Tüm alıştırma soruları

3551 soru

Soru 1321Soru

A field technician needs to replace a depleted fuser assembly on an enterprise laser printer after observing un-fused toner smudging on output pages. In what sequence should the technician perform the following maintenance steps from first to last?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper sequence begins with powering down and unplugging the printer, allowing the high-temperature fuser assembly to cool down, opening the access door to release retaining latches, swapping the old fuser module for the new one, and concluding by reconnecting power and resetting the printer's maintenance page counter.
The correct order follows standard CompTIA IT safety and procedural protocols: electrical safety first (power down and unplug), thermal safety second (cool down high-temperature fuser), physical disassembly third (release latches), component swap fourth (install new fuser), and final power restoration with administrative counter resets fifth.

Adım Adım Çözüm

1
Ensure electrical safety
Printer is completely powered off and unplugged from the wall outlet.
Prevents high-voltage electrical hazards during hardware replacement.
2
Ensure thermal safety
The fuser assembly reaches a safe handling temperature.
Fusers melt toner using high heat and present a severe burn hazard if touched immediately after operation.
3
Unlock hardware access
Access door is open and fuser locking levers are disengaged.
Releases mechanical retaining clips holding the fuser unit inside the chassis.
4
Replace component
Old fuser is removed and new fuser is securely installed.
Replaces the worn fuser roller/heating element causing toner smudging.
5
Re-energize and calibrate software tracking
Printer powers up and resets its scheduled maintenance alert system.
Completes the repair and ensures accurate future maintenance reporting.

Anahtar Kavram

Laser Printer Fuser Replacement Safety and Maintenance Workflow
Tahmini Süre:1m 30s
Soru 1322Soru

A technician needs to adjust the User Account Control (UAC) notification settings on a Windows 11 computer so that prompts still appear when programs try to make changes to the system, but the secure desktop screen dimming effect is disabled. Which setting on the UAC slider should the technician choose?

Cevabı ve açıklamayı göster

Cevap: Notify me only when apps try to make changes to my computer (do not dim my desktop)

Cevap

The setting 'Notify me only when apps try to make changes to my computer (do not dim my desktop)' provides UAC prompts without dimming the desktop.
Selecting 'Notify me only when apps try to make changes to my computer (do not dim my desktop)' ensures that User Account Control still generates elevation prompts whenever software attempts system modifications, but it renders the prompt within the standard user desktop environment rather than dimming the screen via Secure Desktop.

Adım Adım Çözüm

1
Identify the requirement
The goal is to receive notifications for application changes while eliminating the desktop dimming delay.
The Secure Desktop feature dims the screen, which can cause graphics performance issues on certain display drivers.
2
Evaluate the UAC slider options
The third slider level from the top explicitly specifies 'do not dim my desktop' while maintaining prompt notifications for application changes.
Selecting this level modifies the UAC behavior accordingly.

Anahtar Kavram

User Account Control (UAC) Slider Notification Levels
Soru 1323Soru

A bench technician receives a point-of-sale terminal system that powers on, illuminates its status LEDs, and drives internal cooling fans, but emits a repeating pattern of beep codes during startup without displaying an image. The motherboard documentation indicates the specific beep sequence points to a memory failure during POST. Which of the following actions should the technician take FIRST?

Cevabı ve açıklamayı göster

Cevap: Reseat the existing memory modules and test them individually in different slots.

Cevap

Reseat the existing memory modules and test them individually in different slots.
When a computer fails POST and outputs a motherboard memory error code, the proper CompTIA troubleshooting methodology requires isolating the RAM by powering off the system, reseating the memory modules, and testing single sticks in individual slots to locate the faulty component or slot.

Adım Adım Çözüm

1
Interpret POST indicators
Confirm motherboard beep codes signal a RAM detection/initialization failure before video initialization.
POST errors occur at the hardware hardware verification layer before storage drives or display adapters are invoked.
2
Apply physical isolation methodology
Power down the system, unlatch and reseat the RAM module to rule out oxidation or displacement.
Poor electrical contact in memory slots is a primary cause of intermittent POST failures.
3
Systematically isolate components
If reseating fails, test one RAM stick at a time across available motherboard slots.
This determines whether a specific RAM module is faulty or a specific memory channel slot on the motherboard has failed.

Anahtar Kavram

Memory POST Beep Code Isolation
Tahmini Süre:1m 15s
Soru 1324Soru

A desktop technician is performing maintenance on a Windows workstation that has been experiencing stability issues after a recent software installation. Company policy requires technicians to audit system file integrity and log any modified or corrupted protected files, but strictly prohibits making any automatic repairs or file replacements during the initial investigation phase. Which of the following command-line executions fulfills this requirement?

Cevabı ve açıklamayı göster

Cevap: sfc /verifyonly

Cevap

The command 'sfc /verifyonly' scans the integrity of protected system files without attempting any automated repairs.
The 'sfc /verifyonly' command instructs System File Checker to scan all protected system files for integrity issues and write the diagnostic outcome to logs without repairing or modifying any files, satisfying the audit-only policy requirement.

Adım Adım Çözüm

1
Identify the primary administrative objective and constraints.
The requirement is to audit and log system file corruption while adhering to a strict no-repair restriction.
Administrative policy dictates that no system files should be modified during the initial diagnostic step.
2
Evaluate the appropriate command-line utility for system file verification.
System File Checker (sfc.exe) is the Windows utility designed to inspect protected system files.
Selecting SFC isolates system file validation from disk sector checks or third-party file operations.
3
Select the switch that restricts SFC to non-destructive auditing.
The /verifyonly flag scans all protected system files and outputs integrity violations without replacing modified files.
Using /verifyonly meets the exact policy criteria of reporting findings without executing automated repairs.

Anahtar Kavram

Windows System File Checker (SFC) Command Switches
Tahmini Süre:1m 15s
Soru 1325Soru

A technician needs to sanitize several solid-state drives (SSDs) containing sensitive company data. The drives must remain functional so they can be reassigned to non-sensitive workstations. Which of the following data sanitization methods should the technician perform?

Cevabı ve açıklamayı göster

Cevap: Perform an ATA Secure Erase or cryptographic erasure on the drives.

Cevap

An ATA Secure Erase or cryptographic erasure should be performed on the solid-state drives.
Applying an ATA Secure Erase command or cryptographic erasure purges the contents of flash memory cells or destroys the cryptographic keys protecting the drive, ensuring the data is permanently unrecoverable while preserving the hardware for redeployment.

Adım Adım Çözüm

1
Identify the media type and operational requirements.
The target devices are solid-state drives (SSDs) that must be preserved for reuse rather than physically destroyed.
Flash-based storage requires software-based sanitization techniques specifically designed for non-magnetic media.
2
Select a sanitization method compatible with flash storage reuse.
ATA Secure Erase or cryptographic erasure purges all stored data without damaging the underlying drive components.
Degaussing fails on solid-state media, and basic OS formatting leaves raw data readable by forensic utilities.

Anahtar Kavram

Sanitization Methods for Solid-State Storage
Soru 1326Soru

A technician is troubleshooting a Windows 11 desktop that can successfully communicate with local printers on the 192.168.1.0/24 network, but cannot reach servers on remote corporate subnets (such as 192.168.2.50) or access the internet. Reviewing the static IPv4 configuration properties on the client reveals the following settings:

- IPv4 Address: 192.168.1.45
- Subnet Mask: 255.255.0.0
- Default Gateway: 192.168.1.1
- Preferred DNS: 192.168.1.2

Which of the following explains why traffic destined for remote subnets is failing?

Cevabı ve açıklamayı göster

Cevap: The misconfigured subnet mask causes the client to treat remote subnets as local network traffic, preventing it from forwarding packets to the default gateway.

Cevap

The misconfigured subnet mask causes the host to view destination IPs in the 192.168.2.0/24 range as local rather than remote, leading the client to bypass the default gateway.
Subnet masks determine whether a destination IP address is local or remote. The expected subnet mask for a 192.168.1.0/24 network is 255.255.255.0. Because the subnet mask was entered as 255.255.0.0, the Windows client incorrectly calculates that 192.168.2.50 is on its local physical segment. Consequently, it attempts direct ARP requests for 192.168.2.50 rather than routing the traffic through the default gateway (192.168.1.1), causing communication to fail.

Adım Adım Çözüm

1
Analyze the configured IPv4 address and subnet mask.
The IP address is 192.168.1.45 and the subnet mask is 255.255.0.0 (/16 network prefix).
The subnet mask defines the boundary between the network portion and host portion of an IP address.
2
Determine the local subnet range evaluated by the client.
With a /16 mask, the local network range spans from 192.168.0.0 through 192.168.255.255.
The first two octets (192.168) represent the network ID, so all addresses matching 192.168.x.x are treated as local on-link destinations.
3
Evaluate how traffic to remote destination 192.168.2.50 is handled.
The client assumes 192.168.2.50 is on the local segment and attempts ARP address resolution directly instead of encapsulating packets for the default gateway (192.168.1.1).
Hosts only forward packets to the default gateway when the destination IP address falls outside the local subnet boundary.

Anahtar Kavram

Subnet Mask Logic and Default Gateway Traversal
Soru 1327Soru

As an IT security technician reviewing recently logged security events across the organization, match each security incident scenario to its corresponding social engineering or threat classification.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Shoulder Surfing
Dumpster Diving
Watering Hole Attack
Typosquatting

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Shoulder Surfing matches the observation of PIN entry. Dumpster Diving matches searching un-shredded trash bins. Watering Hole Attack matches compromising a heavily visited industry website. Typosquatting matches mistyping a domain URL to land on a spoofed site.
Each attack vector accurately maps to its defined operation: shoulder surfing focuses on visual observation of data input; dumpster diving searches physical waste for information; watering hole attacks compromise trusted third-party sites; and typosquatting leverages common domain name spelling errors.

Adım Adım Çözüm

1
Analyze physical observation threat vectors
Secretly observing credential input from across the room describes direct visual observation, which is shoulder surfing.
Recognizing physical visibility vulnerabilities.
2
Identify physical paper document theft methods
Searching through un-shredded corporate waste containers outside a facility fits the definition of dumpster diving.
Differentiating physical disposal security breaches from digital attacks.
3
Evaluate web-based targeted infection strategies
Compromising a third-party site known to be visited by targets to deliver malware is a strategic web compromise (watering hole attack).
Distinguishing strategic target compromise from mass phishing.
4
Evaluate domain mistyping attacks
Relying on user typing mistakes to present fake sites is typosquatting.
Connecting URL input errors with spoofing mechanisms.

Anahtar Kavram

Classification of physical and digital social engineering threat vectors
Soru 1328Soru

A network security technician is updating firewall access control lists (ACLs) following a security policy enforcement mandate requiring all mail access to transition from unencrypted protocols to SSL/TLS encrypted standards. Users report that while outbound mail transmission works, email clients fail to synchronize folder structures and message status across multiple mobile and desktop devices. Diagnostics reveal that unencrypted IMAP traffic on TCP port 143 is being blocked as intended. Which port and transport protocol combination must be permitted through the perimeter firewall to restore encrypted, multi-device mail synchronization?

Cevabı ve açıklamayı göster

Cevap: TCP port 993

Cevap

TCP port 993 must be permitted to allow IMAPS traffic for secure multi-device email synchronization.
IMAPS (Internet Message Access Protocol Secure) operates over TCP port 993 to establish an SSL/TLS encrypted session that enables seamless folder and status synchronization across multiple devices.

Adım Adım Çözüm

1
Identify the required functional capability from the scenario.
The requirement demands multi-device folder and message state synchronization, which specifies the IMAP protocol family rather than POP3.
IMAP keeps messages on the server and synchronizes status (read, flagged, folders) across multiple clients, whereas POP3 downloads and removes/stores messages locally.
2
Determine the secure equivalent port for unencrypted IMAP.
Unencrypted IMAP uses TCP port 143, while IMAPS (IMAP over SSL/TLS) uses TCP port 993.
CompTIA A+ Core 1 standards require distinguishing between unencrypted protocols and their secure SSL/TLS port counterparts.
3
Verify the correct Layer 4 transport protocol.
Email retrieval protocols require reliable stream delivery, mandating TCP rather than UDP.
TCP guarantees ordered, loss-free packet delivery necessary for mailbox content retrieval.

Anahtar Kavram

Distinguishing secure vs. unencrypted mail retrieval protocols and their associated TCP/UDP port assignments.
Soru 1329Soru

An IT compliance manager is preparing to decommission a fleet of enterprise laptops containing NVMe Solid State Drives (SSDs) that held sensitive financial data. The assigned technician suggests utilizing an electromagnetic degausser to sanitize the drives prior to sending them off-site for recycling. Which of the following best explains why the compliance manager should reject the technician's proposed method?

Cevabı ve açıklamayı göster

Cevap: Degaussing is ineffective on solid-state drives because data is stored in semiconductor flash memory microchips rather than magnetic media.

Cevap

Degaussing is ineffective on solid-state drives because data is stored in semiconductor flash memory microchips rather than magnetic media.
Degaussing exposes storage media to high-intensity magnetic fields, neutralizing the magnetic alignment of data on hard disk drives (HDDs) and magnetic tapes. Solid State Drives (SSDs) contain non-volatile semiconductor flash memory chips without magnetic components, rendering electromagnetic degaussers completely ineffective for data sanitization.

Adım Adım Çözüm

1
Identify the media type being decommissioned.
The target drives are NVMe Solid State Drives (SSDs), which rely on NAND flash memory storage.
Determining media architecture (solid-state vs. magnetic) is required to choose a valid sanitization method.
2
Analyze the mechanism of the proposed sanitization method (degaussing).
Degaussing uses powerful electromagnetic fields to demagnetize and scramble data on magnetic platters or tapes.
Degaussing relies entirely on magnetic susceptibility to remove data.
3
Evaluate why degaussing fails for the target media.
Flash memory cells store data electronically via electrical charges in floating-gate transistors, not magnetic domains.
Magnetic exposure leaves data on solid-state drives completely intact, requiring alternative methods such as physical shredding, cryptographic erase, or built-in secure purge utilities.

Anahtar Kavram

Data Destruction and Sanitization Compatibility across Storage Media Types
Soru 1330Soru

An IT technician is preparing to perform a clean installation of Windows 11 on a newly built corporate workstation with an unformatted NVMe storage drive. Arrange the standard operating system deployment tasks in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological order for a clean Windows OS installation is: 1) Configure UEFI firmware and boot order, 2) Boot installation media and partition target drive, 3) Complete OS file copying and initial setup restart, 4) Complete the Out-of-Box Experience (OOBE) configuration, 5) Install post-installation hardware drivers and updates.
The clean installation process follows a strict sequence: Firmware configuration (UEFI/TPM/Boot Order) → Installer startup & disk partitioning → Core setup file expansion & system restart → Out-of-Box Experience (OOBE) user customization → Post-installation hardware driver and Windows Update deployment.

Adım Adım Çözüm

1
Configure hardware firmware environment.
Secure Boot, TPM, and boot priority are established.
Hardware settings must be verified and configured before installation media can boot properly.
2
Initialize storage and start installation.
Partitions are created on the target drive and installation begins.
The installer requires a configured disk target to deploy operating system files.
3
Execute main file copy and system setup restart.
Windows core files are expanded onto the local drive.
The core image must be expanded onto disk before localized user configuration can occur.
4
Perform Out-of-Box Experience (OOBE) setup.
Initial user profile and network/privacy settings are provisioned.
OOBE runs automatically on first boot to customize user account and localized settings.
5
Perform post-installation updates and optimization.
System features full hardware support and security updates.
Device drivers and Windows updates ensure hardware stability and vulnerability protection post-setup.

Anahtar Kavram

Chronological procedure for clean OS deployment
Soru 1331Soru

A field technician is troubleshooting a Windows 11 desktop computer that was flagged for an active Trojan and spyware infection. The technician has already physically disconnected the network cable and turned off Wi-Fi to isolate the host. Which TWO of the following steps should the technician perform NEXT before initiating anti-malware scans and removal tools? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Disable System Protection on all local storage volumes.; Boot the system into Safe Mode or an isolated recovery environment.

Cevap

The technician must disable System Protection on all local storage volumes and boot the system into Safe Mode or an isolated recovery environment.
Under the standard CompTIA 7-step malware remediation process, once symptoms are identified and the system is quarantined (isolated from the network), the technician must proceed to disable System Restore (Step 3) to clear infected recovery snapshots. Following this, the technician prepares for remediation (Step 4) by updating scanner definitions and booting into Safe Mode to prevent active malware processes from hooking into system memory.

Adım Adım Çözüm

1
Analyze current progress within the CompTIA 7-Step Malware Remediation Process.
Step 1 (Identify malware) and Step 2 (Quarantine infected system) are complete.
The system was identified as infected and isolated from network connections.
2
Perform Step 3: Disable System Restore in Windows.
System Protection is turned off across all local drives, purging existing restore points.
Prevents malware from hiding in hidden system volume information folders or restoring itself after remediation.
3
Prepare for Step 4: Remediate infected systems by isolating execution context.
The machine is booted into Safe Mode.
Prevents malware persistence mechanisms and active rootkits from executing during scanner installation and execution.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Procedure
Tahmini Süre:2m 0s
Soru 1332Soru

A technician is setting up a ceiling-mounted projector in a conference room. When projecting a test pattern onto the flat screen, the image appears distorted as a trapezoid, where the top edge of the image is noticeably wider than the bottom edge. The projector is mounted securely and cannot be physically repositioned. Which of the following projector settings should the technician adjust to flatten the image into a proper rectangular shape?

Cevabı ve açıklamayı göster

Cevap: Keystone correction

Cevap

Keystone correction should be configured on the projector to correct the trapezoidal image distortion.
Keystone correction is designed specifically to solve trapezoidal image distortion caused by angled projection when the projector lens is not perfectly perpendicular to the screen.

Adım Adım Çözüm

1
Identify the type of display symptom.
The symptom is trapezoidal image distortion, where the top of the projected image is wider than the bottom.
This occurs when the optical axis of a projector is not perpendicular to the projection surface.
2
Select the appropriate feature on the projector.
Keystone correction adjusts the output shape to compensate for angle distortion.
When physical repositioning is not feasible, keystone settings digitally reshape the image back to a standard rectangular format.

Anahtar Kavram

Projector Keystone Correction
Soru 1333Soru

Match each physical security control mechanism on the left with its primary protective objective on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Access control vestibule
Privacy filter
Vehicle bollard
Cable lock

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Access control vestibule matches with mitigating tailgating via interlocking doors. Privacy filter matches with narrowing screen viewing angles to prevent shoulder surfing. Vehicle bollard matches with preventing vehicular ramming attacks. Cable lock matches with anchoring hardware to immovable fixtures to prevent physical equipment theft.
Each physical security control serves a specific defense objective: access control vestibules prevent tailgating by enforcing single-person entry through interlocking doors; privacy filters block shoulder surfing by narrowing monitor viewing angles; vehicle bollards absorb vehicle impacts to protect building structures; and cable locks physically secure hardware assets to permanent fixtures to prevent physical equipment theft.

Adım Adım Çözüm

1
Identify the primary protective function of an access control vestibule
Access control vestibules utilize dual interlocking doors to allow access to only one person at a time.
This directly mitigates tailgating (piggybacking) by unauthorized personnel into sensitive areas.
2
Identify the primary protective function of a privacy filter
Privacy filters polarize or restrict screen light output to narrow viewing angles.
This prevents visual eavesdropping or shoulder surfing by passersby.
3
Identify the primary protective function of a vehicle bollard
Bollards act as heavy vertical perimeter barriers engineered to withstand kinetic impact.
They protect building entrances and exterior walls from vehicle ramming attacks.
4
Identify the primary protective function of a cable lock
Cable locks secure computing hardware to sturdy, stationary objects.
They inhibit opportunistic physical theft of portable or stationary hardware assets.

Anahtar Kavram

Physical Security Controls
Tahmini Süre:1m 30s
Soru 1334Soru

A cybersecurity technician is resolving a security incident on a corporate endpoint. The technician identified a stealth keylogger infection, isolated the system from the network, disabled System Restore, updated the security software in Safe Mode, and successfully completed malware removal and verification. Which of the following actions must the technician perform next to adhere to the standard CompTIA malware remediation process?

Cevabı ve açıklamayı göster

Cevap: Configure scheduled operating system updates and automated anti-malware scans.

Cevap

Configure scheduled operating system updates and automated anti-malware scans.
According to the standard CompTIA 7-step malware remediation framework, the steps must be performed in exact sequence: 1) Identify symptoms, 2) Quarantine infected system, 3) Disable System Restore, 4) Remediate infected systems (update anti-malware and scan/remove), 5) Schedule updates and run recurring scans, 6) Enable System Restore and create a restore point, 7) Educate the user. Since the scenario completes Step 4 (remediation and removal), the immediate next step required is Step 5 (scheduling updates and recurring scans).

Adım Adım Çözüm

1
Review the completed steps against the CompTIA 7-step malware remediation framework.
Steps 1 (Identify), 2 (Quarantine), 3 (Disable System Restore), and 4 (Remediate/Remove malware) have been performed.
Tracking completed steps identifies where the technician currently sits in the remediation workflow.
2
Identify the mandatory next sequence step following Step 4 (Remediate infected systems).
Step 5 is 'Schedule updates and run recurring scans'.
Scheduling updates and scans ensures continuous protection against recurring or unpatched vulnerabilities before enabling restore capabilities.
3
Select the option representing Step 5.
Configuring scheduled OS updates and automated anti-malware scans is selected.
This matches the exact procedural requirement of Step 5.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process
Soru 1335Soru

An IT support technician receives a call from a remote employee experiencing a critical system failure right before a presentation deadline. Place the professional communication and customer interaction steps in the correct sequential order from initial greeting to issue resolution.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of customer interaction steps is: First, actively listen to the user's initial description without interruption. Second, ask clarifying questions using plain, non-technical language. Third, establish clear expectations and offer temporary workarounds. Fourth, perform technical troubleshooting while respecting user data. Fifth, verify resolution directly with the user and document the issue in the ticketing system.
Standard CompTIA customer service protocol dictates that a technician must first practice active listening without interruption. Once the user is heard, the technician clarifies details without using jargon, sets clear timeline expectations and workarounds, executes the fix, and concludes by verifying satisfaction with the customer before completing documentation.

Adım Adım Çözüm

1
Active Listening
De-escalates customer anxiety and gathers full initial problem context.
CompTIA professional standards emphasize allowing the user to complete their statement uninterrupted.
2
Jargon-Free Clarification
Identifies precise error symptoms without overwhelming the user.
Technical jargon causes miscommunication; plain language ensures accurate diagnostic details.
3
Setting Expectations & Workarounds
Establishes a realistic timeline and mitigates downtime impact.
Setting clear expectations prevents false assumptions and keeps the user informed.
4
Technical Remediation
Resolves the underlying technical issue efficiently.
Troubleshooting proceeds once the user understands and agrees to the resolution path.
5
User Verification & Documentation
Ensures complete customer satisfaction and logs solution knowledge.
Workflows require final confirmation from the end user before closing the incident ticket.

Anahtar Kavram

Professional Customer Interaction and Communication Workflow
Soru 1336Soru

A desktop support specialist is hardening standalone Windows 11 Pro workstations located in a public library environment. To satisfy new compliance mandates, the specialist must ensure that standard account users are completely blocked from attempting privilege elevation, and that administrative users must explicitly type their password on a isolated screen whenever an elevation request occurs. Which TWO of the following policy settings in Local Security Policy (secpol.msc) under Security Options should the specialist configure?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests'; Set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'

Cevap

The technician must configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' and set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
Configuring 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' satisfies the requirement to prevent standard users from attempting privilege elevation. Setting 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop' ensures administrators must enter their full password on an isolated secure desktop screen before privilege elevation is granted.

Adım Adım Çözüm

1
Analyze standard user requirement
Standard users must not be permitted to enter administrator credentials when an elevation prompt occurs.
Setting the standard user elevation policy to 'Automatically deny elevation requests' suppresses credential prompts and rejects unauthorized privilege escalation attempts immediately.
2
Analyze administrator user requirement
Administrative users must be forced to authenticate explicitly on an isolated screen.
Setting administrator behavior in Admin Approval Mode to 'Prompt for credentials on the secure desktop' forces password entry on the secure desktop, preventing malware interference.

Anahtar Kavram

Configuring Local Security Policy (secpol.msc) User Account Control security options for elevation prompt behaviors.
Soru 1337Soru

A desktop support technician needs to configure a Windows workstation used by a security analyst. The analyst requires all file extensions to be explicitly visible and system files to be unhidden during file system inspections. Which Control Panel applet should the technician open to adjust these view settings?

Cevabı ve açıklamayı göster

Cevap: File Explorer Options

Cevap

File Explorer Options is the correct utility because its View tab contains configuration settings for revealing hidden operating system files and displaying file extensions for known file types.
File Explorer Options (formerly Folder Options) is used to customize file and folder display behavior. Under the View tab, technicians can deselect 'Hide extensions for known file types' and select 'Show hidden files, folders, and drives' to reveal full filenames and hidden system items.

Adım Adım Çözüm

1
Analyze the technical requirement.
The requirement is to show hidden system files and display file extensions across the operating system file structure.
Security auditing requires inspecting full file names and identifying hidden system files to analyze suspect directories accurately.
2
Select the appropriate Control Panel applet.
File Explorer Options directly manages file display behavior, general folder navigation options, and search indexing parameters.
The View tab in File Explorer Options specifically provides checkboxes to uncheck 'Hide extensions for known file types' and select 'Show hidden files, folders, and drives'.

Anahtar Kavram

Windows Control Panel Utilities - File Explorer Options
Tahmini Süre:1m 0s
Soru 1338Soru

An IT technician is tasked with decommissioning a batch of enterprise magnetic hard disk drives (HDDs) containing sensitive corporate financial data. Place the administrative and technical steps in the correct chronological order from first to last to ensure compliance with data sanitization standards and chain of custody guidelines.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence is: 1) Log drive serial numbers and complete chain-of-custody forms, 2) Expose magnetic hard drives to high-density degaussing, 3) Transport sanitized drives via secure courier, 4) Perform physical industrial shredding and obtain a Certificate of Destruction, and 5) Update asset records and archive the Certificate of Destruction.
The proper decommission lifecycle requires logging serial numbers to establish chain of custody first, purging magnetic media via degaussing to prevent data exposure in transit, transporting the media securely under custody, executing physical destruction while securing a Certificate of Destruction, and finally closing asset records in the tracking system with attached validation certificates.

Adım Adım Çözüm

1
Establish inventory baseline and documentation.
All drive serial numbers are cataloged with initial chain of custody established.
Proper inventory accounting before physical movement prevents lost or stolen media.
2
Perform local data purge via degaussing.
Magnetic fields on drive platters are completely demagnetized.
Degaussing purges data locally so unencrypted data is not exposed during off-site transportation.
3
Relocate media using tracked chain of custody.
Drives arrive safely at the third-party destruction facility.
Tracked courier services maintain accountability between company premises and vendor facilities.
4
Execute physical destruction and obtain validation.
Drives are shredded into fragments and a Certificate of Destruction is signed.
Physical destruction prevents hardware re-use, and the certificate serves as legal proof of disposal.
5
Finalize corporate inventory logs.
Asset database records drives as destroyed with linked audit documentation.
Completes corporate lifecycle procedures and fulfills compliance audit requirements.

Anahtar Kavram

Chain of Custody and Media Destruction Lifecycle
Tahmini Süre:2m 0s
Soru 1339Soru

A desktop support technician needs to change the User Account Control (UAC) notification level on a standalone Windows 11 computer. In what sequential order should the technician perform the steps to complete this configuration?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is to open the User Account Control settings applet from the Start menu, adjust the notification slider, click OK to submit the changes, and confirm the resulting administrative UAC elevation prompt.
To modify UAC settings in Windows, the technician must first open the configuration interface via Search or Control Panel. Next, the slider is moved to set the desired notification behavior. After setting the slider, clicking OK submits the changes, which triggers an administrative UAC prompt requiring explicit confirmation to save the new policy.

Adım Adım Çözüm

1
Search for and open Change User Account Control settings from the Start menu.
The User Account Control Settings configuration window opens.
Accessing the applet interface is necessary before any settings can be modified.
2
Adjust the vertical slider to the target notification setting.
The desired UAC notification behavior is selected.
The slider defines when Windows notifies the user about application changes.
3
Click the OK button at the bottom of the window.
Windows initiates the process to apply the modified security policy.
Submitting the configuration form triggers the system validation process.
4
Click Yes on the User Account Control authorization prompt.
The new UAC setting is committed to the registry.
System-wide security policy adjustments require explicit administrative approval.

Anahtar Kavram

Configuring User Account Control settings using the Windows GUI
Soru 1340Soru

An IT technician is preparing a batch of retired magnetic hard drives for permanent disposal according to organizational security procedures. Place the hardware decommission and disposal steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is: Log asset tags and serial numbers -> Degauss or purge drive data -> Subject drives to physical shredding -> Obtain and archive the Certificate of Destruction.
Proper data disposal protocol requires documenting asset serial numbers first to establish chain of custody. Next, the drives undergo data sanitization (such as degaussing magnetic platters) to ensure confidentiality during handling. The sanitized drives are then physically shredded. Finally, the vendor issues a formal Certificate of Destruction to confirm compliance and finalize the audit trail.

Adım Adım Çözüm

1
Document assets for tracking
Serial numbers and asset tags are logged into the inventory tracking database.
Maintaining chain of custody requires recording asset details before performing any physical processing.
2
Sanitize media content
Magnetic media is degaussed or purged.
Data sanitization protects sensitive corporate information prior to physical movement or third-party handling.
3
Perform physical hardware destruction
Media is physically shredded into unrecoverable fragments.
Physical destruction completes the media disposition process.
4
Collect compliance validation
Signed Certificate of Destruction is received and stored for auditing.
Audit verification occurs only after physical disposal has taken place.

Anahtar Kavram

Hardware Decommissioning and Media Disposal Lifecycle
ÖncekiSayfa 67 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin