Tüm alıştırma soruları

A system administrator is troubleshooting a Windows 11 workstation that experiences random application instability. An elevated Command Prompt session was opened, and the administrator executed `sfc /scannow`. The process completed with the message: "Windows Resource Protection found corrupt files but was unable to fix some of them." Further log analysis reveals that the replacement payload files within the local component store are also corrupted. Which of the following commands should the administrator execute NEXT to repair the component store so that system file integrity can be successfully restored?

An IT technician receives an urgent escalation from an executive manager who is unable to present at an upcoming board meeting because their laptop display is not showing on the conference room projector. The manager is visually stressed and expressing frustration about the technical failure. Which of the following is the most appropriate initial communication action for the technician to take?

A field technician reports that a specialized telemetry logging app on a company-issued Android tablet takes a long time to start up, stutters when loading local data, and consumes excessive background memory. Other system utilities and mobile apps on the tablet perform normally. Which of the following initial, least-invasive troubleshooting steps should the technician take to resolve this issue? (Select TWO.)

During a major IT infrastructure transition, a Tier 1 help desk technician receives an escalated user ticket regarding access failure to an encrypted network share containing time-sensitive financial records. Following initial troubleshooting, the technician determines that the issue stems from an unmapped Kerberos Service Principal Name (SPN) and missing Active Directory group delegation, which requires Tier 3 System Administration permissions to remediate. According to standard ticketing system lifecycle workflows, which of the following actions must the Tier 1 technician take before reassigning ownership of the ticket?

A healthcare provider reports that a proprietary patient charting application on an Android tablet frequently becomes unresponsive when displaying high-resolution laboratory results. The technician notes that the tablet has sufficient internal storage space, but the application process remains hung in memory even after navigating back to the main menu. The technician wants to restore app responsiveness using the least invasive method while ensuring local application data and login configurations are preserved. Which of the following actions should the technician perform FIRST?

While conducting a remote screen-sharing session to resolve a network printer installation issue, a Tier 1 support technician notices that the user has a spreadsheet displayed containing unencrypted Personal Identifiable Information (PII) of corporate clients. The user appears unaware of the visible data and is becoming impatient regarding the printer issue. Which of the following professional communication and compliance actions should the technician take in this scenario? (Select TWO.)

A field technician is servicing hardware inside a server room. The technician disconnects a modular computer power supply unit (PSU) from the main AC electrical outlet and allows it to sit on an anti-static mat for 15 minutes. Intending to replace a faulty internal cooling fan inside the power supply casing, the technician attaches an ESD wrist strap to the PSU's metal enclosure and opens the PSU housing using insulated hand tools. Which of the following identifies the primary safety violation committed by the technician?

A field technician's mobile tablet loses access to enterprise network resources after returning from a client site. Network logs show that HTTPS traffic from the device is being intercepted by an unauthorized proxy server, and the device's Mobile Device Management (MDM) agent reports a compliance violation. Further investigation reveals a third-party diagnostic utility was recently sideloaded on the device. Which TWO of the following initial actions should the systems administrator perform to remediate the security breach and restore secure connectivity?

A help desk technician is troubleshooting a Windows 11 enterprise workstation that continuously redirects web requests to malicious advertising sites, frequently exhibits pop-up windows, and reverts proxy settings to a rogue IP address. Place the following remediation steps in the correct order to eliminate the browser hijack and restore secure functionality.

An IT support technician is conducting an on-site troubleshooting session at a department manager's desk to resolve a recurring application error. While the technician is diagnosing the issue, the manager receives an urgent phone call and steps away from the desk without locking the workstation, leaving confidential employee performance evaluation documents open on the screen. The technician determines that resolving the software issue requires an immediate operating system reboot. Which of the following actions should the technician take next?

An IT technician is reviewing a Python (.py) automation script deployed to process system log files across multiple workstations. The script reads a configuration threshold from an operating system environment variable to determine when to trigger log compression. The variable is retrieved into the script, but when the script compares this environment variable against an integer variable representing the current file size in megabytes (log_size_mb), the conditional statement raises a runtime TypeError exception and halts execution. Which of the following identifies the root cause of this failure and the correct solution?

A systems administrator is establishing remote access guidelines for an enterprise help desk. The organization's support policy establishes two specific operational requirements:

1. Help desk technicians must interactively co-browse and control an active user session on a Windows 11 workstation with the user's explicit permission, without logging out or locking the screen of the local user.
2. Server administrators must establish encrypted command-line administrative sessions to manage remote Linux servers over the network.

Which combination of remote access technologies and standard port assignments fulfills both operational requirements?

During an internal investigation into suspicious data transfers, an IT support specialist is sent to secure a compromised workstation in an empty office suite. The specialist disconnects the workstation's network cable, powers down the system, attaches an evidence label with the serial number, and seals the unit in a container. However, before handing the equipment over to the legal forensics team the next morning, the specialist leaves the sealed container in an unlocked office cubicle overnight without logging storage location updates or transfer signatures. Which of the following best explains why this evidence may be rendered legally inadmissible?

An IT technician detects suspicious network traffic originating from a workstation on the corporate network. Arrange the basic incident response steps in the correct chronological order from first to last according to standard CompTIA procedures.

A network administrator is configuring remote administration for a newly deployed Linux server that must be managed via command line across an untrusted public network. A technician proposes enabling Telnet to allow remote console access, noting that Telnet traffic on its standard port is already open on the firewall. Why is this proposal insecure, and which technology and default port should be implemented instead according to security best practices?

During a routine compliance audit, an enterprise mobility administrator discovers that a managed mobile device has been installed with an unauthorized third-party configuration payload containing a rogue Certificate Authority (CA) root certificate. This has resulted in man-in-the-middle certificate warnings whenever the user accesses internal HTTPS sites. Which of the following actions should the administrator take FIRST to mitigate this security risk?

A remote employee reports that while working in a public venue, their corporate-managed smartphone automatically connected to an open Wi-Fi hotspot broadcasting a SSID identical to their office network. Shortly after, corporate email syncing failed, and the device displayed continuous background location tracking activity. Upon inspection, an IT technician suspects a rogue access point attack compromised the device by installing a malicious management payload. Which TWO of the following actions should the technician perform immediately to remediate the security breach and restore secure operation?

A restaurant server reports that the primary point-of-sale (POS) order-entry application on an Android handheld device becomes increasingly sluggish and slow to register touch inputs after several hours of active deployment during a shift. The tablet's operating system navigation and all other built-in utilities continue to perform normally. Which of the following actions should the technician perform FIRST to address this performance issue with the least operational disruption?

An IT administrator for a regional healthcare provider is configuring an endpoint ticketing and logging application. During a routine audit of system logs, the administrator discovers that support technicians have been entering patient health insurance policy numbers, clinical diagnosis codes, and treatment notes into an unencrypted free-text field. This log data is automatically synchronized to an unencrypted cloud storage repository. Which of the following regulatory compliance frameworks is directly violated by exposing this specific category of data?

An IT technician is inspecting an enterprise uninterruptible power supply (UPS) unit located in a remote equipment closet. The technician notices that several large sealed lead-acid (SLA) batteries within the enclosure are swollen, emitting a sharp sulfur-like odor, and showing signs of chemical corrosion around the terminal posts. Prior to attempting any handling, containment, or removal of the damaged components, which of the following actions should the technician take FIRST?