration Data for your PC is missing or contains errors.' The technician boots into the Windows Recovery Environment (WinRE) Command Prompt to manually reconstruct the boot files on the hidden EFI System Partition (ESP). Which TWO steps should the technician perform to successfully repair the system bootloader? (Select TWO.)

A systems administrator is setting up a virtualized staging environment on a workstation host to test multi-tier applications. The guest virtual machines must communicate with each other to simulate client-server traffic, but security policy requires complete isolation so that the virtual machines cannot communicate with the host operating system or access the external physical network. Which virtual network adapter configuration should the administrator select?

A cybersecurity technician at a automated logistics fulfillment hub is responding to a suspected malware infection on a inventory management workstation. Place the following remediation steps in the exact order required by the standard CompTIA malware removal procedure.

An IT technician is configuring network adapters and security isolation rules for several virtual machines running on a desktop hypervisor. Match each virtual network configuration mode to the operational scenario or connectivity requirement that best describes its traffic profile.

A user reports that a specialized vector illustration software repeatedly crashes immediately after splash screen initialization on a Windows 11 workstation. The technician checks Reliability Monitor and identifies multiple critical APPCRASH events linked to a newly updated third-party overlay service and corrupted local user settings files. Which of the following actions should the technician take to isolate and resolve this issue? (Select TWO.)

Match each workstation security hardening control on the left with its corresponding primary risk mitigation objective on the right.

A technician is troubleshooting a Windows 11 workstation where a database query utility unexpectedly closes while generating large analytical reports. Performance Monitor reveals that disk activity on the system drive is sustained at 100%, and the Average Disk Queue Length consistently exceeds 10 during the query execution, despite available physical RAM. Further inspection shows that the virtual memory paging file size was manually fixed to a minimum and maximum of 512 MB. Which of the following actions should the technician take first to resolve the application crashes?

A desktop technician at a biotechnology research facility is responding to a Windows workstation infected with trojan malware. The technician has confirmed the infection, isolated the computer from the local network, and disabled System Restore. Which of the following actions should the technician perform NEXT in accordance with the standard CompTIA malware remediation process?

An IT technician is hardening standalone Windows desktops used in a shared laboratory environment. To minimize the system's vulnerability to unauthorized network-based administrative access and remote configuration changes, the technician needs to disable non-essential background services. Which of the following services should be disabled to prevent remote users from modifying the system registry over the network?