Tüm alıştırma soruları

3551 soru

Soru 121Soru

A desktop computer powers on, but the monitor displays no video and the motherboard motherboard speaker emits a repetitive series of diagnostic beep codes during power-on. A technician concludes that the operating system bootloader is corrupted and attempts to boot the machine using a USB flash drive containing recovery media. Which of the following statements correctly evaluates the technician's troubleshooting attempt?

Cevabı ve açıklamayı göster

Cevap: The troubleshooting action is incorrect because diagnostic beep codes occur during the Power-On Self-Test (POST) prior to boot device initialization, indicating a low-level hardware component failure.

Cevap

The technician's action is incorrect because diagnostic beep codes occur during the Power-On Self-Test (POST) before the operating system or boot devices are initialized, signifying a fundamental core hardware failure.
The option stating that POST beep codes occur prior to boot device initialization is correct. The BIOS/UEFI executes POST immediately upon receiving power to verify core hardware components (RAM, CPU, motherboard, video controller). If a critical component fails, POST halts and emits audible beep codes. Because the system has not yet initiated the boot sequence, loading operating system recovery media from USB will not work.

Adım Adım Çözüm

1
Analyze the point of failure in the boot sequence.
The failure manifests as a series of motherboard beep codes with no video output immediately after power-on.
Beep codes are hardware-level alerts generated by BIOS/UEFI during POST when critical sub-systems (such as RAM, CPU, or GPU) fail initial checkups.
2
Evaluate the technician's proposed resolution (USB recovery media).
The action is inappropriate for a POST stage failure.
Boot media is only accessed after POST completes successfully. If POST fails, the system halts before searching for storage controllers or bootable media.
3
Determine the correct diagnostic approach.
Identify the specific beep code pattern in the motherboard documentation to isolate the faulty hardware component (e.g., reseating RAM or checking power connections).
Troubleshooting must address the physical hardware layer first when POST does not complete.

Anahtar Kavram

Power-On Self-Test (POST) Beep Codes vs. Bootloader Sequence
Tahmini Süre:1m 30s
Soru 122Soru

A senior infrastructure administrator is planning a major upgrade to an enterprise directory service schema across an organization's domain controllers. Place the standard change management phases in the correct chronological order from first step to final step.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper change management sequence begins by defining the purpose and scope, followed by performing a risk assessment and documenting a backout plan, then obtaining Change Advisory Board (CAB) approval, and finally notifying end users while scheduling the maintenance window.
In standard ITIL and CompTIA change management workflows, the initial step is defining the purpose and scope of the proposed change. Next, engineers evaluate potential risks and construct a comprehensive backout plan. Once these prerequisites are met, the request is submitted to the Change Advisory Board (CAB) for formal review. Upon receiving CAB approval, administrators notify affected end users and schedule the implementation within an authorized maintenance window.

Adım Adım Çözüm

1
Define purpose and scope
The exact baseline requirements and boundaries of the change are documented.
Every change request must start with a clear objective and defined scope before further planning can occur.
2
Perform risk assessment and prepare backout plan
Impact analysis is completed and a detailed rollback procedure is established.
Understanding potential failure modes and having a backout plan is mandatory for approval consideration.
3
Submit for Change Advisory Board (CAB) authorization
Formal review and approval from key stakeholders are obtained.
CAB oversight ensures that business risk and schedule conflicts are fully addressed prior to implementation.
4
Notify end users and schedule maintenance window
Stakeholders are informed and execution timing is established.
User notification and downtime scheduling must only take place after formal change approval has been granted.

Anahtar Kavram

Change Management Process Lifecycle
Soru 123Soru

An employee reports that after downloading a third-party battery optimization utility from an unverified website onto their corporate Android device, the phone frequently displays persistent overlay advertisements and battery drain. When the technician attempts to uninstall the application via the standard Application Manager, the Uninstall button is grayed out. Which of the following is the BEST initial action to revoke the application's elevated permissions and allow standard uninstallation?

Cevabı ve açıklamayı göster

Cevap: Revoke the application's active Device Administrator privileges in the security settings.

Cevap

Revoke the application's active Device Administrator privileges in the security settings.
When a sideloaded application receives Device Administrator rights, the operating system grays out the option to uninstall it to protect system-level processes. Deactivating these administrative rights under the device security settings revokes the protection lock and restores standard application uninstallation capability.

Adım Adım Çözüm

1
Identify the cause of the disabled uninstall option
Recognize that the grayed-out uninstall button indicates the application holds active Device Administrator privileges.
Mobile operating systems lock application removal when an application is registered as a active Device Administrator.
2
Navigate to the Security settings on the mobile device
Access the Device Admin Apps / Device Administrators menu.
This security menu lists all applications granted system-level administration rights.
3
Deactivate Device Administrator privileges for the problematic application
The application loses elevated rights, enabling normal management actions.
Revoking these rights removes the OS removal restriction.
4
Uninstall the application through the Application Manager
The application is successfully removed from the device.
With administrative privileges removed, standard uninstallation functions normally.

Anahtar Kavram

Device Administrator Privilege Revocation
Soru 124Soru

A desktop technician is configuring a single guest virtual machine on a workstation equipped with 16 GB16\text{ GB} of physical RAM. If the host operating system requires a minimum reserved memory of 4 GB4\text{ GB} to run reliably, what is the maximum amount of RAM that should be allocated to the virtual machine?

Cevabı ve açıklamayı göster

Cevap: 12 GB12\text{ GB}

Cevap

12 GB12\text{ GB}
Subtracting the 4 GB4\text{ GB} needed for the host operating system from the host's 16 GB16\text{ GB} of physical RAM leaves a maximum of 12 GB12\text{ GB} available for virtual machine allocation without causing host memory starvation.

Adım Adım Çözüm

1
Identify total physical memory and host operating system requirements.
Total physical RAM = 16 GB16\text{ GB}, Host OS required RAM = 4 GB4\text{ GB}.
Host operating system memory must be reserved to maintain system stability and hypervisor operation.
2
Calculate the maximum available memory allocation for the virtual machine.
16 GB4 GB=12 GB16\text{ GB} - 4\text{ GB} = 12\text{ GB}.
Subtracting host requirements from total system memory yields the maximum safe allocation for guest virtual machines.

Anahtar Kavram

Virtual Machine Resource Allocation and Host Memory Headroom
Soru 125Soru

A financial services firm processes confidential client payment transactions on a dedicated, single-tenant infrastructure hosted within its enterprise data center. To manage high-volume processing demands during market openings, the firm automatically shifts non-sensitive operational analytics workloads to a third-party multi-tenant cloud platform. Which of the following statements accurately describe the cloud deployment models used in this environment? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The core transaction processing system is hosted within a private cloud environment that provides dedicated resource isolation.; The overall infrastructure demonstrates a hybrid cloud model by integrating private single-tenant systems with public cloud services.

Cevap

The core transaction system operates in a private cloud environment due to its single-tenant isolation, and the combined infrastructure represents a hybrid cloud model by connecting dedicated internal resources with multi-tenant public cloud capacity.
Single-tenant infrastructure dedicated to a single enterprise characterizes a private cloud. Integrating this private infrastructure with a third-party multi-tenant public cloud service to handle demand spikes (cloud bursting) creates a hybrid cloud model.

Adım Adım Çözüm

1
Identify the primary internal workload deployment model
The dedicated, single-tenant infrastructure hosted within the enterprise data center is a private cloud.
Private cloud infrastructure is provisioned for exclusive use by a single organization, offering maximum security and control.
2
Identify the secondary external workload deployment model
The third-party multi-tenant platform used for bursting non-sensitive analytics is a public cloud.
Public cloud services are rendered over a network open for public or multi-tenant commercial use by a cloud service provider.
3
Analyze the combined deployment architecture
Integrating private single-tenant systems with public multi-tenant resources forms a hybrid cloud model.
Hybrid cloud deployment bridges two or more distinct cloud infrastructures (such as private and public) to enable data and application portability.

Anahtar Kavram

Cloud Deployment Models (Public, Private, Hybrid, Community)
Soru 126Soru

A security analyst is building a virtualized malware analysis sandbox on a hypervisor host. The guest virtual machine (VM) must communicate strictly with a dedicated internal forensic logging server VM running on the same hypervisor host. The sandbox VM must be completely isolated from the host's physical network adapter, the host operating system, and the external internet to prevent malware spread or out-of-band data exfiltration. Which of the following virtual network adapter configurations and hypervisor security controls should the analyst implement?

Cevabı ve açıklamayı göster

Cevap: Configure the virtual network adapter to Internal/Private mode bound to a virtual switch restricted to guest VMs, and disable hypervisor guest integration features like shared folders and clipboard sharing.

Cevap

Configure the virtual network adapter to Internal/Private mode bound to a virtual switch restricted to guest VMs, and disable hypervisor guest integration features like shared folders and clipboard sharing.
Internal or Private networking mode creates a virtual switch that is completely isolated from the host operating system's network stack and physical network interface cards. Guest VMs connected to this internal switch can communicate with each other (allowing communication with the logging server VM) while remaining completely isolated from the external network and host OS. Furthermore, disabling guest integration services (like shared folders and copy-paste buffers) mitigates VM escape risks.

Adım Adım Çözüm

1
Analyze network isolation requirements for malware sandboxing.
Identified that the guest VM requires inter-VM communication (to the forensic server VM) but zero access to the host OS, physical network, or internet.
Preventing malware exfiltration and host infection requires complete physical and host OS network stack isolation.
2
Evaluate hypervisor virtual networking modes.
Internal/Private virtual network mode permits packet exchange only between guest VMs on the same virtual switch, whereas Host-Only connects to the host OS, and Bridged/NAT connect to the physical network.
Internal/Private mode is the only vNIC configuration that isolates traffic completely from both the host system interface and physical network interface.
3
Evaluate hypervisor host-guest security controls.
Disabling hypervisor guest integration tools (e.g., drag-and-drop, shared folders, clipboard sharing) closes non-network VM escape channels.
Malware can leverage guest integration services to write files directly to the host storage system or memory.

Anahtar Kavram

Virtualization Network Modes and Hypervisor Isolation Security
Soru 127Soru

Match each RAM module type and form factor to its corresponding physical pin count, operating voltage, and power/channel architectural characteristic.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

DDR4 Desktop DIMM
DDR5 Desktop DIMM
DDR4 Laptop SODIMM
DDR5 Laptop SODIMM

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

DDR4 Desktop DIMM matches 288-pin full-size module at 1.2V with motherboard power regulation; DDR5 Desktop DIMM matches 288-pin full-size module at 1.1V with onboard PMIC and dual 32-bit subchannels; DDR4 Laptop SODIMM matches 260-pin small form factor module at 1.2V; DDR5 Laptop SODIMM matches 262-pin small form factor module at 1.1V with onboard PMIC.
Matching relies on recognizing form factor (DIMM for desktop vs SODIMM for portable systems), pin counts (288 pins for both DDR4 and DDR5 full-size DIMMs, 260 pins for DDR4 SODIMMs, and 262 pins for DDR5 SODIMMs), operating voltages (1.2V1.2\text{V} for DDR4 vs 1.1V1.1\text{V} for DDR5), and power regulation location (motherboard for DDR4 vs onboard PMIC for DDR5).

Adım Adım Çözüm

1
Differentiate between full-size desktop modules (DIMMs) and laptop/compact modules (SODIMMs).
Desktop DIMMs utilize 288 pins for both DDR4 and DDR5 generations, whereas SODIMMs use 260 pins for DDR4 and 262 pins for DDR5.
Form factor directly dictates physical size and pin density suitable for motherboard expansion slots.
2
Analyze standard operating voltages and power delivery architectures for DDR4 versus DDR5.
DDR4 operates at 1.2V1.2\text{V} with power delivery controlled by the motherboard VRM. DDR5 operates at 1.1V1.1\text{V} and features onboard power management via a Power Management Integrated Circuit (PMIC).
DDR5 moves voltage regulation from the system board directly onto the RAM module for improved power efficiency and signal stability.
3
Map each memory generation and form factor combination to its corresponding specification pair.
DDR4 DIMM \rightarrow 288-pin, 1.2V1.2\text{V}, motherboard VRM; DDR5 DIMM \rightarrow 288-pin, 1.1V1.1\text{V}, onboard PMIC & dual subchannels; DDR4 SODIMM \rightarrow 260-pin, 1.2V1.2\text{V}; DDR5 SODIMM \rightarrow 262-pin, 1.1V1.1\text{V}, onboard PMIC.
Matches align physical form factor, pin count, voltage, and architectural innovations.

Anahtar Kavram

RAM Form Factors, Pin Specifications, Operating Voltages, and Architecture (DDR4 vs. DDR5)
Soru 128Soru

A technician is assembling a desktop PC with a standard ATX motherboard. After connecting a 4-pin PWM cooling fan to a 4-pin fan header on the motherboard, the fan runs continuously at 100% maximum speed regardless of system temperature. Pin layout inspection confirms: Pin 1 (Ground), Pin 2 (+12V Power), Pin 3 (Tachometer Signal), and Pin 4 (PWM Control Signal). Which of the following is the most likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The fan header in BIOS/UEFI is set to DC (voltage control) mode instead of PWM mode, delivering a constant 12V on Pin 2 without modulating the signal on Pin 4.

Cevap

The fan header control mode in BIOS/UEFI is configured for DC (voltage) operation rather than PWM mode.
Motherboard 4-pin fan headers support two control modes in BIOS/UEFI: PWM and DC (voltage). In PWM mode, Pin 2 provides a constant +12V supply while Pin 4 transmits a control signal to vary fan speed. If the BIOS header is set to DC mode, the motherboard attempts to adjust speed by varying voltage on Pin 2 and leaves Pin 4 undriven. Because Pin 2 provides continuous full 12V, a 4-pin PWM fan will operate continuously at 100% speed.

Adım Adım Çözüm

1
Analyze 4-pin motherboard fan header pinout functions
Identify that Pin 1 is Ground, Pin 2 is constant +12V power (in PWM mode), Pin 3 is Tachometer (RPM sense), and Pin 4 carries the PWM control signal.
Understanding the function of each pin helps determine why speed control is failing.
2
Evaluate how BIOS header modes affect pin behavior
In PWM mode, Pin 4 sends a high-frequency pulse signal to govern speed while Pin 2 stays at 12V. In DC mode, Pin 4 is unused and speed is regulated by varying voltage on Pin 2.
If the BIOS is set to DC mode for a PWM fan, Pin 2 sends constant +12V and Pin 4 is inactive, running the fan at max speed.
3
Determine the corrective action
Enter BIOS/UEFI setup and change the fan control mode for that specific header from DC/Auto to PWM.
Switching to PWM mode enables speed control via Pin 4.

Anahtar Kavram

Motherboard 4-pin fan header pinouts and BIOS/UEFI PWM vs. DC fan control modes
Tahmini Süre:1m 0s
Soru 129Soru

An IT technician is resolving an issue on a user's Windows laptop where closing the lid does not put the system into a low-power state, causing the laptop to overheat and drain its battery in the user's bag. The technician wants to configure the system to enter Hibernate mode whenever the laptop lid is closed. Which Control Panel utility should the technician open to adjust this hardware behavior?

Cevabı ve açıklamayı göster

Cevap: Power Options

Cevap

Power Options is the correct Control Panel utility for configuring system power plans, power button actions, and lid-close behaviors.
Power Options is the designated Windows Control Panel applet used to manage power conservation settings, create custom power plans, and configure hardware button behaviors such as defining what occurs when the laptop lid is closed.

Adım Adım Çözüm

1
Identify the administrative requirement
The requirement is to modify system power behavior specifically when closing a laptop lid.
Lid-close settings dictate how the operating system handles system state transitions (Sleep, Hibernate, Shut Down, or Do Nothing).
2
Locate the corresponding Windows Control Panel utility
Power Options governs all system-wide power management behaviors.
Selecting 'Choose what closing the lid does' inside Power Options provides direct access to define the hardware reaction for lid closure.

Anahtar Kavram

Windows Control Panel Power Options
Tahmini Süre:1m 0s
Soru 130Soru

A software security technician needs to analyze suspicious email attachments without risking the security of the host corporate workstation. Simultaneously, a quality assurance tester on the same team must run an older custom utility that requires a deprecated 32-bit desktop operating system. Both team members plan to accomplish their objectives on their existing workstation hardware. Which of the following represent valid purposes for deploying client-side virtualization in this scenario? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Creating an isolated sandbox environment to execute and inspect untrusted software safely; Enabling legacy application support by running a deprecated operating system inside a guest VM

Cevap

The two valid purposes for deploying client-side virtualization in this scenario are creating an isolated sandbox environment to execute untrusted software safely, and enabling legacy application support by running a deprecated operating system inside a guest VM.
Client-side virtualization serves several primary use cases on desktop workstations. First, security sandboxing allows administrators and technicians to detonate untrusted files or test malicious code in a contained guest OS without risking the host system. Second, legacy application support enables legacy or incompatible operating systems to run as guest VMs on modern host hardware, allowing older applications to remain operational.

Adım Adım Çözüm

1
Analyze the security technician's requirement
Analyzing untrusted files safely requires security sandboxing to isolate potential malware from the host OS.
Client-side virtualization isolates the guest OS environment so any malicious activity remains trapped inside the VM.
2
Analyze the QA tester's requirement
Running an older 32-bit application requiring a deprecated OS relies on legacy application support.
Virtual machines allow legacy operating systems to run concurrently on modern workstation host hardware.
3
Evaluate distractors based on client-side virtualization principles
Eliminated options regarding resource allocation, bare-metal hypervisors in desktop sessions, and cloud service provider offloading.
Client-side virtualization consumes host RAM/CPU resources, uses Type 2 hypervisors on desktop OSs, and runs locally rather than in a cloud provider's datacenter.

Anahtar Kavram

Client-Side Virtualization Purposes and Use Cases
Soru 131Soru

An IT technician is configuring a local virtualization host featuring a single 8-core CPU with Hyper-Threading (providing 16 logical processors) and 32 GB32\text{ GB} of physical RAM. The hypervisor host requires a baseline reservation of 4 GB4\text{ GB} of physical RAM and 2 logical processors to ensure host management stability. The plan requires deploying 5 identical application virtual machines (VMs), where each guest VM is allocated 6 GB6\text{ GB} of RAM and 2 vCPUs. Which of the following best describes the primary hardware resource limitation preventing all 5 VMs from running concurrently at their baseline specifications?

Cevabı ve açıklamayı göster

Cevap: Physical RAM capacity is insufficient because the combined guest and host requirement of 34 GB34\text{ GB} exceeds the system's 32 GB32\text{ GB} of installed RAM.

Cevap

Physical RAM capacity is insufficient because the combined guest and host requirement of 34 GB34\text{ GB} exceeds the system's 32 GB32\text{ GB} of installed RAM.
The total system memory required is calculated by adding the total guest VM memory requirements (5×6 GB=30 GB5 \times 6\text{ GB} = 30\text{ GB}) to the host management overhead reservation (4 GB4\text{ GB}), yielding 34 GB34\text{ GB}. Since the host system only has 32 GB32\text{ GB} of physical RAM installed, the memory capacity is exceeded by 2 GB2\text{ GB}.

Adım Adım Çözüm

1
Calculate total memory required for all guest virtual machines.
5\text{ VMs} \times 6\text{ GB} = 30\text{ GB} of guest RAM required.
Each guest VM needs its full allocated baseline memory to run without performance degradation.
2
Add the physical RAM overhead required by the host operating system/hypervisor.
30\text{ GB (guests)} + 4\text{ GB (host overhead)} = 34\text{ GB} total physical RAM required.
Host memory must be reserved to maintain hypervisor functionality and prevent system failure.
3
Compare total required physical RAM against the host hardware configuration.
Required physical RAM (34 GB34\text{ GB}) > Installed physical RAM (32 GB32\text{ GB}).
The system lacks 2 GB2\text{ GB} of physical memory, creating a hard memory bottleneck unless memory overcommitment features (like ballooning) are configured.

Anahtar Kavram

Virtual Machine Memory Sizing and Host Overhead Allocation
Soru 132Soru

A desktop technician is setting up client-side virtual machines (VMs) for various IT operational requirements within an organization. Match each operational scenario on the left with its corresponding client-side virtualization purpose on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Executing an unverified third-party patch to analyze its behavior without exposing the host operating system to potential malware or system instability.
Running a critical 16-bit inventory management application that is incompatible with the workstation's modern 64-bit host OS.
Verifying web application rendering and script execution natively across Windows, Linux, and macOS platforms from a single host computer.
Providing new technical hires with a hands-on system administration lab that can be instantly restored to a clean state after every session.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Executing untrusted patches maps to Security Sandboxing. Running incompatible 16-bit apps maps to Legacy Application Support. Testing web applications natively across Windows, Linux, and macOS maps to Cross-Platform Software Testing. Providing a hands-on lab that reverts to a clean baseline maps to Isolated Training Environment with Snapshot Rollback.
Each scenario maps directly to its intended client-side virtualization capability: sandboxing isolates untrusted files from the host OS; legacy support enables older software execution on modern hardware; cross-platform testing allows multi-OS testing on a single machine; and training environments utilize VM snapshots for quick system state restoration.

Adım Adım Çözüm

1
Analyze the operational scenarios to identify the primary goal of virtualization in each case.
Categorized requirements into security isolation, OS backward compatibility, multi-OS development/QA, and disposable training labs.
Client-side virtualization serves distinct functional purposes depending on whether the primary requirement is security, compatibility, platform coverage, or lab management.
2
Match each scenario with the precise client-side virtualization purpose term.
Matched untrusted code execution to Security Sandboxing, 16-bit software requirement to Legacy Application Support, multi-OS web verification to Cross-Platform Software Testing, and lab restoration to Isolated Training Environment with Snapshot Rollback.
Each virtualization use case aligns directly with standard CompTIA A+ Core 1 definitions for local hypervisor deployments.

Anahtar Kavram

Client-Side Virtualization Purposes and Use Cases
Soru 133Soru

A network engineer is preparing a change request to modify core routing table entries across several regional branch offices. The engineer has defined the business purpose, documented the precise scope, performed a thorough risk assessment, and scheduled the change during a standard maintenance window. During review, the Change Advisory Board (CAB) rejects the submission as incomplete. Which of the following critical change management elements was most likely missing from the engineer's submission?

Cevabı ve açıklamayı göster

Cevap: A documented rollback plan outlining specific recovery steps if network connectivity fails during deployment

Cevap

A documented rollback plan outlining specific recovery steps if network connectivity fails during deployment
Formal change management procedures require a documented rollback (backout) plan to be included in the change request prior to submission to the Change Advisory Board (CAB). The rollback plan ensures that technicians can quickly restore systems to their previous working state if the implemented change causes unanticipated network outages or instability.

Adım Adım Çözüm

1
Analyze the change request components provided in the scenario.
The engineer included the purpose, scope, risk assessment, and proposed deployment schedule.
CompTIA change management processes require specific core components before CAB approval can be granted.
2
Identify missing mandatory change request components.
The submission lacked a rollback (backout) plan, end-user notification strategy, or pre-testing plan.
Without a rollback plan, the organization risks prolonged downtime if the configuration change introduces unexpected routing loops or site outages.
3
Evaluate the choices to select the missing requirement.
The option specifying a documented rollback plan identifies the necessary pre-approval document required by the CAB.
CAB approval depends on risk mitigation strategies, including an explicit step-by-step backout procedure.

Anahtar Kavram

Change Management Processes - Required Components for Change Request
Soru 134Soru

A systems administrator is configuring virtual network interface cards (vNICs) for several enterprise virtual machines (VMs) running on a hypervisor. Match each virtual network adapter mode on the left with the operational scenario on the right that matches its exact connectivity and security boundaries.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Bridged Mode
Network Address Translation (NAT) Mode
Host-Only Mode
Internal / Private Mode

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Bridged mode corresponds to assigning a dedicated physical subnet IP address for direct client queries; NAT mode corresponds to outbound internet connectivity via shared host IP translation; Host-Only mode corresponds to network traffic restricted to the host system and local VMs; Internal/Private mode corresponds to isolated VM-to-VM traffic excluding the host OS and physical network.
Each virtual adapter mode defines explicit boundaries for network routing and security isolation. Bridged mode places the guest directly onto the physical segment. NAT mode translates traffic outbound using the host's IP address. Host-Only mode creates a isolated network consisting of the host OS and guest VMs. Internal/Private mode constructs a private virtual switch that omits the host OS completely for total network isolation.

Adım Adım Çözüm

1
Analyze physical network boundary requirement for direct incoming server traffic.
Bridged mode connects the VM directly to the physical network infrastructure, treating the guest VM as an independent physical network host with its own lease/static IP.
Servers requiring direct visibility on the local physical network need Bridged mode.
2
Evaluate outbound internet access needs combined with private IP translation.
NAT mode leverages virtual translation services, permitting outbound repository updates while masking the VM behind the host's physical interface.
NAT provides external network reachability without exposing the guest VM directly to incoming external connections.
3
Differentiate between host-accessible internal networking and strictly host-isolated internal networking.
Host-Only mode allows host-to-guest and guest-to-guest communication without physical NIC access. Internal/Private mode isolates communication strictly among guests, disconnecting the host OS.
Malware sandbox testing often requires isolated guest-to-guest segments that prevent VM-to-host lateral infection.

Anahtar Kavram

Virtual Network Adapter Configurations and Security Boundaries
Soru 135Soru

A systems administrator is establishing a comprehensive security baseline across enterprise endpoints. Match each workstation hardening control on the left with the specific threat or vulnerability it directly mitigates on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Disabling the Remote Registry service and restricting inbound TCP port 445 via local firewall rules
Enforcing a mandatory screen saver lock requiring user password re-authentication after five minutes of idle time
Renaming the built-in local Administrator account and disabling the default Guest account
Configuring Group Policy to disable AutoRun and AutoPlay features for all removable storage media

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Disabling Remote Registry and blocking SMB port 445 prevents unauthorized remote tampering and SMB-based lateral movement. Enforcing screen saver locks mitigates unauthorized physical access on unattended endpoints. Renaming default admin accounts and disabling guest accounts mitigates automated credential spraying against standard account names. Disabling AutoRun/AutoPlay blocks automatic malicious script execution from plugged-in storage media.
Each workstation hardening measure targets a specific attack surface: restricting Remote Registry and SMB port 445 neutralizes remote management exploitation; enforcing idle screen locks secures physical access in shared office environments; disabling default accounts neutralizes automated brute-force attacks against predictable local usernames; disabling AutoRun prevents untrusted execution of external scripts from connected peripherals.

Adım Adım Çözüm

1
Analyze network hardening controls
Disabling Remote Registry and closing TCP port 445 blocks network-based registry access and SMB exploitation.
Port 445 and Remote Registry are primary vectors for remote network probing and lateral movement.
2
Evaluate physical security enforcement controls
Enforcing a timed screen lock protects idle active sessions from walk-up unauthorized users.
Unattended unlocked workstations expose sensitive data to local physical threats.
3
Assess default user account security practices
Altering default account names thwarts automated dictionary attacks targeting standard account SIDs.
Default accounts like Administrator and Guest are known targets for automated brute-forcing.
4
Examine removable storage policy restrictions
Disabling AutoRun/AutoPlay stops drive-by code execution upon insertion of USB devices.
AutoRun automatically processes setup scripts on newly attached media unless explicitly restricted by policy.

Anahtar Kavram

Workstation Hardening and Attack Surface Reduction Controls
Soru 136Soru

An IT technician is configuring client-side virtual machines (VMs) to satisfy various operational requirements across different departments. Match each client-side virtualization purpose on the left with its corresponding organizational business scenario on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Security Sandboxing
Legacy OS / Application Support
Cross-Platform Application Development
Isolated Training Environment

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Security Sandboxing matches with safely analyzing suspicious attachments; Legacy OS Support matches with running 16-bit Windows XP applications on Windows 11; Cross-Platform Development matches with testing Linux software on a macOS host; Isolated Training Environment matches with providing a sandbox for interns with snapshot recovery.
Each client-side virtualization purpose directly addresses a distinct operational requirement: Security Sandboxing isolates potential threats; Legacy Support runs outdated software; Cross-Platform Development enables multi-OS testing locally; Isolated Training Environments allow risk-free learning with instant snapshot recovery.

Adım Adım Çözüm

1
Analyze the core objective of Security Sandboxing.
Identify that sandboxing is specifically used to isolate untrusted software or suspicious files from affecting the host.
Opening suspicious attachments in a VM prevents host contamination.
2
Analyze Legacy OS / Application Support.
Match it with executing older, incompatible applications (e.g., 16-bit Windows XP programs) on modern OS hosts.
Virtualization enables retro-compatibility without maintaining physical legacy hardware.
3
Analyze Cross-Platform Application Development.
Match it with running non-native operating systems (e.g., Ubuntu Linux on macOS) for local development.
Developers require native execution environments for target OS binaries.
4
Analyze Isolated Training Environment.
Match it with providing help desk interns a customizable, resettable workspace using VM snapshots.
Snapshots allow quick restoration after practical learning exercises.

Anahtar Kavram

Client-Side Virtualization Purposes and Use Cases
Soru 137Soru

An IT specialist is configuring several Windows 11 workstations deployed in a shared corporate training center. The systems must allow external guest speakers to plug in USB presentation remotes and keyboards, but security policy strictly prohibits executable files from automatically launching when USB flash drives are inserted. Which of the following is the most effective workstation hardening practice to satisfy this requirement without disabling essential USB input devices?

Cevabı ve açıklamayı göster

Cevap: Configure Administrative Templates in Group Policy to disable the AutoPlay feature for all drives.

Cevap

Disabling the AutoPlay feature for all drives via Group Policy prevents automatic execution of software from removable storage media while keeping physical USB ports operational for essential input peripherals.
Disabling AutoPlay for all drives via Group Policy explicitly stops Windows from executing automated commands or launching software installers when removable storage media is attached. This directly mitigates malicious code execution from flash drives while keeping USB bus controllers active so that external keyboards and presentation pointers operate as intended.

Adım Adım Çözüm

1
Analyze the security requirement and operational constraints.
Identified that removable storage auto-execution must be blocked, but physical USB ports must remain active for Human Interface Devices (HIDs).
Completely disabling USB ports or controllers would break required keyboard and presentation remote functionality.
2
Evaluate operating system policy controls that regulate removable media execution.
Determined that AutoPlay and AutoRun policies govern automated script/executable launching upon volume mounting.
Group Policy provides targeted control over storage drive behavior without affecting non-storage USB peripherals.
3
Select the appropriate Group Policy hardening configuration.
Navigated to Computer Configuration > Administrative Templates > Windows Components > AutoPlay Policies and set 'Turn off AutoPlay' to Enabled for all drives.
This baseline hardening step eliminates the primary attack vector of autorun malware from flash drives while maintaining full support for input peripherals.

Anahtar Kavram

Workstation Hardening - Disabling AutoPlay and AutoRun Policies
Tahmini Süre:1m 30s
Soru 138Soru

An IT systems architect for a municipal transit agency is mapping operational workload requirements to essential cloud computing features. Match each transit infrastructure operational scenario on the left with its corresponding cloud computing characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Transit API server instances automatically expand compute capacity during unexpected severe weather delays and immediately scale down when passenger queries subside.
Route analysts can independently spin up temporary database instances using an automated administrative dashboard without submitting support tickets to the cloud vendor.
Multiple city departments dynamically share physical host servers while multi-tenant software boundary controls keep department data logically isolated.
The agency's monthly cloud invoice accurately details and charges for the precise amount of processing time, network bandwidth, and storage consumed by GPS tracking units.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The operational scenarios correctly pair with the following cloud characteristics: automatically expanding and contracting server capacity pairs with Rapid Elasticity; provisioning instances independently via an automated portal pairs with On-Demand Self-Service; dynamically sharing physical host infrastructure across multi-tenant departments pairs with Resource Pooling; and billing based on tracked resource consumption pairs with Measured Service.
Each scenario maps directly to a standard NIST essential cloud characteristic: dynamic workload-driven auto-scaling maps to Rapid Elasticity; autonomous user provisioning via self-service interfaces maps to On-Demand Self-Service; shared physical compute infrastructure serving multiple isolated users maps to Resource Pooling; and granular resource metering for billing maps to Measured Service.

Adım Adım Çözüm

1
Analyze the automatic scaling scenario during weather events.
Dynamic expansion and contraction to meet fluctuating load defines Rapid Elasticity.
Rapid elasticity ensures provisioning closely matches real-time workload demand without manual administrative intervention.
2
Evaluate the route analysts' ability to provision instances without vendor intervention.
Self-service provisioning via automated portals without human vendor interaction defines On-Demand Self-Service.
On-demand self-service empowers users to provision infrastructure on an as-needed basis directly.
3
Examine the multi-tenant departmental sharing of physical host hardware.
Combining physical host resources to serve multiple isolated tenants defines Resource Pooling.
Resource pooling abstracts physical hardware location and dynamically assigns pooled virtual assets.
4
Review the usage tracking and granular invoicing scenario.
Monitoring and billing based on actual metrics like storage, bandwidth, and processing cycles defines Measured Service.
Measured service provides transparency by charging exclusively for consumed computing metrics.

Anahtar Kavram

Essential NIST Cloud Computing Characteristics (Rapid Elasticity, On-Demand Self-Service, Resource Pooling, Measured Service)
Soru 139Soru

A systems administrator needs to configure several Windows 11 workstations so that files with a custom file extension (.logcfg) automatically open using a specific proprietary application executable. The administrator wants to inspect and update the file extension binding and the corresponding executable command-line program using the Windows Command Prompt. Which TWO command-line utilities should the administrator use to accomplish this task?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: assoc; ftype

Cevap

The administrator should use `assoc` and `ftype` to manage file extension bindings and associated executable launch strings in Windows.
In Windows, file association management from the command prompt is split into two commands: `assoc` links a file extension to a file type name, while `ftype` defines the executable launch command for that file type.

Adım Adım Çözüm

1
Use `assoc` in the command prompt to view or change the file type assigned to a specific file extension (e.g., `assoc .logcfg=LogConfigFile`).
Links the file extension `.logcfg` to a custom file type identifier.
The system must first know which file type name maps to the specified extension.
2
Use `ftype` in the command prompt to specify the program and arguments used to open that file type (e.g., `ftype LogConfigFile="C:\Program Files\App\editor.exe" "%1"`).
Associates the custom file type identifier with the binary executable path.
The file type must be bound to the exact executable path so Windows knows how to open files of that type.

Anahtar Kavram

Managing Windows file extension associations via Command Prompt using `assoc` and `ftype`
Soru 140Soru

A tier-2 desktop support technician is investigating a Windows 11 workstation where users report persistent pop-up advertisement redirects. While auditing the browser environment, the technician removes a rogue browser add-on, but finds that a local HTTP proxy setting pointing to address 127.0.0.1:8080127.0.0.1:8080 automatically reinstates itself in the system network settings every time the computer restarts. Which of the following actions should the technician perform NEXT to permanently resolve the redirect issue?

Cevabı ve açıklamayı göster

Cevap: Inspect Task Scheduler and background system services for unauthorized persistence scripts or executable files re-applying the proxy settings.

Cevap

Inspect Task Scheduler and background system services for unauthorized persistence scripts or executable files re-applying the proxy settings.
Inspecting Task Scheduler and background services directly targets the persistent loader causing the setting to revert. Adware and browser hijackers frequently write scheduled tasks or background services to monitor and re-apply proxy registry entries whenever the user logs in or reboots.

Adım Adım Çözüm

1
Analyze the symptom of automatic setting re-initialization upon system restart.
Identified that an external system mechanism outside the browser application is maintaining persistence.
When browser configuration changes revert across system reboots, an operating system startup item, scheduled task, or background service is actively modifying registry keys.
2
Check persistent operating system launch locations including Task Scheduler, Services, and Startup keys.
Locate and disable the unauthorized task or background process responsible for enforcing 127.0.0.1:8080127.0.0.1:8080 proxy redirection.
Removing the underlying startup loader prevents the malicious proxy configuration from re-engaging.
3
Reset the proxy configuration back to default settings and verify remediation.
Browser network settings remain clean after subsequent reboots.
Ensures complete removal of both the hijack payload and its persistence mechanism.

Anahtar Kavram

Browser Hijacker Persistence Remediation
Tahmini Süre:1m 15s
ÖncekiSayfa 7 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin