Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 981Soru →

A Windows 11 client workstation is unable to access an internal corporate web application by its domain name. A tier 2 support technician needs to isolate the root cause by following a systematic bottom-up network diagnostic methodology using standard Windows command-line tools. Place the diagnostic actions in the correct logical sequence, starting from verifying the local system protocol stack up to testing domain name resolution.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with testing the local loopback address (ping 127.0.0.1), followed by testing the local adapter IP address, pinging the local default gateway, pinging the destination server's IP address directly, and finally testing DNS name resolution using nslookup.
Systematic bottom-up troubleshooting requires testing local host components before moving outward across network boundaries. The sequence starts internally with the loopback adapter (127.0.0.1), progresses to the local assigned IP, verifies the local default gateway, checks IP routing to the destination IP address, and concludes by validating DNS host name resolution using nslookup.

Adım Adım Çözüm

1
Verify local TCP/IP stack initialization
ping 127.0.0.1 confirms software protocol stack integrity.
Eliminates local OS network stack corruption as the issue before testing hardware or physical links.
2
Verify local network adapter binding and driver
pinging the local IPv4 address (192.168.1.105) checks NIC driver response.
Confirms the local network interface card hardware and protocol bindings are operating properly.
3
Verify local subnet default gateway connection
pinging 192.168.1.1 tests local switch and router interface communication.
Ensures the host can communicate across the local broadcast domain/VLAN.
4
Verify layer 3 inter-subnet routing to target destination
pinging the remote server IP (10.20.4.50) tests IP packet transport across routers.
Isolates network transport and routing issues while bypassing application-layer name resolution.
5
Verify DNS host name resolution service
nslookup intranet.company.local tests FQDN resolution to IP address mapping.
Determines if name resolution or DNS client configuration is failing after network transport connectivity is confirmed.

Anahtar Kavram

Bottom-up TCP/IP network troubleshooting methodology on Windows clients
Soru 982Soru →

A systems engineer is preparing a automated enterprise network deployment of Windows to 200 new workstations. Place the steps for image preparation, network service configuration, and client deployment in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence for image-based network deployment is: 1) Run 'sysprep.exe /generalize /oobe /shutdown' on the reference OS -> 2) Boot reference machine into WinPE and capture the volume using DISM -> 3) Upload the .wim file to WDS and configure DHCP Options 66 and 67 -> 4) Set target client UEFI firmware boot order to network/PXE -> 5) Execute target client PXE boot to retrieve WinPE via TFTP and apply unattend.xml.
The deployment process strictly follows a prepare-capture-host-configure-deploy workflow: First, the reference OS must be generalized using sysprep.exe /generalize to remove unique SIDs and driver bindings. Second, the offline partition is captured into a .wim file using DISM in WinPE. Third, the .wim file is loaded onto WDS while DHCP Options 66 (boot server IP) and 67 (bootfile name) are configured to direct clients. Fourth, target client devices are set to PXE boot in UEFI. Finally, the target machines boot via PXE, receive boot parameters from DHCP/TFTP, load WinPE, and execute the unattended installation file.

Adım Adım Çözüm

1
Prepare the reference operating system image.
System SIDs and hardware-specific configurations are stripped using Sysprep /generalize.
Capturing an un-generalized system will cause SID duplication errors across domain clients.
2
Capture the reference disk image.
A standardized .wim file is generated via DISM from WinPE.
DISM requires the reference volume to be offline or booted into WinPE to safely capture file structures.
3
Configure distribution infrastructure.
WDS holds the install image and DHCP directs clients via Options 66 and 67.
PXE network clients depend on DHCP option tags to locate the TFTP server IP address and boot file name.
4
Prepare client hardware.
Target devices are set to attempt network boot via PXE.
UEFI must send a PXE broadcast request during early POST before attempting local storage boot.
5
Execute unattended deployment.
Target machines download WinPE and silently install the customized image.
The unattended file automates OS customization passes (specialize and oobeSystem) without technician intervention.

Anahtar Kavram

Automated Network Deployment Sequence (Sysprep -> DISM Capture -> WDS/DHCP PXE -> Client Unattended Install)
Soru 983Soru →

A user on a corporate network receives an installer package for a new office productivity tool. When the user double-clicks the installer, User Account Control (UAC) prompts for administrative credentials. Why is elevated access required for this installation?

Cevabı ve açıklamayı göster

Cevap: The installer needs permissions to write files to protected system directories such as Program Files.

Cevap

The installer requires elevated administrative rights because it needs permission to modify protected system locations such as C:\Program Files and system-wide registry hives.
Installing software designed for all users on a computer requires modification of protected system directories (such as C:\Program Files) and global registry keys (HKEY_LOCAL_MACHINE). Standard user accounts lack these permissions, so Windows triggers User Account Control (UAC) to demand administrator credentials before permitting changes.

Adım Adım Çözüm

1
Identify the event described in the scenario.
The user is running an application installer that triggers a User Account Control (UAC) administrative credential prompt.
UAC guards system integrity by preventing unauthorized changes to system-wide configurations.
2
Analyze why UAC prompts for administrator credentials during application setup.
System-wide application installations write binaries into protected folders (e.g., C:\Program Files) and modify HKEY_LOCAL_MACHINE registry keys.
Standard user accounts lack write permissions to these protected system resources to ensure security and stability.

Anahtar Kavram

Administrative Privilege Requirements for Application Installation
Soru 984Soru →

A desktop technician is configuring a specialized Windows 11 Workstation used for audio transcription and archival indexing. The technician needs to complete two tasks using Control Panel applets:
1. Add a non-standard local directory (C:\AudioTranscripts) to the search index and configure it to index file contents.
2. Change the default playback and recording communication devices while disabling system event sounds.

Which of the following Control Panel applets must the technician use to complete these tasks? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Indexing Options; Sound

Cevap

The technician must use Indexing Options to add the custom directory to the search index and configure content indexing, and the Sound applet to configure default audio devices and turn off system sound schemes.
Indexing Options is used to add non-default directories (like C:\AudioTranscripts) to the Windows Search catalog and enable content indexing. The Sound applet manages audio hardware endpoints (playback/recording) and system sound schemes.

Adım Adım Çözüm

1
Identify the Control Panel applet required for search catalog modifications.
Indexing Options is selected to add C:\AudioTranscripts to the included locations and enable file content indexing.
Indexing Options specifically manages Windows Search index locations and file type indexing rules.
2
Identify the Control Panel applet required for audio device management and sound schemes.
Sound applet is selected to manage playback/recording hardware defaults and set the sound scheme to No Sounds.
The Sound utility controls playback, recording, communications defaults, and system event sound profiles.

Anahtar Kavram

Windows Control Panel Utilities Functionality
Soru 985Soru →

A desktop support technician needs to update an employee's workstation to a newer version of Windows. The employee requires that all existing personal files, configuration settings, and installed applications remain completely intact after the installation. Which OS installation method should the technician perform to fulfill this request?

Cevabı ve açıklamayı göster

Cevap: In-place upgrade

Cevap

In-place upgrade
An in-place upgrade installs the newer operating system version over the existing system while retaining all user files, installed applications, and user preferences without requiring a drive format.

Adım Adım Çözüm

1
Identify the user requirements for the OS installation process.
The user requires keeping existing applications, settings, and files intact.
Determines whether a destructive or non-destructive installation method is required.
2
Compare operating system deployment and upgrade methods against these requirements.
An in-place upgrade is the only installation method designed to maintain user data, application states, and OS settings directly on the existing file system.
Clean installs and image deployments overwrite existing installations and data.

Anahtar Kavram

OS Installation Methods: In-Place Upgrade vs. Clean Install
Tahmini Süre:45s
Soru 986Soru →

A field technician is inspecting a desktop workstation that fails to complete POST following a memory upgrade. When powered on, the power LED turns solid, system fans spin continuously at maximum speed, and the motherboard emits a repeating pattern of three short beeps with no display output. The user mentions forcing a 260-pin SO-DIMM module into the expansion slot because it was listed as high-performance DDR4 RAM online. Which of the following best identifies the root cause of this system failure?

Cevabı ve açıklamayı göster

Cevap: The 260-pin SO-DIMM module is physically and electrically incompatible with standard desktop motherboard slots, which require 288-pin DIMM modules.

Cevap

The 260-pin SO-DIMM module is physically and electrically incompatible with standard desktop motherboard slots, which require 288-pin DIMM modules.
The correct answer highlights the form-factor mismatch between standard desktop motherboard DIMM slots (288 pins) and mobile SO-DIMM memory modules (260 pins). Because the pins and physical alignment key do not match, the motherboard memory controller cannot detect valid RAM, prompting the BIOS/UEFI to halt POST and emit a series of memory-error beep codes.

Adım Adım Çözüm

1
Analyze the reported hardware symptoms and physical setup.
The desktop workstation powers on with spinning fans and solid power lights, but halts at POST with a repeating 3-beep memory warning code.
Three POST beeps standardly indicate a memory initialization or detection failure on most BIOS/UEFI systems.
2
Evaluate the user's memory upgrade choice.
The user attempted to insert a 260-pin SO-DIMM module into a desktop motherboard slot.
SO-DIMM (Small Outline Dual In-line Memory Module) is a smaller form factor engineered specifically for laptops and compact systems, whereas standard desktop motherboards require full-length 288-pin DIMM modules.
3
Identify the primary root cause.
Physical and electrical pin mismatch prevents the motherboard memory controller from contacting or initializing the RAM stick.
The notch positioning and total pin count differ between DIMM and SO-DIMM form factors, causing a fatal POST memory detection halt.

Anahtar Kavram

RAM Form Factors and POST Error Diagnostics
Soru 987Soru →

A network technician is troubleshooting severe wireless connectivity degradation and high packet loss for users on a 2.4 GHz Wi-Fi network in a dense commercial building. A site survey reveals that nearby access points managed by adjacent tenants are currently transmitting on channels 2, 3, and 5. Which of the following configuration changes should the technician make to BEST eliminate adjacent-channel interference?

Cevabı ve açıklamayı göster

Cevap: Reconfigure the access points to operate exclusively on standard non-overlapping channels such as 1, 6, or 11.

Cevap

Reconfigure the access points to operate exclusively on standard non-overlapping channels such as 1, 6, or 11.
In 2.4 GHz wireless networks, channels are 22 MHz wide but spaced only 5 MHz apart. To avoid adjacent-channel interference, wireless access points must be configured to use non-overlapping channels (channels 1, 6, or 11). Setting the access points to these standard channels prevents frequency overlap and restores network stability.

Adım Adım Çözüm

1
Analyze the reported Wi-Fi interference issue
Identified adjacent-channel interference in the 2.4 GHz band caused by APs broadcasting on channels 2, 3, and 5.
Channels 2, 3, and 5 overlap with each other in the 2.4 GHz spectrum, causing signal degradation and packet collisions.
2
Select non-overlapping 2.4 GHz channels
Determined that channels 1, 6, and 11 provide the necessary channel separation.
The 2.4 GHz Wi-Fi spectrum only supports three non-overlapping 20 MHz channels (1, 6, and 11) in North America and most standard deployments.
3
Apply the configuration change to the access points
Mitigated adjacent-channel interference and restored stable wireless communication.
Operating on non-overlapping channels eliminates frequency cross-talk between nearby wireless transmitters.

Anahtar Kavram

2.4 GHz Wi-Fi Non-Overlapping Channel Selection
Tahmini Süre:1m 15s
Soru 988Soru →

A network security technician is hardening the physical security measures for a newly established satellite datacenter. The facility manager specifies two primary security goals: first, preventing unauthorized individuals from gaining entry by closely following authorized staff through outer access points, and second, ensuring that server hardware cannot be removed from equipment enclosures if room perimeter security is compromised. Which of the following physical security controls should the technician implement to meet these specific requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An access control vestibule equipped with anti-passback authentication controls; Locking rack enclosures securely bolted to the facility floor

Cevap

The technician should implement an access control vestibule equipped with anti-passback controls to prevent tailgating, along with locking rack enclosures bolted to the floor to prevent physical hardware theft.
An access control vestibule (mantrap) using anti-passback authentication prevents unauthorized users from tailgating authorized staff through entryways. Locking rack enclosures bolted to the building floor provide targeted hardware security, preventing server units from being physically disconnected and carried away.

Adım Adım Çözüm

1
Analyze the physical security threats described in the scenario
Two distinct physical risks are identified: unauthorized entry via tailgating/piggybacking and physical theft of server hardware.
Choosing effective physical controls requires mapping specific mechanisms directly to the identified physical security threat vectors.
2
Select the physical control for tailgating prevention
An access control vestibule (mantrap) with anti-passback authentication ensures that only one credentialed person passes through at a time.
Interlocking doors prevent second individuals from following authorized personnel without validating their own credentials.
3
Select the physical control for equipment theft prevention
Locking rack enclosures anchored directly to the floor secure individual host systems and hardware units.
Securing rack doors and anchoring the frame ensures servers cannot be removed or stolen even if room-level access control fails.

Anahtar Kavram

Physical Access Controls and Asset Protection
Tahmini Süre:1m 30s
Soru 989Soru →

Match each Windows administrative requirement on the left with the most appropriate Microsoft Management Console (MMC) snap-in or administrative utility on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Configure a background process to automatically attempt a restart after a crash.
Register and manage DCOM and COM+ applications for an enterprise network software installation.
Configure password history and account lockout thresholds on a standalone workstation.
Schedule a custom administrative cleanup script to execute daily at midnight.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Automatic process restart matches Services (services.msc); DCOM and COM+ application management matches Component Services (comexp.msc); Password history and lockout rules match Local Security Policy (secpol.msc); Daily automated script execution matches Task Scheduler (taskschd.msc).
Each item matches its corresponding tool based on Microsoft administrative utility design: Services (services.msc) handles service state and recovery configuration; Component Services (comexp.msc) manages COM+ component objects and DCOM configuration; Local Security Policy (secpol.msc) enforces local account and security parameters; and Task Scheduler (taskschd.msc) automates timed script or binary execution.

Adım Adım Çözüm

1
Analyze each administrative requirement to determine the functional domain.
Identified requirements covering service recovery configuration, COM+ object management, local account security rules, and automated job scheduling.
Administrative utilities in Windows are specialized for specific system roles.
2
Map each scenario to its native Windows administrative snap-in executable.
Matched service recovery to services.msc, COM+ management to comexp.msc, password/lockout policies to secpol.msc, and scheduled jobs to taskschd.msc.
Each MMC snap-in targets a distinct subset of system management features.

Anahtar Kavram

Windows Administrative Tools and MMC Snap-ins
Soru 990Soru →

A help desk technician is deploying a newly staged Windows 11 Pro workstation for a user on a corporate network that does not utilize DHCP. Network management policies require the client computer to be manually configured for local connectivity and enabled for inbound administrative access using native operating system features. Which of the following network settings and administrative tasks must the technician configure on this Windows client? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure a static IPv4 address, subnet mask, default gateway, and DNS server addresses within the Network Connections TCP/IPv4 properties dialog.; Enable Remote Desktop in System Settings to allow incoming Remote Desktop Protocol connections through Windows Firewall.

Cevap

The correct configurations are manually setting the IPv4 address parameters (static IP, subnet mask, gateway, DNS) in TCP/IPv4 properties and toggling on Remote Desktop within Windows System Settings.
In a non-DHCP environment, static network parameters (IP address, subnet mask, default gateway, and DNS) must be manually defined in the TCP/IPv4 adapter properties to enable network communication. Additionally, enabling Remote Desktop under System Settings enables inbound Remote Desktop Protocol (RDP) management traffic and configures Windows Firewall accordingly.

Adım Adım Çözüm

1
Configure IP address properties
Network communications are established locally and routed properly
Since DHCP is not present, manually defining static IP settings in the network adapter properties (ncpa.cpl or Settings) ensures valid network parameters are applied.
2
Enable Remote Desktop Service
Inbound RDP management connections are permitted on TCP port 3389
Windows 11 Pro supports incoming RDP server connections, but the feature must be turned on in System Settings to listen for incoming admin sessions and open the necessary firewall rules.

Anahtar Kavram

Windows Client Networking Configuration and Remote Management
Soru 991Soru →

A technician is troubleshooting an office desktop computer that fails to complete POST following a brief electrical surge. The system fans spin and power LEDs illuminate, but the monitor displays no image and no diagnostic beep codes are emitted. In what sequence should the technician perform these diagnostic steps to isolate the fault according to CompTIA hardware troubleshooting methodology?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The technician should first disconnect all non-essential internal and external components to create a minimal boot configuration. Next, clear the CMOS memory to resolve corrupted BIOS/UEFI settings. Following that, isolate memory issues by testing a single RAM module in the primary slot. Finally, perform an invasive physical inspection of the CPU and motherboard socket pins if the POST failure persists.
Effective hardware troubleshooting progresses from least-invasive to most-invasive steps: establishing a bare-bones state by removing peripherals and extra drives, resetting BIOS settings via CMOS, testing RAM configurations individually, and lastly removing the CPU cooler to inspect socket pins directly.

Adım Adım Çözüm

1
Disconnect peripherals, storage drives, and non-essential expansion cards.
Isolates the boot environment to core components (motherboard, CPU, RAM, power supply).
Standard diagnostic methodology dictates removing external variables and secondary hardware first.
2
Perform a CMOS reset via onboard jumper or RTC battery removal.
Clears invalid hardware configuration parameters or firmware corruption in NVRAM.
Power events frequently corrupt transient system settings without causing physical hardware destruction.
3
Test system boot with a single memory module in the primary channel slot.
Determines whether a specific RAM module or DIMM slot is preventing memory training during POST.
RAM testing is non-invasive and systematically pinpoints memory-channel faults.
4
Remove the heatsink and CPU to inspect socket pins and pads.
Verifies structural and electrical pin integrity on the socket grid array.
Reseating or inspecting the CPU requires thermal compound cleanup and component disassembly, so it is performed last.

Anahtar Kavram

Methodological order of isolation for core hardware component failures during POST diagnostics
Tahmini Süre:1m 30s
Soru 992Soru →

A enterprise database server hosting critical business records triggers a S.M.A.R.T. threshold alert indicating that one drive in a hardware RAID 1 array has accumulated excessive uncorrectable read errors and is predicting imminent hardware failure. Which of the following initial actions should the system technician perform to safely resolve the issue while preserving array availability and data integrity? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Perform an immediate verified backup of the critical data stored on the array volume.; Replace the degrading drive with a compatible new drive and initiate the array rebuild process.

Cevap

The technician should perform an immediate verified backup of the critical data stored on the array volume and replace the degrading drive with a compatible new drive, followed by initiating the array rebuild process.
When responding to S.M.A.R.T. alerts predicting drive failure in a RAID 1 array, best practice dictates securing a fresh backup first to mitigate data loss risks during repair. Next, the failing drive must be replaced with a healthy disk of matching or greater specification and the array rebuild process initiated to reinstate full volume mirroring.

Adım Adım Çözüm

1
Secure array data before hardware modification
Recent verified backup created in case secondary drive issues manifest during rebuild strain.
RAID rebuilding places extra operational stress on remaining disks, so creating a fresh backup minimizes data loss exposure.
2
Replace degraded physical drive
The failing drive is swapped out for a healthy drive of equal or greater performance and capacity specifications.
Physical drive failure warnings indicated by S.M.A.R.T. require hardware replacement rather than software repairs.
3
Rebuild RAID 1 array redundancy
The RAID controller synchronizes data onto the new disk, restoring full mirror protection.
Initiating the rebuild action mirrors the active disk data onto the newly inserted drive.

Anahtar Kavram

RAID 1 Degraded State Recovery & Best Practices
Soru 993Soru →

An IT technician is preparing a fleet of enterprise desktop computers running 64-bit Windows 10 Pro for an automated upgrade to Windows 11 Pro. During pre-upgrade auditing, the technician discovers that several target systems are configured with legacy BIOS mode and Master Boot Record (MBR) partition tables, despite having UEFI-capable motherboard firmware. The upgrade requirements stipulate that the system drive must be converted to GUID Partition Table (GPT) to support UEFI boot mode without losing user data or reinstalling the operating system. Which of the following command-line utilities should the technician run within Windows prior to initiating the operating system upgrade?

Cevabı ve açıklamayı göster

Cevap: mbr2gpt /convert /allowFullOS

Cevap

Execute mbr2gpt /convert /allowFullOS in the command prompt prior to switching firmware to UEFI mode.
The correct answer specifies using the MBR2GPT tool with the /convert and /allowFullOS switches. Windows 11 mandates UEFI firmware mode, which requires the operating system boot drive to use the GPT partition style. MBR2GPT is designed specifically to convert an MBR system disk to GPT without altering or erasing data on the disk, making it the appropriate pre-upgrade utility.

Adım Adım Çözüm

1
Identify the prerequisite requirement for upgrading to Windows 11.
Windows 11 requires UEFI boot mode with GPT partition style.
Systems currently running in legacy BIOS mode with MBR must be converted to GPT before the upgrade installer will proceed.
2
Select the non-destructive disk partition conversion tool native to Windows 10.
mbr2gpt.exe is the built-in Microsoft tool designed specifically for converting MBR disks to GPT without data loss.
Traditional tools like diskpart require wiping the drive, whereas mbr2gpt preserves partitions and data.
3
Apply the appropriate syntax switches for running within an online Windows environment.
The /convert switch executes the conversion, and /allowFullOS allows the tool to run inside full Windows 10 rather than WinPE.
Executing mbr2gpt /convert /allowFullOS successfully converts the system disk style online.

Anahtar Kavram

MBR to GPT disk conversion using MBR2GPT tool for UEFI and OS upgrade prerequisites
Soru 994Soru →

An IT technician is resolving an issue with a corporate network multifunction device (MFD). Department staff report that while printing documents over the network works normally from all workstations, attempting to use the 'Scan to Network Folder' feature fails for all users with an authentication error. Which of the following is the most likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The service account credentials stored on the MFD for SMB share access have expired or changed.

Cevap

The service account credentials stored on the MFD for SMB share access have expired or changed.
The correct answer correctly identifies that MFD 'Scan to Folder' functions use SMB protocols configured with saved service account credentials on the printer itself. When password expiration or policy changes occur on the domain server, the MFD fails authentication while normal network printing (which uses client-initiated print queues) continues to work.

Adım Adım Çözüm

1
Analyze the reported symptoms and scope
Network printing functions properly for all users, but 'Scan to Network Folder' produces authentication errors for all users.
Because network printing works, basic IP connectivity and network interface settings are fully operational.
2
Identify the authentication mechanism used for MFD network scanning
MFD scan-to-folder features use SMB/CIFS protocols configured with service account credentials stored on the embedded web server (EWS).
If password policies force a password change or the service account locks out, the printer cannot authenticate to the destination server.
3
Determine the corrective action
Update the stored service account username and password in the MFD's web management interface.
Re-authenticating the MFD with valid credentials restores scan-to-folder functionality without interrupting existing print capabilities.

Anahtar Kavram

Multifunction Device Network Scanning Authentication
Soru 995Soru →

A facilities security team is planning physical enhancements for an enterprise data center building located near a heavy traffic intersection. To prevent vehicles from ramming through the main building entrance or damaging structural perimeter walls, which of the following physical security controls should be installed?

Cevabı ve açıklamayı göster

Cevap: Bollards

Cevap

Bollards are the physical security control designed specifically to prevent vehicle ramming and perimeter breaches by motor vehicles.
Bollards are heavy-duty vertical posts placed along perimeters, sidewalks, and building entrances specifically to block vehicles from driving into structures or secure grounds.

Adım Adım Çözüm

1
Analyze the threat identified in the scenario
The primary threat is vehicle impact or ramming into the building perimeter and main entrance.
Security measures must match the specific threat vector, which in this case is a vehicular collision.
2
Evaluate the function of physical security barriers
Bollards act as physical vehicle barriers capable of stopping or decelerating heavy motor vehicles.
Installing impact-resistant posts along building perimeters mitigates vehicle-borne entry or damage.

Anahtar Kavram

Physical Security Barriers and Vehicle Impact Protection
Tahmini Süre:45s
Soru 996Soru →

A datacenter administrator is designing physical security controls for a ground-floor server room located immediately adjacent to a public parking lot. Compliance regulations mandate that the facility implement measures to prevent physical perimeter breaches caused by vehicle impacts, while also preventing unauthorized interception of high-frequency electromagnetic RF emissions originating from wireless testing hardware inside the facility. Which TWO of the following physical security controls should the administrator implement to satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reinforced exterior steel bollards installed along the building perimeter line; A grounded Faraday cage enclosure integrated into the room's wall structure

Cevap

The administrator should implement reinforced exterior steel bollards along the perimeter to mitigate vehicle impacts and integrate a grounded Faraday cage enclosure into the wall structure to prevent electromagnetic RF signal leakage.
Implementing steel bollards along the exterior perimeter line creates a physical barrier capable of stopping moving vehicles from breaching the building wall. Installing a grounded Faraday cage within the room envelope creates an electromagnetic shield that attenuates and blocks radio frequency (RF) signals, preventing eavesdropping on wireless hardware emissions.

Adım Adım Çözüm

1
Identify the specific physical security threats defined in the scenario.
The scenario requires protection against two specific threat vectors: vehicular impact against ground-floor walls and electromagnetic RF signal interception.
Selecting appropriate physical security controls requires matching each control directly to the specific threat vector.
2
Evaluate physical barriers for kinetic impact defense.
Bollards are heavy vertical posts installed outside a facility designed specifically to stop vehicle ramming attacks.
Neither access control vestibules, cable locks, nor privacy screens offer structural kinetic protection against moving vehicles.
3
Evaluate signal containment controls for RF eavesdropping.
A Faraday cage utilizes grounded conductive enclosure materials to block electromagnetic emissions from escaping the server room.
Standard walls, privacy filters, and door access vestibules do not block or attenuate electromagnetic RF signal leakage.

Anahtar Kavram

Physical Security Controls (Bollards and Faraday Cages)
Tahmini Süre:2m 0s
Soru 997Soru →

A software quality assurance tester attempts to enable Windows Sandbox on a company-issued laptop to execute unverified applications in an isolated desktop environment. Upon opening the Turn Windows features on or off dialog, the technician discovers that the checkbox for Windows Sandbox is completely missing. System information reveals that the laptop is running Windows 11 Home edition (64-bit) with hardware virtualization enabled in the UEFI. Which of the following best explains why Windows Sandbox is unavailable and identifies the required remediation?

Cevabı ve açıklamayı göster

Cevap: Windows 11 Home does not support Windows Sandbox; the operating system must be upgraded to Windows 11 Pro, Enterprise, or Education.

Cevap

Windows 11 Home edition does not include Windows Sandbox. Upgrading the operating system edition to Windows 11 Pro, Enterprise, or Education is required to access and enable this feature.
Windows Sandbox relies on lightweight hypervisor technology built into Windows. Microsoft restricts native containerized/virtualization features like Windows Sandbox and Client Hyper-V to Pro, Enterprise, and Education editions. Therefore, Windows 11 Home cannot run Windows Sandbox, and an edition upgrade to Pro or higher is required.

Adım Adım Çözüm

1
Analyze the reported OS edition and required feature capability.
The target computer is running Windows 11 Home, and the user requires Windows Sandbox for isolated application testing.
Windows Sandbox relies on Hyper-V virtualization technology integrated directly into the operating system.
2
Evaluate feature availability across Windows 11 editions.
Advanced management and virtualization tools like BitLocker, Hyper-V, Domain Join, and Windows Sandbox are restricted to Windows 11 Pro, Enterprise, and Education editions.
Windows 11 Home lacks native hypervisor feature components, making Windows Sandbox completely unavailable regardless of hardware capability.
3
Determine the mandatory upgrade path.
An edition upgrade to at least Windows 11 Pro is necessary to unlock the feature.
Upgrading the OS edition provides the required core system binaries without requiring a clean OS reinstallation.

Anahtar Kavram

Windows OS Edition Feature Boundaries (Windows Sandbox / Hyper-V)
Tahmini Süre:1m 15s
Soru 998Soru →

An IT technician is assigned to upgrade a desktop computer currently running a 32-bit version of Windows 10 Home. The system uses a legacy Master Boot Record (MBR) partition table on its primary boot drive. The organization requires the workstation to be upgraded to a 64-bit version of Windows 11 Pro while preserving user personal files and application data. Which of the following procedures represents the required method to achieve this configuration?

Cevabı ve açıklamayı göster

Cevap: Back up all user data, convert the partition style to GPT, enable UEFI mode in the system firmware, perform a clean installation of 64-bit Windows 11 Pro, and restore the user data.

Cevap

Back up user data, convert the disk partition scheme to GPT, enable UEFI boot in system firmware, perform a clean installation of 64-bit Windows 11 Pro, and restore the files.
Upgrading an operating system from a 32-bit architecture to a 64-bit architecture strictly requires a clean installation; an in-place upgrade path does not exist between different architectures. Additionally, Windows 11 requires UEFI firmware mode and a GPT partition scheme. Therefore, the technician must back up all existing user data, configure the hardware for UEFI and GPT, perform a clean installation of 64-bit Windows 11 Pro, and subsequently restore the user data.

Adım Adım Çözüm

1
Identify system prerequisites and constraints
Recognize that moving from a 32-bit OS to a 64-bit OS cannot be performed via an in-place upgrade.
Microsoft Windows requires a complete clean installation when changing CPU architecture from 32-bit (x86) to 64-bit (x64).
2
Identify Windows 11 hardware and firmware requirements
Determine that UEFI boot mode and GPT partition style are mandatory for Windows 11.
Windows 11 does not support booting from Legacy BIOS or MBR partition schemes.
3
Formulate the correct deployment procedure
Back up user data, reconfigure disk/firmware to GPT/UEFI, execute a clean install of 64-bit Windows 11 Pro, and restore data.
A clean installation wipes the existing partition, making external backup and restoration necessary to preserve files.

Anahtar Kavram

OS Architecture Upgrade Constraints and Windows 11 Requirements
Soru 999Soru →

An IT security team must update physical security controls at a satellite office based on a recent vulnerability audit. The report mandates deploying controls to specifically address two vulnerabilities: preventing the physical theft of unattended desktop computers located in open work areas, and physically blocking unauthorized media insertion into unused Ethernet and USB ports on network switches. Which of the following physical security controls should the IT team deploy to fulfill these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Cable locks; Port locks

Cevap

Cable locks and port locks should be deployed to satisfy the audit requirements.
Cable locks physically tether workstation computers to stationary objects to mitigate theft in accessible work environments. Port locks are physical plugs inserted into empty USB or Ethernet ports that require a proprietary key to remove, preventing unauthorized physical access to network infrastructure.

Adım Adım Çözüm

1
Analyze the first requirement: preventing physical theft of unattended desktop computers in open areas.
Identify that cable locks (such as Kensington locks) tether the desktop chassis directly to desks or structural fixtures, preventing hardware theft.
Cable locks provide a direct physical restraint against unauthorized equipment removal.
2
Analyze the second requirement: physically blocking unauthorized media/connections into unused Ethernet and USB ports on network switches.
Identify that port locks plug into unused RJ-45 and USB sockets and require a specialized key to remove, blocking unauthorized physical connections.
Port locks secure open interface ports from unauthorized physical flash drive insertion or rogue device attachment.
3
Evaluate the non-selected options to confirm they do not satisfy either requirement.
Privacy filters address visual security, asset tags address tracking, and Faraday bags address RF shielding.
None of the alternative options physically anchor hardware or lock down network ports.

Anahtar Kavram

Physical Security Controls for Device Anchoring and Interface Locking
Tahmini Süre:2m 0s
Soru 1000Soru →

A desktop technician is deploying a legacy line-of-business application on a shared Windows 11 workstation used by multiple domain users. During installation, the core application files are written to %PROGRAMFILES%, and shared runtime configuration files are placed in %PROGRAMDATA%. When standard domain users launch the application, it crashes immediately with a permission denied error when attempting to modify its runtime configuration file. Which of the following is the MOST secure configuration change that resolves the issue while following the principle of least privilege?

Cevabı ve açıklamayı göster

Cevap: Grant the local Users group Modify permissions specifically on the application's subfolder within %PROGRAMDATA%.

Cevap

Grant the local Users group Modify permissions specifically on the application's subfolder within %PROGRAMDATA%.
By default, Windows restricts standard users from modifying files within %PROGRAMDATA%. When an application requires multi-user write access to shared configuration files stored in %PROGRAMDATA%, the system administrator should grant Modify permissions on that application's specific folder to the local Users group. This allows the application to function correctly for all users while upholding the principle of least privilege.

Adım Adım Çözüm

1
Analyze the location of the failing file.
Identified that the application attempts to write runtime configuration data to %PROGRAMDATA%, which by default restricts Write/Modify permissions for standard users.
Standard users have Read/Execute permissions in %PROGRAMDATA% by default, causing legacy or improperly designed applications requiring runtime updates to crash.
2
Evaluate security restrictions and least privilege requirements.
Rule out solutions that grant broad administrative access or change OS editions unnecessarily.
Least privilege dictates granting only the minimal permissions necessary for the specific resource.
3
Apply targeted Folder ACL modification.
Grant Modify permissions to standard users exclusively on the specific application folder inside %PROGRAMDATA%.
This resolves the runtime file write error while restricting user access outside the designated application folder.

Anahtar Kavram

Application installation scope, NTFS permissions, and %PROGRAMDATA% storage requirements
ÖncekiSayfa 50 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin