Tüm alıştırma soruları

3551 soru

Soru 1861Soru

An IT technician discovers a corporate desktop actively communicating with a suspected command-and-control server. Which of the following represents the correct chronological sequence of steps the technician should take from initial containment through physical evidence handoff?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of incident response steps is: 1) Disconnect the Ethernet cable and disable wireless interfaces to isolate the workstation while keeping it powered on; 2) Capture volatile system memory (RAM) and record active system connections; 3) Shut down the workstation, remove the storage drive, calculate its cryptographic hash, and place it in a tamper-evident bag; 4) Log the transfer timestamps and serial numbers on the chain of custody form and collect required signatures during physical handoff.
Standard incident response mandates containing the threat first by isolating the system from the network while preserving power. Next, volatile evidence (RAM) is captured in accordance with the order of volatility. Once RAM is acquired, non-volatile evidence (the hard drive) is imaged, hashed, and sealed in a tamper-evident container. Finally, during physical transfer, the chain of custody log is populated with timestamps, device details, and signatures from both parties to maintain legal evidence integrity.

Adım Adım Çözüm

1
Isolate the compromised computer from all network connections.
Stops communication with command-and-control servers without destroying volatile data in RAM.
Immediate containment minimizes ongoing risk and prevents threat propagation.
2
Preserve volatile evidence (RAM).
Captures memory-resident malware, encryption keys, and active network sockets.
According to the order of volatility, RAM is lost upon power loss and must be dumped first.
3
Preserve non-volatile evidence and hash the drive image.
Ensures the integrity of the physical media can be verified mathematically later.
Static drive storage preservation occurs after live volatile evidence has been captured.
4
Document and complete the chain of custody transfer during physical handoff.
Establishes an unbroken record of control and legal accountability for the evidence.
Chain of custody documentation must record the exact time, date, and signatures of both the releasing and receiving handlers.

Anahtar Kavram

Incident Handling Containment, Order of Volatility, and Chain of Custody Protocol
Soru 1862Soru

A systems administrator is configuring firewall access control lists to enable direct file sharing between Windows workstations and a centralized storage server located on a separate subnet. The network environment operates without legacy NetBIOS transport layers. Which port must be permitted through the firewall to allow native Server Message Block (SMB) communication over TCP?

Cevabı ve açıklamayı göster

Cevap: TCP 445

Cevap

TCP port 445 is used for direct, native Server Message Block (SMB) communications over IP without NetBIOS encapsulation.
Modern operating systems use direct SMB over TCP port 445 for sharing files and network resources across subnets, bypassing the legacy NetBIOS Session Service.

Adım Adım Çözüm

1
Identify the protocol requested in the scenario
The scenario specifies native Server Message Block (SMB) direct file sharing without legacy NetBIOS transport.
Modern networks route SMB directly over TCP/IP without needing NetBIOS Session Service layer encapsulation.
2
Map the protocol to its standardized TCP/IP port
Direct SMB over TCP uses port 445.
TCP port 445 is the standard port for direct-host SMB traffic.

Anahtar Kavram

Server Message Block (SMB) Port Assignment
Soru 1863Soru

A desktop support technician needs to automate routine maintenance tasks on Windows 11 workstations using built-in operating system tools. The scripts must execute natively without requiring the installation of any third-party interpreters or runtime environments. Which of the following file extensions represent script types that can run natively in a standard Windows environment? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: .ps1; .bat

Cevap

The script extensions that run natively in Windows are .ps1 and .bat.
The .ps1 (PowerShell script) and .bat (Batch file) extensions represent script formats that execute natively in standard Windows operating system installations using built-in engines (PowerShell host and cmd.exe).

Adım Adım Çözüm

1
Identify native Windows scripting engines
Windows includes PowerShell and Command Prompt by default.
Both Windows PowerShell (.ps1) and Command Prompt Batch (.bat) execution environments are pre-installed in Windows.
2
Evaluate non-native scripting languages
.sh and .py require external runtimes on standard Windows installations.
Bash shell scripts (.sh) target Unix/Linux shells, and Python (.py) requires downloading and installing the Python execution environment.

Anahtar Kavram

Identifying native Windows scripting environments and file extensions
Soru 1864Soru

A corporate smartphone was reported lost in a public location and contains confidential company data. Place the standard mobile device security remediation steps in the correct order from FIRST action to LAST action.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of actions is: 1) Perform a remote lock on the mobile device via the MDM console, 2) Issue a remote wipe command to erase corporate data, 3) Revoke active authentication tokens and reset the user's account password, 4) Unenroll the lost device record from the enterprise MDM portal.
When responding to a lost corporate mobile device, technicians must prioritize containment by locking the device, followed by data destruction (remote wipe), identity protection (password/token reset), and administrative portal maintenance (MDM unenrollment).

Adım Adım Çözüm

1
Locate the device in the Mobile Device Management (MDM) portal and issue a remote lock command.
The screen locks immediately, preventing unauthorized local access while location tracking is assessed.
Immediate containment is necessary to secure corporate information.
2
Execute a remote wipe command through the MDM system.
All company and personal data on the device is securely erased.
If physical recovery is doubtful, wiping prevents data breaches.
3
Reset user domain credentials and revoke OAuth/session tokens associated with the mobile device.
The user's corporate email, VPN, and cloud access tokens become invalid for any unauthorized handler of the device.
Token revocation secures enterprise cloud resources connected to the account.
4
Unenroll and remove the device entry from the MDM directory.
The asset inventory is accurately updated and the hardware lifecycle for that device instance is closed.
Administrative cleanup prevents obsolete devices from clogging management portals.

Anahtar Kavram

Mobile Device Security Incident Response
Tahmini Süre:1m 0s
Soru 1865Soru

A network technician is optimizing the 2.4 GHz wireless network for a small office. Access Point 1 is currently operating on Channel 1. Access Point 2, located in an adjacent hallway, was manually configured to Channel 3, causing users in the overlapping coverage zone to experience severe throughput degradation from adjacent-channel interference. Which channel should Access Point 2 be reconfigured to in order to completely eliminate channel overlap with Access Point 1?

Cevabı ve açıklamayı göster

Cevap: Channel 6

Cevap

Access Point 2 should be reconfigured to Channel 6 to eliminate adjacent-channel interference with Access Point 1.
In the 2.4 GHz wireless spectrum, channels are 20 MHz wide and spaced 5 MHz apart. To prevent adjacent-channel interference, wireless deployments must use non-overlapping channels. The standard non-overlapping channels in the 2.4 GHz band are 1, 6, and 11. Since Access Point 1 is on Channel 1, assigning Channel 6 to Access Point 2 ensures sufficient frequency separation so their signals do not bleed into each other.

Adım Adım Çözüm

1
Identify the operating frequency band and channel width.
The network uses the 2.4 GHz Wi-Fi band with standard 20 MHz channel spacing.
In the 2.4 GHz spectrum, each 20 MHz channel spans across 5 individual channel numbers.
2
Determine the non-overlapping channel scheme for 2.4 GHz deployments.
The standard non-overlapping channels in North America are Channels 1, 6, and 11.
Channels 1, 6, and 11 have 25 MHz spacing between their center frequencies, preventing spectral overlap.
3
Evaluate the channel selection against Access Point 1 operating on Channel 1.
Channel 6 provides complete isolation from Channel 1 without adjacent-channel interference.
Channels 2, 3, 4, and 5 all partially overlap with Channel 1's frequency envelope.

Anahtar Kavram

2.4 GHz Non-Overlapping Channels (1, 6, 11)
Soru 1866Soru

An IT technician is preparing to replace a core network switch as part of a planned infrastructure maintenance activity. Place the standard change management workflow phases in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence for the change management process is: 1) Define the purpose and scope of the proposed change, 2) Perform a risk analysis to evaluate potential business impact, 3) Develop the implementation plan and a detailed rollback plan, 4) Obtain formal authorization from the Change Advisory Board (CAB), and 5) Execute the change and complete post-implementation testing.
The standard CompTIA change management lifecycle requires identifying the purpose and scope first, evaluating risk second, building implementation and rollback plans third, securing CAB approval fourth, and executing followed by post-implementation testing last.

Adım Adım Çözüm

1
Establish change boundaries
Defining purpose and scope comes first.
Before assessing risks or making plans, the technician must clearly define what change is being proposed and why.
2
Evaluate consequences
Performing risk analysis comes second.
Assessing risk helps the organization understand the severity and scope of potential disruptions.
3
Create technical deployment and recovery procedures
Developing implementation and rollback plans comes third.
A documented plan for deployment and a contingency plan to revert changes must exist before submitting for approval.
4
Submit proposal for review
Obtaining CAB approval comes fourth.
The Change Advisory Board reviews all documentation (scope, risk, implementation, and rollback) to authorize execution.
5
Perform work and verify outcome
Executing the change and completing post-implementation testing comes last.
Implementation occurs in the scheduled window, followed by testing and documentation to ensure successful completion.

Anahtar Kavram

Standard Change Management Process Lifecycle
Soru 1867Soru

A remote Windows computer experiences recurring system errors following an interrupted update. When a field technician runs the System File Checker utility, the scan reports that corrupted system files were found but could not be repaired because the local side-by-side component store is damaged. The computer lacks internet access to download repair payload files from Windows Update, but a valid Windows installation media ISO is mounted at drive letter D:. Which command should be executed first to repair the component store so that system file replacement can complete successfully?

Cevabı ve açıklamayı göster

Cevap: dism /online /cleanup-image /restorehealth /source:D:\sources\install.wim /limitaccess

Cevap

dism /online /cleanup-image /restorehealth /source:D:\sources\install.wim /limitaccess
The command starting with 'dism /online /cleanup-image /restorehealth' accompanied by '/source:D:\sources\install.wim' and '/limitaccess' is correct. DISM repairs the underlying Windows Component Store (WinSxS) repository. When network connectivity is absent, pointing the source flag to a local install.wim file and adding limitaccess instructs DISM to repair the local store directly from the provided ISO without reaching out to Windows Update.

Adım Adım Çözüm

1
Identify the cause of System File Checker (SFC) repair failure
SFC fails to fix corrupted files because its source payload repository—the Windows Component Store (WinSxS)—is corrupted.
SFC relies on healthy files stored inside WinSxS to replace damaged operating system binaries.
2
Select Deployment Image Servicing and Management (DISM) to repair the WinSxS store
DISM is capable of servicing and repairing the Windows component store image.
Running DISM with /restorehealth restores the component store integrity.
3
Specify the offline repair source and restrict online access
Appended switches /source:D:\sources\install.wim /limitaccess force DISM to draw known-good replacement files from the local mounted ISO rather than querying unavailable online Windows Update servers.
The system has no internet connection, requiring a local source image to restore the component store.

Anahtar Kavram

Repairing the Windows Component Store with DISM using an offline image source
Tahmini Süre:1m 15s
Soru 1868Soru

An IT support technician is attempting to configure a workstation running Windows 11 Home so that a remote user can initiate an inbound graphical desktop session using Remote Desktop Connection (RDP). Network testing confirms that TCP port 3389 is open and accessible through the firewall, yet remote connections to the system are consistently rejected. Which of the following best explains why the connection fails?

Cevabı ve açıklamayı göster

Cevap: Windows 11 Home does not support hosting inbound Remote Desktop connections.

Cevap

Windows 11 Home does not support hosting inbound Remote Desktop connections.
Windows 11 Home edition contains only the Remote Desktop client capability. Microsoft reserves the inbound RDP host server feature for Windows Pro, Enterprise, and Education editions. Even when network firewall rules allow TCP 3389 traffic, a Windows 11 Home computer will reject inbound RDP connection requests.

Adım Adım Çözüm

1
Analyze the operating system edition specified in the scenario.
The target system is running Windows 11 Home edition.
Microsoft restricts inbound RDP server hosting capabilities to Windows Pro, Enterprise, and Education editions.
2
Evaluate network configuration state.
TCP port 3389 is verified open, ruling out network firewall issues.
Because port 3389 is already open, the failure is caused by an operating system feature limitation rather than a network block.
3
Determine the required resolution to support inbound RDP access.
Identify that the system must be upgraded to Windows 11 Pro or an equivalent business edition.
Windows Home edition functions only as an RDP client, not an RDP server host.

Anahtar Kavram

Windows Edition Remote Desktop Host Feature Limitations
Soru 1869Soru

An IT operations analyst is drafting a formal change request to deploy a major software patch across enterprise endpoint devices. The submitted documentation outlines the business purpose, risk assessment, implementation schedule, and user communication plan. However, during initial review, the change manager notes that if the patch degrades system stability, there is no procedure defined to return the endpoints to a known good state. Which of the following components must be added to the request before submitting it for final Change Advisory Board (CAB) authorization?

Cevabı ve açıklamayı göster

Cevap: A documented backout strategy detailing system restoration steps

Cevap

The missing component that must be added prior to final CAB authorization is a documented backout strategy detailing system restoration steps.
A documented backout strategy (or rollback plan) is a mandatory requirement for formal change management proposals. It provides explicit instructions for undoing system modifications and restoring devices to their pre-change baseline state if severe issues or instability arise during implementation.

Adım Adım Çözüm

1
Analyze the change management elements present in the scenario.
Identified existing components: scope/purpose, risk assessment, schedule, and user communication plan.
CompTIA change management standards require complete documentation across all risk and operational vectors before CAB approval.
2
Identify the missing requirement for mitigating deployment failure risks.
Determined that the request lacks instructions for reverting endpoints if the patch causes system degradation.
A change request cannot be approved without a clear procedure to restore business operations if implementation fails.
3
Select the change management component designed for operational recovery.
A documented backout strategy (rollback plan) provides step-by-step guidance to safely revert system changes.
Including a backout strategy ensures system recovery and minimal operational downtime.

Anahtar Kavram

Change Management Rollback and Backout Planning
Soru 1870Soru

A helpdesk technician is configuring a workstation for an employee in the billing department of a retail company. The workstation will be used to process customer credit card payments and handle primary account numbers (PAN). Which of the following regulatory or industry standards specifically governs the security requirements for protecting this credit card data?

Cevabı ve açıklamayı göster

Cevap: PCI-DSS

Cevap

PCI-DSS is the compliance standard that specifically governs technical and operational requirements for protecting credit card data.
The Payment Card Industry Data Security Standard (PCI-DSS) is an industry security standard designed to ensure that all businesses accepting, processing, storing, or transmitting credit card information maintain a secure environment.

Adım Adım Çözüm

1
Identify the category of data described in the workstation scenario.
The technician is configuring a system to process customer credit card payments and store card numbers.
Determining the data type is the first step in identifying the applicable compliance scope.
2
Match payment card data to the corresponding regulatory or industry framework.
Credit card data protection falls under PCI-DSS.
PCI-DSS dictates specific security controls for merchants processing and storing cardholder data.

Anahtar Kavram

PCI-DSS Scope and Application
Soru 1871Soru

A technician is preparing an anti-static work area to safely perform internal maintenance on sensitive computer hardware. Place the following steps in the correct order from first to last to properly establish a grounded ESD-safe workstation.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct procedural order is: first, clear the workbench of static-generating materials; second, lay the ESD mat flat across the work surface; third, attach the grounding wire from the ESD mat to a ground source; fourth, wrap the ESD wrist strap snugly around your wrist with skin contact; and fifth, connect the wrist strap clip to the grounded snap point on the ESD mat.
Establishing an anti-static workstation follows a logical sequence: first remove static generators (paper, plastics) from the surface; second, lay down the ESD mat; third, ground the mat to a known ground source; fourth, secure the ESD wrist strap against bare skin; fifth, attach the wrist strap lead to the grounded mat snap to equalize potential.

Adım Adım Çözüm

1
Remove static-generating items from the workbench area.
The immediate work environment is free of ambient static hazards such as plastic wrappings or synthetic foam.
Eliminating static sources prevents accidental static discharge to components while setting up.
2
Position the ESD mat on the bench.
A dissipative work surface is established.
The mat serves as the central point for grounding both tools and personnel.
3
Connect the mat grounding wire to a verified ground.
The ESD mat is grounded and capable of safely draining electrostatic charges.
Un-grounded mats cannot dissipate static electricity to the earth.
4
Fasten the ESD wrist strap to your wrist with direct skin contact.
The personal body static protection interface is established.
Direct skin contact is required for electrical conductivity to drain body charge.
5
Clip the wrist strap cord to the grounded mat or equipment chassis ground snap.
The technician and mat share the same electrical potential grounded pathway.
Equipotential grounding prevents static potential differences between the technician and the hardware components.

Anahtar Kavram

ESD Safe Workstation Setup Procedures
Soru 1872Soru

An enterprise security operations center detects unauthorized remote shell access on a database server containing sensitive customer records. As the initial incident responder, in what sequence should you execute the following response and forensic preservation actions?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence of actions is: 1) Report the security incident and record initial system indicators, 2) Disconnect the server from networks while keeping system power on, 3) Capture volatile system RAM, 4) Fill out the chain-of-custody log with timestamps and signatures, and 5) Secure the server in a tamper-evident bag and transport it to a lockable evidence room.
First responder protocol requires immediate reporting and baseline logging, followed by host network isolation while keeping power enabled. Following the order of volatility, volatile evidence in RAM must be captured next. After evidence collection is complete, chain-of-custody documentation must be recorded before physical hardware is packed into tamper-evident containers and stored in a secure evidence vault.

Adım Adım Çözüm

1
Report and Document Initial Findings
Escalation pathways are activated and initial indicators of compromise are logged.
Official incident response policies dictate immediate notification to authority figures before making unauthorized system changes.
2
Isolate the Host
Network communication is terminated while system power remains uninterrupted.
Quarantining network access prevents data exfiltration and further attacker movement while preserving volatile evidence.
3
Preserve Volatile Memory
Active RAM contents are dumped to external media.
Following the order of volatility, transient data in RAM is destroyed when power is lost, making RAM capture a top priority before shutdown.
4
Establish Chain of Custody
A complete custody form is created with exact time, date, location, and handler identity.
Legal defensibility requires continuous accounting of evidence handling before physical transportation or transfer of responsibility.
5
Secure Physical Hardware
Device is sealed in tamper-evident packaging and stored securely.
Protects physical evidence against unauthorized access, tampering, or loss prior to formal forensic analysis.

Anahtar Kavram

First Responder Incident Handling Sequence and Chain of Custody
Tahmini Süre:2m 0s
Soru 1873Soru

An IT support technician is handling a service desk ticket for a user experiencing application launch failures following an update. Place the standard ticketing workflow stages in the correct chronological order from initial incident logging to final ticket closure.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological order of the ticketing workflow is: Record user contact information and asset ID (Creation) → Assign category, urgency, and priority (Triage) → Perform diagnostic steps and apply software fix (Resolution) → Contact end user for confirmation (Verification) → Select final resolution code and mark status as Closed (Closure).
The standard ticket lifecycle follows a strict progression: Creation (logging user and asset info) → Triage (categorizing and setting priority) → Resolution (troubleshooting and documenting technical notes) → Verification (confirming fix with the user) → Closure (setting final status and resolution code).

Adım Adım Çözüm

1
Identify the initial intake step.
Recording user details, asset IDs, and symptoms creates the ticket record in the ticketing database.
A ticket must exist and contain identifying context before any administrative or technical action can occur.
2
Determine the administrative routing step.
Categorizing the ticket and assigning urgency/priority allows automated or manual queue assignment.
Triage ensures the issue is prioritized according to service level agreements (SLAs) and routed to the correct tier.
3
Identify the technical remediation step.
Troubleshooting the application fault, performing the fix, and recording technical notes.
Technical work notes document root cause and solution steps so other technicians can review historical context.
4
Determine the validation step.
Contacting the end user to verify that the application operates normally.
CompTIA best practices require verifying resolution with the affected end user before closing a ticket.
5
Identify the final administrative step.
Entering closure codes and setting the state to Closed.
Closing the ticket completes the incident lifecycle and updates reporting metrics.

Anahtar Kavram

Standard Ticket Lifecycle Management
Soru 1874Soru

A network administrator is manually configuring email synchronization and wireless network settings on corporate mobile tablets. The tablets must sync mailbox states across multiple devices seamlessly and connect to a 2.4 GHz Wi-Fi network without co-channel interference near existing access points using Channel 1. Which TWO configurations should the administrator select to fulfill these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the mobile email client using IMAP (Internet Message Access Protocol) for real-time multi-device mailbox state synchronization.; Set the 2.4 GHz wireless access points to operate on non-overlapping channels such as Channel 6 or 11.

Cevap

The administrator must configure the mobile email clients to use IMAP for multi-device status synchronization and set the 2.4 GHz Wi-Fi access points to non-overlapping channels such as Channel 6 or 11.
IMAP allows email messages to remain stored on the server so that inbox updates, flags, and folder changes synchronize seamlessly across multiple mobile endpoints. Furthermore, selecting 2.4 GHz Wi-Fi Channel 6 or 11 avoids channel overlap with existing access points using Channel 1, ensuring optimal wireless throughput without co-channel interference.

Adım Adım Çözüm

1
Evaluate the mail protocol requirement for multi-device synchronization.
Identify that IMAP retains emails on the server and synchronizes folder states across multiple devices, whereas POP3 downloads messages locally to a single endpoint.
Choosing IMAP ensures consistent read, unread, and flagged states regardless of which device the user operates.
2
Evaluate the 2.4 GHz Wi-Fi channel assignment requirement.
Identify non-overlapping channels in the 2.4 GHz spectrum (1, 6, and 11).
Because Channel 1 is in use nearby, configuring Channel 6 or 11 prevents co-channel and adjacent-channel interference, whereas adjacent channels like Channel 2 cause overlapping frequency crosstalk.

Anahtar Kavram

Mobile email protocol selection for multi-device synchronization and non-overlapping 2.4 GHz Wi-Fi channel allocation.
Soru 1875Soru

An enterprise mobility team deploys a new security baseline requiring certificate-based mutual authentication for mobile VPN connections. Following the update, several remote workers report that their managed mobile devices can browse public websites over cellular data but fail to establish a VPN tunnel to access internal corporate assets. The MDM server reports the devices as fully compliant, but the VPN gateway logs indicate 'TLS handshake failure: client certificate trust chain invalid'. Which of the following is the MOST likely cause of this connectivity issue?

Cevabı ve açıklamayı göster

Cevap: The root or intermediate CA certificate that signed the client certificates is missing from the VPN gateway's trust store or was omitted from the mobile MDM configuration profile payload.

Cevap

The root or intermediate CA certificate that signed the client certificates is missing from the VPN gateway's trust store or was omitted from the mobile MDM configuration profile payload.
In certificate-based mutual authentication, both the VPN gateway and the client device must have the complete certificate trust chain (including intermediate and root CAs) properly installed and trusted. The error 'TLS handshake failure: client certificate trust chain invalid' indicates that the gateway cannot verify the signing authority of the device's certificate.

Adım Adım Çözüm

1
Analyze the reported symptoms and log entries.
Devices have Internet connectivity over cellular data, ruling out carrier network outages. MDM reports devices as compliant, but VPN gateway logs show 'TLS handshake failure: client certificate trust chain invalid'.
This error specifically identifies a failure during mutual certificate authentication, indicating an issue with certificate trust validation.
2
Evaluate how certificate-based mutual authentication operates in enterprise mobile VPNs.
For mutual TLS to succeed, the receiving server (VPN gateway) must be able to trace and validate the client certificate back to a trusted Certificate Authority (CA).
If the intermediate or root CA certificate is missing from the gateway's trusted store or missing in the device configuration profile payload, trust cannot be established.
3
Identify the primary root cause.
A missing or untrusted intermediate/root CA certificate in the trust chain directly explains why the TLS handshake fails despite public cellular connectivity.
Resolving certificate trust chain mismatches is a key requirement when troubleshooting enterprise mobile security authentication.

Anahtar Kavram

Troubleshooting Mobile OS Security and Connectivity Issues
Soru 1876Soru

A network technician is auditing network security documentation to verify default port filtering rules on an enterprise gateway. Match each networking protocol to its correct default port number and transport layer protocol.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Telnet (Teletype Network)
POP3S (Post Office Protocol 3 Secure)
NTP (Network Time Protocol)
HTTPS (Hypertext Transfer Protocol Secure)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Telnet matches with TCP 23, POP3S matches with TCP 995, NTP matches with UDP 123, and HTTPS matches with TCP 443.
Each protocol correctly pairs with its standardized port and transport layer assignment: Telnet requires TCP 23 for unencrypted remote command line sessions, POP3S uses TCP 995 for secure email retrieval, NTP uses UDP 123 for network clock synchronization, and HTTPS relies on TCP 443 for encrypted web browsing.

Adım Adım Çözüm

1
Determine the default port and transport protocol for unencrypted terminal connectivity (Telnet).
Telnet operates on TCP port 23.
Legacy remote terminal management relies on connection-oriented TCP traffic on port 23.
2
Determine the default port for secure email retrieval (POP3S).
POP3S operates on TCP port 995.
While unencrypted POP3 uses TCP port 110, encrypted POP3S uses TCP port 995.
3
Determine the transport protocol and port for time synchronization (NTP).
NTP operates on UDP port 123.
Clock synchronization requires fast, low-overhead datagram transmission over UDP port 123.
4
Determine the default port for encrypted web communications (HTTPS).
HTTPS operates on TCP port 443.
Secure web traffic over SSL/TLS uses TCP port 443, unlike unencrypted HTTP on port 80.

Anahtar Kavram

Standard TCP/UDP Port Numbers and Protocols
Tahmini Süre:1m 30s
Soru 1877Soru

An IT support technician is assigned to assist a remote user experiencing recurring email synchronization errors. Place the technician's communication and customer interaction steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of professional communication steps is: 1) Greet the user and obtain remote control permission, 2) Actively listen to the problem description, 3) Explain troubleshooting steps in plain language, 4) Have the user verify the resolution, and 5) Document the ticket details.
The correct professional communication sequence begins with greeting the user and securing explicit consent for remote access. Next, the technician actively listens to the user's issue description. The technician then performs troubleshooting while explaining actions in non-technical terms. Once completed, the user must test and verify functionality, followed finally by thorough ticket documentation.

Adım Adım Çözüm

1
Establish initial contact and obtain consent.
Proper introduction completed and permission granted for remote access.
CompTIA guidelines require technicians to identify themselves and obtain consent before controlling a user's device.
2
Gather diagnostic details using active listening.
Complete context obtained without interrupting the customer.
Allowing the user to explain their issue fully prevents misunderstandings and builds professional rapport.
3
Perform remediation while maintaining clear communication.
The user understands what is being done without being confused by acronyms or technical jargon.
Transparent, plain-language communication sets clear expectations and reduces user anxiety during maintenance.
4
Verify complete system functionality with the user.
The user tests and confirms that email synchronization functions as expected.
The technician must ensure customer satisfaction and functional resolution prior to ticket closure.
5
Document the incident in the ticketing system.
Detailed technical record saved to the corporate knowledge base.
Thorough documentation fulfills administrative requirements and assists peer technicians with future issues.

Anahtar Kavram

Standard Professional Communication and Customer Interaction Workflow
Tahmini Süre:1m 30s
Soru 1878Soru

A field maintenance technician reports that an augmented reality (AR) equipment inspection app on an enterprise Android tablet frequently stutters and freezes during live diagnostic streams. Place the following troubleshooting steps in the correct order, starting from the least invasive action to the most invasive action.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper troubleshooting sequence from least to most invasive is: 1) Force stop the application, 2) Clear the application cache, 3) Clear the application data, 4) Uninstall and reinstall the application, and 5) Perform a factory reset of the mobile OS.
The correct order follows standard CompTIA least-invasive-first troubleshooting procedure: force stopping the app addresses software glitches without data loss, clearing cache removes corrupt temp files without wiping configuration, clearing app data resets app settings, reinstalling the app fixes binary corruption, and factory resetting wipes the entire OS as a last resort.

Adım Adım Çözüm

1
Terminate frozen or misbehaving application processes
App shuts down completely; re-opening tests if a simple process hang was the issue.
Force quitting is non-destructive and takes minimal effort.
2
Clear cached temporary files
Removes temporary unneeded files without removing user settings or login credentials.
Addresses performance issues caused by bloated or corrupt temporary files.
3
Clear application data
Resets the application configuration completely to its default post-install state.
Fixes internal app state corruption but requires re-authentication.
4
Reinstall the application
Replaces all installation files and application binaries.
Fixes corrupted installation binaries.
5
Factory reset the device OS
Erases all user data, applications, and system configurations on the mobile device.
Resolves systemic OS-level corruption as a final resort.

Anahtar Kavram

Least Invasive Troubleshooting Methodology for Mobile OS Applications
Soru 1879Soru

A system administrator is creating an automated maintenance script to run natively within the default command-line terminal environment of a macOS workstation. Which file extension should the administrator assign to this script?

Cevabı ve açıklamayı göster

Cevap: .sh

Cevap

The `.sh` file extension should be used for native shell scripts executed in a macOS terminal environment.
The `.sh` file extension is standard for shell scripts created to execute in Unix-like terminal environments, including macOS (which uses Zsh and Bash) and Linux.

Adım Adım Çözüm

1
Identify the target operating system environment specified in the scenario.
The target operating system is macOS using a native command-line terminal.
macOS is a Unix-based operating system.
2
Determine the standard scripting extension associated with native Unix/macOS shell environments (such as Zsh or Bash).
Shell scripts running in these environments conventionally use the `.sh` file extension.
Scripting extensions specify the engine or runtime host meant to interpret the script.

Anahtar Kavram

Scripting Language File Extensions and Execution Environments
Soru 1880Soru

A Linux administrator plans to apply a critical kernel patch to a web server during an upcoming scheduled maintenance window. The administrator has defined the scope of change and completed a risk assessment. Which of the following components must be included in the change request prior to submission for approval to ensure the system can be restored if the patch causes instability?

Cevabı ve açıklamayı göster

Cevap: A rollback plan detailing instructions to revert the server to its previous operating state

Cevap

A rollback plan detailing instructions to revert the server to its previous operating state
A documented rollback plan is a required element of the change management process. It outlines clear, tested steps to reverse a change and restore services to a known good state if unforeseen errors occur during deployment.

Adım Adım Çözüm

1
Identify the key components of standard change management workflow.
The standard process requires scope definition, risk analysis, change plan, rollback plan, end-user notification, CAB approval, and post-implementation testing.
Every major system modification must be documented with recovery steps before implementation.
2
Determine which missing document specifically addresses system recovery upon failure.
The rollback plan provides step-by-step instructions to revert changes if the patch fails or causes system instability.
Having a rollback plan minimizes downtime and risk to business continuity.

Anahtar Kavram

Change Management Rollback Planning
Tahmini Süre:45s
ÖncekiSayfa 94 / 178Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin