Examkin

Tüm alıştırma soruları

423 soru

Tüm türler3,551Çoktan seçmeli1,809Çoklu seçim786Sayısal12Eşleştirme521Sıralama423
Soru 141Soru →

A cybersecurity support technician is dispatched to remediate a corporate desktop that is actively displaying unauthorized ransomware warnings and generating rogue outbound connections. In what sequence should the technician perform the following incident response steps to ensure complete malware eradication according to standard CompTIA guidelines?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order follows the CompTIA 7-step malware removal process: (1) Quarantine the system by disconnecting network cables/Wi-Fi, (2) Disable System Restore, (3) Remediate the system by updating signatures and scanning in Safe Mode, (4) Schedule updates and recurring scans, (5) Re-enable System Restore and create a restore point, and (6) Educate the end user.
The CompTIA 7-step malware remediation process specifies an exact operational sequence: 1. Identify symptoms, 2. Quarantine infected system, 3. Disable System Restore, 4. Remediate infected systems (update anti-malware and scan/remove), 5. Schedule updates and recurring scans, 6. Enable System Restore and create restore point, and 7. Educate end user.

Adım Adım Çözüm

1
Isolate the workstation (Quarantine)
Network communication is terminated, stopping malware propagation and command-and-control communication.
Step 2 of the CompTIA process dictates quarantining the system immediately after symptom identification.
2
Disable System Restore
System Restore points are cleared, eliminating stored copies of the malware.
Step 3 prevents infected files from being cached or restored later.
3
Remediate the system
Anti-malware definitions are updated and malicious files/registry keys are detected and removed.
Step 4 involves updating security tools and running deep scans to clean the operating system.
4
Schedule updates and scans
Automated security maintenance tasks are established.
Step 5 ensures ongoing preventative maintenance.
5
Enable System Restore and create a clean restore point
System recovery capabilities are restored using a known-clean baseline state.
Step 6 re-establishes OS backup functionality only after confirming system health.
6
Educate the user
The end user learns risk mitigation techniques to avoid future infections.
Step 7 finishes the remediation lifecycle by addressing human vulnerabilities.

Anahtar Kavram

CompTIA 7-Step Best-Practice Malware Removal Process
Soru 142Soru →

A security administrator needs to harden a standalone Windows 11 Enterprise computer by ensuring that only digitally signed executables can request privilege elevation, while requiring administrators to re-enter credentials on a dimmed, isolated desktop. Place the administrative configuration and verification steps in the correct chronological order.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with launching secpol.msc, navigating to Security Options under Local Policies, enabling the policy to only elevate signed and validated executables, configuring administrator prompt behavior to require credentials on the secure desktop, and finally testing the policy by executing an unsigned application.
The correct procedural order requires launching the Local Security Policy console (secpol.msc), navigating to Local Policies -> Security Options, enabling digital signature enforcement for elevated binaries, setting administrative prompt behavior to require credentials on the secure desktop, and finally executing a verification test using an unsigned binary.

Adım Adım Çözüm

1
Launch the Local Security Policy snap-in console (secpol.msc).
The Local Security Policy window opens.
Administrative security options for UAC cannot be set in standard user applets; secpol.msc must be initialized first.
2
Navigate to Security Settings -> Local Policies -> Security Options.
The list of Windows UAC and security policy settings is displayed.
UAC security policies are located specifically within the Security Options subfolder of Local Policies.
3
Enable 'User Account Control: Only elevate executables that are signed and validated'.
Unsigned applications are prohibited from raising UAC privilege elevation prompts.
This policy forces PKI signature validation prior to granting elevation tokens to executables.
4
Configure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
Administrators must re-enter password credentials on an isolated secure desktop session during elevation.
The Secure Desktop prevents unprivileged background software on the interactive desktop from intercepting credentials or injecting synthetic click events.
5
Execute an unsigned application binary to confirm enforcement.
The elevation request fails or is refused without presenting an elevation prompt.
Verification confirms that the active security policy blocks unsigned executables in accordance with the security baseline.

Anahtar Kavram

Windows Local Security Policy configuration for User Account Control (UAC) code signing enforcement and secure desktop privilege elevation behavior
Tahmini Süre:2m 0s
Soru 143Soru →

An IT support specialist is establishing a standard operating procedure (SOP) for managing incident ticket lifecycles within an enterprise ticketing platform. In what order should the technician perform the following steps during the ticket lifecycle, from initial customer interaction to final incident sign-off?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper sequence for managing the ticket lifecycle is: 1) Record user contact details, asset ID, and problem description, 2) Assign category/severity and perform initial Tier 1 diagnostics, 3) Document attempted steps and escalate to Tier 2 support, 4) Implement the resolution, record the root cause, and obtain user verification, and 5) Formally close the ticket and update the knowledge base.
The correct order follows established standard operating procedures for incident management: ticket creation and identification, initial triage and preliminary diagnostics, documented escalation, resolution deployment paired with user verification, and formal ticket closure paired with knowledge base creation.

Adım Adım Çözüm

1
Intake and Logging
The incident is created with user identity, affected hardware asset ID, and primary symptoms documented.
Establishing accurate baseline details ensures compliance with service level tracking and inventory management.
2
Triage and Categorization
The ticket is classified by impact and urgency, and Tier 1 preliminary checks are run.
Proper classification determines response times and routes the ticket to appropriate initial support workflows.
3
Documentation and Escalation
All diagnostic findings and unsuccessful troubleshooting attempts are documented before reassigning to Tier 2.
Detailed documentation prevents duplicate effort and provides context for specialized escalation technicians.
4
Resolution and User Verification
The core issue is remediated, root cause is entered into resolution notes, and the user confirms functionality.
An incident cannot be considered resolved until the technical fix is verified by the affected user.
5
Closure and Knowledge Archival
The ticket is formally closed and successful resolution steps are converted into a reusable KB article.
Closing finalizes administrative workflows, while KB documentation assists in future incident resolution.

Anahtar Kavram

Incident Management Lifecycle and Documentation Workflows
Soru 144Soru →

A system administrator needs to configure a new workstation to dual-boot Windows 11 and Linux on a single internal NVMe drive using UEFI mode. In what sequence should the administrator execute the required steps to set up this multiboot system without losing existing Windows data?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper sequence for configuring a UEFI multiboot system is: first back up existing data, shrink the Windows volume in Disk Management to free up unallocated space, boot the secondary OS installer in UEFI mode, and complete the installation into the unallocated space while registering the bootloader in the EFI System Partition.
Establishing a stable dual-boot environment requires protecting current data first with a full backup, shrinking the existing volume in Windows Disk Management to produce unallocated space, booting the secondary OS media in UEFI mode to match the system firmware architecture, and deploying the second OS into the unallocated space while adding the bootloader entry to the EFI System Partition.

Adım Adım Çözüm

1
Back up user data and system state.
Existing files are safely backed up to external media or network storage.
Partition changes carry inherent risk of filesystem errors or data loss.
2
Shrink the Windows filesystem in Disk Management.
A block of unallocated space is freed on the internal NVMe drive.
The secondary operating system requires unassigned disk space to form its native root and swap partitions.
3
Boot the secondary OS media in UEFI mode.
The installer runs with access to UEFI environment variables and the ESP.
Both operating systems must share the same boot architecture (UEFI/GPT) for dual-boot integration.
4
Install the secondary OS into unallocated space and write the GRUB bootloader to the ESP.
The GRUB bootloader integrates with the motherboard's EFI boot entries.
Registering GRUB in the EFI partition provides a boot selection menu at system startup.

Anahtar Kavram

Multiboot Installation and Partitioning Workflows
Soru 145Soru →

A systems administrator needs to record long-term performance metrics for CPU and RAM usage over a 24-hour period on a Windows workstation. Arrange the steps required to manually create and start a custom Data Collector Set in Performance Monitor in the correct sequential order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins by launching Performance Monitor and expanding User Defined Data Collector Sets, creating a new manual collector set, selecting Performance counter data type and adding CPU/RAM counters, specifying the log file directory and completing the wizard, and finally right-clicking the created collector set to start logging.
To capture performance logs over an extended duration, an administrator opens Performance Monitor (perfmon.msc) and navigates to Data Collector Sets > User Defined. Next, a new collector set is created manually, where Performance counter is selected as the log type and the CPU and Memory counters are added. After specifying the output file location and completing the wizard, the administrator must right-click the created set and select Start to initiate data collection.

Adım Adım Çözüm

1
Launch perfmon.msc and locate User Defined Data Collector Sets.
Accesses the administrative container for custom monitoring.
Performance Monitor must be open to configure log collection settings.
2
Initiate the New Data Collector Set wizard using advanced manual settings.
Opens the customization workflow.
Manual setup permits individual selection of counters rather than using standardized templates.
3
Choose Performance counter as data type and add Processor (% Processor Time) and Memory (Available MBytes) counters.
Specifies the hardware metrics to log.
Fulfills the scenario requirement to monitor CPU and Memory usage.
4
Set the log file output directory path and complete the wizard.
Saves the configured collector set to disk.
The operating system requires a file path destination before data can be written.
5
Start the Data Collector Set.
Begins recording performance counters to the designated log file.
Data collection does not start automatically upon wizard completion.

Anahtar Kavram

Creating and starting custom Data Collector Sets in Windows Performance Monitor (perfmon.msc)
Soru 146Soru →

An organization is preparing to permanently decommission a batch of legacy storage media containing sensitive customer information in compliance with corporate security governance. Arrange the following steps of the hardware decommissioning and sanitization lifecycle in the correct order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of steps for the media decommissioning process is: 1) Record the serial numbers in the chain-of-custody log, 2) Perform a cryptographic wipe or logical purge, 3) Execute physical destruction of the storage media, and 4) Obtain and archive a signed Certificate of Destruction.
The correct lifecycle sequence begins by establishing a chain of custody through logging serial numbers. Next, a logical purge or cryptographic wipe is performed to protect data in transit or handling. After that, physical destruction permanently destroys the storage media. Finally, a Certificate of Destruction is acquired and archived to prove regulatory compliance.

Adım Adım Çözüm

1
Identify initial asset tracking step
Record media serial numbers in the chain-of-custody documentation.
Chain of custody must be established immediately upon removing media from production to maintain asset accountability.
2
Perform preliminary sanitization
Perform a cryptographic erase or logical purge.
Erasing data logically mitigates risk during physical handling or transport prior to permanent physical destruction.
3
Destroy physical media
Execute physical destruction (shredding).
Physical destruction renders the physical sub-assembly permanently unusable.
4
Finalize compliance records
Obtain and archive the Certificate of Destruction.
Formal documentation confirms completion of the disposal process for regulatory compliance and audit purposes.

Anahtar Kavram

Chain of Custody and Data Destruction Lifecycle
Soru 147Soru →

A Windows technician needs to manually prepare a newly installed secondary hard disk (Disk 1) from an elevated Command Prompt using the DiskPart utility. The objective is to select the target disk, create a primary partition, format it with the NTFS file system using a quick format, and assign it the drive letter 'E'. In what order should the technician execute the following commands within the DiskPart environment?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct execution order is: select disk 1, create partition primary, format fs=ntfs quick, and assign letter=E.
To properly prepare a new hard drive using DiskPart, a technician must first set focus to the physical disk (select disk 1), create the partition structure (create partition primary), format the partition with the designated file system (format fs=ntfs quick), and finally assign a drive letter (assign letter=E) to mount the volume.

Adım Adım Çözüm

1
Select the target disk using 'select disk 1'.
Disk 1 is set as the active disk focus in DiskPart.
DiskPart requires explicit target selection before running disk management operations.
2
Create the primary partition using 'create partition primary'.
Unallocated space on Disk 1 is allocated into a primary partition.
A logical partition structure must exist on raw disk space prior to file system formatting.
3
Format the volume using 'format fs=ntfs quick'.
The primary partition is initialized with an NTFS file system structure.
Formatting establishes the file system required to store files on the partition.
4
Assign the drive letter using 'assign letter=E'.
Drive letter E: is mapped to the active volume in Windows.
Assigning a drive letter makes the formatted partition visible and accessible to applications and users.

Anahtar Kavram

DiskPart command sequence for initializing, partitioning, formatting, and mounting secondary drives.
Tahmini Süre:1m 30s
Soru 148Soru →

A desktop technician needs to change the User Account Control (UAC) settings on a Windows workstation to prevent notification prompts when software installation occurs. Place the following steps in the correct order to complete this configuration using the Graphical User Interface (GUI).

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct operational order is: Open the Windows Control Panel, navigate to User Accounts and click Change User Account Control settings, drag the slider down to the Never notify setting, and click OK to confirm the changes.
Configuring UAC via the GUI follows a logical administrative path: launching the Control Panel, selecting the User Accounts applet, opening the UAC settings dialog, adjusting the notification slider to the desired level, and committing the change by saving and confirming elevation.

Adım Adım Çözüm

1
Open the Windows Control Panel
Displays all Control Panel management applets
Control Panel provides access to administrative account settings
2
Select User Accounts and click Change User Account Control settings
Opens the UAC adjustment slider dialog window
This applet houses the slider for user privilege elevation notifications
3
Move the slider to Never notify
Sets the UAC threshold to its lowest security level
This level prevents UAC prompts from appearing when applications make changes
4
Click OK and confirm the elevation prompt
Saves and applies the updated UAC policy
Administrative rights are required to alter system-wide UAC behavior

Anahtar Kavram

Windows User Account Control (UAC) GUI Configuration
Tahmini Süre:45s
Soru 149Soru →

A security administrator needs to harden a standalone Windows 11 Pro system by enforcing credential prompts on the Secure Desktop for administrative elevations and enabling Admin Approval Mode for the local Built-in Administrator account using administrative tools. In what correct sequential order should the technician execute these administrative steps from start to finish?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts by opening secpol.msc, navigating to Security Settings > Local Policies > Security Options, setting the administrator elevation behavior to prompt for credentials on the secure desktop, enabling Admin Approval Mode for the Built-in Administrator account, and finally executing gpupdate /force to apply the changes.
The standard procedure for hardening local security policy settings requires opening the snap-in console (secpol.msc), navigating to Security Settings > Local Policies > Security Options, configuring the target UAC prompt and Admin Approval policies, and executing gpupdate /force to force policy enforcement.

Adım Adım Çözüm

1
Launch the management console using secpol.msc.
The Local Security Policy console window opens.
Administrative security options for UAC are managed within the Local Security Policy snap-in on Windows 11 Pro.
2
Navigate to Security Settings > Local Policies > Security Options.
The detailed list of system security options and UAC policies becomes visible.
UAC policies are organized under the Security Options subfolder within Local Policies.
3
Set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
Administrative actions trigger a credential prompt on an isolated desktop screen.
This prevents automated software or malware from spoofing user input or bypassing elevation controls.
4
Set 'User Account Control: Admin Approval Mode for the Built-in Administrator account' to 'Enabled'.
The built-in Administrator account must respond to UAC prompts for administrative privilege elevation.
By default, the built-in Administrator account bypasses UAC unless explicit Admin Approval Mode policy is enabled.
5
Run gpupdate /force from an elevated Command Prompt.
Local security policy changes take effect immediately.
Forces an immediate refresh of local policy configurations without waiting for default background refresh intervals.

Anahtar Kavram

Windows Local Security Policy (secpol.msc) and UAC Admin Approval Mode configuration
Tahmini Süre:2m 0s
Soru 150Soru →

A desktop technician needs to configure a standalone Windows 11 workstation to the maximum User Account Control (UAC) security level using the Graphical User Interface (GUI). Place the following steps in the correct chronological order to complete this task.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with launching the User Account Control Settings utility via the Run dialog (UserAccountControlSettings.exe), sliding the security level to 'Always notify', clicking OK to save the change, and confirming the UAC prompt to elevate and enforce the updated policy.
To configure maximum UAC security, a technician must open the UAC configuration applet (`UserAccountControlSettings.exe`), move the slider to 'Always notify', select OK to commit the modification, and finally approve the resulting UAC elevation prompt to apply the system-wide policy change.

Adım Adım Çözüm

1
Launch the UAC configuration window using the Run command `UserAccountControlSettings.exe`.
The User Account Control Settings control panel applet opens.
This utility provides the standard GUI interface for adjusting UAC notification thresholds.
2
Move the configuration slider up to the top level.
The policy setting updates to 'Always notify'.
This setting ensures the system prompts for administrative credentialing or consent before any software installation or system configuration change occurs.
3
Click OK at the bottom of the dialog window.
Windows initiates the administrative confirmation workflow.
System changes must be submitted before Windows requests administrative consent to commit them.
4
Click Yes on the elevation prompt.
The new UAC setting is saved and becomes active.
Modifying UAC behavior requires administrative approval to prevent unauthorized tampering.

Anahtar Kavram

Configuring User Account Control (UAC) notification levels in Windows
Soru 151Soru →

A technician is troubleshooting a desktop workstation that powers on for two seconds—illuminating internal LEDs and spinning fans—before immediately shutting down without displaying video or emitting POST beep codes. Arrange the following diagnostic steps in the correct chronological order from the initial least-invasive check to the final advanced isolation step.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The diagnostic process begins by disconnecting non-essential peripherals and internal hardware to eliminate short circuits, followed by verifying main motherboard power connections (24-pin ATX and 8-pin EPS12V). Next, the power supply's output rails should be checked with a PSU tester, and finally, the motherboard is removed from the enclosure to conduct a bench test to check for chassis shorts.
CompTIA hardware troubleshooting principles dictate moving from the simplest, least invasive actions to complex hardware teardowns. First, non-essential internal and external hardware is disconnected to eliminate short circuits. Second, primary motherboard power cables are verified. Third, the power supply is independently tested. Finally, complete disassembly and bench testing are performed to isolate chassis-grounding shorts.

Adım Adım Çözüm

1
Isolate secondary peripherals and expansion hardware
Identifies if a failed SATA drive, PCIe card, or external USB device is shorting a power rail.
Always start with the least invasive step by removing optional hardware.
2
Verify primary motherboard power cable connections
Ensures the system board receives stable power and sense signals.
Loose 24-pin ATX or 8-pin CPU power connectors cause immediate shutdown under initial load.
3
Test PSU power rails independently
Verifies whether +12V, +5V, and +3.3V rails stay within acceptable voltage tolerances.
A failing PSU under internal load will trigger protection circuits and shut down power.
4
Perform out-of-case bench testing (breadboarding)
Determines if a metallic short between the chassis and motherboard standoffs is causing the shutdown.
This is the most invasive teardown step and is reserved for isolating grounding and structural motherboard shorts.

Anahtar Kavram

Methodological Hardware Isolation and Power Troubleshooting
Soru 152Soru →

A desktop support technician is troubleshooting a Windows 11 workstation that cannot access internal corporate shares following an infrastructure migration. The local DHCP server has been updated with new DNS server addresses, but the workstation is still attempting to query the old DNS servers and retains an outdated lease. In what correct sequence should the technician execute the following ipconfig switches in an elevated Command Prompt to clear stale records, obtain the new network settings, and re-register the client with DNS?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence of command-line operations is: first, flush the local DNS cache using 'ipconfig /flushdns'; second, release the current DHCP IP configuration using 'ipconfig /release'; third, request a new DHCP configuration with updated DNS server settings using 'ipconfig /renew'; and fourth, manually trigger DNS dynamic update registration using 'ipconfig /registerdns'.
The proper sequence begins by clearing outdated local name resolution entries via 'ipconfig /flushdns'. Next, releasing the old IP configuration with 'ipconfig /release' drops the existing lease parameters. Acquiring the updated network profile and new DNS server IPs requires running 'ipconfig /renew'. Finally, registering the workstation's Host (A) record with the new DNS infrastructure is accomplished with 'ipconfig /registerdns'.

Adım Adım Çözüm

1
Execute 'ipconfig /flushdns'
Clears all cached DNS lookup entries from local memory so the client stops querying obsolete IP addresses.
Existing stale resolver entries must be purged prior to requesting new leases to prevent cached name resolution failures.
2
Execute 'ipconfig /release'
Discards the active dynamic IPv4 address and unbinds the TCP/IP stack from the existing lease configuration.
Releasing the address forces the network adapter to surrender stale IP assignments and server options.
3
Execute 'ipconfig /renew'
Negotiates a new lease with the DHCP server, pulling the newly configured primary and secondary DNS server IP addresses.
The client requires an updated DHCP lease to acquire the modified network scope options.
4
Execute 'ipconfig /registerdns'
Initiates a dynamic DNS registration request to update the host's A and PTR records on the domain DNS server.
Once new network parameters are acquired, explicitly registering DNS ensures surrounding network clients and servers can locate the workstation.

Anahtar Kavram

Sequential CLI Network Troubleshooting and IP/DNS State Refresh
Tahmini Süre:1m 30s
Soru 153Soru →

A corporate workstation on a secure network segment has triggered automated endpoint alerts for an active file-encrypting ransomware outbreak. Place the following remediation tasks in the correct sequence according to the official CompTIA 7-step malware removal procedure.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence follows the CompTIA 7-step malware removal process starting from isolation: Quarantine infected system -> Disable System Restore -> Remediate infected system -> Schedule scans and run updates -> Enable System Restore and create a restore point -> Educate the end user.
The CompTIA standard 7-step malware removal process follows a strict order: 1. Identify malware symptoms, 2. Quarantine infected systems, 3. Disable System Restore, 4. Remediate infected systems, 5. Schedule scans and run updates, 6. Enable System Restore and create a restore point, 7. Educate end user. In this scenario, symptoms have been identified by the automated alert, making quarantining the host via physical/logical network disconnection the immediate mandatory step, followed consecutively by disabling restore functions, scanning/cleaning, scheduling/updating, re-enabling restore points, and finally user education.

Adım Adım Çözüm

1
Isolate the endpoint from the local network environment.
Network interfaces disabled, satisfying Step 2 (Quarantine the infected system) as symptoms are already identified in the scenario.
Prevents ransomware from spreading laterally to corporate network shares and adjacent systems.
2
Disable System Restore / System Protection on the infected endpoint.
Shadow copies and System Restore points are disabled/cleared, satisfying Step 3.
Prevents malware files stored within restore points from persisting or reinfecting the system post-remediation.
3
Perform malware scan and eradication using updated security tools.
Malicious ransomware binaries and registry entries are purged, satisfying Step 4 (Remediate infected systems).
Removes active malware threats in an isolated boot environment such as Safe Mode.
4
Configure recurring scan schedules and install latest operating system patches.
Automatic scans are scheduled and OS updates applied, satisfying Step 5.
Protects against re-infection and closes vulnerabilities exploited by malware.
5
Re-enable System Protection and create a fresh system baseline snapshot.
System Restore is re-enabled and a clean restore point created, satisfying Step 6.
Establishes a known good configuration baseline for future rollback if necessary.
6
Provide security awareness guidance to the user.
User completes training, satisfying Step 7 (Educate the end user).
Mitigates human risk factors that allowed initial malware entry.

Anahtar Kavram

CompTIA 7-Step Malware Removal Process
Soru 154Soru →

A security administrator is hardening a standalone Windows 11 workstation. The organization requires that administrators must re-enter credentials on a secure desktop when elevating privileges, standard users must be automatically denied elevation without a prompt, and the changes must take effect immediately without a reboot. Arrange the following administrative steps in the correct logical sequence to accomplish this configuration.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is: Open the Local Security Policy console (secpol.msc) with elevated privileges, navigate to Security Settings > Local Policies > Security Options, configure the administrator elevation prompt behavior to prompt for credentials on the secure desktop, configure the standard user elevation prompt behavior to automatically deny elevation requests, and execute gpupdate /force from an elevated Command Prompt.
To achieve granular security control over UAC prompt behaviors, the administrator must first open secpol.msc with administrative privileges and navigate to Security Settings > Local Policies > Security Options. Next, the administrator configures the prompt behavior for administrators to require credentials on the secure desktop. Then, the prompt behavior for standard users is set to automatically deny elevation requests. Finally, running gpupdate /force in an elevated Command Prompt forces the operating system to re-read and enforce the local security baseline immediately without restarting.

Adım Adım Çözüm

1
Launch Local Security Policy console
The Local Security Policy snap-in (secpol.msc) opens with full administrative access.
Administrative rights are required to view and modify security settings across the system.
2
Locate UAC policy settings
Expand Security Settings > Local Policies > Security Options in the navigation pane.
User Account Control behavior policies are maintained specifically under the Security Options subfolder.
3
Set Administrator UAC prompt behavior
Set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
This satisfies the explicit requirement for administrative users to re-enter credentials on a secure desktop during privilege elevation.
4
Set Standard User UAC prompt behavior
Set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests'.
This satisfies the requirement to suppress credentials prompts and automatically reject elevation requests initiated by non-admin accounts.
5
Apply policy updates without rebooting
Execute gpupdate /force in an elevated Command Prompt window.
This forces the operating system to immediately update and enforce local policy changes without restarting the workstation.

Anahtar Kavram

Windows Local Security Policy (secpol.msc) User Account Control Policy Hardening
Soru 155Soru →

A field technician needs to replace a depleted fuser assembly on an enterprise laser printer after observing un-fused toner smudging on output pages. In what sequence should the technician perform the following maintenance steps from first to last?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper sequence begins with powering down and unplugging the printer, allowing the high-temperature fuser assembly to cool down, opening the access door to release retaining latches, swapping the old fuser module for the new one, and concluding by reconnecting power and resetting the printer's maintenance page counter.
The correct order follows standard CompTIA IT safety and procedural protocols: electrical safety first (power down and unplug), thermal safety second (cool down high-temperature fuser), physical disassembly third (release latches), component swap fourth (install new fuser), and final power restoration with administrative counter resets fifth.

Adım Adım Çözüm

1
Ensure electrical safety
Printer is completely powered off and unplugged from the wall outlet.
Prevents high-voltage electrical hazards during hardware replacement.
2
Ensure thermal safety
The fuser assembly reaches a safe handling temperature.
Fusers melt toner using high heat and present a severe burn hazard if touched immediately after operation.
3
Unlock hardware access
Access door is open and fuser locking levers are disengaged.
Releases mechanical retaining clips holding the fuser unit inside the chassis.
4
Replace component
Old fuser is removed and new fuser is securely installed.
Replaces the worn fuser roller/heating element causing toner smudging.
5
Re-energize and calibrate software tracking
Printer powers up and resets its scheduled maintenance alert system.
Completes the repair and ensures accurate future maintenance reporting.

Anahtar Kavram

Laser Printer Fuser Replacement Safety and Maintenance Workflow
Tahmini Süre:1m 30s
Soru 156Soru →

An IT technician is preparing to perform a clean installation of Windows 11 on a newly built corporate workstation with an unformatted NVMe storage drive. Arrange the standard operating system deployment tasks in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological order for a clean Windows OS installation is: 1) Configure UEFI firmware and boot order, 2) Boot installation media and partition target drive, 3) Complete OS file copying and initial setup restart, 4) Complete the Out-of-Box Experience (OOBE) configuration, 5) Install post-installation hardware drivers and updates.
The clean installation process follows a strict sequence: Firmware configuration (UEFI/TPM/Boot Order) → Installer startup & disk partitioning → Core setup file expansion & system restart → Out-of-Box Experience (OOBE) user customization → Post-installation hardware driver and Windows Update deployment.

Adım Adım Çözüm

1
Configure hardware firmware environment.
Secure Boot, TPM, and boot priority are established.
Hardware settings must be verified and configured before installation media can boot properly.
2
Initialize storage and start installation.
Partitions are created on the target drive and installation begins.
The installer requires a configured disk target to deploy operating system files.
3
Execute main file copy and system setup restart.
Windows core files are expanded onto the local drive.
The core image must be expanded onto disk before localized user configuration can occur.
4
Perform Out-of-Box Experience (OOBE) setup.
Initial user profile and network/privacy settings are provisioned.
OOBE runs automatically on first boot to customize user account and localized settings.
5
Perform post-installation updates and optimization.
System features full hardware support and security updates.
Device drivers and Windows updates ensure hardware stability and vulnerability protection post-setup.

Anahtar Kavram

Chronological procedure for clean OS deployment
Soru 157Soru →

An IT support technician receives a call from a remote employee experiencing a critical system failure right before a presentation deadline. Place the professional communication and customer interaction steps in the correct sequential order from initial greeting to issue resolution.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of customer interaction steps is: First, actively listen to the user's initial description without interruption. Second, ask clarifying questions using plain, non-technical language. Third, establish clear expectations and offer temporary workarounds. Fourth, perform technical troubleshooting while respecting user data. Fifth, verify resolution directly with the user and document the issue in the ticketing system.
Standard CompTIA customer service protocol dictates that a technician must first practice active listening without interruption. Once the user is heard, the technician clarifies details without using jargon, sets clear timeline expectations and workarounds, executes the fix, and concludes by verifying satisfaction with the customer before completing documentation.

Adım Adım Çözüm

1
Active Listening
De-escalates customer anxiety and gathers full initial problem context.
CompTIA professional standards emphasize allowing the user to complete their statement uninterrupted.
2
Jargon-Free Clarification
Identifies precise error symptoms without overwhelming the user.
Technical jargon causes miscommunication; plain language ensures accurate diagnostic details.
3
Setting Expectations & Workarounds
Establishes a realistic timeline and mitigates downtime impact.
Setting clear expectations prevents false assumptions and keeps the user informed.
4
Technical Remediation
Resolves the underlying technical issue efficiently.
Troubleshooting proceeds once the user understands and agrees to the resolution path.
5
User Verification & Documentation
Ensures complete customer satisfaction and logs solution knowledge.
Workflows require final confirmation from the end user before closing the incident ticket.

Anahtar Kavram

Professional Customer Interaction and Communication Workflow
Soru 158Soru →

An IT technician is tasked with decommissioning a batch of enterprise magnetic hard disk drives (HDDs) containing sensitive corporate financial data. Place the administrative and technical steps in the correct chronological order from first to last to ensure compliance with data sanitization standards and chain of custody guidelines.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence is: 1) Log drive serial numbers and complete chain-of-custody forms, 2) Expose magnetic hard drives to high-density degaussing, 3) Transport sanitized drives via secure courier, 4) Perform physical industrial shredding and obtain a Certificate of Destruction, and 5) Update asset records and archive the Certificate of Destruction.
The proper decommission lifecycle requires logging serial numbers to establish chain of custody first, purging magnetic media via degaussing to prevent data exposure in transit, transporting the media securely under custody, executing physical destruction while securing a Certificate of Destruction, and finally closing asset records in the tracking system with attached validation certificates.

Adım Adım Çözüm

1
Establish inventory baseline and documentation.
All drive serial numbers are cataloged with initial chain of custody established.
Proper inventory accounting before physical movement prevents lost or stolen media.
2
Perform local data purge via degaussing.
Magnetic fields on drive platters are completely demagnetized.
Degaussing purges data locally so unencrypted data is not exposed during off-site transportation.
3
Relocate media using tracked chain of custody.
Drives arrive safely at the third-party destruction facility.
Tracked courier services maintain accountability between company premises and vendor facilities.
4
Execute physical destruction and obtain validation.
Drives are shredded into fragments and a Certificate of Destruction is signed.
Physical destruction prevents hardware re-use, and the certificate serves as legal proof of disposal.
5
Finalize corporate inventory logs.
Asset database records drives as destroyed with linked audit documentation.
Completes corporate lifecycle procedures and fulfills compliance audit requirements.

Anahtar Kavram

Chain of Custody and Media Destruction Lifecycle
Tahmini Süre:2m 0s
Soru 159Soru →

A desktop support technician needs to change the User Account Control (UAC) notification level on a standalone Windows 11 computer. In what sequential order should the technician perform the steps to complete this configuration?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is to open the User Account Control settings applet from the Start menu, adjust the notification slider, click OK to submit the changes, and confirm the resulting administrative UAC elevation prompt.
To modify UAC settings in Windows, the technician must first open the configuration interface via Search or Control Panel. Next, the slider is moved to set the desired notification behavior. After setting the slider, clicking OK submits the changes, which triggers an administrative UAC prompt requiring explicit confirmation to save the new policy.

Adım Adım Çözüm

1
Search for and open Change User Account Control settings from the Start menu.
The User Account Control Settings configuration window opens.
Accessing the applet interface is necessary before any settings can be modified.
2
Adjust the vertical slider to the target notification setting.
The desired UAC notification behavior is selected.
The slider defines when Windows notifies the user about application changes.
3
Click the OK button at the bottom of the window.
Windows initiates the process to apply the modified security policy.
Submitting the configuration form triggers the system validation process.
4
Click Yes on the User Account Control authorization prompt.
The new UAC setting is committed to the registry.
System-wide security policy adjustments require explicit administrative approval.

Anahtar Kavram

Configuring User Account Control settings using the Windows GUI
Soru 160Soru →

An IT technician is preparing a batch of retired magnetic hard drives for permanent disposal according to organizational security procedures. Place the hardware decommission and disposal steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is: Log asset tags and serial numbers -> Degauss or purge drive data -> Subject drives to physical shredding -> Obtain and archive the Certificate of Destruction.
Proper data disposal protocol requires documenting asset serial numbers first to establish chain of custody. Next, the drives undergo data sanitization (such as degaussing magnetic platters) to ensure confidentiality during handling. The sanitized drives are then physically shredded. Finally, the vendor issues a formal Certificate of Destruction to confirm compliance and finalize the audit trail.

Adım Adım Çözüm

1
Document assets for tracking
Serial numbers and asset tags are logged into the inventory tracking database.
Maintaining chain of custody requires recording asset details before performing any physical processing.
2
Sanitize media content
Magnetic media is degaussed or purged.
Data sanitization protects sensitive corporate information prior to physical movement or third-party handling.
3
Perform physical hardware destruction
Media is physically shredded into unrecoverable fragments.
Physical destruction completes the media disposition process.
4
Collect compliance validation
Signed Certificate of Destruction is received and stored for auditing.
Audit verification occurs only after physical disposal has taken place.

Anahtar Kavram

Hardware Decommissioning and Media Disposal Lifecycle
ÖncekiSayfa 8 / 22Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin