Examkin

Tüm alıştırma soruları

3551 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 1501Soru →

A systems administrator notices severe system responsiveness degradation on a Windows 11 workstation during high-resolution media export operations. Performance Monitor reveals that while CPU utilization remains under 35%, the PhysicalDisk Avg. Disk Queue Length metric consistently exceeds 6, causing the application to hang. Which TWO actions should the technician take to resolve this disk subsystem bottleneck?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Relocate the application's temporary scratch directory to a separate physical solid-state drive.; Configure Windows virtual memory settings to allocate a secondary paging file on an alternate physical disk.

Cevap

The technician should relocate the application's temporary scratch directory to a separate physical drive and configure virtual memory to place a paging file on an alternate physical disk.
High Avg. Disk Queue Length metrics indicate that disk requests are backing up because the storage device cannot process I/O operations fast enough. Distributing heavy I/O tasks—such as application scratch files and virtual memory paging—onto separate physical drives relieves contention on the main disk and lowers queue depth.

Adım Adım Çözüm

1
Analyze Performance Monitor metrics to identify the resource bottleneck.
Low CPU usage combined with a high Avg. Disk Queue Length (>2 per disk mechanism) indicates a disk I/O bottleneck rather than a processor constraint.
Accurately identifying the bottleneck prevents ineffective troubleshooting steps like altering CPU process priority.
2
Isolate high-volume disk I/O tasks from the OS system drive.
Moving scratch/render directories to another physical disk distributes read/write traffic across separate controllers and storage media.
This reduces contention on the primary storage drive hosting the OS and active applications.
3
Optimize virtual memory placement across physical drives.
Splitting or moving the Windows paging file to a secondary physical disk allows virtual memory reads/writes to occur simultaneously without competing with OS file operations.
Distributing pagefile traffic mitigates disk queue bottlenecks during memory-intensive operations.

Anahtar Kavram

Identifying disk I/O bottlenecks via Disk Queue Length metrics and resolving storage contention through drive separation and paging file configuration.
Soru 1502Soru →

A technician is troubleshooting a Windows workstation experiencing system instability due to corrupted system files. Diagnostic logs indicate that the underlying component store itself may also be corrupted. In what order should the technician perform the following operational steps to diagnose, repair the component store, restore corrupted system files, and complete the remediation process?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order is: 1) Run dism /online /cleanup-image /scanhealth to check component store health, 2) Run dism /online /cleanup-image /restorehealth to repair the component store, 3) Run sfc /scannow to repair protected system files, and 4) Reboot the workstation to apply pending file changes.
When both the Windows component store and core system files are corrupted, DISM must be used to repair the store before SFC can effectively fix system files. Scanning component store health identifies corruption, restoring health repairs the component store payload, running SFC scan replaces damaged system files using the restored store, and rebooting the machine completes the update for files locked during runtime.

Adım Adım Çözüm

1
Execute dism /online /cleanup-image /scanhealth
Checks the Windows component store for corruption and reports whether repairs are needed.
Scanning health establishes whether the component store image is damaged prior to attempting remediation.
2
Execute dism /online /cleanup-image /restorehealth
Downloads clean payload files to repair the local Windows Component Store image.
System File Checker requires a healthy Component Store to pull clean files when fixing operating system corruption.
3
Execute sfc /scannow
Scans protected system files and replaces corrupted files with clean copies from the restored component store.
Running SFC after DISM guarantees that SFC utilizes a verified, healthy source repository.
4
Restart the workstation
Applies file replacements for system binaries that were locked by active processes.
A system reboot is necessary to complete replacing locked operating system files.

Anahtar Kavram

Windows Command-Line System Repair Sequence (DISM and SFC)
Soru 1503Soru →

Match each Windows administrative requirement or configuration task on the left with its corresponding Control Panel utility on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Configure LAN proxy settings and adjust security zone levels for web communication.
Set the default playback device and configure automatic audio attenuation during communication calls.
Access management consoles such as Component Services, Event Viewer, and Performance Monitor.
Configure user environment variables, virtual memory paging file sizes, and visual performance effects.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Matching pairs: Configuring proxy settings matches Internet Options; Audio device and attenuation settings match Sound; Accessing MMC management consoles matches Windows Tools / Administrative Tools; Setting environment variables and virtual memory matches System.
Each task matches its correct Control Panel applet based on Windows OS architecture: Internet Options handles proxy server and security zone configurations; Sound manages playback, recording, and communication audio attenuation; Windows Tools (Administrative Tools) contains shortcuts to system administrative consoles like Event Viewer and Component Services; System provides access to advanced parameters including user environment variables and virtual memory allocation.

Adım Adım Çözüm

1
Analyze each administrative requirement to determine its administrative scope within Windows.
Requirement 1 relates to web/LAN network connection settings; Requirement 2 controls audio hardware and communications attenuation; Requirement 3 involves administrative management shortcuts; Requirement 4 modifies core system performance and environment parameters.
Control Panel utilities are organized by distinct system management functions.
2
Associate each requirement with the governing Control Panel applet.
LAN proxy configuration belongs to Internet Options. Audio playback and attenuation belong to Sound. Administrative MMC consoles belong to Windows Tools / Administrative Tools. Virtual memory pagefile and environment variable configurations belong to System (Advanced System Settings).
Each utility hosts specific tabs and dialog boxes dedicated to its administrative domain.

Anahtar Kavram

Windows Control Panel Utilities navigation and functional scope
Soru 1504Soru →

An IT security analyst is updating compliance documentation across corporate mobile endpoints and industrial IoT deployment sites. Match each security mechanism on the left with its corresponding technical objective or operational enforcement capability on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Geofencing configuration
Mobile Application Management (MAM) containerization
Embedded IoT system hardening
Embedded Secure Element (eSE) hardware storage

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Geofencing configuration matches location-based trigger profile adjustments; MAM containerization matches enterprise app data isolation for selective wiping; Embedded IoT system hardening matches disabling unnecessary services and changing default credentials on micro-controllers; Embedded Secure Element hardware storage matches dedicated hardware coprocessor storage for cryptographic keys and biometrics.
Each concept correctly aligns with its core security objective: Geofencing automates policy changes using geographic location; MAM containerization segregates enterprise assets for targeted selective wiping; Embedded IoT system hardening mitigates vulnerability exposure on lightweight controllers by stripping default settings; and an Embedded Secure Element provides hardware-isolated cryptoprocessing.

Adım Adım Çözüm

1
Analyze location-specific security enforcement features.
Identify that dynamic profile changes based on physical GPS coordinates define geofencing.
Geofencing uses positioning services to enforce security policies strictly within designated geographic boundaries.
2
Evaluate data protection strategies for BYOD environment app management.
Identify that isolating business data inside an encrypted sandbox for selective wipe matches MAM containerization.
Containerization separates work environments from personal data on mobile endpoints.
3
Examine device hardening steps unique to resource-constrained IoT/embedded hardware.
Identify that removing unneeded protocols, changing default passwords, and segmenting traffic via VLANs matches embedded IoT hardening.
Embedded systems often lack full OS security tools, requiring service reduction and credential management.
4
Review hardware-level root-of-trust components for mobile biometrics and encryption.
Identify that isolated tamper-proof chips for key and biometric storage match the embedded Secure Element (eSE).
Dedicated hardware coprocessors prevent key extraction even if the primary mobile OS is compromised.

Anahtar Kavram

Mobile Device and Embedded System Security
Soru 1505Soru →

A desktop workstation fails to display video upon powering on. The system power fans spin continuously, but the motherboard speaker emits three long, repeating beep codes. Which TWO of the following initial troubleshooting steps should the technician perform to isolate the cause of this failure? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reseat the installed RAM modules to ensure proper electrical contact in the motherboard DIMM slots.; Boot the system using a single known-good memory module installed in the primary DIMM slot.

Cevap

The technician should reseat the installed RAM modules to ensure proper physical contact and attempt to boot the PC using a single known-good memory module in the primary slot to isolate memory stick or motherboard slot failure.
Three repeating long POST beep codes indicate a memory initialization failure. Reseating memory modules ensures proper connection with slot pins, while booting with a single known-good RAM module in the primary slot isolates whether a particular RAM module or slot is faulty.

Adım Adım Çözüm

1
Analyze POST beep symptoms
Three repeating long beep codes during startup indicate a failure in memory detection or memory initialization prior to video initialization.
Identifying POST hardware error codes narrows down the fault to the system memory subsystem.
2
Perform physical memory isolation and verification
Reseating modules verifies seating, while testing one known-good module systematically identifies if a specific module or channel slot has failed.
Isolating RAM components pinpoints individual module or slot defects efficiently.

Anahtar Kavram

RAM POST Diagnostics and Component Isolation
Tahmini Süre:1m 15s
Soru 1506Soru →

A technician is troubleshooting a network-connected multifunction device (MFD) in an office. Users report that when copying multi-page documents using the Automatic Document Feeder (ADF), a vertical black line appears down the entire length of every page. However, when users send print jobs to the same MFD directly from their computers over the network, the printed pages are clean and clear with no lines. Which of the following components is most likely dirty or damaged?

Cevabı ve açıklamayı göster

Cevap: The ADF scanner glass strip

Cevap

The ADF scanner glass strip
When a vertical line appears exclusively on copies made using an ADF, but does not appear on jobs printed directly from a computer, the issue is isolated to the scanner mechanism. On multifunction devices, the ADF feeds paper past a stationary optical scanner located under a small glass strip adjacent to the main flatbed glass. Debris on this narrow glass strip causes a continuous streak along the entire length of the scanned page.

Adım Adım Çözüm

1
Isolate the symptom between the print engine and the optical scanning assembly
Network print jobs produce clean output while ADF copy jobs display a vertical line, confirming the print engine (drum, fuser, laser unit) is functioning correctly and the fault lies entirely within the ADF optical scanning system.
Print jobs bypass the scanner optical glass entirely, whereas copy/scan operations rely on the scanner light assembly.
2
Analyze how document scanning works when using the Automatic Document Feeder (ADF)
During ADF feeding, the scanner optical head remains stationary beneath the narrow slit glass (ADF glass strip) while the paper moves across it. Any smudge, dust, or mark on this narrow strip creates a continuous line down the entire scanned page.
Debris on stationary glass acts as a continuous obstacle to light capture as the paper glides past.
3
Identify the corrective action
Cleaning the narrow ADF glass strip with a lint-free cloth and isopropyl alcohol removes the obstacle and restores scan clarity.
Debris removal resolves optical line artifacts without requiring component replacement.

Anahtar Kavram

MFD Scanner Defect Isolation (ADF Slit Glass vs. Print Engine Components)
Soru 1507Soru →

A systems support specialist at a financial services firm is servicing a Windows 11 workstation that was infected with persistent banking spyware. The specialist isolated the device from the network, disabled System Restore, updated the endpoint protection signatures, and executed a full system scan that successfully quarantined and removed all malicious files. Which of the following actions should the technician perform NEXT to strictly adhere to the standard CompTIA malware remediation process?

Cevabı ve açıklamayı göster

Cevap: Configure scheduled automated anti-malware scans and verify operating system updates are installed.

Cevap

The technician should configure scheduled automated anti-malware scans and verify that operating system updates are fully installed.
The correct response specifies scheduling recurring anti-malware scans and applying operating system updates, which is Step 5 of the CompTIA 7-step malware remediation workflow (1. Identify symptoms, 2. Quarantine, 3. Disable System Restore, 4. Remediate/Scan, 5. Schedule scans and run updates, 6. Enable System Restore/Create restore point, 7. Educate user). Because Step 4 has just been completed, Step 5 is the required next action.

Adım Adım Çözüm

1
Identify the current step in the CompTIA 7-step malware remediation process.
The scenario describes that identification (Step 1), network isolation/quarantine (Step 2), disabling System Restore (Step 3), and threat remediation via updated definitions and full removal scans (Step 4) have already been completed.
Accurately determining the completed steps prevents skipping critical procedural controls.
2
Determine the mandatory next sequential step.
Step 5 requires scheduling recurring anti-malware scans and applying operating system/application updates.
Scheduling scans and updating system software protects the system against newly discovered vulnerabilities before returning it to production.
3
Differentiate Step 5 from subsequent remediation steps.
Enabling System Restore and creating a restore point is Step 6, while end-user education is Step 7.
The 7-step methodology must be followed in strict chronological sequence.

Anahtar Kavram

CompTIA 7-Step Malware Remediation Process
Tahmini Süre:2m 0s
Soru 1508Soru →

A user reports that a business accounting application periodically crashes while generating monthly reports. A technician needs to review historic crash log details and monitor real-time memory and processor utilization to isolate the issue. Which TWO of the following administrative tools should the technician use to accomplish these tasks?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Event Viewer to inspect the Windows Application log for faulting module names and error codes; Resource Monitor to track live CPU, memory, disk, and network usage per process

Cevap

The technician should use Event Viewer to inspect the Application log for crash event details and Resource Monitor to observe real-time CPU and memory metrics.
Event Viewer records persistent application crash logs under the Windows Application log, providing essential error details like faulting module names. Resource Monitor provides detailed real-time breakdown of system resources (CPU, Memory, Disk, Network) on a per-process level to monitor performance bottlenecks.

Adım Adım Çözüm

1
Open Event Viewer and navigate to Windows Logs > Application.
Locate specific error entries detailing the crashed application's faulting module and error codes.
Event logs store persistent diagnostic records of application crashes necessary for identifying software failures.
2
Open Resource Monitor from Task Manager or the Windows Search bar.
Examine live process counters for memory usage, hard faults per second, and CPU percentage while running the application.
Real-time resource tracking helps determine whether resource exhaustion or memory leaks contribute to application instability.

Anahtar Kavram

Selecting appropriate Windows management tools (Event Viewer and Resource Monitor) to diagnose application crashes and system performance issues.
Tahmini Süre:1m 0s
Soru 1509Soru →

A financial analyst reports that a local database reporting application frequently freezes and crashes during heavy monthly report generation on a Windows workstation. Resource Monitor indicates that during report generation, the secondary storage drive (E:) exhibits a Disk Queue Length consistently exceeding 6 with an Average Response Time above 650 ms. Place the technician's troubleshooting and resolution steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper troubleshooting sequence begins with observing live performance metrics in Task Manager and Resource Monitor, inspecting Event Viewer for Event ID 1002 hang logs, executing chkdsk to rule out disk file system corruption, relocating the temporary scratch directory to an NVMe SSD, and finally executing a test report to verify system stability.
Following CompTIA troubleshooting methodology, the technician must first identify the problem by observing live symptoms (inspecting Task Manager and Resource Monitor for disk queue metrics), verify historical failure details in Event Viewer (Event ID 1002 AppHang), test volume health (chkdsk), implement the solution (reconfiguring scratch path to an NVMe drive), and verify full system functionality by testing report generation.

Adım Adım Çözüm

1
Identify live performance bottlenecks using Task Manager and Resource Monitor.
Discovers high disk active time, process I/O rates, and elevated disk queue lengths.
Initial troubleshooting requires gathering real-time diagnostic data directly from the running system.
2
Check the Event Viewer Application log for Event ID 1002.
Confirms the exact faulting application executable name and hang timestamp.
Correlating live metrics with system event logs confirms the precise nature of the application hang.
3
Execute chkdsk E: /f from an elevated command prompt.
Verifies file system integrity and repairs logical volume errors.
Ruling out disk corruption ensures the high response time is caused by performance limitations rather than file system damage.
4
Reconfigure application scratch paths to move temporary data onto NVMe storage.
Eliminates the mechanical disk I/O bottleneck by using high-throughput storage.
Remediating the root cause requires rehoming intensive I/O operations to adequate hardware.
5
Run a test workload and monitor performance counters.
Validates that disk queue length remains low and report generation succeeds without hangs.
CompTIA A+ methodology requires verifying full system functionality after implementing a fix.

Anahtar Kavram

CompTIA A+ Troubleshooting Methodology for Application Hangs and Disk Bottlenecks
Tahmini Süre:2m 0s
Soru 1510Soru →

A mobile user frequently installs personal applications on a corporate smartphone. The security policy requires preventing corporate email data from being shared with or accessed by these personal applications. Which mobile security technology directly isolates corporate data from personal applications?

Cevabı ve açıklamayı göster

Cevap: Containerization

Cevap

Containerization directly isolates corporate applications and data from personal applications on a mobile device.
Containerization isolates corporate applications and data into a dedicated workspace on the mobile device, preventing personal applications from viewing or sharing sensitive enterprise information.

Adım Adım Çözüm

1
Identify the primary security requirement
The requirement is separating corporate data from unverified personal applications on the same mobile endpoint.
Preventing data leakage between personal and corporate software environments requires logical isolation.
2
Evaluate mobile security controls for app isolation
Containerization establishes a encrypted boundary around corporate applications.
This prevents unmanaged personal apps from interacting with or reading enterprise data.

Anahtar Kavram

Mobile App and Data Containerization
Soru 1511Soru →

A desktop support technician is configuring a Windows 11 workstation for an employee who uses screen-magnification software. When User Account Control (UAC) prompts appear, the desktop dims onto the Secure Desktop, causing the screen-magnification tool to temporarily stop rendering. Which of the following UAC configuration adjustments should the technician make to resolve the display issue while preserving elevation notifications?

Cevabı ve açıklamayı göster

Cevap: Set the UAC level to 'Notify me only when apps try to make changes to my computer (do not dim my desktop)'

Cevap

Set the UAC level to 'Notify me only when apps try to make changes to my computer (do not dim my desktop)'
Setting UAC to notify without dimming the desktop prevents Windows from switching to the isolated Secure Desktop environment. This allows screen magnification tools and other accessibility utilities to continue rendering while still informing the user of pending application modifications.

Adım Adım Çözüm

1
Identify the cause of the screen reader/magnifier freezing during UAC prompts.
The issue is caused by UAC switching execution context to the Secure Desktop, which dims the background and temporarily disables third-party accessibility tools running in the standard user desktop context.
Secure Desktop isolates UAC dialog boxes to prevent malware spoofing, but this isolation breaks some legacy accessibility overlays.
2
Select the appropriate UAC setting to disable Secure Desktop dimming without disabling UAC completely.
Changing the slider to 'Notify me only when apps try to make changes to my computer (do not dim my desktop)' keeps prompt notifications active while displaying them directly on the interactive desktop.
This configuration allows accessibility tools to maintain visibility and focus while still requiring user confirmation for administrative modifications.

Anahtar Kavram

User Account Control Secure Desktop Settings
Soru 1512Soru →

A network administrator is configuring a wireless network for a university research lab. The institution's security policy requires individual user authentication against a centralized directory service and strong AES encryption for all wireless traffic. Which TWO of the following configurations must the administrator implement on the wireless access points to fulfill these security requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise security mode; 802.1X port-based authentication pointing to a RADIUS server

Cevap

The administrator must select WPA3-Enterprise security mode and configure 802.1X port-based authentication pointing to a RADIUS server.
To meet the mandate for individual user authentication via a central directory along with strong AES encryption, the administrator must configure WPA3-Enterprise mode and implement 802.1X port-based authentication pointing to a RADIUS server. Enterprise wireless modes rely on 802.1X to relay authentication requests to a backend authentication server (such as RADIUS connected to Active Directory) and leverage modern AES encryption algorithms.

Adım Adım Çözüm

1
Analyze authentication requirements
The requirement calls for centralized, individual user authentication rather than a shared passphrase, requiring Enterprise mode (802.1X) connected to a RADIUS server.
Personal modes (PSK/SAE) rely on a single shared key across all devices, failing the centralized individual credential requirement.
2
Analyze encryption requirements
Strong AES encryption must be selected (CCMP/GCMP).
TKIP is deprecated and vulnerable, whereas WPA3-Enterprise mandates robust AES-based encryption algorithms.

Anahtar Kavram

WPA3-Enterprise and 802.1X/RADIUS for centralized wireless security
Soru 1513Soru →

A desktop technician is diagnosing several display and projector issues reported by users across an enterprise site. Match each reported display symptom on the left with its most likely root cause or required troubleshooting action on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A ceiling-mounted projector displays a trapezoidal image that is significantly wider at the top than at the bottom.
A gaming workstation display exhibits random colored blocks and screen tearing specifically during heavy 3D GPU rendering workloads.
A laptop screen appears totally dark, but faint desktop images become visible when a flashlight is aimed directly at the glass panel.
A desktop monitor displays a floating 'Input Signal Out of Range' message immediately after booting into the operating system.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Projector trapezoidal distortion matches Keystone correction adjustment. 2. Workstation rendering artifacts match Overheating or failing video RAM (VRAM). 3. Faint laptop image under flashlight matches Failed backlight bulb or malfunctioning backlight inverter circuit. 4. 'Input Signal Out of Range' matches Operating system resolution or refresh rate set higher than supported limits.
Each display symptom maps directly to its hardware or configuration root cause: trapezoidal image distortion requires keystone alignment; load-dependent rendering artifacts are caused by failing or overheating GPU VRAM; faint screen imagery visible under flashlight light indicates a broken backlight or inverter; and floating out-of-range warnings occur when the OS applies an unsupported resolution or refresh rate.

Adım Adım Çözüm

1
Analyze projector image geometry issue.
Identify that trapezoidal distortion stems from physical angle misalignment corrected via keystone adjustment.
Keystone correction digitally or mechanically reshapes the projected frame into a rectangular output.
2
Diagnose rendering artifacts occurring during GPU workload.
Correlate colored blocks and rendering glitches with GPU video memory overheating or degradation.
VRAM holds frame buffer data; corrupted video memory directly manifests as rendering artifacts.
3
Identify the cause of an unlit LCD screen displaying faint content.
Recognize that functional liquid crystals lacking screen illumination indicate a backlight or inverter circuit failure.
The backlight illuminates the LCD layer; without it, image details are only legible under direct external light.
4
Interpret the 'Input Signal Out of Range' monitor OSD warning.
Match the error to invalid OS display output parameters (excessive refresh rate or unsupported resolution).
The monitor scaler raises an out-of-range exception when pixel clock frequency exceeds built-in hardware specifications.

Anahtar Kavram

Video, Display, and Projector Troubleshooting
Soru 1514Soru →

A technician is troubleshooting a computer running Windows that began crashing with Stop errors immediately after a recent graphics card driver update. The technician needs to restore system stability by reverting the faulty driver and verifying that protected system files are intact. Which TWO of the following actions should the technician perform?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Perform a driver rollback in Device Manager to restore the previous device driver.; Run sfc /scannow from an elevated command prompt to inspect and repair protected system files.

Cevap

The technician should perform a driver rollback in Device Manager and run the sfc /scannow utility from an elevated command prompt.
Rolling back the driver in Device Manager reverts the system to the last known working graphics driver, directly addressing crashes caused by the recent update. Running sfc /scannow from an elevated command prompt scans protected system files and replaces damaged ones, ensuring operating system file integrity.

Adım Adım Çözüm

1
Open Device Manager, locate the graphics card under Display Adapters, open its Properties, and click Roll Back Driver.
The system replaces the corrupt or unstable new driver with the previous working version.
Resolves crashes caused directly by the newly installed driver.
2
Launch Command Prompt as an administrator and execute sfc /scannow.
System File Checker scans all protected operating system files and replaces corrupted versions with cached copies.
Ensures operating system file integrity after experiencing system crashes.

Anahtar Kavram

Device Driver Rollback and System File Checker (SFC)
Soru 1515Soru →

An IT technician is deploying a shared accounting application on several Windows 11 workstations used by non-administrative domain users. The application must launch automatically for every user who signs into the computer, and it must allow each user to save their individual application preferences without prompting for User Account Control (UAC) administrative credentials or causing permission errors. Which TWO of the following configuration steps should the technician implement? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Place the application shortcut in the %ProgramData% StartUp directory.; Configure the software to store user-specific preference files within the %LocalAppData% directory.

Cevap

The technician should place the application shortcut in the %ProgramData% StartUp directory and configure the software to store user-specific preference files within the %LocalAppData% directory.
Placing an application shortcut in the %ProgramData% StartUp folder ensures that the application launches automatically upon sign-in for all local and domain users on the workstation. Storing user-specific configuration files in %LocalAppData% allows standard non-administrative users to write their personal settings and cache data without triggering User Account Control (UAC) prompts or encountering write-permission errors associated with protected system directories like %ProgramFiles%.

Adım Adım Çözüm

1
Identify the mechanism for machine-wide automatic application startup.
Placing the application executable shortcut into %ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp targets all workstation users.
Shortcuts placed in %ProgramData% apply globally to every user profile created on or signing into the workstation.
2
Identify the correct directory structure for user-writable application preferences.
Directing user preference writes to %LocalAppData% (or %AppData%) ensures seamless operation.
Standard domain users have default write access to their own AppData paths, preventing file access denials and UAC elevation prompts.

Anahtar Kavram

Application Installation and Configuration Concepts
Soru 1516Soru →

A Linux technician suspects that a server has an unauthorized background process establishing outbound network sessions. The technician needs to view all active TCP connections along with the associated Process ID (PID) for each socket directly from the terminal. Which command should the technician execute?

Cevabı ve açıklamayı göster

Cevap: netstat -tup

Cevap

The command 'netstat -tup' (or netstat -antp) displays active TCP network connections along with the associated Process ID (PID) and program name for each connection.
The command 'netstat -tup' correctly identifies open network sockets (TCP/UDP) and displays the associated Process ID (PID) and program name for each connection, allowing the technician to pin down unauthorized network activity to a specific running process.

Adım Adım Çözüm

1
Identify the diagnostic requirement
The technician needs a tool that correlates active network connections with process identifiers (PIDs).
Inspecting network sockets alone does not identify which process generated the traffic.
2
Evaluate command-line networking utilities
The netstat utility (or modern equivalent ss) with process options lists socket state, source/destination addresses, and the PID/program name bound to each socket.
The -p flag specifically instructs netstat to retrieve and print the PID and program name for each socket.

Anahtar Kavram

Linux/macOS Network Process and Socket Monitoring
Soru 1517Soru →

A Windows 11 workstation fails to start, displaying an error message indicating that the Boot Configuration Data (BCD) file is missing or corrupted. A technician boots the workstation into the Windows Recovery Environment (WinRE) Command Prompt. Which of the following commands should the technician execute to scan all connected disks for installed Windows operating systems and rebuild the BCD store?

Cevabı ve açıklamayı göster

Cevap: bootrec /rebuildbcd

Cevap

bootrec /rebuildbcd
The command 'bootrec /rebuildbcd' scans all connected disks for operating system installations compatible with Windows and gives the technician the option to rebuild the BCD store by adding detected installations.

Adım Adım Çözüm

1
Identify the specific boot failure symptom described in the scenario.
The system reports missing or corrupted Boot Configuration Data (BCD).
Understanding the exact failure component determines which command-line switch or utility is required.
2
Evaluate the function of the bootrec utility switches available in WinRE Command Prompt.
The switch /rebuildbcd explicitly searches all connected hard drives for compatible Windows installations and prompts the user to add them to the BCD store.
Rebuilding the BCD store directly restores missing boot entries required for Windows startup.

Anahtar Kavram

Microsoft Command-Line Boot Repair Utilities (bootrec)
Tahmini Süre:1m 0s
Soru 1518Soru →

An IT technician is establishing a local user account security baseline for standalone Windows office workstations. Which TWO configuration steps are recommended best practices for hardening local user accounts on these systems?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Disable or rename built-in default accounts, such as the Administrator and Guest accounts.; Configure account lockout thresholds to lock user accounts after a specified number of failed logon attempts.

Cevap

Disabling or renaming built-in default accounts and configuring account lockout thresholds are recommended best practices for hardening local user accounts.
Workstation account hardening requires adhering to the principle of least privilege and mitigating brute-force attacks. Disabling or renaming built-in default accounts (such as Guest and Administrator) removes well-known authentication targets. Setting account lockout thresholds prevents attackers from attempting unlimited password combinations.

Adım Adım Çözüm

1
Address default administrative and guest accounts.
Disabling or renaming built-in accounts eliminates well-known targets.
Attackers frequently target default names like Administrator or Guest during initial reconnaissance.
2
Enforce account authentication protections.
Configuring account lockout policies restricts repeated invalid password attempts.
Lockout policies prevent unauthorized password cracking through automated brute-force tools.

Anahtar Kavram

Local Account Hardening Best Practices
Tahmini Süre:1m 0s
Soru 1519Soru →

A user reports that a graphic design application closes unexpectedly whenever a heavy rendering task is started. The helpdesk technician needs to review historic application crash logs to identify the specific faulting module. Which Windows administrative tool should the technician open?

Cevabı ve açıklamayı göster

Cevap: Event Viewer

Cevap

Event Viewer is the correct tool to inspect application crash logs and identify the faulting module.
Event Viewer records application errors, warnings, and information messages under the Windows Logs > Application section. When an application crashes, Windows writes an Error entry (typically Event ID 1000) containing key diagnostic information, such as the faulting application path, exception code, and faulting module name.

Adım Adım Çözüm

1
Open Windows Event Viewer by running eventvwr.msc.
The Event Viewer console opens.
Event Viewer centralized logs store software crash details.
2
Navigate to Windows Logs > Application.
A chronologically ordered list of application events is displayed.
Application crash logs (such as Event ID 1000) are recorded under the Application log category.
3
Select the Error event corresponding to the crashed application to view details.
The technician identifies the exact binary or DLL causing the application crash.
Reviewing crash log details provides actionable diagnostic evidence for application isolation.

Anahtar Kavram

Using Event Viewer to analyze application crash logs and faulting modules
Soru 1520Soru →

A logistics company is upgrading its data center and must decommission retired storage assets, including magnetic backup tapes and solid-state drives (SSDs). The security policy mandates a single physical destruction method that renders both media types completely unusable and unrecoverable. Which of the following disposal methods fulfills this requirement?

Cevabı ve açıklamayı göster

Cevap: Shredding the assets using an industrial mechanical shredder

Cevap

Shredding the assets using an industrial mechanical shredder
Shredding (or physical disintegration) physically breaks the storage substrate—both magnetic tape ribbons and SSD flash memory chips—into tiny fragments, preventing any data recovery across all media types.

Adım Adım Çözüm

1
Analyze the storage media types mentioned in the scenario.
The assets consist of both magnetic media (backup tapes) and flash-based solid-state media (SSDs).
Different storage technologies react differently to sanitization and destruction methods.
2
Evaluate the effectiveness of candidate physical destruction methods against both media types.
Degaussing neutralizes magnetic tape but does not destroy solid-state flash memory chips. Physical shredding physically cuts both magnetic tapes and SSD circuit boards into tiny fragments.
A single physical destruction process must be chosen that effectively destroys both magnetic and semiconductor storage mechanisms.
3
Select the disposal method that satisfies the physical destruction mandate.
Shredding guarantees complete physical destruction and unrecoverability for both SSDs and magnetic tapes.
Industrial shredding/disintegration is recognized by security standards as an effective physical destruction method for mixed media.

Anahtar Kavram

Data Destruction and Disposal Methods
Tahmini Süre:1m 0s
ÖncekiSayfa 76 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin