Tüm alıştırma soruları

3551 soru

Soru 941Soru

A desktop user reports that their computer has recently become very slow to boot and makes repetitive clicking noises during disk access. Upon inspecting the system with a diagnostic utility, a technician observes a S.M.A.R.T. attribute alert indicating an unrecoverable self-test failure and a high count of reallocated sectors on the primary mechanical hard drive. What is the MOST appropriate immediate action the technician should take?

Cevabı ve açıklamayı göster

Cevap: Perform an immediate backup of critical data from the drive and prepare a replacement drive.

Cevap

Perform an immediate backup of critical data from the drive and prepare a replacement drive.
Loud repetitive clicking noises (often referred to as the 'click of death') signal physical failure of the drive's read/write head assembly or drive motor. Coupled with S.M.A.R.T. self-test warnings regarding reallocated sectors, complete drive failure is imminent. The primary immediate response must be securing a verified backup of critical data while the drive remains partially accessible, followed by drive replacement.

Adım Adım Çözüm

1
Analyze symptoms and diagnostic output
Repetitive clicking noises (click of death) and high S.M.A.R.T. reallocated sector counts confirm physical mechanical drive failure.
S.M.A.R.T. warnings combined with acoustic anomalies indicate that complete disk crash is imminent.
2
Determine the highest priority troubleshooting step
Backing up user data to an external location or network storage takes precedence before taking the system offline.
Any intense software operations or delay could cause total media collapse, permanently locking out data access.
3
Formulate remediation plan
Replace the failing mechanical hard drive with a healthy storage drive and restore the backed-up data.
Physical drive defects cannot be fixed via software maintenance.

Anahtar Kavram

Recognizing Hard Drive Mechanical Failure Symptoms and S.M.A.R.T. Errors
Soru 942Soru

Match each organizational requirement scenario on the left with the minimum Windows 11 edition on the right that satisfies all listed feature and hardware requirements.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Requires joining an Active Directory domain, encrypting local storage with BitLocker, and accepting inbound Remote Desktop Protocol (RDP) connections, but does not require enterprise deployment features like AppLocker.
Requires system hardware support for 4 physical CPU sockets, persistent memory (NVDIMM-N) modules, and advanced ReFS volume creation.
Requires corporate security management capabilities including AppLocker application control policies, BranchCache WAN bandwidth optimization, and Credential Guard.
Used for general office productivity, but natively lacks access to the Local Group Policy Editor (gpedit.msc), Domain Join, and inbound RDP server hosting.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Matching assignments: Domain Join, BitLocker, & RDP host -> Windows 11 Pro; 4 physical CPUs, ReFS, & NVDIMM-N -> Windows 11 Pro for Workstations; AppLocker, BranchCache, & Credential Guard -> Windows 11 Enterprise; Lacks Local Group Policy & Domain Join -> Windows 11 Home.
Each operational requirement correlates to the minimum edition threshold defined by Microsoft based on security capabilities, management utilities, and hardware upper limits.

Adım Adım Çözüm

1
Evaluate standard business management requirements.
Features like Domain Join, BitLocker, and RDP hosting require at minimum Windows 11 Pro.
Windows 11 Home does not include domain management or encryption features.
2
Evaluate advanced hardware socket and storage architecture requirements.
Support for 4 physical CPUs, NVDIMM-N memory, and ReFS requires Windows 11 Pro for Workstations.
Standard Windows 11 Pro supports a maximum of 2 physical CPU sockets.
3
Identify enterprise-grade security and policy enforcement requirements.
AppLocker, BranchCache, and Credential Guard require Windows 11 Enterprise.
These advanced management features are restricted to Enterprise and Education editions.
4
Determine consumer edition feature restrictions.
The absence of Local Group Policy Editor (gpedit.msc) and inbound RDP hosting signifies Windows 11 Home.
Windows 11 Home focuses on basic consumer operations and lacks enterprise administration tools.

Anahtar Kavram

Windows 11 Edition Feature and Hardware Boundaries
Soru 943Soru

A systems administrator is setting up a corporate smartphone for a remote user. The cellular network provider requires the unique 15-digit physical hardware number tied directly to the phone's mobile device chassis and baseband radio to provision network access, independently of the subscriber's SIM card. Which of the following identifiers should the administrator provide?

Cevabı ve açıklamayı göster

Cevap: International Mobile Equipment Identity (IMEI)

Cevap

The administrator should provide the International Mobile Equipment Identity (IMEI).
The International Mobile Equipment Identity (IMEI) is a unique 15-digit code used by cellular networks to identify valid physical mobile devices. It is permanently burned into the device radio hardware and remains constant regardless of which SIM card is inserted.

Adım Adım Çözüm

1
Identify the requirement in the scenario.
The cellular carrier requires a unique hardware-level 15-digit identifier associated with the physical mobile device chassis.
Hardware tracking on cellular networks relies on physical equipment identity numbers.
2
Differentiate between cellular equipment identifiers and subscriber identifiers.
The International Mobile Equipment Identity (IMEI) identifies the physical hardware, whereas the International Mobile Subscriber Identity (IMSI) identifies the subscriber account bound to the SIM card.
Understanding the distinction prevents registering subscriber data when hardware provisioning is required.

Anahtar Kavram

Mobile Device Cellular Hardware Identification (IMEI vs. IMSI)
Soru 944Soru

A cybersecurity technician is designing a physical security baseline for an enterprise datacenter facility and employee workstations. Match each physical security control to the specific threat or unauthorized physical security risk it is engineered to prevent.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Faraday cage
Mantrap
Privacy filter
Cable lock

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Faraday cage pairs with blocking electromagnetic field emissions; Mantrap pairs with eliminating tailgating via interlocking doors; Privacy filter pairs with mitigating shoulder surfing by narrowing screen viewing angles; Cable lock pairs with preventing physical hardware theft by anchoring devices.
Each control directly mitigates its paired physical vulnerability: Faraday cages suppress electromagnetic waves, mantraps control physical human access cadence to prevent piggybacking, privacy filters restrict screen viewing line-of-sight against observation, and cable locks mechanically bind equipment against unauthorized removal.

Adım Adım Çözüm

1
Analyze each physical security control's operational mechanism.
Identified the primary defense domain for each control (RF shielding, access control, visual privacy, physical theft prevention).
Understanding the physical property targeted by each control allows proper alignment with corresponding threat mitigations.
2
Map Faraday cage to wireless/electromagnetic threat mitigation.
Faraday cage matches the prevention of electromagnetic field signal eavesdropping.
Conductive enclosures restrict ingress and egress of RF signals.
3
Map Mantrap to physical entry control.
Mantrap matches eliminating tailgating using interlocking access doors.
Two-stage access control requires individual verification before allowing access into secured areas.
4
Map Privacy filter to visual threat protection.
Privacy filter matches mitigating shoulder surfing.
Polarized films limit monitor visibility exclusively to direct viewing positions.
5
Map Cable lock to equipment theft prevention.
Cable lock matches preventing opportunistic device theft by anchoring to fixed objects.
Physical cables mechanically tether hardware components to solid structures.

Anahtar Kavram

Physical Security Controls and Threat Mitigation
Soru 945Soru

A desktop technician is tasked with configuring a newly deployed workstation to dual-boot Windows 11 Pro and a 64-bit Linux distribution on a single system drive utilizing UEFI firmware and a GUID Partition Table (GPT). Windows 11 Pro is currently installed and fully configured with BitLocker enabled. Which of the following operational steps must the technician take to ensure a valid and functional dual-boot environment? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Suspend or disable BitLocker encryption on the Windows system drive before shrinking the partition to make unallocated space for Linux.; Install Windows prior to installing Linux to allow the Linux bootloader installer (such as GRUB) to automatically detect Windows and configure dual-boot options.

Cevap

To configure a dual-boot setup with an existing BitLocker-encrypted Windows installation, the technician must suspend or turn off BitLocker before repartitioning the storage drive. Additionally, installing Windows first allows the subsequent Linux installation to install a bootloader (like GRUB) that detects Windows and enables a multi-boot choice menu upon startup.
Suspending BitLocker before partition modification ensures encryption keys and volume structures remain intact during partition resizing. Furthermore, installing Windows before Linux is standard operating procedure because the Windows boot setup typically overwrites third-party bootloaders, while Linux installers (GRUB) are designed to integrate existing Windows installations into their boot sequence.

Adım Adım Çözüm

1
Disable or suspend BitLocker protection on the active Windows volume.
Unlocks the volume state so partition management tools can safely shrink the partition without causing encryption failure or data corruption.
Shrinking active encrypted partitions without suspending encryption can cause boot failure and lockout.
2
Shrink the Windows volume in Disk Management to create unallocated space.
Prepares dedicated unallocated disk space on the GPT drive for Linux partitions.
Linux requires dedicated non-NTFS partitions (e.g., ext4 and swap).
3
Boot into the Linux installation media and complete the installation using the unallocated space.
Installs Linux and its bootloader (GRUB).
Linux installers automatically detect existing Windows boot managers on UEFI systems and register GRUB as the primary boot manager with entry options for both operating systems.

Anahtar Kavram

Multiboot OS Configuration Prerequisites and BitLocker Management
Soru 946Soru

A desktop support technician needs to upgrade a user's computer from Windows 10 Home to Windows 10 Pro. The user requires that all existing applications, files, and personal settings remain intact after the upgrade process. Which of the following installation methods should the technician perform?

Cevabı ve açıklamayı göster

Cevap: An in-place upgrade

Cevap

An in-place upgrade should be performed.
An in-place upgrade is used to update an existing operating system installation or change to a supported higher edition (such as Home to Pro) while preserving all user accounts, installed applications, drivers, and personal files.

Adım Adım Çözüm

1
Analyze the user's requirements for the operating system change.
The goal is to change the Windows edition from Home to Pro while keeping all applications, personal files, and settings intact.
Identifying the requirement to preserve current data rules out methods that reformat or overwrite drive partitions.
2
Determine the appropriate installation method that supports changing OS editions on an active system.
An in-place upgrade allows the system to transition from Windows 10 Home to Windows 10 Pro without reformatting or reinstalling software.
In-place upgrades install newer system components or higher edition features directly over the existing installation state.

Anahtar Kavram

In-place upgrade vs Clean installation characteristics
Tahmini Süre:45s
Soru 947Soru

A systems administrator is setting up Windows 11 Pro workstations for a software development team. The team utilizes legacy 32-bit database applications that require custom Data Source Names (DSNs) and also requires long-term, historical tracking of disk queue lengths and latency metrics. Which TWO of the following tools or utilities should the administrator configure to satisfy these specific operational requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The 32-bit ODBC Data Source Administrator utility located in C:\Windows\SysWOW64\odbcad32.exe; Performance Monitor (perfmon.msc) to build custom Data Collector Sets for logging disk counters over time

Cevap

The administrator must use the 32-bit ODBC Data Source Administrator utility in C:\Windows\SysWOW64\odbcad32.exe to configure DSNs for 32-bit software, and Performance Monitor (perfmon.msc) with Data Collector Sets for logging historical disk queue metrics.
The correct tools are the 32-bit ODBC Data Source Administrator in the SysWOW64 directory and Performance Monitor. On 64-bit Windows systems, 32-bit applications require DSNs configured via C:\Windows\SysWOW64\odbcad32.exe. Performance Monitor (perfmon.msc) is the built-in utility specifically designed for configuring long-term historical performance counter logs through Data Collector Sets.

Adım Adım Çözüm

1
Identify the proper ODBC administration binary architecture.
Recognize that on 64-bit Windows editions, 32-bit applications require DSNs created via C:\Windows\SysWOW64\odbcad32.exe rather than the default 64-bit utility in System32.
32-bit database drivers and applications interact exclusively with 32-bit registry entries created by the 32-bit ODBC manager.
2
Select the appropriate administrative tool for long-term historical resource logging.
Choose Performance Monitor (perfmon.msc) to define custom Data Collector Sets targeting physical and logical disk performance counters.
Task Manager provides live resource visualization but lacks functionality for historical data collection, whereas Performance Monitor supports persistent counter logging.

Anahtar Kavram

Windows 32-bit vs 64-bit Administrative Utilities and Performance Counter Logging
Soru 948Soru

A desktop support technician is performing a clean installation of Windows 11 Pro on a workstation configured with a dedicated hardware NVMe RAID array. When reaching the partition selection screen ("Where do you want to install Windows?"), no target drives or storage volumes are displayed in the list, even though the RAID array is reported as healthy in the system's UEFI setup. Which of the following is the best next step for the technician to take to make the volume available for installation?

Cevabı ve açıklamayı göster

Cevap: Insert a flash drive containing the storage controller driver and select the Load Driver option on the installation screen.

Cevap

Provide the appropriate mass storage controller driver by inserting removable media containing the manufacturer driver files and clicking the Load Driver option during disk selection.
During Windows installation on custom or enterprise hardware RAID storage controllers, the standard Windows Setup media may lack native inbox drivers for the controller. Selecting 'Load Driver' and pointing to removable media containing the manufacturer's storage controller driver allows setup to properly communicate with the controller and display the attached storage volume.

Adım Adım Çözüm

1
Identify the cause of missing storage volumes during OS setup
Recognize that hardware RAID controllers often require vendor-specific mass storage drivers that are not included in the standard Windows installation image.
Without the matching storage controller driver, the Windows Setup environment cannot communicate with the RAID array.
2
Obtain and prepare the storage driver files
Place the uncompressed driver files (.inf, .sys, .cat) onto an accessible USB flash drive.
Windows Setup requires raw driver files to load the storage interface during the partition phase.
3
Load the driver in Windows Setup
Click 'Load Driver' on the disk selection screen, browse to the USB drive location, and select the compatible RAID controller driver.
Once loaded, the installer can communicate with the controller and display the RAID volume as an available installation target.

Anahtar Kavram

Third-party storage controller driver injection during Windows Setup
Tahmini Süre:1m 30s
Soru 949Soru

A network technician needs to manually assign a static IPv4 address, subnet mask, and default gateway on a Windows client workstation using the classic Network Connections applet. Place the configuration steps in the correct sequential order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence to manually configure a static IPv4 address using Network Connections is: 1) Open the Run dialog box, enter ncpa.cpl, and press Enter; 2) Right-click the active network interface card (NIC) and select Properties; 3) Select Internet Protocol Version 4 (TCP/IPv4) from the list of components and click Properties; 4) Select the 'Use the following IP address' option and type the assigned IPv4 address, subnet mask, and default gateway.
Configuring a static IPv4 address requires opening the Network Connections management interface via ncpa.cpl, accessing the properties of the active adapter, opening the Internet Protocol Version 4 (TCP/IPv4) properties, and selecting the option to manually enter the IP address, subnet mask, and default gateway.

Adım Adım Çözüm

1
Launch the Network Connections applet by running ncpa.cpl in the Run dialog.
The Network Connections window opens displaying available physical and virtual adapters.
Executing ncpa.cpl directly opens the adapter control panel menu.
2
Open the configuration properties of the specific network adapter.
The Ethernet Properties dialog box appears.
Protocol bindings and network settings are managed on a per-adapter basis.
3
Locate and open the properties for the IPv4 protocol stack.
The Internet Protocol Version 4 (TCP/IPv4) Properties window opens.
Static IP addresses, subnet masks, and default gateways are configured within IPv4 properties.
4
Enable manual IP assignment and populate the network fields.
The workstation is assigned a static IPv4 configuration.
By default, Windows uses dynamic addressing (DHCP); selecting 'Use the following IP address' enables manual parameter entry.

Anahtar Kavram

Windows Client Static IPv4 Address Configuration
Soru 950Soru

A desktop technician is attempting to install a 64-bit video editing application on a workstation running a 32-bit edition of Windows 10. The installer fails immediately with an incompatibility error. Which of the following explains why this application cannot be installed on the workstation?

Cevabı ve açıklamayı göster

Cevap: A 32-bit operating system architecture cannot execute 64-bit application binaries.

Cevap

A 32-bit operating system architecture cannot execute 64-bit application binaries.
The correct answer highlights that a 32-bit operating system cannot execute 64-bit binaries. Operating systems compiled for 32-bit architecture lack the ability to handle 64-bit memory addresses and instructions. While 64-bit Windows can run 32-bit software via emulation (WOW64), a 32-bit Windows system cannot run 64-bit software under any circumstances.

Adım Adım Çözüm

1
Identify the system architecture of the target operating system
The target workstation is running a 32-bit edition of Windows 10.
System architecture determines what register sizes and instruction sets the OS can manage.
2
Compare the application requirements with the system architecture
The software is compiled specifically for 64-bit CPU architectures.
64-bit applications use 64-bit memory addresses and instructions that 32-bit operating systems cannot interpret or execute.
3
Determine the necessary resolution
Select the option stating that a 32-bit OS cannot execute 64-bit application binaries.
While a 64-bit OS can run 32-bit applications using WOW64, the reverse is impossible.

Anahtar Kavram

Application Architecture Compatibility (32-bit vs. 64-bit)
Tahmini Süre:45s
Soru 951Soru

A system administrator is troubleshooting a Windows 11 Pro workstation where a background service periodically stops responding. Standard Task Manager metrics do not provide the detailed file handle paths or thread wait chain information required to isolate the application freeze. Additionally, the administrator needs to record disk queue length and memory metrics continuously over a 24-hour period to establish a performance baseline. Which TWO Windows administrative tools should the administrator use to accomplish these tasks?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Resource Monitor (resmon.exe) to inspect real-time file handles, active disk activities, and thread wait chains for the unresponsive process; Performance Monitor (perfmon.msc) to configure a Data Collector Set for logging system performance counters continuously over extended time periods

Cevap

The administrator should use Resource Monitor (resmon.exe) to analyze real-time process thread wait chains and file handles, and Performance Monitor (perfmon.msc) to configure Data Collector Sets for long-term performance counter logging.
Resource Monitor (resmon.exe) allows administrators to examine real-time process threads, file handle locks, and Analyze Wait Chain details to troubleshoot unresponsive programs. Performance Monitor (perfmon.msc) enables the creation of Data Collector Sets that log performance counters into log files across extended intervals (e.g., 24 hours) for trending and baseline measurement.

Adım Adım Çözüm

1
Identify the real-time diagnostic tool required for granular process handle and wait chain analysis
Resource Monitor (resmon.exe) is selected because it displays active process dependencies, open file handles, and thread wait states beyond basic Task Manager metrics
Task Manager only offers high-level CPU, memory, disk, and network percentages without showing specific thread wait chains or open file handles causing process lockups
2
Identify the tool required for continuous baseline logging over an extended duration
Performance Monitor (perfmon.msc) is selected to create a User Defined Data Collector Set
Performance Monitor provides historical log collection capabilities via performance counters configured to record metrics such as disk queue lengths over hours or days

Anahtar Kavram

Selecting Windows Administrative Tools (Resource Monitor vs. Performance Monitor)
Soru 952Soru

A helpdesk technician receives a call from an individual claiming to be an executive support specialist who urgently needs a user's network password to resolve a critical server outage. Which type of social engineering attack is being attempted?

Cevabı ve açıklamayı göster

Cevap: Vishing

Cevap

The attack being attempted is vishing (voice phishing).
Vishing is a social engineering attack performed over the telephone where an attacker impersonates a trusted authority to extract sensitive data or login credentials.

Adım Adım Çözüm

1
Identify the communication vector used in the scenario.
The attacker is contacting the target via a direct telephone call.
Social engineering attack types are distinguished by their delivery mechanisms.
2
Analyze the attacker's method and purpose.
The attacker uses voice communication and impersonation to trick the technician into disclosing network passwords.
Phishing conducted specifically through voice telephone calls is defined as vishing.

Anahtar Kavram

Vishing (Voice Phishing)
Soru 953Soru

Match each enterprise physical security control to the specific threat vector or physical security risk it is designed to mitigate.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Faraday Cage
Physical Port Lock
Kensington Cable Lock
Security Bollard

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Each physical security control maps to its corresponding defense mechanism: Faraday Cage blocks RF emissions; Physical Port Lock blocks unauthorized interface connections; Kensington Cable Lock physically anchors devices to prevent theft; Security Bollard protects perimeters against vehicle ramming attacks.
Each physical security control addresses a distinct domain of security: Faraday cages block electromagnetic and wireless signal interception; physical port locks block hardware interface manipulation; Kensington cable locks prevent physical device theft; security bollards protect against vehicle impact.

Adım Adım Çözüm

1
Analyze electromagnetic and wireless isolation mechanisms.
Identified that enclosure technologies shielding against RF/signals correspond to the Faraday Cage control.
Faraday cages prevent external signal interception and internal RF leakage.
2
Examine device port protection controls.
Matched physical port locks with blocking unused hardware interfaces against unauthorized media connection.
Unsecured USB ports are primary vectors for physical data exfiltration and badUSB attacks.
3
Evaluate endpoint anti-theft anchoring mechanisms.
Paired Kensington cable locks with mechanical anchoring to fixed office furniture.
Cable locks increase the time and effort required to steal portable computer hardware.
4
Identify perimeter vehicle protection controls.
Associated bollards with anti-ramming structural protection at entry points.
Bollards absorb kinetic impact from vehicles attempting to breach building perimeters.

Anahtar Kavram

Physical Security Controls and Threat Mitigation Functions
Soru 954Soru

A field technician installs a IP-based security camera at the far end of a logistics warehouse. The camera is connected back to a PoE switch port using a single continuously run Category 6 Ethernet cable measuring 120 meters (394 feet). Upon powering on the system, the camera intermittently reboots, drops packets, and experiences severe video signal degradation. Testing the cable run with a standard wire mapper shows that all eight pin continuity connections match the T568B termination standard. Which of the following is the MOST likely cause of the network instability?

Cevabı ve açıklamayı göster

Cevap: The Ethernet cable run length exceeds the 100-meter maximum distance specification for copper twisted-pair cabling.

Cevap

The Ethernet cable run length exceeds the 100-meter maximum distance specification for copper twisted-pair cabling.
The standard maximum distance specification for copper Ethernet cabling (Cat 5e, Cat 6, Cat 6a) is 100 meters (328 feet), typically configured as 90 meters of solid horizontal cabling and 10 meters of stranded patch cables. A 120-meter cable run causes severe signal attenuation (loss of signal strength) and Power over Ethernet (PoE) voltage drop, leading to packet loss, latency, and intermittent device reboots.

Adım Adım Çözüm

1
Analyze the physical layer specifications provided in the scenario.
The Category 6 Ethernet cable run length is 120 meters (394 feet).
Standard Ethernet specifications (802.3) limit copper twisted-pair cable runs (including patch cables and horizontal cabling) to a maximum length of 100 meters (328 feet).
2
Evaluate the reported symptoms against physical distance limitations.
Signals traveling over 100 meters suffer from severe attenuation and voltage drop over Power over Ethernet (PoE).
Attenuation degrades data packets causing loss, while voltage drop causes the camera to intermittently lose power and reboot.
3
Select the root cause matching the physical layer violation.
Exceeding the 100-meter maximum distance limitation is the root cause.
A Ethernet repeater, PoE extender, or fiber optic link must be used for runs exceeding 100 meters.

Anahtar Kavram

Ethernet Maximum Cable Length Limitations and Attenuation
Soru 955Soru

Match each physical security control to the specialized security risk or intrusion vector it is primarily designed to mitigate.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Faraday cage enclosure
Access control vestibule with anti-passback
Heavyweight steel bollards
Protected Distribution System (PDS)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The Faraday cage enclosure matches RF eavesdropping mitigation; the Access control vestibule with anti-passback matches tailgating and credential-sharing prevention; Heavyweight steel bollards match vehicle ramming attack prevention; and the Protected Distribution System (PDS) matches physical cable wiretapping protection.
Each physical security control addresses a distinct attack vector: Faraday cages protect against RF eavesdropping; access control vestibules with anti-passback eliminate tailgating and badge-sharing; bollards defeat vehicle ramming attacks; and Protected Distribution Systems secure cabling runs against physical wiretapping.

Adım Adım Çözüm

1
Identify the primary defensive characteristic of a Faraday cage.
Recognize that continuous conductive shielding blocks electromagnetic induction and radio frequency transmission.
Faraday cages prevent signals from entering or escaping shielded environments, mitigating RF eavesdropping.
2
Evaluate an access control vestibule enforcing anti-passback rules.
Determine that interlocking doors regulate physical movement while anti-passback prevents a single credential from being passed back to admit a secondary individual.
This combination directly stops tailgating/piggybacking and badge reuse.
3
Analyze the structural role of steel bollards.
Understand that bollards serve as reinforced physical barriers situated outside facility entrances.
Their primary function is to prevent vehicles from breaching building perimeters through ramming.
4
Determine the protective scope of a Protected Distribution System (PDS).
Identify that PDS encapsulates telecommunications cabling in secure conduits or alarm-monitored raceways.
PDS prevents unauthorized physical access and wiretapping along vulnerable cable pathways.

Anahtar Kavram

Physical Security Controls & Threat Alignment
Soru 956Soru

A system technician receives an automated alert indicating that a single drive has failed within a server's hot-swappable hardware RAID 5 array, causing the array to operate in a degraded state. Place the necessary steps for replacing the faulty drive and restoring array redundancy in the correct sequential order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper sequence begins with identifying the specific faulty drive via the controller software and chassis lights, followed by removing the failed drive, inserting a replacement drive of equal or greater capacity, and finally verifying that the automated RAID rebuild completes.
Correct RAID servicing requires identifying the exact failed disk first to prevent removing an active member disk. Once confirmed, the hot-swappable drive carrier is unlatched and removed. Inserting a qualified replacement drive triggers the hardware controller's automated parity reconstruction, which must be monitored until completion to confirm full redundancy has been restored.

Adım Adım Çözüm

1
Locate the specific failed disk drive using status LEDs and hardware controller software.
The exact physical bay containing the faulted drive is verified without disrupting healthy operational drives.
Removing an active healthy drive from a degraded RAID 5 array will result in total array failure and data loss.
2
Disengage the drive latch mechanism and extract the failed disk from the hot-swap enclosure.
The failed physical media is separated from the backplane connector.
Hot-swappable hardware allows disengaging drive carriers while the system remains powered on.
3
Slide the replacement drive into the empty bay and lock the retention lever.
The new drive establishes physical and electrical connection with the RAID controller backplane.
The controller requires a functional physical disk of equal or greater storage capacity to write reconstructed parity data.
4
Access the RAID controller management interface to check rebuilding status.
The controller parity reconstruction process completes, returning the volume state from Degraded to Optimal.
Verifying completion ensures full fault tolerance is successfully restored.

Anahtar Kavram

Hot-Swappable RAID 5 Failed Drive Replacement Sequence
Soru 957Soru

A system administrator is configuring a desktop computer for a new staff member at a regional branch office. The computer must be capable of hosting incoming Remote Desktop Protocol (RDP) connections for remote administrative access and joining the corporate Active Directory domain. Which edition of Windows 11 is the minimum version required to support these features?

Cevabı ve açıklamayı göster

Cevap: Windows 11 Pro

Cevap

Windows 11 Pro is the minimum edition required because it includes support for Active Directory domain join and incoming Remote Desktop host services.
Windows 11 Pro is the minimum edition designed for business environments that includes essential business management features such as Active Directory domain join, Group Policy management, and hosting incoming Remote Desktop Protocol (RDP) sessions.

Adım Adım Çözüm

1
Identify the key operational requirements specified in the scenario.
The requirements are joining an Active Directory domain and hosting incoming Remote Desktop (RDP) connections.
Determining the minimum OS feature set requires matching specific enterprise features to Windows 11 edition boundaries.
2
Evaluate Windows 11 Home capabilities against these requirements.
Windows 11 Home supports outgoing RDP client connections but does not support incoming RDP hosting or Active Directory domain join.
Home edition is intended for consumer use and omits business management features.
3
Determine the lowest tier edition that meets all requirements.
Windows 11 Pro provides native support for domain join, Local Group Policy Editor, and incoming RDP hosting.
Selecting Windows 11 Pro satisfies all technical requirements while remaining the minimum required licensing tier.

Anahtar Kavram

Windows 11 Edition Feature Boundaries (Domain Join & RDP Server)
Tahmini Süre:1m 0s
Soru 958Soru

A facility manager notices that unauthorized visitors are entering a secure office building by closely following authorized employees through the main entrance door before it closes. Which physical security control should be implemented to specifically prevent this practice?

Cevabı ve açıklamayı göster

Cevap: An access control vestibule

Cevap

An access control vestibule
An access control vestibule consists of a small space with two interlocking doors. When an authorized person passes through the first door, it must close completely before the second door unlocks and opens. This physical barrier ensures that only one person can enter per authentication event, directly stopping tailgaters.

Adım Adım Çözüm

1
Identify the physical security threat described in the scenario.
The issue is tailgating (or piggybacking), where an unauthorized individual closely follows an authorized person through a secure doorway.
Selecting the correct physical security measure requires identifying the specific access control vulnerability.
2
Evaluate the available security mechanisms to determine which one restricts entryway throughput to one authenticated person at a time.
An access control vestibule creates an enclosed double-door checkpoint that isolates individuals during access attempts.
The interlocking mechanism ensures the outer door shuts completely before allowing entry through the inner door, neutralizing tailgating attempts.

Anahtar Kavram

Physical Access Controls and Tailgating Prevention
Soru 959Soru

A desktop support technician is configuring a static IPv4 connection on a multi-homed Windows 11 workstation. The Ethernet adapter connects directly to an isolated local storage network (10.50.0.0/24) with no internet access, while the Wi-Fi adapter connects to the corporate network with internet access. After the technician enters static IP settings (10.50.0.25) and populates the IP address, subnet mask, default gateway, and DNS fields on the Ethernet adapter, the computer can reach the storage servers but completely loses internet access across all applications. Which modification to the Ethernet adapter's TCP/IP properties will resolve the issue?

Cevabı ve açıklamayı göster

Cevap: Remove the Default Gateway entry from the Ethernet IPv4 configuration.

Cevap

Removing the Default Gateway entry from the Ethernet IPv4 configuration resolves the routing conflict and restores internet access.
In Windows client networking, defining a Default Gateway instructs the operating system where to send traffic destined for IP addresses outside the local subnet. When a computer has two active network adapters (dual-homed) and both have default gateways defined, Windows creates multiple default routes (0.0.0.0/0). If internet traffic is sent out the adapter connected to an isolated storage network, the packets cannot reach the internet. Removing the default gateway from the isolated storage interface ensures that all non-local and internet traffic is sent exclusively through the Wi-Fi adapter's gateway.

Adım Adım Çözüm

1
Analyze the dual-homed network setup and routing behavior.
Identified that both network adapters have a default gateway configured, creating competing default routes in the Windows routing table.
When multiple default gateways exist, Windows selects a gateway based on route metrics. If outbound internet traffic is routed through the storage adapter's gateway, packets are dropped because that subnet has no internet connectivity.
2
Determine the role of the Ethernet adapter.
The Ethernet adapter only needs to reach local subnet hosts on 10.50.0.0/24.
Subnets without an external exit router do not require a default gateway.
3
Select the appropriate TCP/IP configuration fix.
Clearing the default gateway field on the storage adapter leaves the Wi-Fi adapter's gateway as the sole default route for out-of-subnet and internet traffic.
This guarantees internet traffic routes through Wi-Fi while storage traffic remains local to the Ethernet adapter.

Anahtar Kavram

Dual-Homed Default Gateway Routing Conflicts
Soru 960Soru

A system administrator needs to upgrade several workstations currently running 32-bit Windows 10 Home to 64-bit Windows 11 Pro to allow integration into the corporate Active Directory domain. Which of the following conditions and procedures must the administrator observe during this deployment? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A clean installation must be performed because direct in-place architecture upgrades from 32-bit to 64-bit are not supported.; The Windows edition must be upgraded to Pro or Enterprise because Windows Home edition does not support joining an Active Directory domain.

Cevap

A clean installation is required when migrating from a 32-bit to a 64-bit system architecture, and an edition upgrade from Home to Pro or Enterprise is necessary to join an Active Directory domain.
Moving from a 32-bit operating system to a 64-bit operating system fundamentally requires a clean installation, as in-place architectural upgrades are unsupported. Additionally, Windows Home edition does not support joining an Active Directory domain, requiring a product key or edition upgrade to Windows Pro or Enterprise.

Adım Adım Çözüm

1
Evaluate the architectural path requirement when moving from 32-bit Windows 10 to 64-bit Windows 11.
Identified that an in-place upgrade across architectures is unsupported.
Microsoft Windows requires a clean installation (formatting the target volume) when changing architecture from 32-bit to 64-bit.
2
Evaluate the Windows edition requirements for corporate network integration.
Identified that Windows Home edition cannot be joined to an Active Directory domain.
Domain join functionality is an administrative management feature reserved for Windows Pro, Enterprise, and Education editions.

Anahtar Kavram

OS Upgrade Paths and Windows Edition Feature Matrix
ÖncekiSayfa 48 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin