Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 1141Soru →

A help desk technician is troubleshooting a Windows 11 workstation that experiences erratic system crashes. Running `sfc /scannow` from an elevated command prompt returns the following message: "Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.log." Repeated attempts to execute SFC fail to repair the files because the local side-by-side component store (WinSxS) is corrupted. Which of the following procedures should the technician perform NEXT to resolve this issue?

Cevabı ve açıklamayı göster

Cevap: Execute `dism /online /cleanup-image /restorehealth` to repair the component store, and then re-run `sfc /scannow`.

Cevap

Execute DISM with the restorehealth parameter while online to fix the component store, followed by re-running SFC scannow.
When System File Checker (SFC) encounters corruption in the local component store, it cannot retrieve known-good copies of system files. Running Deployment Image Servicing and Management (DISM) with the `/online /cleanup-image /restorehealth` parameters repairs the local component store by fetching replacement files from Windows Update. Once DISM finishes repairing the component store, running `sfc /scannow` again successfully replaces corrupt system files.

Adım Adım Çözüm

1
Identify why SFC scannow failed.
SFC relies on the local component store (WinSxS) to replace corrupt system files. If WinSxS is corrupted, SFC cannot complete repairs.
SFC cannot fix files if its reference source is damaged.
2
Run DISM to repair the component store.
Executing `dism /online /cleanup-image /restorehealth` downloads healthy payload files from Windows Update to fix WinSxS.
Restoring component store health provides valid files for SFC.
3
Re-run SFC to fix protected system files.
Executing `sfc /scannow` now successfully replaces corrupt system files using the repaired WinSxS store.
Verifies and completes OS file repair.

Anahtar Kavram

DISM and SFC repair sequence for corrupted Windows component store
Soru 1142Soru →

A Linux systems administrator is troubleshooting a storage drive that is experiencing read errors and failing S.M.A.R.T. health checks. The administrator needs to perform a bit-by-bit raw clone of the entire physical drive located at /dev/sdb to an image file at /mnt/backups/disk_copy.img before attempting file recovery. Which of the following command-line utilities and syntax should the administrator execute to perform this raw block-level copy?

Cevabı ve açıklamayı göster

Cevap: dd if=/dev/sdb of=/mnt/backups/disk_copy.img

Cevap

The dd utility specifying if=/dev/sdb and of=/mnt/backups/disk_copy.img is the correct command for creating a raw, block-level clone of a drive.
The dd command (data duplicate) is specifically designed for low-level block copying and conversion operations in Unix-like operating systems. By specifying the input file/device with 'if=/dev/sdb' and the output destination with 'of=/mnt/backups/disk_copy.img', dd reads raw data blocks directly from the physical disk device node and writes an exact byte-for-byte binary replica to the target file.

Adım Adım Çözüm

1
Identify the requirement for disk cloning.
Recognize that a bit-by-bit raw block copy requires reading raw storage blocks directly from a device node rather than traversing a file system.
File-level utilities cannot copy master boot records, partition structures, or unallocated sectors.
2
Evaluate Unix command-line options for block-level data duplication.
Determine that dd (data duplicate / disk duplicate) uses input file (if=) and output file (of=) parameters to read and write block data directly.
dd operates below the file system layer, copying raw data streams between block devices and files.
3
Select the correct command syntax.
Confirm dd if=/dev/sdb of=/mnt/backups/disk_copy.img correctly specifies /dev/sdb as input and the image path as output.
This syntax creates an exact byte-for-byte image file of the failing drive.

Anahtar Kavram

Using the dd command for low-level raw disk cloning and imaging in Linux/macOS environments.
Tahmini Süre:1m 30s
Soru 1143Soru →

A network technician is troubleshooting various network connectivity and configuration issues on Windows 11 client workstations. Match each Windows command-line utility or switch on the left with its correct operational objective on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

ipconfig /release
netsh wlan show profiles
nslookup
nbtstat -n

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

'ipconfig /release' matches sending a DHCPRELEASE message to forfeit IP configuration; 'netsh wlan show profiles' matches displaying saved wireless network profiles; 'nslookup' matches querying DNS servers directly; 'nbtstat -n' matches listing NetBIOS names registered locally.
Each tool directly corresponds to its network diagnostic role in Windows: 'ipconfig /release' surrenders the dynamic IP configuration back to the DHCP server; 'netsh wlan show profiles' enumerates stored wireless SSIDs; 'nslookup' queries DNS infrastructure directly; and 'nbtstat -n' displays local NetBIOS name registrations.

Adım Adım Çözüm

1
Analyze each command utility and parameter to identify its exact operational function in Windows networking.
Distinguish between IP addressing commands, wireless profile management, DNS diagnostic tools, and NetBIOS resolution utilities.
Accurate CLI utility selection is essential for diagnosing Windows network layer, name resolution, and adapter settings.
2
Match each utility to its correct administrative objective based on default Windows client behavior.
Correct matching pairs are established.
Verifies mastery of core Windows client networking command-line functionality.

Anahtar Kavram

Windows Client Networking Command-Line Utilities and Diagnostic Switches
Tahmini Süre:1m 30s
Soru 1144Soru →

A systems administrator is configuring a workstation in a high-traffic customer service area. The administrator must prevent unauthorized bystanders standing at side angles from viewing sensitive personal data displayed on the screen. Which of the following physical security controls is best suited for this requirement?

Cevabı ve açıklamayı göster

Cevap: Privacy filter

Cevap

Installing a privacy filter narrows the display viewing angle so only the person directly in front of the screen can read the contents.
A privacy filter attaches directly to a monitor to restrict side-angle viewing, making the screen appear dark or blurred to individuals standing to the side while keeping it legible for the primary user.

Adım Adım Çözüm

1
Identify the primary physical threat presented in the scenario.
The threat is shoulder surfing or visual observation of sensitive display information from unauthorized angles by nearby individuals.
The workstation is located in a high-traffic customer service area where visitors frequently walk past.
2
Evaluate physical security controls designed specifically for display security.
A privacy filter limits light transmission to narrow viewing angles, darkening the screen content when viewed from the side.
This mitigates visual eavesdropping while allowing the user facing the screen directly to work normally.

Anahtar Kavram

Physical Security Controls - Privacy Filters
Soru 1145Soru →

A technician is upgrading a wireless access point in a small office to enhance authentication security and migrate away from legacy pre-shared keys. The technician selects WPA3-Personal mode. Which of the following features and requirements are introduced by WPA3-Personal? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Mandatory requirement for Protected Management Frames (PMF); Simultaneous Authentication of Equals (SAE) key exchange

Cevap

The correct responses are the mandatory requirement for Protected Management Frames (PMF) and the use of Simultaneous Authentication of Equals (SAE) key exchange.
WPA3-Personal improves SOHO wireless security by replacing WPA2 Pre-Shared Key (PSK) with Simultaneous Authentication of Equals (SAE) (Dragonfly handshake) to resist offline dictionary attacks. Additionally, WPA3 strictly mandates Protected Management Frames (PMF) to shield management traffic from interception and spoofed disconnect commands.

Adım Adım Çözüm

1
Identify the authentication and key exchange enhancement in WPA3-Personal.
WPA3-Personal replaces standard Pre-Shared Key (PSK) passphrase exchanges with Simultaneous Authentication of Equals (SAE), preventing brute-force and offline dictionary attacks.
SAE provides resistant key exchange even when passwords are simple.
2
Identify mandatory security features required by the WPA3 specification.
Protected Management Frames (PMF) are compulsory in WPA3 networks.
PMF prevents spoofed deauthentication frames and eavesdropping on wireless management messaging.

Anahtar Kavram

WPA3-Personal Security Enhancements (SAE and PMF)
Tahmini Süre:1m 0s
Soru 1146Soru →

A desktop workstation connected to an external LCD monitor exhibits persistent visual artifacts and horizontal line distortion across the display screen. A technician takes a full-screen screenshot using the operating system's software screenshot utility and opens the saved image file on a known-good secondary computer. The captured image appears completely clear with no distortion or artifacts. Which of the following are the MOST likely causes of this display issue? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A loose, damaged, or improperly shielded video signal cable; A failing physical display panel or internal monitor scalar board

Cevap

The most likely causes are a loose, damaged, or improperly shielded video signal cable, and a failing physical display panel or internal monitor scalar board.
Taking a software screenshot isolates rendering components (GPU, VRAM, and display drivers) from physical display hardware. When the saved screenshot is artifact-free, it proves that the graphics frame buffer contains uncorrupted data. Therefore, the visual distortion must be introduced downstream in the physical path—specifically by a loose or damaged video cable, or a defective monitor/internal display board.

Adım Adım Çözüm

1
Analyze the result of the software screenshot diagnostic test.
The screenshot image file is clear of visual artifacts when viewed on another device. This confirms that the operating system, graphics driver, GPU rendering engine, and VRAM frame buffer are working correctly.
Software screenshots capture the image directly from the frame buffer in memory before it is transmitted over physical video cabling.
2
Identify potential hardware failures located downstream of the frame buffer.
The fault must lie in the physical hardware components responsible for transmitting or receiving the video signal.
Downstream hardware includes the video output connector, the physical display cable (HDMI/DisplayPort), and the monitor's internal processing circuitry/panel.

Anahtar Kavram

Screenshot Diagnostic Test for Display Troubleshooting
Tahmini Süre:1m 30s
Soru 1147Soru →

A receptionist at a legal firm receives a phone call from an individual claiming to be a third-party IT compliance auditor. The caller states that an urgent system audit requires immediate verification of workstation access and asks the receptionist to read aloud the one-time passcode displayed on their authentication application. Which of the following social engineering threat types is being attempted?

Cevabı ve açıklamayı göster

Cevap: Voice phishing (Vishing)

Cevap

Voice phishing (Vishing)
The correct answer identifies voice phishing (vishing), which occurs when an attacker uses phone calls and social engineering tactics to manipulate victims into revealing confidential information such as login credentials or authentication codes.

Adım Adım Çözüm

1
Analyze the attack vector described in the scenario
The attack occurs entirely over an interactive voice phone call.
Identifying the medium of communication is key to distinguishing social engineering threat types.
2
Evaluate the attacker's objective and tactic
The attacker impersonates an auditor over the phone to coax multi-factor authentication passcodes from the user.
Impersonation over voice calls to steal credentials specifically defines vishing (voice phishing).

Anahtar Kavram

Vishing (Voice Phishing)
Soru 1148Soru →

During a security incident investigation at a healthcare facility, a systems administrator reviews badge logs and phone records following an unauthorized network intrusion. The report identifies two related occurrences:

1. An unauthorized individual entered a restricted server room by closely following behind a credentialed facility engineer who had swiped an access card to unlock the door.
2. Shortly after physical access was gained, several department managers received urgent telephone calls from an attacker posing as the Chief Information Officer (CIO). The caller created a fake emergency scenario regarding a network outage and persuaded the managers to dictate their active multi-factor authentication (MFA) verification codes over the call.

Which of the following social engineering threat vectors and physical security violations occurred during this incident? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Tailgating, by closely following an authorized employee into a secured physical area without presenting proper authentication; Vishing, by using phone communications and impersonation to trick victims into revealing sensitive authentication codes

Cevap

The threat vectors executed during the security incident are tailgating and vishing.
Tailgating is demonstrated when the unauthorized actor gains physical server room entry by following closely behind a credentialed engineer without swiping their own badge. Vishing is demonstrated when the attacker utilizes interactive phone calls, impersonation (pretexting as the CIO), and an urgent scenario to solicit sensitive MFA codes from staff.

Adım Adım Çözüm

1
Analyze the physical access portion of the scenario.
The intruder gained entry to a restricted area by following behind an authorized engineer holding open a door without authenticating independently.
This physical access breach method is explicitly defined as tailgating (or piggybacking).
2
Analyze the digital/social interaction portion of the scenario.
The attacker placed phone calls while impersonating an executive to convince managers to disclose MFA codes verbally.
Social engineering conducted over telephone calls is classified as vishing (voice phishing).

Anahtar Kavram

Social Engineering Attacks and Physical Entry Exploitation
Tahmini Süre:2m 0s
Soru 1149Soru →

A helpdesk technician is preparing end-user security awareness training materials covering non-technical threat vectors. Which TWO of the following security threats rely primarily on physical actions or physical access rather than digital network communication? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Tailgating into a restricted corporate facility by following an authorized employee; Dumpster diving to recover confidential papers from disposal bins

Cevap

Tailgating into a restricted corporate facility by following an authorized employee and Dumpster diving to recover confidential papers from disposal bins are physical social engineering threats.
Tailgating and dumpster diving both require physical presence and direct real-world interaction—either following personnel through physical security barriers or searching through physical waste receptacles.

Adım Adım Çözüm

1
Analyze each option to determine if it requires physical proximity/access or electronic/digital communications.
Tailgating requires walking through physical doors; dumpster diving requires physical handling of waste receptacles.
Both methods exploit physical security boundaries rather than digital computing systems.
2
Evaluate the remaining choices to identify digital attack vectors.
Spear phishing (email), vishing (phone calls), and watering hole attacks (compromised websites) all operate over digital or telecommunication channels.
These threat types target network protocols and end-user digital interactions.

Anahtar Kavram

Physical Social Engineering Threat Vectors
Soru 1150Soru →

A network technician is deploying a secure wireless network for a company's financial department. Organization security policy mandates individual user authentication using centralized domain accounts and high-strength data encryption. Which TWO of the following security protocols or standards should the technician implement to fulfill these security requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise operation mode; RADIUS authentication server supporting 802.1X

Cevap

The technician should implement WPA3-Enterprise operation mode and a RADIUS authentication server supporting 802.1X.
Implementing WPA3-Enterprise and an 802.1X RADIUS server satisfies the requirements for strong encryption and centralized individual user authentication against domain accounts.

Adım Adım Çözüm

1
Analyze the requirement for centralized, individual user authentication using domain credentials.
Identify that the 802.1X framework connected to a RADIUS server integrated with directory services (such as Active Directory) is required.
Personal modes (PSK) utilize a single shared static key and cannot validate distinct user credentials.
2
Analyze the requirement for strong enterprise wireless security and encryption.
Select WPA3-Enterprise mode to enforce 802.1X authentication and modern cryptographic suites.
WPA3-Enterprise ensures compliance with modern security mandates while TKIP and PSK modes introduce security risks and lack individual accounting.

Anahtar Kavram

WPA Enterprise vs. Personal modes and 802.1X RADIUS authentication
Tahmini Süre:1m 30s
Soru 1151Soru →

A desktop technician is configuring a legacy accounting application on a 64-bit Windows 11 Pro workstation. The application requires a System Data Source Name (DSN) using a 32-bit database driver to communicate with an internal database server. When the technician opens the default ODBC Data Sources applet from Administrative Tools, the required 32-bit driver is missing from the drivers list. Which of the following administrative actions should the technician perform to properly configure the connection?

Cevabı ve açıklamayı göster

Cevap: Execute the 32-bit ODBC Data Source Administrator tool located at C:\Windows\SysWOW64\odbcad32.exe.

Cevap

Execute the 32-bit ODBC Data Source Administrator tool located at C:\Windows\SysWOW64\odbcad32.exe.
On 64-bit operating systems, Windows maintains separate ODBC Data Source Administrator utilities for 32-bit and 64-bit drivers. The 64-bit tool is located in %SystemRoot%\System32\odbcad32.exe (which is linked in Administrative Tools), while the 32-bit tool is located in %SystemRoot%\SysWOW64\odbcad32.exe. To configure a 32-bit driver for a legacy 32-bit application, the technician must manually launch the executable from the SysWOW64 directory.

Adım Adım Çözüm

1
Identify the architecture requirement
The legacy application requires a 32-bit ODBC driver on a 64-bit Windows OS.
32-bit applications cannot utilize 64-bit ODBC drivers, requiring configuration within the 32-bit ODBC subsystem.
2
Locate the correct administrative executable
Navigate to the C:\Windows\SysWOW64 directory and launch odbcad32.exe.
On 64-bit Windows editions, 32-bit system binaries and management utilities reside in the SysWOW64 folder, while 64-bit utilities reside in System32.
3
Configure the System DSN
Select the installed 32-bit database driver and configure the connection parameters.
Opening the 32-bit version of the utility allows the 32-bit driver to appear and function properly.

Anahtar Kavram

Windows ODBC Data Source Administrator Architecture (32-bit vs 64-bit)
Tahmini Süre:1m 0s
Soru 1152Soru →

A Windows 11 workstation experiences application crashes following a sudden power failure. A technician suspects that protected operating system files may have been corrupted. Which command-line tool should the technician run to scan and repair corrupted Windows system files?

Cevabı ve açıklamayı göster

Cevap: sfc /scannow

Cevap

Execute the sfc /scannow command in an elevated Command Prompt.
Executing sfc /scannow scans all protected Windows system files and replaces corrupted files with clean copies from the local Windows system cache.

Adım Adım Çözüm

1
Open an elevated Command Prompt with administrative privileges.
An administrative command-line interface is opened.
Administrative rights are required to inspect and overwrite protected operating system files.
2
Type sfc /scannow and press Enter.
The System File Checker utility scans all protected system files and replaces corrupted files with a cached copy located at %WinDir%\System32\dllcache.
The sfc utility with the /scannow switch is designed specifically to check system integrity and repair damaged Windows system files.

Anahtar Kavram

System File Checker (SFC)
Soru 1153Soru →

A field technician is configuring a specialized 32-bit accounting application on a 64-bit Windows 11 Pro workstation. The installation wizard finishes without errors, and the technician successfully installs the required 32-bit database drivers. However, when attempting to set up a System Data Source Name (DSN) for the application using the standard Data Sources (ODBC) applet found in Windows Administrative Tools, the required 32-bit driver does not appear in the driver selection list. Which of the following is the most appropriate action to resolve this issue?

Cevabı ve açıklamayı göster

Cevap: Launch the 32-bit ODBC Data Source Administrator utility located at C:\Windows\SysWOW64\odbcad32.exe to configure the System DSN.

Cevap

Launch the 32-bit ODBC Data Source Administrator utility located at C:\Windows\SysWOW64\odbcad32.exe to configure the System DSN.
On 64-bit Windows operating systems, 32-bit applications and database drivers operate within the Windows-on-Windows 64-bit (WOW64) subsystem. The default 'Data Sources (ODBC)' tool in Windows Administrative Tools launches the 64-bit version of `odbcad32.exe` located in `C:\Windows\System32`, which can only manage 64-bit drivers. To configure a System DSN for a 32-bit driver, technicians must explicitly launch the 32-bit ODBC Administrator located in `C:\Windows\SysWOW64\odbcad32.exe`.

Adım Adım Çözüm

1
Analyze the architecture requirements of the application and OS environment.
Identified that a 32-bit application requires a 32-bit ODBC driver and DSN on a 64-bit Windows OS.
64-bit Windows separates 32-bit and 64-bit database connection subsystem architectures.
2
Identify why the default Data Sources applet fails to display the installed driver.
The default Administrative Tools shortcut points to C:\Windows\System32\odbcad32.exe (the 64-bit version), which only displays 64-bit drivers.
System32 on 64-bit Windows contains native 64-bit binaries.
3
Locate the correct management tool for 32-bit ODBC drivers.
The 32-bit version of the utility is located in C:\Windows\SysWOW64\odbcad32.exe.
SysWOW64 contains files for Windows 32-bit on Windows 64-bit (WOW64) execution mode.

Anahtar Kavram

32-bit vs 64-bit Application Compatibility and Architecture Management in Windows (SysWOW64 vs System32 ODBC Administrators)
Soru 1154Soru →

A desktop support technician is configuring a Windows 11 Pro workstation for a network administrator who needs to manage legacy network hardware using the built-in command-line Telnet Client and host a test site using Internet Information Services (IIS). When the administrator attempts to execute the telnet command in Command Prompt, an error states that the command is not recognized. Which of the following Control Panel applets must the technician access to enable these optional operating system components?

Cevabı ve açıklamayı göster

Cevap: Programs and Features

Cevap

Programs and Features
Programs and Features includes the 'Turn Windows features on or off' option in its left navigation pane. This utility allows system administrators to enable or disable optional operating system features, such as the Telnet Client, Hyper-V, Internet Information Services (IIS), and SMB 1.0 support, without downloading external software.

Adım Adım Çözüm

1
Analyze the technical requirement
The goal is to enable Telnet Client and IIS, which are built-in optional Windows components disabled by default.
Optional feature binaries are stored locally in the Windows component store but require administrative activation.
2
Identify the correct Control Panel applet
Navigate to Control Panel and select Programs and Features.
Programs and Features provides entry to management tasks for installed software and optional OS features.
3
Configure the optional features
Click 'Turn Windows features on or off' in the left pane, check the boxes for Telnet Client and Internet Information Services, and click OK.
This process instructs Windows to enable the required binaries without requiring external installation media.

Anahtar Kavram

Windows Control Panel Programs and Features utility (Turn Windows features on or off)
Soru 1155Soru →

A desktop support technician is performing an on-site service visit at an executive's office to resolve a local application startup issue. While working at the desk, the technician notices a sensitive financial reorganization document displayed openly on a secondary monitor. Moments later, the executive enters the office engaged in an agitated speakerphone conversation with a client, interrupts the technician, and demands an immediate verbal technical update regarding the repair status in front of the calling client. Which of the following actions demonstrates the most appropriate professional communication and boundary management protocol?

Cevabı ve açıklamayı göster

Cevap: Maintain a calm demeanor, avoid looking at or discussing the open sensitive document, and politely offer to provide a concise status summary in private once the executive completes the call.

Cevap

Maintain a calm demeanor, avoid looking at or discussing the open sensitive document, and politely offer to provide a concise status summary in private once the executive completes the call.
The correct response prioritizes customer confidentiality, proper professional tone, and tactical communication timing. Technicians must avoid inspecting private customer data and handle high-pressure customer requests by maintaining composure and offering private, jargon-free updates.

Adım Adım Çözüm

1
Identify confidential user property and privacy boundaries
Avoid inspecting, reading, or referencing sensitive customer documents visible in the workplace environment.
CompTIA standards mandate respecting customer confidentiality and personal property.
2
Evaluate communication environment and audience context
Recognize that discussing technical problems in front of an active client on speakerphone is inappropriate and potentially harmful to business relations.
Technicians must maintain professional etiquette and avoid exposing internal operational issues to third parties.
3
De-escalate and manage user expectations professionally
Respond calmly, avoid jargon, and defer detailed discussion to a brief private conversation once the call ends.
Active listening, proper tone, and boundary management de-escalate tension without causing conflict.

Anahtar Kavram

Professional Communication, Active Listening, and Confidentiality Standards
Soru 1156Soru →

A tier 1 helpdesk technician receives an urgent telephone call from an individual claiming to be an executive assistant from corporate headquarters. The caller explains that their supervisor is currently presenting at an off-site conference and urgently needs their multi-factor authentication (MFA) token reset to access financial reports. To establish trust, the caller references internal project codenames and recent organizational changes, leveraging high pressure to convince the technician to bypass standard identity verification protocols. Which of the following social engineering threat types is being executed in this scenario?

Cevabı ve açıklamayı göster

Cevap: Pretexting

Cevap

Pretexting is the correct social engineering attack vector because the attacker invented a scenario and persona to trick the technician into granting unauthorized access.
Pretexting occurs when an attacker constructs a fabricated story and impersonates a person in authority (such as an executive assistant) to build trust and persuade the target to violate standard security protocols. The presence of a detailed backstory, voice communication, and insistence on bypassing identity verification are classic indicators of a pretexting attack.

Adım Adım Çözüm

1
Analyze the communication channel and attack method in the scenario.
The attack occurs via a voice phone call where an attacker uses a detailed fake identity and backstory.
Identifying the medium (voice phone call) and technique (crafted scenario) isolates the social engineering category.
2
Evaluate the specific tactics used (building trust with insider information, pressuring the technician to bypass procedures).
The attacker established a elaborate backstory (pretext) to convince the technician that bypassing verification was justified.
Pretexting specifically involves inventing a plausible scenario and fake authority role to manipulate victims into unauthorized actions.
3
Differentiate pretexting from digital or physical threat vectors like spear phishing, tailgating, and pharming.
Spear phishing relies on email, tailgating is physical entry, and pharming relies on DNS/traffic redirection.
Eliminating non-matching vectors confirms pretexting as the accurate classification.

Anahtar Kavram

Pretexting and Social Engineering Indicators
Soru 1157Soru →

An IT technician receives a report regarding a desktop workstation that powers on and boots normally into the operating system during basic web browsing. However, within minutes of launching a heavy video rendering application, the CPU temperature spikes rapidly and the system suddenly powers off completely without displaying a blue screen error. The system will not power back on until several minutes have passed. Which of the following is the most likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The CPU heat sink thermal paste has degraded or the cooling fan has failed, triggering internal thermal shutdown protection.

Cevap

The CPU heat sink thermal paste has degraded or the cooling fan has failed, triggering internal thermal shutdown protection.
When a computer powers off abruptly without a blue screen only during high-load processing and refuses to power back on until time passes, it indicates that thermal limits were breached. Modern CPUs include thermal protection circuits that immediately cut power when temperatures exceed critical thresholds (TjMax), blocking restart until thermal sensors measure a safe temperature.

Adım Adım Çözüm

1
Analyze the symptoms presented in the scenario
The system boots normally under light load but abruptly powers off under high computational processing without a software BSOD, requiring a cooling period before it can turn on again.
This behavioral pattern specifically indicates hardware protection mechanisms reacting to physical thermal limits rather than logical operating system errors.
2
Evaluate the power thermal dynamics
Heavy rendering workloads cause rapid heat generation by the CPU. If the thermal solution (thermal paste/fan/heatsink) cannot dissipate heat effectively, internal sensors trigger automatic thermal shutdown.
Processors are engineered with thermal throttling and thermal shutdown limits (TjMax) to prevent thermal degradation and permanent hardware destruction.
3
Confirm the root cause
The mandatory delay before the system will allow a power-on attempt confirms that internal thermals must decline below a safety threshold before motherboard power-good signals permit startup.
Faulty power delivery or disk corruption does not require a temporal cooling period to re-enable basic power cycling.

Anahtar Kavram

CPU Overheating and Thermal Safety Shutdown Mechanisms
Soru 1158Soru →

An IT technician is explaining User Account Control (UAC) behavior in Windows 11 to a newly hired helpdesk intern. Which TWO of the following actions performed while logged in as a standard user account will require entering administrator credentials at a UAC prompt? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Modifying security settings within the Local Security Policy snap-in (secpol.msc); Installing a system-wide hardware device driver

Cevap

The actions requiring administrator credentials at a UAC prompt are modifying security settings within the Local Security Policy snap-in (secpol.msc) and installing a system-wide hardware device driver.
User Account Control (UAC) safeguards Windows by requiring standard users to supply administrator credentials whenever an operation attempts system-wide changes. Modifying settings in Local Security Policy (secpol.msc) and installing system hardware drivers both alter system configurations and protected core operating system files, which triggers a UAC elevation prompt.

Adım Adım Çözüm

1
Identify which user actions affect system-wide settings or protected core system files.
Changing policies via secpol.msc and installing system drivers affect global security and system files.
Windows protects global system configurations from standard user modification by requiring UAC administrative elevation.
2
Evaluate standard user rights regarding local profile files and read-only system utilities.
Managing NTFS permissions on user-owned documents and viewing hardware specs in Settings do not modify system-level protection.
Standard user accounts already possess sufficient rights for personal files and read-only system checks, so UAC does not trigger.

Anahtar Kavram

User Account Control Credential Triggers for Standard Users
Soru 1159Soru →

A desktop technician is troubleshooting a Windows workstation where core operating system files are corrupted. Running the System File Checker utility (`sfc /scannow`) reports that corrupt files were detected but could not be repaired because the local Windows Component Store (`WinSxS`) is also damaged. Which of the following commands should the technician execute to repair the component store directly from an online source?

Cevabı ve açıklamayı göster

Cevap: dism /online /cleanup-image /restorehealth

Cevap

The command `dism /online /cleanup-image /restorehealth` should be executed to repair the Windows component store.
The correct command is `dism /online /cleanup-image /restorehealth`. When `sfc /scannow` fails due to component store corruption, DISM must be run to download healthy copies of corrupted payload files from Windows Update and repair the local WinSxS store.

Adım Adım Çözüm

1
Identify the cause of the failure during the initial SFC scan.
The local system store (WinSxS) is corrupted, preventing SFC from retrieving clean file copies.
SFC relies on the local component store to replace damaged system files.
2
Select the DISM utility with appropriate repair switches.
Specifying `/online /cleanup-image /restorehealth` connects to Windows Update to download fresh copies of corrupted payload components.
DISM must repair the component store before SFC can successfully resolve system file corruption.

Anahtar Kavram

Windows Component Store Repair using DISM
Soru 1160Soru →

A technician needs to find the absolute directory path of the folder currently active in a Linux terminal session. Which command should the technician enter to display this information?

Cevabı ve açıklamayı göster

Cevap: pwd

Cevap

The command `pwd` (print working directory) is used to display the absolute path of the active working directory in a Linux shell.
The `pwd` command stands for 'print working directory' and outputs the full, absolute path of the current directory in Unix-like operating systems like Linux and macOS.

Adım Adım Çözüm

1
Identify the goal
Determine the command that outputs the full path of the current active working directory.
The technician needs to know their exact location within the Linux file system hierarchy.
2
Evaluate standard Unix/Linux navigation commands
`pwd` stands for 'print working directory' and outputs the exact path to standard output.
`ls` lists directory contents, while `cd` changes the directory.

Anahtar Kavram

Linux Terminal Directory Navigation Tools
ÖncekiSayfa 58 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin