Tüm alıştırma soruları

3551 soru

Soru 1001Soru

A technician needs to manually install a desktop application on a Windows workstation. Place the standard steps of the application installation workflow in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order begins with verifying system requirements and architecture compatibility, followed by running the installer with administrative privileges, completing the setup wizard configuration, and finally testing application functionality.
The standard application installation process begins by verifying system requirements and operating system architecture (32-bit vs 64-bit) to ensure compatibility. Next, the setup executable is launched using administrative privileges (Run as Administrator) to grant write access to system directories. After elevation, the technician configures settings within the installation wizard. Finally, the application is launched post-install to verify functional integrity.

Adım Adım Çözüm

1
Check software prerequisites against system specifications.
System compatibility is confirmed prior to installation attempt.
Prevents installation failures caused by architecture mismatches or inadequate system resources.
2
Elevate permissions to execute the setup package.
Installer gains administrative permissions to modify Program Files and the Windows Registry.
Standard user context lacks permission to modify protected system locations.
3
Proceed through wizard customization prompts.
Application files are copied to specified directories.
Defines installation parameters such as destination path and shortcut options.
4
Launch and test the installed program.
Application opens successfully and verifies deployment.
Ensures the application operates properly before turning the workstation over to the user.

Anahtar Kavram

Standard Manual Application Installation Sequence
Tahmini Süre:1m 0s
Soru 1002Soru

An IT technician is tasked with setting up an automated USB-based deployment process to perform unattended Windows installations on offline workstations. Place the steps required to prepare the answer file and execute the unattended installation in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts by opening install.wim in Windows SIM to create a catalog file, followed by configuring the answer file settings, validating the answer file for errors, saving it as autounattend.xml to the root of the USB drive, and finally booting the target computer from the USB drive to execute setup.
The correct sequence follows the standard Windows System Image Manager (SIM) workflow for creating an unattended deployment media: catalog generation from the WIM image file, answer file configuration, syntax validation, saving as autounattend.xml on the root directory of the installation media, and finally booting the target workstation to execute the automated installation.

Adım Adım Çözüm

1
Load install.wim into Windows System Image Manager (SIM) to generate the image catalog file (.clg).
The component list and configurable settings for the OS image become available for selection.
Windows SIM requires a catalog file to display configurable OS options and validate dependencies.
2
Build a new answer file by configuring settings across deployment passes (e.g., windowsPE, oobeSystem).
The custom answer file populated with automated deployment instructions is created.
Component settings define automated actions such as disk partitioning, administrator account creation, and regional preferences.
3
Run validation check on the answer file within Windows SIM.
Any syntax errors, invalid values, or missing mandatory settings are identified and fixed.
Unvalidated answer files can cause Windows Setup to fail or prompt for manual input mid-installation.
4
Save the file named autounattend.xml to the root directory of a bootable installation USB drive.
The answer file is positioned in the exact path monitored by the Windows Setup engine during startup.
Windows Setup scans the root directory of removable storage devices specifically for the file name autounattend.xml.
5
Insert the USB drive into the target computer and boot to the installation media.
Windows Setup detects autounattend.xml and runs the complete installation without requiring user interaction.
Executing the setup from media triggers automated script processing defined in the answer file.

Anahtar Kavram

Unattended OS Installation and Answer File (autounattend.xml) Workflow
Soru 1003Soru

An executive assistant in the finance department receives an urgent email claiming to be from the company's Chief Executive Officer (CEO). The email states that the CEO is in an emergency board meeting and requires an immediate wire transfer to secure an acquisition, directing the assistant to enter corporate banking credentials into a provided link. A technician inspects the email header and notices the sender's domain uses a subtle typosquatting variation of the legitimate company domain. Which of the following social engineering threat types best describes this attack?

Cevabı ve açıklamayı göster

Cevap: Whaling

Cevap

Whaling
Whaling is a specialized spear phishing attack directed at high-level corporate executives or leveraging top executive impersonation to deceive employees into performing financial transactions or disclosing confidential information.

Adım Adım Çözüm

1
Analyze the attack vector and target.
The attack uses a fraudulent email impersonating a high-level executive (CEO) to target financial credentials and initiate wire transfers.
Identifying the target profile and delivery mechanism distinguishes general phishing from specialized targeted attacks.
2
Evaluate the social engineering classification.
Targeted phishing campaigns focused on executive roles or leveraging executive authority for financial gain are classified as whaling.
Whaling specifically describes spear phishing directed at or mimicking top corporate executives.

Anahtar Kavram

Whaling and Spear Phishing Attack Vectors
Soru 1004Soru

A desktop support technician is troubleshooting a Windows 11 Pro laptop connected to an enterprise local area network. The laptop can successfully ping local network devices by IP address and resolve internal domain names via DNS, but all web browser traffic destined for external websites fails to load. The technician suspects that an outdated static corporate proxy server configuration is intercepting and dropping the outbound browser requests. Which Control Panel applet should the technician open to modify system-wide proxy server settings and LAN configuration options?

Cevabı ve açıklamayı göster

Cevap: Internet Options

Cevap

Internet Options is the correct Control Panel applet because it provides access to the Connections tab, where LAN settings and proxy server parameters are configured.
Internet Options is the dedicated Control Panel applet for configuring web connection properties, security zones, and proxy server settings. Clicking LAN settings under the Connections tab allows technicians to enable, disable, or adjust static proxy server IP addresses and port numbers.

Adım Adım Çözüm

1
Analyze the technical scenario requirements.
The technician needs to locate and edit system-wide static proxy server settings for internet connectivity troubleshooting.
Web traffic is failing due to an outdated proxy configuration despite working underlying IP connectivity and DNS resolution.
2
Map the proxy management function to the appropriate Control Panel utility.
System-wide proxy configurations, automatic script URLs, and bypass lists are maintained within Internet Options under the Connections tab (LAN Settings).
Other network applets focus on adapter bindings or local network sharing rather than HTTP/HTTPS routing settings.
3
Select the option corresponding to Internet Options.
Internet Options is identified as the correct utility.
Opening Internet Options directly resolves the issue by giving access to clear or update the static proxy IP and port.

Anahtar Kavram

Identifying Windows Control Panel applet locations for network proxy and internet connectivity management
Tahmini Süre:2m 0s
Soru 1005Soru

A systems administrator needs to monitor system performance on a Windows 11 Pro workstation over a 48-hour period to establish a performance baseline. The collected metrics, including CPU usage, available memory, and disk transfer rates, must be continuously written to a counter log file for offline analysis without requiring an active user session or keeping a graphical monitoring utility open on the screen. Which Windows Administrative Tool should the administrator use to configure this automated performance logging?

Cevabı ve açıklamayı göster

Cevap: Performance Monitor

Cevap

Performance Monitor is the correct utility to configure automated counter logging over an extended period.
Performance Monitor (perfmon.msc) is the built-in Windows utility designed for detailed performance baselining. Using Data Collector Sets, administrators can record specific performance counters (such as Processor Time, Available MBytes, and Disk Bytes/sec) continuously into log files for long-term analysis without keeping a user session logged in.

Adım Adım Çözüm

1
Identify the core requirement of the scenario
The scenario requires automated, long-term (48-hour) performance data logging to a counter log file without needing an active GUI session open.
Establishing a system baseline requires collecting numerical counter data over time for offline analysis.
2
Evaluate the capabilities of Windows administrative utilities
Performance Monitor (perfmon.msc) contains the Data Collector Sets feature, which allows administrators to define specific counters (CPU, RAM, Disk) and schedule automated logging to binary or CSV log files in the background.
Other tools like Resource Monitor and Task Manager offer real-time monitoring but lack automated background log collection functionality.
3
Select the appropriate administrative tool
Performance Monitor is the only tool listed that natively supports Data Collector Sets for baseline log file generation.
It fulfills all requirements for unattended, long-term metric gathering.

Anahtar Kavram

Using Performance Monitor Data Collector Sets for long-term performance baselining and log collection.
Soru 1006Soru

An executive assistant receives an urgent email appearing to come directly from the Chief Executive Officer (CEO) requesting an immediate transfer of funds to a new vendor. Simultaneously, a system administrator discovers that employee web traffic intended for the corporate banking portal is being secretly redirected to a fake login page through altered local host files. Which of the following threat types are demonstrated in this scenario? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Whaling; Pharming

Cevap

Whaling and Pharming are the correct threat types.
Whaling accurately describes spoofing high-level executives to coerce employees into transferring funds. Pharming accurately describes corrupting host files or DNS settings to misdirect web traffic to spoofed websites.

Adım Adım Çözüm

1
Analyze the email attack vector targeting executive authorization.
Identify that impersonating executive leadership for fraudulent wire transfers is whaling.
Whaling targets or spoofs high-level executive positions to achieve high-impact malicious goals.
2
Analyze the network redirection method affecting web browsing.
Identify that modifying host files to secretly send users to a fraudulent banking site is pharming.
Pharming manipulates domain name resolution to hijack traffic without the user's explicit interaction with a malicious link.

Anahtar Kavram

Identifying executive-targeted phishing (whaling) and DNS/host-file web traffic misdirection (pharming).
Soru 1007Soru

An IT technician is setting up desktop workstations in an unsupervised public library computer room. The facility management wants to prevent visitors from opening the computer cases to steal or tamper with internal components such as RAM and system drives. Which of the following physical security controls should the technician install?

Cevabı ve açıklamayı göster

Cevap: Chassis locks

Cevap

Chassis locks
Chassis locks (or case locks) prevent unauthorized individuals from removing the side panel or cover of a computer case, effectively protecting internal components like memory, storage drives, and processors from physical theft or tampering.

Adım Adım Çözüm

1
Identify the primary threat described in the scenario
The main risk is unauthorized physical access to internal system components (RAM, storage drives) by opening the desktop computer case.
Understanding the specific vector of physical access isolates the appropriate physical security control.
2
Evaluate the available physical security controls against the specific requirement
Chassis locks directly restrict physical access to the computer's internal enclosure.
Securing the case physically prevents users from removing panels or accessing internal hardware.

Anahtar Kavram

Hardware Enclosure Protection
Tahmini Süre:1m 0s
Soru 1008Soru

A Windows 11 client workstation in an enterprise environment can successfully access internet websites by URL and reach local resources using IP addresses. However, when users attempt to connect to internal file servers using domain hostnames (such as \\fileserver.corp.local), the connection fails. A technician runs `ipconfig /all` and observes that the IPv4 network adapter is configured with a static IP of 10.1.5.50, a gateway of 10.1.5.1, and public DNS servers (8.8.8.8 and 8.8.4.4). Which of the following networking updates will resolve the hostname resolution failure while maintaining internet connectivity?

Cevabı ve açıklamayı göster

Cevap: Reconfigure the primary DNS server IP address to point to the internal Active Directory domain controller.

Cevap

Reconfigure the primary DNS server IP address on the network adapter to point to the internal Active Directory domain controller.
Internal active directory domain names can only be resolved by internal DNS servers containing the local zone files. Assigning public DNS servers prevents clients from locating internal network shares by hostname.

Adım Adım Çözüm

1
Analyze the reported connectivity symptoms
The client can reach external sites by URL (public DNS works) and internal resources by IP (IP routing works), but internal name resolution (.corp.local) fails.
Public DNS servers like 8.8.8.8 do not hold zone records for private internal enterprise domains.
2
Identify the required TCP/IP property modification
Change the client adapter's Preferred DNS Server setting from 8.8.8.8 to the internal IP address of the local domain controller/DNS server.
The internal DNS server will resolve internal hostnames directly and forward external name queries to public DNS servers.

Anahtar Kavram

Windows TCP/IP Client DNS Configuration for Internal Domain Name Resolution
Soru 1009Soru

A shipping warehouse technician is troubleshooting a direct thermal label printer connected locally to a workstation. The printer suddenly stops feeding labels during batch print jobs, displaying a paper feed error. Additionally, multiple print jobs sent from the workstation are stuck in the local queue and cannot be deleted through the operating system GUI. Which TWO of the following actions should the technician perform to address these issues? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Clean and inspect the rubber platen roller for adhesive residue or debris.; Stop the Print Spooler service, clear the spooler PRINTERS directory files, and restart the service.

Cevap

The technician should inspect and clean the rubber platen roller to fix the paper feeding error, and stop the Print Spooler service to clear stuck files in the spooler folder before restarting the service.
Cleaning the rubber platen roller restores proper mechanical friction needed to pull heat-sensitive label stock through a direct thermal printer. Additionally, stopping the Print Spooler service releases locked spool files, allowing the technician to manually purge stuck jobs from the spool folder and restore queue functionality upon service restart.

Adım Adım Çözüm

1
Address physical paper feed issues on the direct thermal printer.
Inspecting the rubber platen roller identifies sticky label residue that prevents proper media advancement across the thermal printhead.
Direct thermal mechanisms rely on friction between the platen roller and paper media.
2
Resolve un-deletable stuck jobs in the workstation queue.
Stopping the Print Spooler service releases file locks on the spooling files in C:\Windows\System32\spool\PRINTERS, allowing manual deletion before restarting the service.
When the spooler service holds corrupted print jobs in memory, clearing the physical spool directory resets queue management.

Anahtar Kavram

Direct thermal printer mechanical maintenance and OS print spooler troubleshooting
Soru 1010Soru

A systems administrator is preparing a network-based PXE deployment to image 50 new bare-metal desktop computers with Windows 11 Enterprise. The target computers utilize custom NVMe storage controllers that are not natively recognized by standard Windows installation media. Which of the following configuration tasks must the administrator perform prior to capturing and deploying the system image? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Inject the custom NVMe storage controller drivers into the boot image (boot.wim) using the DISM command-line utility.; Execute the Sysprep utility with the /generalize and /oobe options on the reference system prior to image capture.

Cevap

The administrator must inject the custom NVMe storage controller drivers into the boot image (boot.wim) using DISM and execute the Sysprep tool with /generalize and /oobe options on the reference computer prior to image capture.
Injecting storage drivers into boot.wim via DISM enables WinPE to recognize non-standard NVMe controllers when booting via PXE. Running Sysprep with /generalize and /oobe removes machine-specific SIDs and resets system parameters, which is mandatory before capturing a golden image for multi-system deployment.

Adım Adım Çözüm

1
Prepare the reference system by removing system-specific information.
Running Sysprep with the generalize parameter strips unique Security Identifiers (SIDs) and resets hardware-specific settings, while the OOBE switch prepares the system for first-boot user setup.
Capturing an un-generalized OS image causes duplicate SIDs and configuration conflicts across networked computers.
2
Service the Windows Boot Image (boot.wim) using Deployment Image Servicing and Management (DISM).
The custom NVMe storage drivers are integrated directly into the Windows Preinstallation Environment (WinPE).
Without storage controller drivers injected into boot.wim, WinPE will fail to detect the NVMe drives during setup initialization.

Anahtar Kavram

Image Generalization (Sysprep) and Offline Driver Servicing (DISM) for Network Deployments
Soru 1011Soru

A bench technician is troubleshooting a desktop computer that fails to display any video output upon powering on. The system fans spin continuously at high speed, the power indicator light stays solid, but the computer fails to complete POST and produces a repeating pattern of three long beeps. Which of the following actions should the technician perform first to resolve this issue?

Cevabı ve açıklamayı göster

Cevap: Re-seat the system RAM modules in the primary memory slots.

Cevap

Re-seat the system RAM modules in the primary memory slots.
Audible POST beep sequences are hardware-level diagnostic codes emitted by the UEFI/BIOS during initial power-on checks. A repeating long beep pattern standardly signals a memory (RAM) initialization or detection error. Re-seating the RAM modules ensures proper pin contact and clears potential seating misalignment.

Adım Adım Çözüm

1
Analyze the reported POST symptoms
System powers on with fans running but fails to initialize video and outputs a repeating 3-beep pattern.
Audible POST beep patterns are motherboard diagnostic codes indicating pre-video hardware failures.
2
Identify the component indicated by the diagnostic code
Repeating long beep patterns correspond to RAM detection, seating, or memory channel issues.
The motherboard firmware emits specific beep codes when system memory cannot be validated during early startup.
3
Select the appropriate non-destructive physical troubleshooting step
Removing and firmly re-seating the RAM modules in the primary motherboard slots.
Re-seating memory is the quickest primary diagnostic step to resolve loose contact or improper slot seating.

Anahtar Kavram

POST Beep Codes and RAM Diagnostics
Soru 1012Soru

A corporate enterprise houses its database servers in a shared colocation facility where vendors and third-party technicians routinely access adjacent hardware. The company must implement a physical security control specifically for its rack cabinets that physically restricts cabinet opening to designated IT staff while automatically recording electronic audit logs of every individual cabinet access attempt. Which of the following physical security controls best fulfills these requirements?

Cevabı ve açıklamayı göster

Cevap: Smart rack locks integrated with smart card or biometric authentication

Cevap

Smart rack locks integrated with smart card or biometric authentication
Deploying smart rack locks with smart card or biometric readers ensures that only authorized personnel can open specific cabinet doors. Because the lock communicates with an access management system, every lock/unlock event is tied to a specific credential and recorded electronically in an immutable audit log, perfectly satisfying both physical isolation in colocation spaces and compliance logging requirements.

Adım Adım Çözüm

1
Analyze the physical security requirement
Identified two primary needs: physical access restriction at the individual rack cabinet level in a shared room, and automated electronic audit logging of access events.
General room-level security is insufficient because third parties share the room space.
2
Evaluate candidate controls against access restriction and logging requirements
Smart rack cabinet locks utilize electronic access control (cards/biometrics) to physically unlock cabinet doors while creating an audit log of who opened the cabinet and when.
Passive surveillance or manual sign-in logs fail to meet automated logging or individual authentication criteria.

Anahtar Kavram

Rack Level Physical Access Control and Audit Logging
Tahmini Süre:1m 30s
Soru 1013Soru

An IT technician is tasked with securing standalone server enclosures located inside a shared office space to prevent unauthorized physical opening of the equipment cases and theft of internal storage drives. Which TWO of the following physical security controls should the technician implement? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Server chassis locks; Cable locks secured to immovable structural anchors

Cevap

The correct physical security controls are server chassis locks and cable locks secured to immovable structural anchors.
Chassis locks restrict physical access to internal system components by securing the server case, while cable locks anchored to permanent fixtures prevent physical removal and theft of the entire server enclosure.

Adım Adım Çözüm

1
Identify the physical security objectives given in the scenario.
The requirements are protecting the internal components from unauthorized case opening and preventing theft of the system unit.
Choosing the appropriate physical control requires matching the physical barrier to the specific risk vector.
2
Evaluate which controls address these specific hardware risks.
Chassis locks prevent case opening to secure internal drives; cable locks anchor the equipment to prevent theft of the entire unit.
Both measures directly mitigate physical access and equipment removal in a shared office environment.

Anahtar Kavram

Physical Hardware Protection Controls
Soru 1014Soru

During a physical security evaluation at a financial firm's branch site, an auditor observes that unauthorized individuals can easily closely follow authorized personnel through card-swiped entry points into a sensitive data closet. The site manager requires a physical control that specifically restricts entry to one person at a time and actively prevents piggybacking without creating an emergency egress hazard. Which of the following physical security controls should be implemented?

Cevabı ve açıklamayı göster

Cevap: An access control vestibule equipped with interlocking doors and weight sensors

Cevap

An access control vestibule equipped with interlocking doors and weight sensors is the correct physical security control.
An access control vestibule (also known as a mantrap) uses a set of two interlocking doors where the second door will not unlock until the first door closes completely. When combined with weight or optical sensors inside the vestibule, it enforces single-person entry and actively prevents tailgating or piggybacking.

Adım Adım Çözüm

1
Analyze the physical security threat in the scenario
Identified tailgating/piggybacking where unauthorized individuals follow legitimate staff through secured doorways.
The scenario explicitly highlights unauthorized visitors walking closely behind authorized employees upon card entry.
2
Evaluate potential physical security mechanisms against anti-tailgating requirements
An access control vestibule (mantrap) enforces single-occupant progression using interlocking doors and presence/weight sensors.
Mantraps physically isolate the entry process so the second door will not unlock if multiple individuals are detected.
3
Differentiate correct control from ineffective alternatives
Biometrics, privacy screens, and bollards address authentication, visual privacy, and vehicle safety respectively, but fail to prevent tailgating.
Only an access control vestibule directly prevents physical piggybacking at pedestrian doorways.

Anahtar Kavram

Access Control Vestibules (Mantraps) for Anti-Tailgating
Soru 1015Soru

A technician is setting up a legacy line-of-business application on a Windows 11 workstation. Upon launching the program, an error message states that the operating system version is not supported, and the program closes immediately. The software vendor has discontinued support and no updates are available. Which of the following settings should the technician configure to allow the application to run successfully?

Cevabı ve açıklamayı göster

Cevap: Configure the application executable properties to run in Compatibility mode for a supported previous version of Windows.

Cevap

Configure the application executable properties to run in Compatibility mode for a supported previous version of Windows.
Configuring Compatibility mode in the application executable's properties tab allows Windows to simulate an earlier operating system environment (such as Windows 7 or 8), enabling legacy applications to pass OS version checks and run properly on Windows 11.

Adım Adım Çözüm

1
Right-click the application executable or shortcut and select Properties.
The application Properties dialog window opens.
Accesses configuration settings specific to the application binary.
2
Navigate to the Compatibility tab.
Compatibility settings and options are displayed.
Contains settings for emulating prior Windows environments.
3
Check 'Run this program in compatibility mode for' and select an earlier supported operating system (such as Windows 7 or Windows 8).
Windows applies compatibility shim settings to intercept and respond appropriately to OS version queries.
Allows legacy software to bypass modern OS version restriction checks.

Anahtar Kavram

Application Compatibility Mode Settings
Soru 1016Soru

A security technician is documenting physical security measures for a corporate data facility. Match each physical security control mechanism with its primary security function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Biometric scanner
Access control vestibule
Faraday bag
Bollard

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Biometric scanner matches with authenticating personnel based on unique biological characteristics. Access control vestibule matches with preventing tailgating by using interlocking doors. Faraday bag matches with blocking electromagnetic signals to shield mobile devices. Bollard matches with preventing vehicle ramming attacks.
Each physical security control serves a specific protective role: biometric scanners verify biological traits; access control vestibules isolate traffic with interlocking doors to stop tailgating; Faraday bags block radio frequency signals to prevent remote access; and bollards provide physical structural protection against vehicle impacts.

Adım Adım Çözüm

1
Analyze each physical security control item on the left.
Identified four physical security controls: Biometric scanner, Access control vestibule, Faraday bag, and Bollard.
Matching requires understanding the specific operational purpose of each physical barrier or defense mechanism.
2
Pair each physical control with its corresponding threat mitigation function.
Biometric scanner pairs with biological authentication; Access control vestibule pairs with interlocking door tailgating prevention; Faraday bag pairs with electromagnetic signal blocking; Bollard pairs with vehicle ramming defense.
Each physical control targets a distinct vector of unauthorized access or physical/wireless compromise.

Anahtar Kavram

Physical Security Controls and Threat Mitigation Functions
Soru 1017Soru

A desktop support technician is deploying a specialized line-of-business financial application onto a newly provisioned Windows 11 workstation. The application requires elevated administrator privileges to write to system directories during installation, creates shared configuration files in C:\ProgramData\FinanceApp, and requires database connection string settings to be established before standard domain users can operate it. Place the following installation and post-installation configuration steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts with verifying system hardware and OS architecture compatibility, followed by executing the installer using administrative elevation, completing the installation wizard, configuring ProgramData file settings and NTFS access permissions, and finally testing application launching under a non-administrative standard user profile.
Proper deployment procedures dictate validating requirements first, installing binaries with elevated rights second, configuring custom data paths and security permissions third, and performing final user verification last under normal user security contexts.

Adım Adım Çözüm

1
Perform initial pre-installation check of system hardware and OS architecture.
Ensures the workstation meets minimum CPU, RAM, disk space, and 64-bit environment requirements.
Installing software without validating minimum requirements can corrupt software state or cause immediate runtime failures.
2
Run installer package with administrative elevation.
Satisfies UAC prompts and provides necessary write tokens for system directories.
Standard user accounts lack rights to write to System32 or Program Files directories.
3
Complete core installation wizard.
Extracts application binaries and creates folder paths including C:\ProgramData\FinanceApp.
Application configuration files cannot be edited until the installer creates the destination folders and configuration templates.
4
Modify configuration files in ProgramData and update security access control lists (NTFS permissions).
Database parameters are stored and standard users are granted necessary permissions to read/write operational data.
Without adjusting default NTFS permissions on shared ProgramData folders, standard users will encounter Access Denied errors upon opening the application.
5
Log in as standard user and test application functionality.
Validates that the software functions correctly without requiring permanent administrative elevation.
Final validation confirms least privilege principles and ensures complete deployment success for end users.

Anahtar Kavram

Application Installation and Configuration Workflow
Tahmini Süre:2m 0s
Soru 1018Soru

A technician is investigating a malware infection on a workstation in the accounting department. The employee reports finding an unlabeled USB flash drive in the company breakroom and plugging it into the computer to identify its owner, which immediately executed malicious code. Which of the following social engineering attack types best describes this scenario?

Cevabı ve açıklamayı göster

Cevap: Baiting

Cevap

Baiting
Baiting is a social engineering attack where an attacker leaves malware-infected media, such as a USB flash drive or external storage, in a place where potential victims will find it (like a breakroom or parking lot). The attacker relies on the victim's natural curiosity to plug the device into a computer, which runs the malicious payload.

Adım Adım Çözüm

1
Analyze the attack mechanism described in the scenario.
The victim found an enticing physical object (an unlabeled USB drive) in a common area and plugged it in out of curiosity.
Identifying the vector (physical media drop) and psychological trigger (curiosity) isolates the threat category.
2
Match the observed threat vector to standard security definitions.
Leaving physical media loaded with malware to exploit curiosity is defined specifically as baiting.
Baiting lures victims into compromising their own systems through physical media or software promises.

Anahtar Kavram

Baiting Social Engineering Attacks
Tahmini Süre:45s
Soru 1019Soru

A systems administrator needs to create a restricted, customized administration tool for a junior technician that contains only the Event Viewer and Device Manager snap-ins. The technician should be able to view these utilities but prevented from modifying the console layout. Sequence the administrative steps required to configure and deploy this custom Microsoft Management Console (MMC).

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts by opening a blank console using mmc.exe, adding Event Viewer and Device Manager via Add/Remove Snap-in, changing the Console mode to User mode - limited access under Options, and saving the result as an .msc file.
Building a restricted MMC custom console requires initializing the blank MMC executable (mmc.exe), adding the target snap-ins (Event Viewer and Device Manager), configuring the Console mode under Options to User mode (limited access) to lock the layout, and finally saving the customized workspace as an .msc file.

Adım Adım Çözüm

1
Launch the Microsoft Management Console shell.
An empty MMC shell opens in Author mode by default.
Custom snap-in consoles must be constructed from an unconfigured MMC root.
2
Add Event Viewer and Device Manager snap-ins.
The specified administrative utilities are populated in the console tree.
Administrative utilities must be added before locking down the user interface.
3
Configure the console security and mode settings.
The Console mode is changed from Author mode to User mode - limited access.
This mode prevents users from adding/removing snap-ins or saving layout modifications.
4
Save and deploy the customized console file.
A standalone .msc file is created for distribution.
Saving finalizing the configuration so the junior technician can launch the pre-configured environment directly.

Anahtar Kavram

Microsoft Management Console (MMC) Author vs. User Mode configuration and .msc file creation.
Soru 1020Soru

A systems administrator is configuring specialized Windows workstations across an enterprise deployment. Match each specific administrative requirement to the correct Windows Control Panel utility used to configure it.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Configure local dialing rules, tone/pulse settings, and incoming call handling for legacy telephony hardware.
Manage system-wide 32-bit and 64-bit database drivers to enable external database connections via Data Source Names (DSN).
Adjust client-side caching limits and resolve file collision state errors for offline network file shares.
Change system-wide currency formatting, short date notations, and decimal symbol defaults across user profiles.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Telephony dialing rules pair with Phone and Modem; database DSN management pairs with ODBC Data Sources; offline file caching and conflicts pair with Sync Center; date, time, currency, and decimal formatting pair with Region.
Each requirement directly corresponds to a specific Control Panel applet: Phone and Modem configures telephony dialing rules and modem properties; ODBC Data Sources manages database connectivity drivers and Data Source Names (DSN); Sync Center monitors offline file caching, synchronization schedules, and conflict states; Region configures system-wide date, time, currency, and numerical formatting options.

Adım Adım Çözüm

1
Analyze requirement 1 (dialing rules and legacy telephony).
Identify that modem properties and dialing location rules are configured in the Phone and Modem Control Panel utility.
Phone and Modem is the dedicated administrative applet for legacy telephony settings.
2
Analyze requirement 2 (database drivers and DSN configuration).
Identify that Database Open Connectivity drivers and DSNs are managed via ODBC Data Sources (found under Administrative Tools/Control Panel).
ODBC Data Sources allows administrators to set up 32-bit and 64-bit connection pools to external databases.
3
Analyze requirement 3 (offline network shares and conflict resolution).
Identify that Sync Center manages Offline Files caching, sync schedules, and conflict handling.
Sync Center is specifically designed for managing network folder offline synchronization.
4
Analyze requirement 4 (currency, date, and decimal formatting).
Identify that regional format standards and locale settings are managed in the Region utility.
The Region applet controls numeric formats, short/long date representations, time formats, and system locale settings.

Anahtar Kavram

Windows Control Panel applet responsibilities and administrative usage scenarios
Tahmini Süre:2m 0s
ÖncekiSayfa 51 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin