Tüm alıştırma soruları

3551 soru

Soru 1361Soru

An IT support technician is troubleshooting a desktop inkjet printer used in a graphic design office. Users report that printed photo proofs have visible horizontal white streaks running across images and that colored lines are misaligned following a recent ink cartridge replacement. Which TWO of the following actions should the technician perform FIRST to resolve these symptoms? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Perform a printhead nozzle check and run a cleaning cycle to clear clogged nozzles.; Execute a printhead alignment calibration procedure using the printer maintenance utility.

Cevap

The technician should perform a printhead nozzle check/cleaning cycle and execute a printhead alignment calibration procedure.
Performing a printhead nozzle check and cleaning cycle removes dried ink blockages responsible for horizontal white streaks. Executing a printhead alignment calibration corrects misaligned ink drops across print passes, which often occurs after disturbing the carriage mechanism during cartridge installation.

Adım Adım Çözüm

1
Identify the underlying technology and symptoms
The device is an inkjet printer experiencing horizontal streaks (clogged printhead nozzles) and line misalignments (misaligned printhead positions).
Print defects on inkjet printers after cartridge replacement typically stem from clogged ink jets or mechanical alignment shifts.
2
Address the horizontal white streaks
Run a nozzle check test pattern and perform printhead cleaning cycles.
Clearing dried ink from nozzle orifices restores continuous ink flow across the page.
3
Address the line misalignments
Run the printhead alignment utility and select optimal calibration patterns.
Aligning printhead passes ensures accurate drop placement during bidirectional printing.

Anahtar Kavram

Inkjet print quality troubleshooting requires identifying nozzle blockages and printhead alignment issues prior to replacing hardware components.
Soru 1362Soru

A field engineer relies on a Windows 11 laptop that receives an automatic IP address via DHCP while connected to the corporate office network. However, when working at remote client sites, the laptop connects to an isolated diagnostic subnet (192.168.50.0/24192.168.50.0/24) that has no DHCP server present. Which network configuration setting should a technician set up so the laptop automatically assigns a static IP address only when a DHCP server cannot be reached?

Cevabı ve açıklamayı göster

Cevap: Enable the Alternate Configuration feature in the TCP/IPv4 properties of the network adapter

Cevap

The correct option is to enable the Alternate Configuration feature in the TCP/IPv4 properties of the network adapter.
Configuring the Alternate Configuration tab in the Internet Protocol Version 4 (TCP/IPv4) properties allows Windows clients set to 'Obtain an IP address automatically' to use a pre-defined static IP configuration whenever a DHCP server cannot be located. This eliminates the need for manual configuration switching when transitioning between DHCP and static networks.

Adım Adım Çözüm

1
Identify the network requirements
The device needs dynamic IP addressing (DHCP) on one network and a static IP on another network without manual reconfiguration.
When no DHCP server responds, Windows defaults to an APIPA address (169.254.x.x169.254.x.x), which prevents communication on the target 192.168.50.0/24192.168.50.0/24 network.
2
Locate the appropriate Windows IPv4 settings tab
Open Network Connections (`ncpa.cpl`), open properties for the Ethernet adapter, and select TCP/IPv4 properties.
The TCP/IPv4 properties window contains the Alternate Configuration tab specifically designed for user-defined static IP fallbacks.
3
Configure the alternate IPv4 address parameters
Specify the user-configured IP address, subnet mask (255.255.255.0255.255.255.0), and optional gateway/DNS settings.
When DHCP queries fail, Windows automatically activates these settings instead of generating an APIPA address.

Anahtar Kavram

Windows TCP/IP Alternate Configuration
Soru 1363Soru

A desktop technician needs to map a remote shared folder located at \\NAS01\Reports to local drive letter R: on a Windows workstation using the Command Prompt. The technician must authenticate using an alternate domain account named CORP\tech_admin. Which of the following commands should the technician execute to accomplish this task?

Cevabı ve açıklamayı göster

Cevap: net use R: \\NAS01\Reports /user:CORP\tech_admin

Cevap

net use R: \\NAS01\Reports /user:CORP\tech_admin
The command 'net use R: \\NAS01\Reports /user:CORP\tech_admin' correctly connects the local system to the specified remote share folder, maps it to the designated drive letter R:, and passes the specified domain credentials for authentication.

Adım Adım Çözüm

1
Identify the core objective and environment requirement.
Connect to a remote SMB share (\\NAS01\Reports) as local drive letter R: using alternate domain credentials (CORP\tech_admin) via Windows CLI.
Mapping network drives requires choosing the appropriate utility designed for outbound SMB share management.
2
Select the correct command-line tool and parameters.
Use net use specifying the target drive letter, remote path, and /user: switch for alternate credentials.
The net use utility manages client-side network connections and drive mappings in Microsoft Windows.

Anahtar Kavram

Mapping remote SMB shares to local drive letters using net use with alternate credentials
Soru 1364Soru

A user on a corporate Windows 11 domain workstation reports that accessing an internal intranet portal via web browser continuously prompts for authentication rather than automatically passing their logged-on domain credentials. A tier-2 technician determines that the intranet site must be added to the Local Intranet security zone so the browser trusts the site for automatic pass-through authentication. Which Windows Control Panel utility should the technician open to configure this setting?

Cevabı ve açıklamayı göster

Cevap: Internet Options

Cevap

Internet Options is the correct utility used to manage browser security zones and configure automatic pass-through authentication for internal intranet sites.
Internet Options provides access to the Security tab, where users and administrators can assign specific website addresses to security zones (such as Local Intranet) and configure logon settings to automatically pass current Windows domain credentials.

Adım Adım Çözüm

1
Identify the administrative requirement in the scenario.
The requirement is to modify security zone settings and browser pass-through authentication behavior for an internal intranet site.
Integrated Windows Authentication (SSO) relies on the client machine trusting the target URL within the Local Intranet zone.
2
Determine the Control Panel applet responsible for web security zones.
The Internet Options applet contains the Security tab, allowing site URLs to be added to specific zones such as Local Intranet or Trusted Sites.
Zone assignment directly dictates authentication prompts and browser security behavior.

Anahtar Kavram

Windows Control Panel Internet Options Applet
Soru 1365Soru

A desktop support technician is hardening a standalone Windows 11 Pro workstation to comply with corporate administrative policies. The requirement dictates that administrative users must be forced to enter their password on an isolated desktop whenever an elevation prompt occurs. Place the configuration steps in the correct order to implement and enforce this security baseline.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with launching secpol.msc, navigating to Security Options under Local Policies, modifying the administrator elevation prompt behavior setting to require credentials on the secure desktop, and finally executing gpupdate /force in an elevated shell to enforce the change immediately.
To properly configure and enforce administrative elevation prompt behavior, a technician must first open secpol.msc, navigate to Local Policies -> Security Options, locate and set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop', and complete the procedure by running 'gpupdate /force' in an elevated command line.

Adım Adım Çözüm

1
Launch the Local Security Policy console using secpol.msc.
The Local Security Policy management interface opens.
Granular UAC elevation behaviors must be configured through secpol.msc on non-domain Windows workstations.
2
Navigate through Local Policies to the Security Options container.
The right pane populates with detailed security parameters and UAC policy options.
UAC security policies are located within the Security Options node.
3
Configure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
The local policy setting is updated to require password re-entry on the secure desktop for administrative actions.
This specific setting satisfies the mandate requiring re-authentication instead of standard consent.
4
Execute gpupdate /force in an administrative command prompt.
The system re-evaluates local group policies and updates security settings instantly.
Forcing a policy update applies the security changes immediately across the workstation.

Anahtar Kavram

Local Security Policy (secpol.msc) UAC Elevation Prompt Configuration
Soru 1366Soru

An IT technician is preparing to return a leased commercial multifunction printer (MFP) to the leasing vendor at the end of its contract term. The MFP contains an internal hard disk drive that cached print jobs, copy histories, and scanned documents containing sensitive organization data. The printer must remain fully functional for the vendor upon return. Which of the following is the most appropriate method to sanitize the internal drive prior to returning the printer?

Cevabı ve açıklamayı göster

Cevap: Perform a secure drive wipe or cryptographic erase using the printer's administrative menu

Cevap

The technician should perform a secure drive wipe or cryptographic erase using the printer's administrative utility.
Performing a secure drive wipe or cryptographic erase via the printer's administrative utilities sanitizes the stored data according to security standards (such as NIST SP 800-88 Purge guidelines) while keeping the physical hard drive fully operational for the leasing vendor.

Adım Adım Çözüm

1
Identify media sanitization requirements and hardware operational constraints.
The device contains confidential data that must be sanitized, but the underlying hardware must remain functional for lease return.
Physical destruction or degaussing renders storage hardware permanently inoperable.
2
Evaluate data sanitization techniques suitable for hardware preservation.
Logical sanitization techniques (such as cryptographic erase or multi-pass overwrite utilities built into the device firmware) render data unrecoverable without damaging drive components.
Cryptographic erase and overwrite methods purge data while maintaining hardware integrity.
3
Select the correct administrative action.
Initiate the secure sanitization protocol through the MFP administrative interface.
This complies with data security sanitization requirements while meeting the lease return condition.

Anahtar Kavram

Data Sanitization for Leased and Embedded Devices
Tahmini Süre:1m 15s
Soru 1367Soru

A security administrator is designing physical security enhancements for an organization's internal server room to prevent tailgating at the room entrance and to protect the internal hardware components of individual servers from physical tampering. Which TWO physical security controls should the administrator implement to meet these specific requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Access control vestibule; Lockable rack enclosures with chassis intrusion switches

Cevap

The administrator should implement an access control vestibule to prevent tailgating at the entrance and lockable rack enclosures with chassis intrusion switches to secure server hardware components.
An access control vestibule uses two interlocking doors to physically stop tailgating by ensuring only one authenticated individual passes through at a time. Lockable rack enclosures combined with chassis intrusion detection ensure that server components inside the room cannot be physically opened or modified without authorization.

Adım Adım Çözüm

1
Identify the primary threat regarding physical entry control.
Tailgating occurs when an unauthorized person follows an authorized individual through a door. An access control vestibule (mantrap) mitigates this by requiring two sequential authentication steps inside an enclosed space where only one door opens at a time.
Prevents unauthorized personnel from entering the secure server room alongside legitimate employees.
2
Identify the primary threat regarding server hardware tampering.
Lockable rack enclosures physically enclose servers, preventing direct access to drive bays, RAM, and internal storage devices. Chassis intrusion switches detect when a server panel is removed.
Protects internal components from theft or hardware-level tampering inside the rack.

Anahtar Kavram

Physical Security Access Control and Hardware Protection Mechanisms
Soru 1368Soru

A user connects a new 4K external monitor to a laptop using a USB Type-C cable. While the laptop successfully charges through the connection, the monitor displays a "No Signal" message and enters power-saving mode. The laptop's USB-C port is verified to support DisplayPort Alternate Mode (DP Alt Mode). Which of the following is the most likely cause of this display issue?

Cevabı ve açıklamayı göster

Cevap: The USB Type-C cable in use is rated only for power delivery and USB 2.0 data transfer, lacking video channel wiring.

Cevap

The USB Type-C cable in use is rated only for power delivery and USB 2.0 data transfer, lacking video channel wiring.
The correct answer identifies that USB Type-C cables vary in internal wiring. Standard charging cables only include power pins and USB 2.0 data lines, omitting the high-speed data lanes necessary for DisplayPort Alternate Mode video transmission. Replacing the cable with a full-featured USB-C or Thunderbolt cable will resolve the 'No Signal' condition.

Adım Adım Çözüm

1
Analyze the reported symptoms and hardware capabilities
The host laptop's port explicitly supports DisplayPort Alternate Mode, and power delivery works, but no video signal reaches the external monitor.
Power delivery and low-speed data pins operate independently from the high-speed data lanes required for video Alt Mode.
2
Evaluate the cable specification requirements for video over USB-C
Standard charging cables bundled with laptops or power adapters often omit high-speed SuperSpeed pairs to save cost, making them unable to transmit video.
DisplayPort Alt Mode requires full-featured USB-C cables (USB 3.2 Gen 1/2 or USB4/Thunderbolt) wired with high-speed data lanes.

Anahtar Kavram

USB Type-C Cable Capabilities and DisplayPort Alternate Mode
Tahmini Süre:1m 15s
Soru 1369Soru

An IT support technician is performing a clean OS installation on a user's workstation. The technician needs to capture all existing user profile data and settings from the current operating system and restore them onto the newly installed OS using command-line automation. Which of the following User State Migration Tool (USMT) executables are required to complete this migration process? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: scanstate.exe; loadstate.exe

Cevap

The utilities required to migrate user profile data and settings using USMT are scanstate.exe to capture the state and loadstate.exe to restore it.
The User State Migration Tool (USMT) relies on scanstate.exe to export user profiles, files, and settings into a migration store before the clean installation, and loadstate.exe to import and apply that store to the newly installed operating system afterwards.

Adım Adım Çözüm

1
Identify the command-line utility used by USMT to collect user data from the source OS.
scanstate.exe scans the source computer and creates a compressed migration store containing user settings and data.
Capturing data must occur prior to disk formatting or clean OS installation.
2
Identify the command-line utility used by USMT to apply collected data to the target OS.
loadstate.exe uncompresses and restores the user state onto the newly installed OS.
Restoring user profile settings completes the automated migration workflow.

Anahtar Kavram

User State Migration Tool (USMT) Command-Line Utilities
Soru 1370Soru

A IT support technician is tasked with resolving a malware infection reported on a corporate Windows workstation. Place the following steps of the standard CompTIA 7-step malware remediation process in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order is: 1. Disconnect network cables and isolate the infected workstation from the local network, 2. Disable Windows System Restore to prevent infected restore points from persisting, 3. Update anti-malware signatures and perform a full system remediation scan, 4. Re-enable System Restore and generate a clean restore point, 5. Provide security awareness training and education to the end user.
The CompTIA standard 7-step malware removal process follows a specific order: 1. Identify symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware and scan/remove), 5. Schedule scans and run updates, 6. Enable System Restore and create restore point, and 7. Educate the user. Isolating the system first stops infection spread, disabling System Restore prevents malware persistence in backup copies, updating and scanning cleans the system, re-enabling System Restore creates a known-good recovery baseline, and user education concludes the process.

Adım Adım Çözüm

1
Isolate the system (Quarantine)
Network cables are removed and wireless connections are disabled to prevent lateral malware movement.
Quarantine comes right after identifying malware symptoms.
2
Disable System Restore
Existing restore points containing infected copies of system files are purged.
Prevents accidental restoration of malware from an older system state.
3
Remediate the infection
Anti-malware definitions are updated and scans purge malicious software.
Threats must be remediated using verified, updated tools.
4
Re-enable System Restore
A fresh, clean system restore baseline is created.
Ensures future recovery points are established from a verified uninfected state.
5
Educate the user
The user is trained on safe browsing habits and phishing identification.
User training completes the remediation workflow.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Best Practices
Soru 1371Soru

A cybersecurity technician is responding to a confirmed Trojan infection on an enterprise Windows 11 workstation. Place the following remediation actions in the exact sequential order required by the CompTIA 7-step malware removal process.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence follows the CompTIA 7-step malware removal process: 1) Disconnect network interfaces (Quarantine), 2) Disable System Protection (Disable System Restore), 3) Update definitions and run scans (Remediate), 4) Re-enable System Protection and create a restore point (Enable System Restore), and 5) Conduct user awareness training (Educate End User).
The standard CompTIA 7-step malware removal framework mandates the following exact operational sequence: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore (in Windows), 4. Remediate infected systems (update signatures and scan/remove), 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, 7. Educate the end user. Disconnecting network adapters isolates the endpoint (Step 2). Disabling System Protection purges malicious restore snapshots (Step 3). Updating definitions and scanning remediates the infection (Step 4). Re-enabling System Protection and generating a restore point establishes a clean baseline (Step 6). Educating the end user completes the process (Step 7).

Adım Adım Çözüm

1
Isolate the compromised computer from the local network.
Network communication is halted, preventing malware spreading or command-and-control communication.
This corresponds to Step 2 (Quarantine infected systems) of the CompTIA process.
2
Turn off System Protection in Windows control utilities.
Infected backup snapshots stored in System Restore are deleted.
This corresponds to Step 3 (Disable System Restore) of the CompTIA process.
3
Download current signatures and launch anti-malware scanning engines.
Malicious files, registry keys, and rootkit components are identified and removed.
This corresponds to Step 4 (Remediate infected systems) of the CompTIA process.
4
Turn System Protection back on and initiate a fresh system checkpoint.
A clean backup state is recorded for future administrative recovery.
This corresponds to Step 6 (Enable System Restore and create a restore point) of the CompTIA process.
5
Engage with the end user to review security protocols.
The user gains awareness regarding vector prevention techniques.
This corresponds to Step 7 (Educate the end user) of the CompTIA process.

Anahtar Kavram

CompTIA 7-step Malware Removal Best Practices
Soru 1372Soru

A systems administrator needs to configure standalone Windows 11 Pro workstations so that standard users are automatically denied elevation requests without being prompted for administrator credentials. In what sequential order should the administrator perform the steps to enforce this restriction using the Local Security Policy snap-in?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The administrator must first launch Local Security Policy (secpol.msc), navigate to Security Settings > Local Policies > Security Options, double-click 'User Account Control: Behavior of the elevation prompt for standard users', set the policy value to 'Automatically deny elevation requests', and apply the changes.
Configuring UAC elevation behavior for standard users via Local Security Policy requires launching secpol.msc, navigating to Security Settings > Local Policies > Security Options, opening the policy 'User Account Control: Behavior of the elevation prompt for standard users', setting the option to 'Automatically deny elevation requests', and saving the configuration.

Adım Adım Çözüm

1
Launch the management console
Local Security Policy console opens
Administrative policy changes require elevated access through the secpol.msc tool on local machines.
2
Navigate to the Security Options branch
Policy list for UAC and local account controls is displayed
UAC behavior policies are stored under Local Policies > Security Options.
3
Open policy properties for standard user elevation
Policy configuration property window opens
Allows modification of prompt behavior specific to non-administrative accounts.
4
Modify the elevation drop-down selection
Policy is configured to automatically deny elevation
Changing from the default credential prompt to automatic denial prevents credential sharing or prompt spamming.
5
Apply and close policy settings
Changes take effect on the local security baseline
Saves the configuration to enforcement.

Anahtar Kavram

User Account Control Local Security Policy configuration for standard user elevation prompts
Soru 1373Soru

A user reports that a database application crashes immediately after launch. A technician needs to review the specific error code, faulting module, and crash logs generated by the Windows operating system at the time of the failure. Which of the following tools should the technician use to inspect these detailed crash records?

Cevabı ve açıklamayı göster

Cevap: Event Viewer

Cevap

Event Viewer is the correct tool to review detailed Windows application crash logs, including event IDs, timestamp details, and faulting module paths.
Event Viewer centrally logs system and software events. Under Windows Logs > Application, technicians can view Application Error logs that detail the faulting application name, faulting module path, exception code, and Event ID.

Adım Adım Çözüm

1
Identify the technician's objective.
The technician needs to analyze historical crash logs, event IDs, and faulting module details for a crashed application.
Resolving application crashes requires examining detailed log entries recorded by the OS during the crash event.
2
Evaluate the administrative tool suited for log analysis.
Event Viewer maintains the Windows Application log where application errors (Event ID 1000) are recorded.
Event Viewer is designed specifically for historical log analysis across Application, System, and Security logs.

Anahtar Kavram

Using Event Viewer to analyze application crash logs and faulting modules
Tahmini Süre:45s
Soru 1374Soru

A technician is performing basic workstation hardening on a newly installed Windows computer. Place the following security steps in the logical order they should be performed to secure the system from initial deployment to final user handoff.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts with securing default accounts and credentials, followed by updating the system and turning on host firewall protection, then disabling unnecessary services and autorun features to minimize attack surface, and finally configuring screen lock timeouts for end-user environment security.
Securing default user accounts is the foundational step when hardening a system, followed by protecting network access through OS patches and local firewall activation. After establishing base network defenses, unnecessary software services and autorun functions are disabled to shrink the attack surface. End-user security controls, such as screen lock timeouts, are applied last before system deployment.

Adım Adım Çözüm

1
Secure account access
Default credentials and Guest accounts are disabled or modified.
Prevents unauthorized initial access via well-known default settings.
2
Apply baseline security updates and firewall controls
Known security patches are applied and incoming traffic is limited.
Secures the network boundary of the host against exploit attempts.
3
Reduce system attack surface
Unused services, open ports, and autorun functions are disabled.
Limits exposure to malicious code execution and background service vulnerabilities.
4
Apply screen lock and password policies
Screen saver timeout and password lock enforce physical security.
Ensures unattended workstations lock automatically when left unattended.

Anahtar Kavram

Workstation Hardening Standard Operating Procedure
Soru 1375Soru

An IT security administrator is preparing to return a leased enterprise storage array shelf populated with flash-based NVMe solid-state drives (SSDs) containing confidential financial records. According to organizational compliance policy, all storage media must be sanitized to the NIST SP 800-88 'Purge' standard before transfer. Additionally, the lease contract stipulates that the physical drives must remain fully functional and undamaged upon return to avoid severe financial penalties. Which of the following data disposal actions should the administrator perform to satisfy both constraints?

Cevabı ve açıklamayı göster

Cevap: Perform an NVMe Sanitize block erase or cryptographic erasure command directly via the drive controller firmware.

Cevap

Execute an NVMe Sanitize block erase or cryptographic erasure command directly via the drive controller firmware.
Executing a controller-level NVMe Sanitize command (such as block erase or cryptographic erasure on self-encrypting drives) instructs the drive controller to purge all physical NAND flash cells, including over-provisioned space and wear-leveling areas. This fulfills the NIST SP 800-88 'Purge' compliance standard while leaving the physical storage drive functional for return under the lease agreement.

Adım Adım Çözüm

1
Analyze the dual requirements of the scenario.
Identified two constraints: 1) Data sanitization level must meet NIST SP 800-88 'Purge' (infeasible laboratory recovery); 2) Physical drives must remain functional to avoid lease penalties.
Choosing a destruction or sanitization method depends on both security compliance level and physical hardware retention requirements.
2
Evaluate candidate sanitization techniques against flash-based NVMe SSD media characteristics.
Degaussing is ineffective for solid-state storage. Physical shredding violates the lease return policy. OS-level zero-fill formatting only meets the 'Clear' standard because wear-leveling algorithms prevent access to hidden over-provisioned blocks.
Solid-state drives manage data layout internally through a Flash Translation Layer (FTL), requiring firmware-level execution to reach all physical NAND cells.
3
Select the correct firmware-level sanitization command.
NVMe Sanitize (block erase / crypto erase) instructs the SSD controller to erase all physical blocks, including over-provisioned space, meeting the 'Purge' standard while preserving drive operational integrity.
Hardware-level sanitize commands provide complete logical purging on flash media without physically damaging the drive.

Anahtar Kavram

NIST SP 800-88 Media Sanitization Standards for Solid-State Storage
Tahmini Süre:2m 0s
Soru 1376Soru

Match each mobile device and embedded system security feature on the left with its correct operational description or purpose on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Containerization
Remote Wipe
Geofencing
Sideloading

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Containerization matches with isolating corporate data from personal data. Remote Wipe matches with remotely erasing sensitive company information. Geofencing matches with using location services to enforce security policies. Sideloading matches with installing applications from sources outside official app stores.
Each feature corresponds to its specific mobile device management function: Containerization provides storage separation, Remote Wipe provides loss response security, Geofencing provides location-aware security rules, and Sideloading represents untrusted application installation.

Adım Adım Çözüm

1
Identify the primary purpose of Containerization.
Matches with isolating corporate data and applications from personal data.
Containerization isolates work assets within a secure, encrypted sandbox on mobile devices.
2
Identify the primary function of Remote Wipe.
Matches with remotely erasing sensitive company information or restoring factory settings.
Remote wipe prevents data breaches when mobile hardware is lost or stolen.
3
Identify the primary function of Geofencing.
Matches with using location services to enforce security policies based on physical boundaries.
Geofencing dynamically enables or disables features depending on geographical coordinates.
4
Identify the definition of Sideloading.
Matches with installing applications directly from sources outside official app stores.
Sideloading introduces security risks by circumventing official app vetting processes.

Anahtar Kavram

Mobile Device Security Management Features
Tahmini Süre:1m 0s
Soru 1377Soru

A security technician is tasked with hardening a fleet of newly provisioned Windows workstations prior to enterprise deployment. To minimize the attack surface and mitigate unauthorized lateral movement, the technician needs to configure local default accounts and execution policies according to security best practices. Which of the following configurations represents the most secure baseline implementation?

Cevabı ve açıklamayı göster

Cevap: Disable the built-in Guest account, rename the default Administrator account, and disable AutoRun/AutoPlay policies across all drives.

Cevap

The correct baseline implementation requires disabling the built-in Guest account, renaming the built-in Administrator account, and disabling AutoRun and AutoPlay for all drives.
Hardening a workstation image requires applying the principle of least functionality and reducing attack vectors. Disabling the default Guest account, renaming the default Administrator account (to obscure its RID 500 target), and turning off AutoRun/AutoPlay across all media drives are foundational security controls recommended by CompTIA security standards.

Adım Adım Çözüm

1
Audit built-in default accounts
Identify that default accounts like Guest and Administrator present known targets for automated attacks.
Hardening best practices require disabling unneeded default accounts and renaming active default administrative accounts to prevent well-known account exploitation.
2
Configure media execution policies
Disable AutoRun and AutoPlay features globally via Local Group Policy or Registry settings.
Prevent malicious code on connected USB drives or external media from executing automatically upon insertion.
3
Verify tool selection for policy enforcement
Use Computer Management / Local Security Policy (secpol.msc) or Group Policy (gpedit.msc) rather than basic status applets or log viewers.
Administrative security controls must be configured in dedicated management snap-ins.

Anahtar Kavram

Workstation Hardening Best Practices
Tahmini Süre:1m 30s
Soru 1378Soru

Match each data sanitization or disposal technique to the media type and operational context where it is most appropriately applied according to CompTIA security standards.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Degaussing
ATA Secure Erase / Drive Purging
Cryptographic Erase (CE)
Physical Shredding

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Degaussing pairs with sanitizing legacy magnetic HDDs or tape media; ATA Secure Erase pairs with sanitizing functional NVMe or SATA SSDs for reuse; Cryptographic Erase pairs with sanitizing Self-Encrypting Drives (SEDs) via key destruction; Physical Shredding pairs with disposing of non-functional SSDs.
Each disposal method matches specific physical media traits and hardware goals: Degaussing neutralizes magnetic tracks on HDDs/tapes; ATA Secure Erase uses controller commands to wipe flash blocks on working SSDs for redeployment; Cryptographic Erase zeroizes encryption keys on SEDs; Physical Shredding mechanically destroys damaged flash hardware.

Adım Adım Çözüm

1
Analyze underlying storage architecture (magnetic vs. flash vs. encrypted)
Identify that magnetic media (HDDs/tapes) respond to electromagnetic fields, whereas flash drives (SSDs/NVMe) consist of solid-state ICs, and SEDs rely on onboard encryption keys.
Selecting an improper technique, such as degaussing an SSD, fails to sanitize the drive.
2
Evaluate hardware lifecycle intent (re-use vs. total physical destruction)
Functional drives scheduled for reuse require non-destructive firmware purging (ATA Secure Erase), while damaged or end-of-life drives require mechanical destruction (shredding).
Physical destruction renders hardware unusable for future deployment, whereas logical formats are required for drive repurposing.
3
Match specialized crypto-sanitization mechanisms
Destroying the key on a Self-Encrypting Drive (SED) instantly invalidates all stored ciphertext without reading or writing every sector.
Cryptographic Erase relies on hardware-level encryption key destruction for instant, secure drive decommissioning.

Anahtar Kavram

Data Destruction and Disposal Methods
Tahmini Süre:2m 0s
Soru 1379Soru

A tier 2 desktop support technician is organizing documentation for junior staff regarding Windows client networking configuration utilities. Match each Windows networking utility or command switch on the left with its corresponding configuration or diagnostic function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

ipconfig /release
netsh wlan show profile
ncpa.cpl
netsh interface ip set address

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The command 'ipconfig /release' matches discarding the dynamic IPv4 address lease; 'netsh wlan show profile' matches displaying saved wireless network profiles; 'ncpa.cpl' matches launching the Network Connections Control Panel applet; and 'netsh interface ip set address' matches configuring a static IPv4 address via the command line.
Each item is mapped to its precise administrative or diagnostic function within Windows client networking environments.

Adım Adım Çözüm

1
Analyze each command and control panel shortcut
Distinguish between dynamic IP management, wireless profile inspection, GUI applet execution, and static IP syntax
Windows networking configuration requires familiarity with both command-line tools and Control Panel shortcuts (.cpl).
2
Map each utility to its administrative outcome
Establish exact functional pairings for Windows client networking tasks
Accurate pairing ensures correct diagnostic tool usage during Help Desk troubleshooting.

Anahtar Kavram

Windows Client Networking Configuration Utilities and CLI Commands
Soru 1380Soru

A technician is troubleshooting a desktop workstation that experiences a No POST condition where internal fans spin continuously but no diagnostic beep codes or display output occur. Place the technician's troubleshooting steps in the correct order from first action to last action to systematically isolate the root cause.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct systematic ordering of troubleshooting steps is: 1) Verify power supply unit (PSU) voltage outputs using a multimeter or dedicated tester; 2) Disconnect non-essential peripherals, storage drives, and expansion cards to create a minimal boot configuration; 3) Reset the motherboard CMOS/NVRAM settings using the jumper pin or coin-cell battery removal; 4) Remove the motherboard from the chassis and perform a bench test on a non-conductive anti-static mat.
Systematic hardware diagnostics move logically from non-invasive, quick checks to complex disassembly. First, power supply stability must be verified using a hardware tester to ensure all main motherboard rails receive proper power. Second, establishing a minimal boot configuration (motherboard, CPU, one RAM stick, PSU) isolates faulty add-in cards or storage drives. Third, clearing CMOS clears invalid hardware settings that prevent POST. Finally, removing the motherboard for a bench test checks for grounding shorts against the computer case.

Adım Adım Çözüm

1
Test Power Supply Outputs
Confirms the PSU delivers proper +12 V+12\text{ V}, +5 V+5\text{ V}, and +3.3 V+3.3\text{ V} rail power along with the Power Good signal.
Before disassembling internal hardware, verifying clean power delivery ensures component isolation tests yield accurate results.
2
Isolate Minimal Boot Components
Reduces hardware complexity strictly to the power supply, motherboard, CPU, and a single RAM module.
Helps determine if external accessories, storage drives, or secondary add-in cards are overloading or shorting the system.
3
Clear Motherboard CMOS
Restores BIOS/UEFI default settings.
Eliminates corrupted system configuration parameters, invalid memory frequency profiles, or improper CPU multipliers as the source of the POST failure.
4
Breadboard System Outside Chassis
Tests motherboard and core component boot functionality in an open-air environment.
Identifies electrical shorts caused by misplaced motherboard chassis standoffs or grounded rear metal shielding.

Anahtar Kavram

CompTIA Hardware Isolation and Troubleshooting Methodology
ÖncekiSayfa 69 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin