Security

A desktop technician at a regional retail pharmacy chain is troubleshooting a Windows 11 workstation used for prescription tracking. The system is showing unauthorized pop-up messages and experiencing extreme system slowdown. The technician verifies the presence of rogue adware and immediately disconnects the Ethernet cable to isolate the system from the internal network. According to the CompTIA 7-step malware remediation process, what is the NEXT step the technician should perform?

A system administrator is hardening security policies on Windows 11 Pro workstations. The administrator must ensure that standard users are explicitly required to enter administrator credentials whenever privilege elevation is requested, and that all prompt dialogs take place in an isolated desktop environment protected from background process interference. Which TWO settings in Local Security Policy (secpol.msc) should be configured to fulfill these requirements? (Select TWO.)

An IT security administrator is auditing the endpoint security baseline for mobile devices and embedded systems across the organization. Match each security operational control on the left with its corresponding security implementation objective on the right.

A network administrator is deploying a high-security enterprise wireless network. To comply with corporate security policy, the authentication method must enforce mutual authentication by requiring and validating digital certificates on both the central RADIUS server and each connecting client device. Which of the following Extensible Authentication Protocol (EAP) framework types should the administrator configure?

A network technician deploys a new wireless access point configured to operate exclusively in WPA3-Personal mode. While modern company laptops connect successfully, several older Wi-Fi 4 (802.11n) handheld inventory scanners are unable to associate with the wireless network. The technician must allow these legacy handheld scanners to connect without forcing the modern laptops to downgrade their security protocol. Which of the following configuration changes should the technician make on the access point?

A systems administrator at a financial services firm is troubleshooting a workstation infected with a spyware Trojan. The administrator has already identified the malware symptoms and successfully isolated the system from the local network. Which TWO of the following steps should the administrator perform next before initiating scans and removing the infection? (Select TWO.)

An IT support technician is hardening security on a company workstation running Windows 11 Pro. To mitigate the risk of ransomware, the technician needs to configure a setting that prevents untrusted applications from modifying files stored in standard user folders such as Documents, Pictures, and Desktop. Which feature within the Windows Security app should the technician enable to fulfill this requirement?

A security administrator is deploying mobile tablets to field service technicians who collect sensitive customer account details. The organization allows technicians to use these corporate-enrolled tablets for personal tasks during off-hours. To comply with data privacy regulations, corporate data must be completely encrypted and isolated from personal applications, and administrators must be able to remove company records if a device is lost without destroying personal photos or files. Which of the following mobile security controls should the administrator implement to meet both requirements?

A field technician is configuring wireless access points for a corporate branch office. The company's security policy requires authenticating each user individually through an active central RADIUS server rather than utilizing a shared pre-shared key, while enforcing high-grade modern encryption. Which of the following security options should the technician select on the access points to satisfy these requirements? (Select TWO.)

A desktop support technician at a biotechnology research facility is remediating a Windows 11 workstation infected with a keylogger. The technician has already identified the malware symptoms, disconnected the system from the local network to quarantine it, and disabled System Restore. According to the CompTIA standard 7-step malware remediation process, which of the following actions should the technician perform NEXT?

A helpdesk technician is troubleshooting a third-party screen-recording application on a standalone Windows 11 Pro computer. The application crashes whenever the display dims to show the User Account Control (UAC) prompt. To prevent the screen dimming while preserving elevation prompts for application changes, what is the correct sequence of steps to reconfigure the UAC notification level?

A network administrator is reconfiguring the wireless network for a growing company. Currently, all employees connect to the internal wireless network using a single shared passphrase. Management is concerned that departed employees retain access after leaving the organization. The administrator needs to implement a wireless security solution that allows each employee to authenticate using their individual central network domain credentials. Which of the following configurations best satisfies this requirement?

A systems administrator is establishing security profiles for personal smartphones enrolled in an enterprise Bring Your Own Device (BYOD) deployment. The policy must ensure that corporate data is isolated so it can be wiped independently of personal files, and it must prevent users from installing unverified software from unauthorized third-party sources. Which TWO of the following configurations or controls should the administrator enforce?

An IT technician at a regional freight logistics hub observes unauthorized file encryption and suspicious outbound network traffic on a dispatcher's Windows 11 workstation. The technician immediately disconnects the system from the network. Place the subsequent remediation steps in the correct order according to CompTIA's standard 7-step malware removal process.

An IT technician is configuring dedicated handheld barcode scanners running a customized Android OS for use in a manufacturing warehouse. Warehouse workers have been downloading and installing unauthorized third-party applications directly via APK files using the embedded web browser. The technician needs to prevent users from installing unvetted software while maintaining centralized administrative control. Which of the following policies should the technician enforce?

A network administrator is configuring security policies for corporate Windows 11 Pro workstations. To mitigate the risk of users attempting unauthorized software installations, the administrator wants standard user accounts to be completely restricted from receiving credential prompt pop-ups when elevation is requested; instead, all elevation requests from standard users must fail automatically. Which User Account Control (UAC) security policy setting should be modified in Local Security Policy?

Match each wireless security implementation or authentication component on the left with its defining operational mechanism or technical requirement on the right.

A desktop administrator at a commercial airline flight operations center is troubleshooting a Windows 11 workstation infected with a persistent Trojan. The administrator has already verified the malware symptoms, isolated the workstation from the network to quarantine it, disabled System Restore, and updated the anti-malware signature definitions. Which of the following should the administrator perform NEXT according to standard CompTIA malware remediation procedures?

A systems administrator is configuring Mobile Device Management (MDM) security controls across an enterprise fleet of smartphones and tablets. Match each mobile device security control on the left with its corresponding operational description on the right.

A systems specialist is preparing a batch of Windows 11 desktop computers designated for a corporate financial analysis unit handling restricted client data. The goal is to reduce the attack surface and prevent unauthorized physical or administrative access. Which of the following steps should the specialist execute to properly harden these workstations? (Select TWO.)