Tüm alıştırma soruları

3551 soru

Soru 1041Soru

A user reports that their Windows 11 client workstation cannot reach any websites or remote subnets, although local network printing and local peer file sharing function correctly. A technician inspects the static IPv4 properties window in Network Connections (`ncpa.cpl`) and finds an IP address of 192.168.1.150192.168.1.150 and a subnet mask of 255.255.255.0255.255.255.0, but the Default Gateway entry is completely blank. Which of the following actions will resolve the remote connectivity issue?

Cevabı ve açıklamayı göster

Cevap: Enter the local router's IP address into the Default Gateway field of the IPv4 properties.

Cevap

Enter the local router's IP address into the Default Gateway field of the IPv4 properties.
The default gateway serves as the access point or router that forwards traffic from the local subnet to remote networks and the internet. When a static IP configuration leaves the Default Gateway field blank, the Windows client can only communicate with devices sharing its local network (192.168.1.0/24192.168.1.0/24). Entering the local router's IP address into the IPv4 properties restores external connectivity.

Adım Adım Çözüm

1
Analyze the network symptoms and existing IP configuration.
The client has a valid static IP address (192.168.1.150192.168.1.150) and subnet mask (255.255.255.0255.255.255.0), allowing local subnet communication, but lacks a default gateway.
Traffic destined for external networks (different subnets or the internet) requires a gateway router to route packets outside the local broadcast domain.
2
Determine the appropriate configuration step in Windows Network Connections (`ncpa.cpl`).
Identify that the local router's IP address (e.g., 192.168.1.1192.168.1.1) must be entered into the Default Gateway field.
Populating the Default Gateway field creates the default route (0.0.0.0/00.0.0.0/0) in the Windows routing table.

Anahtar Kavram

Default Gateway Configuration in Windows Client TCP/IP Properties
Tahmini Süre:1m 15s
Soru 1042Soru

Match each social engineering threat vector on the left with its corresponding attack description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Smishing
Typosquatting
Pretexting
Watering Hole

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Smishing corresponds to SMS text message phishing; Typosquatting corresponds to taking advantage of misspelled domain names; Pretexting corresponds to inventing a false story to gain information; Watering Hole corresponds to compromising websites frequently visited by target groups.
Smishing uses cellular SMS text messages; Typosquatting exploits browser URL entry mistakes; Pretexting relies on an invented narrative to manipulate targets; Watering Hole attacks compromise specific sites visited by targeted organizations.

Adım Adım Çözüm

1
Analyze the attack medium and methodology described in each item.
Identify that text messaging maps to Smishing, misspelled web addresses map to Typosquatting, crafted deceptive narratives map to Pretexting, and infected destination websites map to Watering Hole attacks.
Social engineering categories are defined by their specific delivery mechanisms and psychological tactics.

Anahtar Kavram

Social Engineering Vectors and Attack Methodologies
Tahmini Süre:1m 0s
Soru 1043Soru

A technician is performing a clean installation of Windows on a computer using a bootable USB flash drive. Place the following installation steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct installation sequence begins with configuring UEFI/BIOS boot priority to load the USB drive, followed by choosing regional settings in Windows Setup, selecting a Custom installation to target unallocated storage, and concluding with Out-of-Box Experience (OOBE) configuration.
A standard clean OS installation follows a linear progression: first, system firmware (UEFI/BIOS) must boot from the installation media; second, initial installer options like language and keyboard layout are selected; third, a custom installation path is chosen to format/select the target storage partition; and finally, post-install account and privacy setup occurs in the Out-of-Box Experience (OOBE).

Adım Adım Çözüm

1
Configure UEFI/BIOS boot order.
The computer boots directly into the USB installer media.
The computer cannot run the installer until the firmware is instructed to boot from the flash drive.
2
Specify localization preferences.
Language and keyboard settings are initialized for the setup environment.
This is the first interactive prompt after booting into the installer.
3
Choose Custom installation and target storage.
Windows setup copies system files onto the clean target drive.
Clean installations require selecting the custom pathway to select unallocated space.
4
Configure Out-of-Box Experience settings.
User accounts, network connections, and privacy preferences are established.
OOBE runs automatically after system files finish copying and the machine reboots.

Anahtar Kavram

OS Clean Installation Procedure
Soru 1044Soru

An IT support technician is resolving several printer hardware issues across different departments. Match each observed printer symptom to its most likely hardware cause.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Toner easily smudges or rubs off the paper after printing on a laser printer.
A thermal receipt printer feeds paper continuously but produces completely blank output.
A laser printer produces pages with a sharp, continuous vertical black streak down the entire page length.
An inkjet printer produces printouts with missing color bands and uneven horizontal streaks.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Toner smudging matches the fuser assembly failing to reach operating temperature; blank thermal receipt output matches thermal paper loaded backwards; a continuous vertical black line matches a scratched photosensitive drum; missing color bands on an inkjet printer match clogged printhead nozzles.
Each symptom directly corresponds to the fundamental physical component responsible for that stage of the printing process: fuser heat melts toner, thermal paper coating reacts to heat contact, drum charge integrity dictates vertical line defects, and nozzle cleanliness ensures even ink dispersion.

Adım Adım Çözüm

1
Analyze laser printer toner bonding mechanisms.
Identify that unfused toner wiping off paper directly points to a malfunctioning fuser assembly element or heat roller.
The fuser is responsible for melting toner onto the paper media.
2
Analyze direct thermal printing mechanisms.
Identify that blank output when paper feeds correctly indicates the heat-sensitive chemical layer of the paper is not contacting the printhead.
Direct thermal printing relies on heat applied directly to chemically coated paper.
3
Analyze laser drum defect geometry.
Identify that a continuous vertical line along the page axis indicates permanent surface damage or a gouge on the OPC drum.
A damaged drum surface fails to retain electrical charge along the circumference as it rotates.
4
Analyze inkjet liquid delivery defects.
Identify that horizontal streaks or missing colors indicate blocked fluid channels in the printhead micro-nozzles.
Dried ink in nozzles blocks liquid flow, causing incomplete lines.

Anahtar Kavram

Identifying root cause component failures based on physical print defect symptoms across laser, thermal, and inkjet printer technologies.
Soru 1045Soru

A Linux workstation technician is configuring security permissions on a shared processing script located at `/data/reports/process.sh`. Currently, the file has permissions set to `-rw-r--r--` and is owned by `root:analytics`. Members of the `analytics` group report that they can view the script but cannot execute it. The technician must grant execute permissions to both the file owner (`root`) and the group (`analytics`), while revoking all access for all other users (`others`). Which of the following shell commands should the technician execute to achieve this objective?

Cevabı ve açıklamayı göster

Cevap: chmod 750 /data/reports/process.sh

Cevap

Executing chmod 750 /data/reports/process.sh correctly sets file permissions to rwxr-x---, providing execute access to owner and group while blocking others.
The command 'chmod 750 /data/reports/process.sh' correctly sets the permission bits to 7 (rwx) for the file owner, 5 (r-x) for the assigned group, and 0 (---) for all other users, satisfying all scenario requirements.

Adım Adım Çözüm

1
Analyze required permissions for each permission triad (Owner, Group, Others)
Owner requires read, write, execute (rwx = 4+2+1 = 7). Group requires read, execute (r-x = 4+0+1 = 5). Others require no permissions (--- = 0+0+0 = 0).
Linux permissions are represented by 3 octal digits corresponding to User/Owner, Group, and Others.
2
Convert permission triads into octal representation
The target octal mode is 750.
Summing the values of required bits (r=4, w=2, x=1) yields 7 for owner, 5 for group, and 0 for others.
3
Select the correct command-line utility to alter file modes
The chmod command is used to modify mode bits.
chmod (change mode) changes file access permissions, whereas chown changes file ownership.

Anahtar Kavram

Linux file permissions and octal notation using chmod
Soru 1046Soru

A systems technician is preparing a workstation for a dual-boot configuration featuring both Windows 11 and a desktop Linux distribution on a single physical drive. Which TWO of the following procedures should the technician implement to ensure both operating systems install cleanly and boot correctly?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Install the Windows operating system prior to installing the Linux operating system.; Create unallocated disk space or shrink existing partitions prior to starting the secondary OS installation.

Cevap

The correct procedures are installing the Windows operating system prior to Linux, and ensuring unallocated space or dedicated partitions are created before installing the secondary operating system.
When configuring a dual-boot system, installing Windows first prevents the Windows installer from overwriting non-Windows boot managers. Additionally, preparing unallocated disk space or dedicated partitions before running the secondary installer ensures both operating systems reside on valid, isolated file systems.

Adım Adım Çözüm

1
Determine installation sequencing based on bootloader behavior.
Installing Windows first ensures that the subsequent Linux installation installs a bootloader (such as GRUB) capable of chainloading Windows Boot Manager.
Windows installation tools generally overwrite boot code without adding menu entries for non-Windows operating systems.
2
Prepare target storage media for multi-OS deployment.
Shrinking existing volumes to leave unallocated space allows the secondary OS installer to format its required file systems (e.g., ext4, swap).
Installers cannot install into active, fully allocated foreign filesystems without causing data destruction.

Anahtar Kavram

Multiboot Installation Requirements and Partition Management
Soru 1047Soru

An IT security technician is auditing physical security for a high-security server room at a branch office. Audit logs indicate that unauthorized individuals have repeatedly gained entry by following authorized personnel closely through the primary entrance door immediately after a valid badge scan. The organization requires a physical security enhancement that enforces single-person entry and prevents tailgating without requiring dedicated physical security guard staff. Which of the following physical security controls should the technician recommend?

Cevabı ve açıklamayı göster

Cevap: An access control vestibule equipped with interlocking doors and presence sensors

Cevap

An access control vestibule equipped with interlocking doors and presence sensors is the most effective physical control to prevent tailgating.
An access control vestibule (mantrap) consists of a small space with two interlocking doors. The inner door will not unlock until the outer door closes completely and internal weight or presence sensors confirm single occupancy, effectively blocking tailgating without requiring physical guards.

Adım Adım Çözüm

1
Identify the specific physical security vulnerability described in the scenario
The vulnerability is tailgating (piggybacking), where unauthorized individuals bypass physical entry authentication by closely following authorized staff.
Selecting the correct physical security measure requires matching the control to the exact attack vector.
2
Analyze the operational requirements of the target control
The requirement specifies physical enforcement of single-occupancy entry without relying on manual guard supervision.
Detection-only controls (CCTV) or identity verification controls (biometrics) fail to physically block an unauthorized person from stepping through an unlocked door.
3
Select the physical control mechanism designed for tailgating mitigation
An access control vestibule (mantrap) with interlocking doors and occupancy sensors ensures only one individual passes through at a time.
The interlocking mechanism holds the second door locked until the first door closes and single-person occupancy is validated.

Anahtar Kavram

Physical Access Control Vestibule (Mantrap)
Tahmini Süre:1m 30s
Soru 1048Soru

A desktop support technician is installing a 32-bit productivity application onto a workstation running a 64-bit edition of Windows 11. In which of the following default directory locations will Windows store the application's executable files?

Cevabı ve açıklamayı göster

Cevap: C:\Program Files (x86)

Cevap

The application files will be installed in C:\Program Files (x86).
On 64-bit versions of Windows, the operating system uses C:\Program Files (x86) as the default installation location for 32-bit applications to separate them from native 64-bit software.

Adım Adım Çözüm

1
Identify the architecture of the operating system and the application being installed.
The operating system is 64-bit (x64) Windows 11 and the application is 32-bit (x86).
Windows uses separate default installation directories to prevent architecture conflicts between 32-bit and 64-bit binaries.
2
Determine the standard installation path assigned by 64-bit Windows for 32-bit applications.
32-bit software is directed to C:\Program Files (x86).
Native 64-bit applications use C:\Program Files, whereas legacy or 32-bit applications use C:\Program Files (x86) to maintain compatibility via the WoW64 subsystem.

Anahtar Kavram

Windows Application Installation Paths for 32-bit vs. 64-bit Architectures
Tahmini Süre:45s
Soru 1049Soru

An IT security administrator is updating the physical security policy for an enterprise organization. Match each physical security control mechanism on the left to its primary protective function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Biometric scanner
Vehicle bollard
Mantrap
Privacy filter

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Biometric scanner matches with verifying unique physical characteristics for access control; Vehicle bollard matches with blocking physical perimeter access against vehicle ramming; Mantrap matches with enforcing single-person entry to prevent tailgating; Privacy filter matches with limiting display viewing angles to prevent shoulder surfing.
Each physical control addresses a distinct physical threat: biometric scanners evaluate physical traits (fingerprints/retina) for identity verification; bollards provide physical resistance against motor vehicle penetration; mantraps use dual interlocking doors to physically isolate individuals and block tailgating; and privacy filters restrict viewing angles to defeat visual observation (shoulder surfing).

Adım Adım Çözüm

1
Examine the physical security mechanisms listed in the left column.
Identified Biometric scanner, Vehicle bollard, Mantrap, and Privacy filter.
Understanding the function of each device is necessary to pair it with its security purpose.
2
Map each control to the specific physical threat or access requirement it addresses.
Biometrics prevent unauthorized credential usage, bollards block vehicles, mantraps stop unauthorized physical follow-through (tailgating), and privacy filters block visual eavesdropping.
Matching each control to its primary objective demonstrates knowledge of physical security controls.

Anahtar Kavram

Physical Security Controls and Functions
Soru 1050Soru

An IT technician is tasked with migrating user profiles, desktop settings, and application data from a legacy Windows workstation to a newly deployed machine using Microsoft's User State Migration Tool (USMT) during an enterprise operating system upgrade. What is the correct order of steps the technician should take to execute this migration process successfully?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper USMT migration sequence begins with configuring XML migration rules (MigUser.xml/MigApp.xml), running ScanState.exe on the source computer, completing the clean OS installation on the target computer, installing necessary software applications, and finally running LoadState.exe on the target computer to restore user data.
The User State Migration Tool (USMT) requires a structured sequence for command-line migrations in automated OS deployments. Customizing XML migration rule files comes first to define what data to harvest. Next, running the ScanState utility captures the profiles and settings from the source computer into a store. The target operating system is then freshly installed, followed immediately by installing required applications so their default registry entries exist. Finally, running the LoadState utility restores the saved profiles and settings into the target system and application environments.

Adım Adım Çözüm

1
Configure XML control files
Defines parameters for files, settings, and application states to collect.
USMT requires custom or standard XML rule files (like MigUser.xml) to dictate what gets captured.
2
Run ScanState.exe on source system
Gathers user state and stores it in an encrypted/compressed network or local store.
Data must be extracted from the old operating system environment before replacing or decommissioning it.
3
Deploy clean OS on target system
Establishes a baseline operating system environment.
The destination system must have a functional OS installation ready to accept software and user profiles.
4
Install local applications on target system
Prepares application paths and registry hives on the new OS.
If applications are not installed before restoring settings, USMT cannot properly map application preferences and registry keys.
5
Run LoadState.exe on target system
Applies user files, settings, and profile configurations to the new OS.
LoadState is the final command that completes data restoration into the newly configured application and OS environment.

Anahtar Kavram

User State Migration Tool (USMT) Workflow
Tahmini Süre:2m 0s
Soru 1051Soru

A desktop computer in a corporate office suddenly loses access to the company intranet after a workstation relocate. A technician is dispatched to troubleshoot the issue using a standard OSI bottom-up approach. In what sequence should the technician perform the following diagnostic steps?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence from first to last is: 1) Inspect the physical RJ-45 cable connections and link LED lights, 2) Execute ipconfig /all to verify IP configuration, 3) Ping the local default gateway address, 4) Perform an nslookup query to test domain name resolution.
Following the standard bottom-up troubleshooting methodology, the technician begins at Layer 1 by physically checking cable connections and NIC status LEDs. Next, at Layer 2/3, local IP addressing is checked with ipconfig /all. Third, Layer 3 routing reachability is verified by pinging the default gateway. Finally, higher-layer services such as DNS resolution are tested with nslookup.

Adım Adım Çözüm

1
Verify Physical Connectivity (Layer 1)
Ensure physical cables are securely seated and link LEDs indicate active hardware signal.
Bottom-up troubleshooting mandates confirming physical Layer 1 media before testing software or network protocols.
2
Verify Logical IP Configuration (Layer 2/3)
Determine whether the NIC has a valid DHCP configuration or a 169.254.x.x APIPA address.
Before sending network traffic, the host must possess a properly assigned IP address and subnet mask.
3
Test Local Gateway Reachability (Layer 3)
Confirm ICMP echoes return successfully from the default gateway.
Pinging the default gateway isolates whether the issue is local to the subnet or further up the routing path.
4
Test Name Resolution (Layer 7 / DNS)
Verify that domain names resolve correctly to destination IP addresses.
Testing DNS name resolution with nslookup confirms high-level application service accessibility.

Anahtar Kavram

OSI Model Bottom-Up Network Troubleshooting Sequence
Tahmini Süre:1m 30s
Soru 1052Soru

A network technician is configuring an enterprise wireless network for a corporate environment. The organization's security policy mandates individual user-based authentication integrated with a RADIUS server, strict mutual authentication enforcing client-side digital certificates on corporate-managed laptops, and strong modern encryption protocols without relying on password-only authentication. Which of the following wireless security standards and EAP protocols best meets these requirements?

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise utilizing EAP-TLS

Cevap

WPA3-Enterprise utilizing EAP-TLS is the correct choice because EAP-TLS enforces mutual authentication requiring digital certificates on both the authentication server and the client device.
WPA3-Enterprise uses 802.1X port-based network access control to interface with a RADIUS server. EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) requires mutual authentication, meaning both the authentication server and the client device must present valid, trusted digital certificates. This satisfies the security policy for client certificate enforcement.

Adım Adım Çözüm

1
Analyze the organizational security requirements outlined in the prompt.
The requirements demand 802.1X RADIUS integration (enterprise mode) and mandatory client-side digital certificate authentication.
Personal modes (PSK/SAE) rely on shared passphrases, whereas Enterprise modes integrate with RADIUS servers for individual credentials.
2
Evaluate the authentication capabilities of candidate EAP protocols.
EAP-TLS (Transport Layer Security) mandates certificate-based mutual authentication for both client and server. PEAP-MSCHAPv2 uses server certificates but client passwords.
Only EAP-TLS satisfies the strict requirement for client-side digital certificate verification.
3
Select the modern wireless security framework.
WPA3-Enterprise with EAP-TLS provides 192-bit enterprise security mode support alongside robust encryption standards.
WPA3-Enterprise combined with EAP-TLS represents the highest assessment standard for secure corporate wireless deployment.

Anahtar Kavram

Wireless Enterprise Authentication Protocols (802.1X, RADIUS, and EAP-TLS)
Soru 1053Soru

A tier-2 helpdesk technician is preparing a dedicated Windows 11 laptop for an external field auditor. The auditor requires the ability to securely synchronize corporate documents from an internal company server over HTTPS without establishing a traditional VPN connection. Additionally, organizational policy dictates that the workstation's secondary local data partition must have full-volume encryption configured to safeguard stored audit files at rest. Which of the following Control Panel applets should the technician use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Work Folders; BitLocker Drive Encryption

Cevap

The technician must use Work Folders to configure HTTPS-based file synchronization and BitLocker Drive Encryption to enable full-volume encryption on the data partition.
Work Folders allows corporate files to be synchronized securely over standard HTTPS (port 443) from an enterprise server to a remote device without requiring a VPN connection. BitLocker Drive Encryption is the native Windows utility used to configure and manage full-disk volume encryption to secure local data partitions at rest.

Adım Adım Çözüm

1
Identify the file synchronization requirement over HTTPS without a VPN.
Determine that Work Folders provides HTTPS-based file synchronization with enterprise file servers across the internet without requiring an active VPN tunnel.
Work Folders is designed specifically for secure mobile and remote file access using standard web encryption protocols.
2
Identify the data protection requirement for full-volume encryption at rest.
Select BitLocker Drive Encryption from the Control Panel to encrypt the secondary data volume.
BitLocker Drive Encryption provides block-level volume encryption for fixed internal storage drives.

Anahtar Kavram

Windows Control Panel Utilities: Work Folders and BitLocker Drive Encryption
Tahmini Süre:2m 0s
Soru 1054Soru

A newly hired helpdesk technician at a logistics firm receives a telephone call from an individual claiming to be the senior IT manager. The caller states there is an active server emergency and requires the technician to immediately reset an administrative password and temporarily bypass multi-factor authentication (MFA) for an internal service account. The caller provides detailed context about current company projects to build trust and authority. Which of the following characteristics specifically distinguish this scenario as a pretexting attack? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The establishment of a fabricated scenario and assumed persona designed to manipulate the target into granting unauthorized privileges; The strategic exploitation of role hierarchy and specific internal background knowledge to prevent the target from questioning the request

Cevap

The correct characteristics are the establishment of a fabricated scenario and assumed persona to manipulate the target, and the strategic exploitation of role hierarchy combined with internal background knowledge to discourage verification.
Pretexting involves an attacker crafting an elaborate lie or fake scenario (the pretext) to trick a victim into divulging information or taking sensitive actions. Using an assumed manager persona, citing realistic internal information, and inventing an urgent situation to exploit authority are signature characteristics of pretexting.

Adım Adım Çözüm

1
Analyze the incident details provided in the scenario
The caller used a phone call (voice medium), pretended to be an IT manager (authority persona), invented an emergency (fabricated scenario), and cited project details (research/pretext).
Identifying key indicators helps differentiate social engineering threat types from technical malware attacks.
2
Evaluate social engineering definitions against the identified indicators
Pretexting is defined by creating a plausible false situation (pretext) to trick a victim into supplying confidential information or access.
Pretexting goes beyond simple impersonation by actively crafting a background narrative to justify the out-of-band request.
3
Select options that accurately describe pretexting mechanisms
The choices describing the invented narrative/persona and the reliance on organizational context/authority are correct.
These two features explicitly capture the core definition and execution strategy of pretexting.

Anahtar Kavram

Pretexting and Threat Identification
Soru 1055Soru

A systems administrator needs to configure a Windows 11 workstation so that a critical line-of-business background service automatically attempts to restart if it unexpectedly stops, and a backup script executes automatically every night at 2:00 AM. Which of the following Windows administrative utilities should the administrator use to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Services console (services.msc) to configure the Recovery tab settings for the application service; Task Scheduler (taskschd.msc) to create a scheduled task with a time-based trigger

Cevap

The administrator should use the Services console (services.msc) to configure service recovery options and Task Scheduler (taskschd.msc) to schedule the nightly script.
Automatic restarting of a failed service is configured via the Recovery tab in the Services snap-in (services.msc). Automated, recurring execution of scripts at specified times (such as daily at 2:00 AM) is created and managed using Task Scheduler (taskschd.msc).

Adım Adım Çözüm

1
Determine the tool required for service failure recovery.
The Services snap-in (services.msc) provides a Recovery tab in the properties of a service to define actions such as 'Restart the Service' on first, second, or subsequent failures.
Windows isolates service properties and recovery parameters within the Services administrative snap-in.
2
Determine the tool required for automated time-based script execution.
Task Scheduler (taskschd.msc) allows creating scheduled tasks configured with time-based triggers (e.g., daily at 2:00 AM) to run designated maintenance scripts.
Task Scheduler is the core Windows utility built for scheduling automated tasks and programs.

Anahtar Kavram

Windows Administrative Tools for Service Management and Automation
Soru 1056Soru

An IT technician is designing physical access controls for an internal server room housing critical enterprise databases. The design must strictly prevent unauthorized personnel from entering the room and maintain an automated audit log of all entry and exit attempts. Which TWO of the following physical security controls should the technician implement to satisfy these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An access control vestibule integrated with biometric scanners; Electronic keycard readers configured with automated access logging

Cevap

The technician should implement an access control vestibule integrated with biometric scanners and electronic keycard readers configured with automated access logging.
Implementing an access control vestibule (mantrap) with biometric scanners and electronic keycard readers with access logging satisfies both required outcomes. The access control vestibule ensures that only one authenticated person enters at a time, eliminating tailgating, while electronic keycard readers control the door locks and maintain a detailed electronic record of all entry and exit attempts.

Adım Adım Çözüm

1
Analyze the mandatory security requirements
The requirements are restricting room entry exclusively to authorized personnel (preventing tailgating/unauthorized access) and maintaining an automated access audit trail.
Understanding the specific operational goals helps eliminate physical security controls designed for other threats.
2
Evaluate access control and auditing solutions
An access control vestibule (mantrap) with biometric authentication enforces single-person entry and identity verification to prevent tailgating. Electronic keycard readers manage door locks while automatically recording badge scan timestamps to form an entry log.
Both selected measures directly secure the room perimeter access point and capture access history.
3
Evaluate incorrect options against the requirements
Privacy filters guard against visual eavesdropping, cable locks prevent equipment theft, and perimeter bollards mitigate vehicle ramming. None of these choices restrict room entrance access or generate entry logs.
Controls targeting visual privacy, hardware theft, or physical vehicle impact do not meet room access control and logging objectives.

Anahtar Kavram

Physical Access Controls and Automated Audit Logging
Soru 1057Soru

During a physical security audit of a corporate office, a technician finds several un-shredded documents containing internal network IP addresses, system user names, and written passwords inside an open recycling bin located outside the facility. Which of the following social engineering threat types is represented by this vulnerability?

Cevabı ve açıklamayı göster

Cevap: Dumpster diving

Cevap

Dumpster diving
Searching through unsecured disposal bins or trash receptacles to find sensitive records, network maps, or user credentials is the exact definition of dumpster diving.

Adım Adım Çözüm

1
Analyze the physical security scenario presented in the stem.
Identified sensitive corporate documents discarded intact in an accessible exterior recycling bin.
The threat relies on gathering discarded physical waste containing credentials and network configurations.
2
Classify the observed threat vector according to standard security definitions.
Rummaging through discarded trash or recycling bins for sensitive data is categorized as dumpster diving.
Implementing strict document destruction policies (e.g., cross-cut shredding) mitigates dumpster diving risks.

Anahtar Kavram

Dumpster Diving Physical Threat Vector
Soru 1058Soru

A technician is troubleshooting a computer that unexpectedly shuts down during operation and refuses to turn back on until the AC power cord is unplugged for several seconds. Place the diagnostic steps in the correct order to determine if a tripped power supply unit (PSU) protection circuit or a motherboard short is causing the failure.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct diagnostic sequence is: 1) Unplug the AC power cable and wait 30 seconds to drain flea power, 2) Disconnect all internal power cable harnesses from the motherboard and components, 3) Bridge the PS_ON pin to ground on the 24-pin connector and reconnect AC power, and 4) Measure DC voltage output on the +3.3V, +5V, and +12V rails using a multimeter.
When a system shuts down and requires AC power removal to turn back on, a PSU safety circuit has tripped. The proper order of operations requires first clearing flea power by disconnecting AC power. Next, all internal hardware components must be disconnected to isolate the PSU. Then, bridging the PS_ON pin manually tests basic power-on capability. Finally, using a multimeter verifies that output voltage rails fall within standard ATX specifications.

Adım Adım Çözüm

1
Remove main AC power to allow internal capacitors to discharge.
Residual energy (flea power) is completely drained, resetting any latched protection circuits inside the power supply unit.
Latching safety circuits in modern PSUs keep power disabled until AC power is fully cycled.
2
Disconnect all internal PSU cables from motherboard and hardware components.
The power supply unit is isolated from all potential downstream electrical shorts.
A shorted motherboard component or drive will immediately trip the PSU again if left connected during diagnostic testing.
3
Insert a jumper between the PS_ON (green wire) and a Ground (black wire) pin on the 24-pin main connector.
The PSU turns on independently, and its cooling fan begins to spin.
This simulates the power switch signal normally sent by the motherboard power header.
4
Use a multimeter set to DC voltage to test output pins on the power connectors.
Voltage readings are verified against expected values (+12VDC, +5VDC, +3.3VDC).
Confirms the power supply outputs stable voltages within standard ATX tolerance limits under no-load testing.

Anahtar Kavram

Power Supply Unit (PSU) Protection Circuit Reset and Isolation Testing
Soru 1059Soru

A network technician needs to resolve persistent network stack corruption on a Windows 11 client workstation by performing a full reset of the Winsock catalog and TCP/IP stack. In what order should the technician execute the required actions to complete this process?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is: Open an elevated Command Prompt -> Execute netsh winsock reset -> Execute netsh int ip reset -> Restart the Windows operating system.
To repair a corrupted network stack on Windows, the technician must first launch an elevated Command Prompt to gain administrative rights. Next, running 'netsh winsock reset' restores the API catalog. Following that, executing 'netsh int ip reset' rewrites the core TCP/IP registry keys. Finally, restarting the computer is mandatory to apply the low-level driver and protocol configuration changes.

Adım Adım Çözüm

1
Open Command Prompt as Administrator
Grants the necessary elevated user rights to modify protected network configurations.
Standard command prompt sessions lack the administrative rights needed to execute low-level netsh reset commands.
2
Run netsh winsock reset
Resets the Winsock catalog back to a clean default state.
Corrupted Windows Sockets API entries must be restored before re-binding network protocol interfaces.
3
Run netsh int ip reset
Overwrites and rebuilds the Windows TCP/IP registry keys (IPv4 and IPv6 stack reset).
Clears core protocol bindings to resolve transport layer and routing table corruption.
4
Reboot the workstation
Unloads existing drivers, reloads the clean registry configurations, and restores standard network functionality.
Low-level protocol stack updates take effect only after a system restart.

Anahtar Kavram

Windows TCP/IP Stack and Winsock Reset Procedure
Soru 1060Soru

A desktop support technician is assisting a macOS user who accidentally deleted an important file from their documents folder. The user needs to recover a previous snapshot of the file from an automated backup created earlier in the day. Which built-in macOS feature should the technician use to restore this file?

Cevabı ve açıklamayı göster

Cevap: Time Machine

Cevap

Time Machine is the native macOS feature used for automated file backups and historical snapshot restorations.
Time Machine is macOS's native automated backup software. It saves hourly backups for the past 24 hours, daily backups for the past month, and weekly backups for all previous months, making it the ideal tool to recover previous file snapshots.

Adım Adım Çözüm

1
Identify the administrative task required
The user needs to restore a deleted file from a previous automated snapshot in macOS.
The scenario highlights file recovery from automated versioned backups.
2
Evaluate the native operating system tools
Time Machine provides continuous, automated incremental backups on macOS.
Time Machine integrates directly with the OS to allow searching and restoring individual files or full drive images across historical timelines.

Anahtar Kavram

macOS Time Machine Backup Utility
Tahmini Süre:45s
ÖncekiSayfa 53 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin