Tüm alıştırma soruları

3551 soru

Soru 1381Soru

A helpdesk technician suspects that a user's Windows 11 desktop has been infected with network-aware malware after observing unauthorized outbound network traffic. Which of the following actions should the technician perform NEXT according to the standard malware remediation process?

Cevabı ve açıklamayı göster

Cevap: Disconnect the computer from the local network and disable all wireless adapters.

Cevap

Disconnect the computer from the local network and disable all wireless adapters.
According to CompTIA's official 7-step malware remediation process, once malware symptoms are identified (Step 1), the immediate next step is to quarantine the infected system (Step 2). Disconnecting the network cable and turning off Wi-Fi isolates the machine to prevent potential lateral spreading across the network.

Adım Adım Çözüm

1
Identify the current step in the CompTIA 7-step malware remediation process.
The technician has completed Step 1 (Identify malware symptoms).
Malware symptoms have been observed on the system.
2
Determine the mandatory next sequential step.
Step 2 is to quarantine the infected system.
Isolating the device physically or logically prevents the malware from spreading to other assets on the network.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Best Practices
Tahmini Süre:45s
Soru 1382Soru

A helpdesk technician is configuring a Windows laptop for a mobile employee to optimize battery consumption and system response times. The technician opens the standard Windows Control Panel to adjust the device's power settings. Which of the following configuration options can be modified directly within the Power Options applet? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configuring the action taken when the laptop lid is closed (such as entering Sleep mode or doing nothing); Setting the timer for when the operating system automatically turns off the display after a period of user inactivity

Cevap

The settings directly configurable in the Power Options applet are defining the action taken upon closing the laptop lid and setting the timer for turning off the display after period of inactivity.
The Power Options Control Panel utility controls energy management parameters on Windows devices. Setting what happens when a portable computer's lid is closed (Sleep, Hibernate, Shut down, or Do nothing) and defining the inactive period before turning off the display are standard configurable settings within Power Options power plans.

Adım Adım Çözüm

1
Identify the primary purpose of the Windows Control Panel Power Options applet.
Power Options manages power management schemes, display/sleep timers, and hardware power button behaviors.
This applet centralizes energy conservation and power state transition rules for desktop and portable Windows machines.
2
Evaluate the choices to determine which belong directly in Power Options versus other system utilities.
Lid closure actions and display idle timers reside inside Power Options plans. Visual effects are managed via System Properties (Advanced), and automated tasks require Task Scheduler.
CompTIA A+ requires distinguishing between Control Panel applets, System Properties sub-menus, and MMC administrative snap-ins.

Anahtar Kavram

Windows Control Panel Power Options Utility Capabilities
Soru 1383Soru

A desktop technician is configuring a new wireless network for a company's administrative branch. Management mandates that every employee must authenticate individually using their domain credentials rather than relying on a shared passphrase. Which of the following wireless security configurations should the technician implement to meet these security requirements?

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise utilizing 802.1X and a RADIUS server

Cevap

WPA3-Enterprise utilizing 802.1X and a RADIUS server
WPA3-Enterprise incorporates the 802.1X framework connected to a central RADIUS server. This standard allows network users to authenticate individually using their personal domain/Active Directory accounts, fulfilling the corporate security requirement for distinct user access control.

Adım Adım Çözüm

1
Identify the authentication requirement from the scenario.
The network requires individual user authentication backed by corporate domain credentials.
Individual credential tracking requires an enterprise authentication framework rather than a shared key.
2
Distinguish between Personal and Enterprise wireless modes.
Personal (PSK/SAE) modes rely on a single shared passphrase for all devices, while Enterprise modes utilize 802.1X to query a RADIUS server.
Only 802.1X/RADIUS integration allows authenticating users individually against Active Directory.
3
Select the modern, secure Enterprise wireless standard.
WPA3-Enterprise utilizing 802.1X and a RADIUS server meets both the security standards and individual authentication requirements.
WPA3-Enterprise provides enterprise-grade encryption combined with centralized 802.1X credential validation.

Anahtar Kavram

Wireless Security Modes (Personal vs. Enterprise 802.1X/RADIUS)
Soru 1384Soru

An IT technician is tasked with disposing of retired magnetic backup tapes containing confidential enterprise data according to organizational security policy. Place the steps of the data sanitization and chain-of-custody process in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence for magnetic backup tape disposal is: 1) Log the serial numbers in the inventory tracking system, 2) Expose the magnetic tapes to an industrial degausser, 3) Place the degaussed tapes into a locked, tamper-evident container for transport, and 4) Obtain and archive a signed Certificate of Destruction.
Establishing a secure data disposal workflow requires serial number logging first to record asset custody. Next, degaussing purges the magnetic tape data on-site. Securing the media in locked containers preserves physical security during vendor transport. Finally, once physical shredding occurs, receiving the Certificate of Destruction completes regulatory compliance reporting.

Adım Adım Çözüm

1
Inventory and document media
Record unique tape serial numbers in the decommission log.
Comprehensive logging ensures full accountability and establishes an unbroken chain of custody before handling begins.
2
Perform initial logical data purging
Degauss the magnetic tapes on-site.
Degaussing disrupts the magnetic fields on magnetic tapes, erasing data on-site so unencrypted information is never exposed during transit.
3
Secure media for transport
Seal degaussed media in locked, tamper-evident transfer containers.
Physical security controls during transport prevent loss, theft, or unauthorized access while en route to shredding.
4
Verify and archive completion documentation
Receive and log the vendor-issued Certificate of Destruction.
The signed Certificate of Destruction serves as compliance proof that media lifecycle management requirements were satisfied.

Anahtar Kavram

Data Sanitization and Chain-of-Custody Lifecycle
Soru 1385Soru

A desktop technician is troubleshooting a Windows workstation where core system files are corrupted, preventing operating system updates from installing properly. The technician determines that the local Windows Component Store image itself is damaged and must be repaired before corrupted system binaries can be replaced. Which TWO Windows command-line utility operations should the technician run in an elevated command prompt to complete this repair sequence? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: dism /online /cleanup-image /restorehealth; sfc /scannow

Cevap

The technician should run DISM with the cleanup-image and restorehealth parameters to fix the Windows Component Store, followed by System File Checker (sfc /scannow) to inspect and replace damaged system binaries.
When a Windows system exhibits OS corruption and an unreadable or damaged component store, the correct repair sequence involves executing Deployment Image Servicing and Management (dism /online /cleanup-image /restorehealth) to service the store image, followed by System File Checker (sfc /scannow) to replace corrupted system binaries with verified originals.

Adım Adım Çözüm

1
Repair the Windows Component Store image
Runs DISM /online /cleanup-image /restorehealth in an elevated Command Prompt.
SFC relies on a healthy Component Store as its payload source; if the Component Store is damaged, DISM must repair it first.
2
Scan and replace protected operating system files
Runs sfc /scannow.
SFC checks system file hashes against known good versions in the Component Store and restores any damaged OS binaries.

Anahtar Kavram

Windows System File & Component Store Repair Commands (DISM and SFC)
Soru 1386Soru

A desktop support technician receives an escalated ticket regarding a corporate Windows workstation exhibiting persistent rogue security software pop-ups. The field technician assigned to the ticket has already confirmed the infection symptoms and disconnected the machine from the corporate network to enforce quarantine. According to the standard CompTIA malware remediation process, which of the following actions should the technician perform NEXT prior to executing malware scanning and removal tools?

Cevabı ve açıklamayı göster

Cevap: Disable System Protection/System Restore on the workstation.

Cevap

Disable System Protection/System Restore on the workstation.
According to the official CompTIA 7-step malware remediation workflow (1. Identify symptoms, 2. Quarantine system, 3. Disable System Restore, 4. Remediate infected systems, 5. Schedule updates/boot environment, 6. Enable System Restore & create restore point, 7. Educate end user), after identifying and quarantining the host, the immediate next action is to disable System Restore. Turning off System Restore purges prior restore points that may contain malware copies and prevents new restore points from caching malicious files during cleanup.

Adım Adım Çözüm

1
Review the current state within the CompTIA 7-step malware remediation process.
Step 1 (Identify malware symptoms) and Step 2 (Quarantine infected systems) have already been completed by the field technician.
Determines the correct sequential placement within the standard remediation workflow.
2
Identify Step 3 of the CompTIA 7-step malware remediation process.
Step 3 requires disabling System Restore (System Protection) in Windows.
Prevents the operating system from creating automated restore points that include malware or allowing malicious software to persist within existing shadow copies.
3
Verify that remediation and scanning (Step 4) follow Step 3.
Once System Restore is turned off and existing restore points are purged, malware scanning tools can safely be executed.
Ensures complete eradication without leaving hidden infected restore points on disk.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process
Soru 1387Soru

A desktop technician is troubleshooting two distinct display problems reported at a user's workstation:

1. Problem 1: The desktop graphics workstation displays random checkerboard artifacts and pixel corruption across the screen specifically when performing intensive 3D rendering.
2. Problem 2: An external legacy CCFL-backed LCD monitor exhibits a dark screen where desktop icons are faint but still faintly visible when a flashlight is shined directly onto the glass panel.

Which of the following are the most likely root causes for these respective issues? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Overheating VRAM or physical hardware failure on the workstation graphics processing unit; Failed backlight inverter board or worn CCFL bulb within the external LCD monitor

Cevap

The most likely root causes are overheating VRAM or physical hardware failure on the workstation GPU for Problem 1, and a failed backlight inverter board or worn CCFL bulb on the external LCD monitor for Problem 2.
Overheating VRAM or hardware failure on the graphics card causes load-dependent visual artifacts such as checkerboards and missing textures. Simultaneously, a faint image visible only under bright external illumination on an LCD panel indicates a failure in the backlighting infrastructure, such as the inverter board or CCFL bulb.

Adım Adım Çözüm

1
Analyze Problem 1 symptoms (checkerboard artifacts during heavy 3D rendering tasks).
Identify that hardware VRAM failure or GPU thermal throttling under heavy load generates pixel artifacts, whereas software driver issues generally cause crashes or resolution mismatches rather than localized load-dependent hardware artifacts.
Heavy load increases temperature on GPU memory chips, revealing physical VRAM instability.
2
Analyze Problem 2 symptoms (faint screen image visible only under external light).
Determine that the liquid crystal display layer is successfully rendering images, but no light is passing through from behind, confirming a backlight circuit failure (inverter board or CCFL light tube).
The flashlight test isolates the display panel matrix from the backlighting assembly.

Anahtar Kavram

Diagnosing Hardware Video Artifacts vs Backlight/Inverter Failures
Soru 1388Soru

A company issues smartphones to employees under a corporate mobility program. The IT administrator needs to ensure that corporate emails, documents, and sensitive business applications are strictly isolated from personal applications and data stored on the same device. Which mobile security feature should the administrator implement to achieve this isolation?

Cevabı ve açıklamayı göster

Cevap: Containerization

Cevap

Containerization is the security feature that logically separates corporate applications and data from personal content on a mobile device.
Containerization creates a dedicated, encrypted partition or environment on a mobile device to store company apps and data. This prevents personal applications from accessing business data and allows administrators to manage corporate assets independently of personal information.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario.
The requirement is to isolate business applications and data from personal user data on the mobile device.
Preventing data leakage between personal and corporate environments is critical in enterprise mobile security.
2
Evaluate the mobile security controls available in MDM platforms.
Containerization creates an encrypted storage area and application sandbox designated specifically for enterprise use.
This logical boundary prevents personal apps from accessing sensitive enterprise resources without interfering with the user's personal phone usage.

Anahtar Kavram

Mobile Device Containerization and Storage Isolation
Soru 1389Soru

A desktop support technician is setting up a Windows 11 Professional workstation for an employee who frequently accesses a shared folder hosted on a standalone network server outside the Active Directory domain. Each time the user attempts to connect, Windows requests authentication details. To prevent repetitive prompts, the technician needs to save these network authentication credentials permanently on the local machine. Which Control Panel utility should the technician use to store and manage these credentials?

Cevabı ve açıklamayı göster

Cevap: Credential Manager

Cevap

Credential Manager should be used to store and manage persistent network credentials for accessing shared resources.
Credential Manager is the Windows Control Panel utility designed specifically to view, add, modify, and delete saved credentials for websites, applications, and network locations (under Windows Credentials). Adding the network share's server address, username, and password into Credential Manager ensures that Windows authenticates automatically without prompting the user upon reconnection.

Adım Adım Çözüm

1
Identify the administrative requirement.
The user needs to store network server login credentials permanently on the Windows workstation to avoid repeated authentication prompts.
Connecting to non-domain network resources requires authenticating with credentials specific to that destination server.
2
Evaluate the appropriate Windows tool for managing stored authentication tokens.
Credential Manager maintains vault entries for Web Credentials and Windows Credentials.
Windows Credentials inside Credential Manager specifically store NTLM/Kerberos domain/workgroup credentials for server shares, printers, and mapped drives.
3
Select the correct utility.
Open Control Panel and select Credential Manager to add a new Windows Credential entry for the target server.
This safely stores the target IP/hostname, username, and password across reboots.

Anahtar Kavram

Windows Credential Manager
Tahmini Süre:1m 0s
Soru 1390Soru

A systems administrator is preparing to perform an in-place upgrade on several corporate desktop computers from 64-bit Windows 10 Pro to Windows 11 Pro. During a pre-upgrade audit, the administrator finds that the system drives use the Master Boot Record (MBR) partition scheme, even though the motherboard firmware supports UEFI, Secure Boot, and TPM 2.0. To meet Windows 11 installation prerequisites without losing existing user files or requiring a clean operating system reinstall, which command-line utility should the administrator run first to prepare the drive partition style?

Cevabı ve açıklamayı göster

Cevap: mbr2gpt /convert /allowFullOS

Cevap

The correct action is to execute mbr2gpt /convert /allowFullOS.
The correct command is mbr2gpt /convert /allowFullOS. Windows 11 mandates UEFI firmware mode, which in turn requires the storage drive to use the GPT partition scheme. The Windows built-in MBR2GPT tool safely modifies the partition structure from MBR to GPT without wiping user files, applications, or OS configurations. Adding /allowFullOS enables this execution while running inside the full Windows 10 environment.

Adım Adım Çözüm

1
Identify the Windows 11 installation requirement.
Windows 11 requires UEFI boot mode, which necessitates a drive partitioned with the GUID Partition Table (GPT) layout.
Systems booting legacy MBR partitions cannot enable UEFI mode directly without repartitioning or converting the drive.
2
Select the appropriate non-destructive conversion utility.
The Windows MBR2GPT tool converts an MBR disk to GPT without modifying or deleting data on the disk.
Running the tool with the /allowFullOS switch enables the conversion process directly from within the running Windows environment.
3
Complete firmware reconfiguration.
After conversion, reconfigure the system firmware from Legacy BIOS mode to UEFI mode.
This allows the system to boot successfully from the newly created GPT partition structure under UEFI before launching the Windows 11 setup.

Anahtar Kavram

Partition Scheme Conversion for Windows Upgrades
Tahmini Süre:1m 30s
Soru 1391Soru

A technician is troubleshooting a desktop application that repeatedly crashes upon launch on a Windows workstation. Place the following troubleshooting steps in the correct order from first to last to isolate and resolve the issue according to standard CompTIA methodology.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence of troubleshooting steps from first to last is: 1) Interview the user and inspect Event Viewer logs, 2) Formulate a hypothesis of probable cause, 3) Perform a clean boot to test the hypothesis, 4) Reinstall the application and verify functionality, and 5) Record resolution details in the ticketing system.
The correct order strictly follows the six-step CompTIA troubleshooting methodology: 1) Identify the problem (user interview and Event Viewer log review), 2) Establish a theory of probable cause (hypothesizing service or binary corruption), 3) Test the theory (performing a clean boot), 4) Establish a plan of action and verify full system functionality (reinstalling app and testing stability), and 5) Document findings, actions, and outcomes.

Adım Adım Çözüm

1
Gather symptom details and examine the Windows Event Viewer Application log.
The technician identifies faulting module details and error codes.
CompTIA troubleshooting methodology starts with identifying the problem and gathering information.
2
Develop a theory regarding the root cause of the crash.
A probable cause hypothesis (e.g., third-party service conflict or file corruption) is established.
Formulating a theory of probable cause directs targeted testing.
3
Execute a clean boot in Windows to test the hypothesis.
Background third-party interference is ruled in or out.
Testing the theory determines the true cause without making irreversible changes.
4
Reinstall software and verify normal application operation.
The application functions properly without crashing.
Remediation and functionality verification confirm the issue is resolved.
5
Document findings, actions, and outcomes in the ticket history.
Knowledge base records are completed.
Final documentation ensures complete administrative closure.

Anahtar Kavram

CompTIA A+ Standard Troubleshooting Methodology applied to Windows Application Crashes
Soru 1392Soru

A desktop technician is preparing to deploy a newly imaged Windows computer for a standard corporate user. To follow workstation hardening best practices and minimize the system's attack surface, which of the following actions should the technician take?

Cevabı ve açıklamayı göster

Cevap: Disable the built-in Guest account and unnecessary system services.

Cevap

Disable the built-in Guest account and unnecessary system services.
Disabling the built-in Guest account and terminating unnecessary background services are core workstation hardening steps. They restrict unauthorized access and reduce the number of running processes that could contain unpatched vulnerabilities.

Adım Adım Çözüm

1
Identify the primary goal of workstation hardening.
Workstation hardening aims to minimize security risks by reducing the overall attack surface of the operating system.
Default OS installations often include unnecessary services, features, and default accounts that can be exploited if left active.
2
Evaluate the recommended security controls for built-in accounts and services.
Disabling the Guest account and turning off unused background services eliminates unneeded access points.
This enforces the principle of least functionality and minimizes entry points for unauthorized users or malicious code.

Anahtar Kavram

Workstation Attack Surface Reduction and Account Hardening
Tahmini Süre:45s
Soru 1393Soru

An IT security auditor is establishing standardized operational procedures for end-of-life media management and storage sanitization. Match each data destruction or disposition requirement on the left with the correct technique or compliance artifact on the right based on CompTIA A+ standards.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Decommissioning legacy magnetic reel tapes to permanently eliminate magnetic domains before physical recycling.
Sanitizing healthy NVMe solid-state drives (SSDs) for internal organizational reuse while clearing over-provisioned blocks.
Purging sensitive data from Self-Encrypting Drives (SEDs) almost instantaneously by rendering existing ciphertext unrecoverable.
Establishing verifiable chain-of-custody and regulatory compliance documentation after third-party offsite physical drive shredding.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Decommissioning magnetic tapes matches Degaussing.
2. Sanitizing NVMe SSDs for reuse matches NVMe Sanitize / ATA Secure Erase firmware command.
3. Purging Self-Encrypting Drives (SEDs) instantly matches Cryptographic Erase (CE).
4. Establishing compliance audit records after vendor shredding matches Certificate of Destruction.
Each requirement correctly pairs with its established industry protocol under CompTIA A+ standards: magnetic media requires degaussing; solid-state media requires firmware-based sanitization commands (NVMe Sanitize/ATA Secure Erase); hardware-encrypted drives utilize Cryptographic Erase; and outsourced destruction requires a formal Certificate of Destruction for legal compliance.

Adım Adım Çözüm

1
Analyze magnetic storage media sanitization requirements.
Identify that magnetic tapes rely on magnetic orientation, which is permanently disrupted using a degausser.
Degaussing renders magnetic media unreadable by removing the magnetic alignment of stored data bits.
2
Determine the proper logical sanitization command for solid-state storage re-use.
Select NVMe Sanitize / ATA Secure Erase.
Standard OS formatting or degaussing does not affect solid-state drive cells; built-in controller firmware sanitize commands reset all blocks non-destructively.
3
Evaluate rapid sanitization for Self-Encrypting Drives (SEDs).
Select Cryptographic Erase (CE).
CE destroys the symmetric Media Encryption Key (MEK), converting stored data into unsolvable ciphertext instantly.
4
Identify the audit artifact for offsite drive disposition.
Select Certificate of Destruction.
Regulatory frameworks require documented proof of destruction detailing drive serial numbers and destruction methods.

Anahtar Kavram

Data Destruction and Disposal Methods
Soru 1394Soru

An IT technician is reviewing escalated service tickets regarding specialized printer hardware failures across an organization. Match each specific printer symptom on the left with its primary underlying root cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A direct thermal barcode label printer produces faint, streaked labels during high-speed shipping operations.
A fused deposition modeling (FDM) 3D printer fails to adhere the initial layer of melted filament to the surface, resulting in structural warping.
A high-volume color laser printer outputs pages with recurring dark vertical lines running down the entire length of every sheet.
A office inkjet printer produces printed financial spreadsheets where vertical column borders appear jagged and misaligned.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Thermal label faintness matches residue on the thermal printhead heating elements; 3D printer first-layer detachment matches incorrect Z-offset or an unlevel build plate; continuous laser vertical lines match a damaged photosensitive drum or cleaning blade; and inkjet line misalignments match uncalibrated printhead carriage alignment.
Each printer technology exhibits distinct physical symptom signatures: thermal printers suffer from printhead element contamination, 3D printers depend on bed leveling and Z-offset calibration for initial layer adhesion, laser printers manifest continuous full-length lines when the drum blade or surface is gouged, and inkjet printers require software-guided printhead alignment to correct jagged vertical rules.

Adım Adım Çözüm

1
Analyze thermal printer symptoms
Identify that direct thermal printing uses heat elements to react with special paper, making printhead debris the primary cause of faint streaks.
Direct thermal printers do not use toner or ink ribbons, isolating thermal element contamination as the failure point.
2
Analyze 3D printer first-layer adhesion issues
Determine that Z-axis clearance (Z-offset) and bed leveling directly govern first-layer squish and bed adhesion.
If the gap between the nozzle and build plate is too wide, the plastic filament cools without bonding to the build surface.
3
Analyze laser printer vertical line defects
Associate continuous full-page longitudinal lines with physical defects on the OPC drum or drum wiper blade.
A scratch on the revolving drum surface permanently attracts or repels toner along the entire rotation length during printing.
4
Analyze inkjet vertical line misalignment
Correlate jagged spreadsheet gridlines with inkjet carriage alignment requirements.
Bidirectional ink spraying requires precise alignment calibration so print strokes line up perfectly across passes.

Anahtar Kavram

Printer Defect Identification and Cause Matching across Laser, Thermal, Inkjet, and 3D Technologies
Soru 1395Soru

An IT support technician is processing a user-reported workstation issue following standard operational procedures and service desk guidelines. Arrange the steps of the ticketing workflow in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence for the ticketing workflow is: 1) Log the ticket with complete initial details, 2) Categorize the issue and assign priority level, 3) Perform troubleshooting, implement solution, and log remediation steps, 4) Contact the end user to verify full system functionality, and 5) Update documentation and mark the ticket status as closed.
The standard ticket lifecycle follows a structured progression: initial ticket creation and detail logging, triage/categorization and prioritization, technical troubleshooting with root cause logging, user verification, and finally ticket closure with knowledge base/asset updates.

Adım Adım Çözüm

1
Identify and record the incident
Initial ticket record created with user and asset info
All support requests must begin with comprehensive initial documentation.
2
Triage, categorize, and prioritize
Ticket is assigned to the correct queue with appropriate SLA priority
Proper categorization ensures routing to the right support group and timeline.
3
Diagnose, resolve, and document root cause
Technical issue is fixed and resolution steps are recorded
Work performed and root cause analysis must be thoroughly documented in resolution fields.
4
Verify functionality with user
User confirms the system is working as expected
Technicians must never close a ticket without user verification.
5
Finalize documentation and close ticket
Knowledge base updated and ticket status set to closed
Official closure and archiving prevents duplicate tickets and enriches IT documentation.

Anahtar Kavram

Ticket Lifecycle Management
Soru 1396Soru

Match each remote access technology or tool to its default network port and primary operational characteristic.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

RDP (Remote Desktop Protocol)
SSH (Secure Shell)
Telnet
MSRA (Microsoft Remote Assistance)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

RDP matches TCP port 3389 (graphical session access). SSH matches TCP port 22 (encrypted command-line). Telnet matches TCP port 23 (unencrypted text-based). MSRA matches user invitation for shared desktop interaction.
Each remote access tool is correctly paired with its standard port and operational feature: RDP uses TCP port 3389 for graphical access, SSH uses TCP port 22 for encrypted command-line sessions, Telnet uses TCP port 23 for unencrypted command-line sessions, and MSRA uses user invitations for shared session support.

Adım Adım Çözüm

1
Identify default transport ports and encryption for command-line protocols.
SSH runs securely on TCP port 22, whereas Telnet runs insecurely without encryption on TCP port 23.
Differentiating command-line utilities relies on knowing their encryption status and default port assignments.
2
Identify default ports and capabilities for Windows remote GUI tools.
RDP connects via TCP port 3389 to grant full graphical access.
RDP is the standard protocol integrated into Windows Professional and Enterprise editions for remote GUI management.
3
Distinguish MSRA from standard RDP functionality.
MSRA requires user authorization and invitation to view and assist in an ongoing user session.
MSRA is intended for collaborative helpdesk support rather than independent desktop login.

Anahtar Kavram

Default network ports and primary characteristics of remote access protocols and tools.
Soru 1397Soru

A field technician is troubleshooting a mobile tablet on which a third-party mapping application continually becomes unresponsive during operation. Sequence the following troubleshooting actions in order from least invasive to most invasive.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence from least invasive to most invasive is: 1) Force close the mapping application and restart it, 2) Clear the application cache through the mobile OS settings, 3) Uninstall and reinstall the mapping application, and 4) Perform a full factory reset of the mobile device.
CompTIA troubleshooting methodology requires technicians to start with the least invasive step that can resolve the issue and progress toward more invasive measures. Force stopping the application is immediate and non-destructive. Clearing the application cache deletes temporary files without erasing user settings. Uninstalling and reinstalling the application replaces corrupted application files but resets app-specific data. Performing a factory reset wipes all data and applications from the entire mobile device and is the most invasive action.

Adım Adım Çözüm

1
Identify the immediate, non-destructive process step.
Force closing the application halts the hung process in RAM.
This tests whether a temporary memory glitch caused the issue without changing saved data.
2
Identify the step that removes transient temporary data.
Clearing the application cache deletes temporary cached files.
Corrupted temporary files often cause app freezes, and removing them retains app login and user settings.
3
Identify the step that replaces application program files.
Uninstalling and reinstalling the app installs a fresh copy of the application code.
This resolves deeper corruption within app files or settings but requires downloading the app and re-entering credentials.
4
Identify the system-wide last resort step.
Performing a factory reset wipes the entire storage and restores OS default settings.
Because it destroys all local user data across the entire device, a factory reset is reserved for when all app-specific steps fail.

Anahtar Kavram

Least-Invasive Mobile Application Troubleshooting Methodology
Soru 1398Soru

A desktop technician is servicing a Windows system that experiences severe graphical distortion and frequent kernel blue screen crashes (BSOD) immediately after boot following a recent display adapter driver update. Additionally, system file integrity checks fail because the local Windows image payload is damaged. Which of the following troubleshooting actions should the technician perform to stabilize the system and restore file integrity? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Boot the system into Safe Mode and roll back the display driver using Device Manager.; Execute dism /online /cleanup-image /restorehealth from an elevated command prompt prior to running System File Checker.

Cevap

The technician should boot into Safe Mode to roll back the display driver via Device Manager and run DISM /Online /Cleanup-Image /RestoreHealth from an elevated command prompt prior to performing an SFC repair scan.
Rolling back the driver in Safe Mode eliminates driver-induced system instability, while running DISM RestoreHealth repairs the damaged component store payload so system file repair tools can function correctly.

Adım Adım Çözüm

1
Address system instability caused by the faulty graphics driver
Booting into Safe Mode prevents the corrupted graphic driver from loading, allowing stable access to Device Manager to roll back the driver to its previous version.
Safe Mode uses basic display drivers, preventing the driver-induced crash on boot.
2
Repair the local Windows image payload
Executing DISM with the RestoreHealth switch downloads or reconstructs healthy component store files from Windows Update or local repair sources.
SFC requires a healthy component store to replace corrupt system files effectively.

Anahtar Kavram

Resolving System File Corruption and Driver Issues via Safe Mode, Device Manager Rollback, and proper DISM/SFC sequencing
Soru 1399Soru

As an IT security technician conducting awareness training, match each social engineering attack vector or threat type to its corresponding security incident description.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Dumpster Diving
Shoulder Surfing
Typosquatting
Evil Twin

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Dumpster Diving corresponds to searching physical waste receptacles for printed documents. Shoulder Surfing corresponds to viewing a user's monitor or keypad to capture credentials. Typosquatting corresponds to registering misspelled domain names to redirect users to malicious portals. Evil Twin corresponds to deploying a rogue wireless access point that mimics a legitimate SSID.
Each social engineering vector is correctly linked to its primary mechanism: Dumpster Diving targets physical garbage bins for discarded paper documents; Shoulder Surfing uses visual line-of-sight observation to steal input credentials; Typosquatting exploits browser typing mistakes to direct users to malicious domains; and an Evil Twin uses spoofed wireless SSIDs to intercept device network traffic.

Adım Adım Çözüm

1
Analyze physical collection threats
Identify Dumpster Diving as the practice of sifting through physical waste and un-shredded trash for sensitive information.
Dumpster diving relies on physical access to discarded paperwork rather than digital intrusion.
2
Analyze direct visual observation threats
Identify Shoulder Surfing as visually watching someone enter data or read private information.
Shoulder surfing requires direct line of sight to a computer screen, keypad, or mobile device.
3
Analyze Web URL and DNS manipulation threats
Identify Typosquatting (URL hijacking) as leveraging common spelling mistakes in web domain names.
Typosquatting takes advantage of human typing errors to present cloned login pages.
4
Analyze wireless network security threats
Identify Evil Twin as deploying a rogue Wi-Fi access point broadcasting a trusted network SSID.
Evil Twin attacks deceive devices into connecting automatically to a malicious Wi-Fi hotspot.

Anahtar Kavram

Social Engineering Methods and Threat Classifications
Tahmini Süre:1m 30s
Soru 1400Soru

A security administrator is preparing an unhardened, newly provisioned Windows workstation for deployment in a high-security enterprise environment. To minimize attack vectors prior to placing the system on the production network, the administrator must execute a comprehensive series of local configuration and security hardening controls. In what sequence should the technician perform the following workstation hardening steps to ensure proper dependency management and maximum initial security?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct procedural order is: first disable or rename default accounts and provision secured local accounts, second configure local account security policies (lockout and complexity), third disable unnecessary system services and features (AutoRun/AutoPlay), fourth configure Windows Defender Firewall and port restrictions, and fifth enable full-disk encryption (BitLocker) and screen lock policies.
Hardening a new workstation follows a logical defense-in-depth sequence: establishing strict local access control (account renaming/disabling), defining credential policies (lockout/complexity), minimizing software attack surface (disabling services/AutoRun), controlling network exposure (host firewall/ports), and finally applying physical and storage safeguards (BitLocker and screensaver locks).

Adım Adım Çözüm

1
Secure local user and administrator accounts
Default administrative pathways and Guest accounts are restricted or renamed, establishing baseline access control.
Before applying system-wide policies, control over account privileges must be established so default credentials cannot bypass configuration.
2
Enforce Local Security Policy baseline rules
Account lockout thresholds and password complexity criteria are activated via secpol.msc.
Establishing policy bounds on accounts protects the system against brute-force attempts during remaining configuration tasks.
3
Reduce attack surface by disabling unneeded services and features
Unused OS services, background apps, and removable media features like AutoPlay/AutoRun are turned off.
Eliminating unnecessary background features mitigates local and media-borne software vulnerabilities.
4
Restrict network boundaries via host firewall settings
Inbound and outbound network rules block unauthorized protocols and ports.
Network filtering ensures that remaining services do not expose unexpected network ports before network connection.
5
Implement data-at-rest and physical session security controls
BitLocker encrypts system drives and password-protected screensavers lock unattended sessions.
Storage encryption and inactivity timeouts complete the hardening baseline to guard against physical loss or unauthorized local access.

Anahtar Kavram

Workstation Hardening Procedural Sequence
ÖncekiSayfa 70 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin