3/17/25, 10:55 AM
Individual Response
C.4 CompTIA A+ Core 2 (220-1102)
Certification Practice Exam
Candidate: Oleg Shevtsov (Oleg1985)
Date: 3/17/2025, 10:53:16 AM • Time Spent: 01:07:27
Score: 90%
Passing Score: 95%
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
1/103
3/17/25, 10:55 AM
Question 1.
Individual Response
Correct
Which scripting language is widely used for website and web page design and is also the most
popular programming language in the world?
JavaScript
Python
Batch
Visual Basic
Explanation
JavaScript is widely used for website and web page design and is also the most popular
programming language in the world.
Although not technically a scripting language, batch files (.bat) can collect multiple Windows
commands and execute them in turn.
Python is a high-level, general-purpose programming language with a focus on code
readability. Python is used extensively with large data sets and is very popular with the
scientific community.
Visual Basic (VBScript) is a Windows-specific language used by systems administrators and
web developers. Although VBScript was very popular in previous versions of Windows, it has
been mostly replaced by PowerShell.
References
7.9.4 Scripting Facts
q_scripting_javascript_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
2/103
3/17/25, 10:55 AM
Individual Response
Question 2.
Correct
You are establishing a new security policy and want to make sure that if a user puts in the
wrong password three times, their account will be locked until the administrator unlocks it.
Which of the following should you configure?
Screen saver lock
User login times
Autorun deactivation
Failed attempts lockout policy
Explanation
You should configure a failed attempts lockout policy in this scenario. If a user types in the
incorrect password a defined number of times, their account will be locked for a specified
period of time or until the administrator manually unlocks the account.
Restricting a user's login times should be implemented to prevent someone from accessing
the user's account after work hours. This would not lock a user's account after putting the
wrong password in three times.
Screen savers come on when a system is idle for a set amount of time (usually a few minutes).
When the user returns to the computer, the user should have to enter their password to get
back on the computer. This would not lock a user's account after putting the wrong password
in three times.
Autorun is a Windows feature that automatically runs executable files when a USB drive or
optical disc is inserted.
References
14.1.3 Best Practices for Account Management
14.1.4 Security Policy Facts
15.6 Troubleshoot a Mobile Device
q_account_manage_failed_attempts_lockout_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
3/103
3/17/25, 10:55 AM
Individual Response
Question 3.
Correct
You are in the process of preparing to install Windows 11 Professional on your Windows 10
laptop. You have already verified that your laptop hardware is compatible with a Windows 11
installation.
Which of the following pre-installation steps should you perform next?
Back up existing data.
Plug your laptop into an uninterruptible power source.
Run Disk Cleanup on the hard drive.
Upgrade your laptop's RAM.
Explanation
After verifying that your system is compatible with a Windows 11 installation, you should back
up all data from your laptop that you do not want to lose.
The Disk Cleanup utility scans your computer's hard drive for files that you no longer need,
such as temporary files, cached web pages, and rejected items that end up in your system's
Recycle Bin. However, as you are upgrading to Windows 10, this is not a necessary preinstallation step.
You have already verified that your hardware (including RAM) is compatible with a Windows
11 installation, so you do not need to upgrade your laptop's RAM (although it could enhance
the Windows 11 installation and experience).
If you are experiencing blackouts or brownouts in your location, you might want to make sure
that you plug your laptop into an Uninterruptible Power Source for the clean installation
process. However, this is not a required pre-installation step.
References
4.2.12 Windows Upgrade Facts
6.1.1 Pre-Installation Planning
6.1.2 Installation Planning Facts
6.2.1 Windows Installation
6.2.8 Installation Facts
6.2.9 Post-Installation
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
4/103
3/17/25, 10:55 AM
Individual Response
6.2.10 Post-Installation Facts
q_inst_upgf_pre_install_backup_data_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
5/103
3/17/25, 10:55 AM
Individual Response
Question 4.
Correct
You have just installed the latest Windows updates on your Windows 11 computer. After the
computer has rebooted, you get the following error message:
Error: Windows failed to start. A recent hardware or software change might have caused the
issue after you installed Windows updates.
Because your computer won't start, you have booted your computer into the Advanced
Options section of the Windows 11 recovery environment (see image below).
While troubleshooting this issue, which of the advanced options would be the BEST to try
first?
System Image Recovery
System Restore
Start-up Repair
Command Prompt
Start-up Settings
Explanation
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
6/103
3/17/25, 10:55 AM
Individual Response
The Startup Repair option scans your PC for problems like missing or damaged system files. It
can't fix hardware issues or Windows installation problems, but it is the best first place to start
if you are experiencing trouble booting into Window.
System Restore lets you restore your computer back to a previous restore point. Although this
may work, it will undo any change you have made since the last restore point was created.
Therefore, it is best to try the Start-up Repair option first.
System Image Recovery erases all of the data on your drive and replaces it with an image of
Windows, which you must create prior. This would fix your issue, but you would lose any
changes made to your computer after the image was created.
If you are experienced in command-line troubleshooting tools, the Command Prompt option
may be of use. However, using this method, you must know the command to use. No menu
options are provided.
Selecting the Startup Settings option will restart your computer and bring up Startup Settings,
a menu full of various special ways to boot to Windows, including Safe Mode. Attempting to
boot to Safe Mode is a valid method, but will most likely fail in this scenario, as the installation
of the Windows update has probably corrupted or inadvertently deleted a critical file required
for booting.
References
4.2.12 Windows Upgrade Facts
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.7.1 Windows System Recovery
8.7.4 Use Windows System Recovery Tools
8.7.5 Boot into the Windows Recovery Environment
8.7.7 System Recovery Facts
10.5.2 Troubleshoot Devices
q_recv_rcon_startup_prepare_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
7/103
3/17/25, 10:55 AM
Individual Response
Question 5.
Correct
Which of the following is a feature of a sheep dip computer?
Has port monitors and file monitors.
Requires a WinPE image to boot.
Has malware preinstalled for analysis.
Only boots into Safe Mode.
Explanation
A special computer that is designed for malware analysis is known as a sheep dip computer. A
sheep dip computer has the following characteristics:
Is isolated from the network.
Has port monitors, file monitors, and anti-malware software.
Is used to analyze malware infections and clear the infections.
None of the other options are features of a sheep dip computer.
References
14.7.7 Malware Removal Best Practice
14.7.8 Malware Removal Best Practice Facts
q_malware_removal_sheep_dip_feature_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
8/103
3/17/25, 10:55 AM
Individual Response
Question 6.
Correct
You would like to set Windows Update to delay updates for a week. Which of the following
Windows Update settings would you use to configure the delay?
Update History
Windows Insider Program
Advanced Options
Pause Updates
Explanation
By using the Pause Updates settings, you can delay applying updates for up to a week.
Update History gives you access to several update logs, including feature updates, driver
updates, and more.
Advanced Options gives you access to a group of settings for configuring items such as
receiving updates for other Microsoft products and active hours when Windows will not
reboot for an update. However, these options do not include a setting for delaying an update.
Windows Insider Program is a software-testing program. You can select from three levels of
participation in the program, but you cannot use the options to delay an update.
References
7.2.4 Settings Facts
8.5.1 Updates
8.5.2 Use Windows Update
8.5.3 Update Facts
q_sec_autou_pause_updates_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42a…
9/103
3/17/25, 10:55 AM
Individual Response
Question 7.
Correct
Which of the following should you perform when disposing of a computer?
Run the motherboard through a shredder.
Lock the hard drive in storage.
Document the Chain of Custody.
Reformat the hard drive.
Explanation
You should always reformat (or destroy) the hard drive when you dispose of a computer.
The motherboard does not need to be shredded when disposing of a computer.
The hard drive does not need to be locked in storage when disposing of a computer.
You do not need to document the Chain of Custody when disposing of a computer.
References
14.6.1 Data Disposal and Destruction
14.6.3 Data Disposal and Destruction Facts
q_destruct_disposal_low_level_format_drive_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
10/103
3/17/25, 10:55 AM
Individual Response
Question 8.
Correct
Joe, a user, receives an email from a popular video streaming website. The email urges him to
renew his membership. The message appears official, but Joe has never had a membership
before. When Joe looks closer, he discovers that a hyperlink in the email points to a suspicious
URL.
Which of the following security threats does this describe?
Phishing
Zero-day attack
On-path attack
Trojan
Explanation
Phishing is an attempt to trick a user into compromising personal information or
downloading malware. Most often, phishing involves an email containing a malicious
attachment or hyperlink.
An on-path attack intercepts communications between two systems and alters the message
before sending it on to the original recipient.
A zero-day attack is an exploit of an operating system or software vulnerability that is
unknown and unpatched.
A Trojan horse, or Trojan, is a type of malware that is often disguised as legitimate software.
References
14.7.1 Malware
14.7.2 Malware Facts
q_sec_sw_phishing_attack_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
11/103
3/17/25, 10:55 AM
Individual Response
Question 9.
Correct
Which Windows tool do you use to create and delete partitions on hard drives?
Services
Explorer
Device Manager
Disk Management
Explanation
Use Disk Management to view, modify, and create partitions.
Use Device Manager to update drivers and manage device-specific settings.
Use the Services console to start and stop processes that run in the background.
Use Explorer to view the contents of a volume or to format a drive.
References
5.5.2 View File System Components
5.5.8 Create Volumes with Disk Management
5.5.10 Convert Volumes
5.5.13 Disk Status Facts
5.6.1 Add Storage
5.6.2 Create Mount Points and Extending Volumes
5.6.3 Shrink and Split Partitions
5.6.4 Storage Management Facts
5.6.5 Add Space to Existing Volumes
5.7.3 Storage Space Facts
7.1.5 Use Management Consoles
7.1.6 Management Consoles Facts
q_mountp_fct_create_del_part_tool_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
12/103
3/17/25, 10:55 AM
Individual Response
Question 10.
Correct
Your company has recently implemented a BYOD policy. To protect the network, users must
install an app on their devices that allows the security administrator to enforce the security
policies.
Which of the following is this an example of?
Mobile device management
Certificate Manager
Soft token
Access control list
Explanation
This is an example of mobile device management (MDM). MDM software is used by
administrators to secure mobile devices and to enforce enterprise policies on the devices.
MDM software is often used alongside a bring your own device(BYOD) policy and is typically
deployed as a combination of an on-device application or agent that communicates with a
backend server. The application receives policies and settings from the server to configure
and control the mobile device.
A soft token is any digital authentication key that is used to authenticate a user. A soft token is
not used to enforce security policies.
Certificate Manager is a Windows application for managing digital certificates. It is not used to
enforce security policies.
Access control lists (ACLs) are used to manage and enforce what a user is authorized to
access. The ACL does not require an app to be installed on devices.
References
12.6.2 Mobile Device Security Facts
q_logical_security_mobile_device_mgmt_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
13/103
3/17/25, 10:55 AM
Individual Response
Question 11.
Correct
You are the PC technician for a company. An employee has gone to a meeting while you fix
the computer in her office. She accidentally left a report open next to her computer. It states
that a friend of yours in accounting will be submitted for review if their poor work
performance continues.
Which of the following is the BEST action to take?
Ignore the paper and tell no one of its contents.
Tell your friend about the report you saw and whose desk it was on.
Give your friend a heads up about what you found, but don't tell them
how you got the information.
Tell your fellow PC technicians about what you saw and let them decide
what to do with the information.
Explanation
You should ignore the paper and tell no one of its contents. Complete confidentiality is
expected for any sensitive information that may be found in an employee's office.
It is never appropriate to share sensitive, work-related information found in an employee's
office with anyone in a company or friends.
References
2.3.2 Professionalism Facts
q_proff_confidential_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
14/103
3/17/25, 10:55 AM
Question 12.
Individual Response
Correct
When Linus Torvalds first released Linux version 0.02 in 1991, which utilities were included in
the release? (Select three.)
Web server
Bash shell
Print server
GCC compiler system
Database server
Update utility
File server
Explanation
Linux version 0.02 was released in October of 1991 and consisted of the Linux kernel and its
three basic utilities:
A Bash shell that provided a command line interface.
An update utility used for flushing the filesystem buffers.
A GCC (GNU Compiler Collection) compiler system, allowing an individual to write their
own programs.
Later on, in other releases, a file server, print server, database server, and web server were
included.
References
4.1.1 Workstation Operating Systems
4.1.2 Workstation Operating System Facts
4.2.1 Windows Operating Systems
4.2.2 Windows Operating System Facts
4.3.2 Navigate Linux in the GUI
4.3.3 Linux Facts
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
15/103
3/17/25, 10:55 AM
Individual Response
q_linux_initial_release_utilities_pp7.question.fex
Question 13.
Correct
Which of the following is the most important step in the post-remediation process?
Educate the end user on malware prevention.
Configure the anti-malware to update and scan automatically.
Perform a system backup.
Re-enable System Restore.
Explanation
The last and most important step is to educate the end user on malware prevention. Many
malware infections are caused because a user downloaded a file or clicked a link from an
unknown source. Educating the user on proper computer safety is the most effective malware
prevention technique.
The other options are all steps that you should perform, but educating the end user is the
most important step in the post-remediation process.
References
14.7.7 Malware Removal Best Practice
14.7.8 Malware Removal Best Practice Facts
q_malware_removal_educate_user_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
16/103
3/17/25, 10:55 AM
Individual Response
Question 14.
Correct
Which of the following is true of groups on a Windows system?
Users and local resources, such as printers and shared folders, can be
made members of a group.
A group allows multiple users to share a single logon.
Group members have the access rights that are assigned to the group.
Users can log on as the group and have all the assigned access rights.
Explanation
A Windows group is used to identify groups of user accounts that have similar access needs.
Group members have the permissions and rights assigned to the group. Using groups
simplifies administration. Instead of assigning permissions to each individual user account,
you can assign permissions to the group and then make user accounts members of that
group.
Group accounts cannot be used for logon on a Windows system.
Local hardware resources cannot be made members of a group on Windows.
References
8.2.2 User and Group Facts
q_usrgrpf_win_groups_access_rights_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
17/103
3/17/25, 10:55 AM
Individual Response
Question 15.
Correct
Which system utility would you use to troubleshoot hardware devices, examine and control
the resources used by specific devices, and install updated device drivers?
Network
Control Panel
Notification Area
Device Manager
System Restore
Explanation
Use Device Manager to troubleshoot hardware devices, examine and control the resources
used by specific devices, and install updated device drivers.
System Restore takes periodic snapshots of the system configuration called restore points.
Network acts as a built-in network browser, showing all networks and shared folders to which
the user has access.
The Notification Area displays icons that represent the applications and processes that are
running behind the scenes on your computer, such as audio volume, security programs, and
connectivity to the network. It also displays the time and date.
Control Panel contains various utilities that change how a computer looks and behaves.
References
5.5.2 View File System Components
7.1.5 Use Management Consoles
7.1.6 Management Consoles Facts
10.4.2 Install and Manage Device Drivers on Windows
10.4.5 Hardware Device Facts
10.4.6 Device Driver Installation Facts
10.4.7 Manage Devices
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
18/103
3/17/25, 10:55 AM
Individual Response
10.5.3 Work with Legacy Devices and Drivers
10.5.4 Device Troubleshooting Facts
10.5.5 Manage Devices 1
q_dev_mgm_device_manager_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
19/103
3/17/25, 10:55 AM
Individual Response
Question 16.
Correct
You are comparing methods for securing your mobile device.
Which of the following is the BEST method to secure your device's storage?
Locator applications
Full device encryption
Biometric authentication
Remote backup applications
Explanation
Full device encryption is an effective security method for mobile devices that encrypts every
single sector of the device's storage, regardless of whether it has data or not. This protects the
entirety of the device, including deleted files.
Biometric authentication uses such things as retinal, face, or fingerprint scans for
authentication. However, if your device is compromised, all the storage can be accessed if it is
not encrypted.
Remote backup refers to applications that back up data on a mobile device. Usually, the
backup data is stored in the cloud. While this process can make sure you have access to your
data in case your mobile device fails, it does not secure your mobile device's storage.
Locator applications help you locate a lost or stolen mobile device. They are not designed to
secure the storage on your device.
References
12.6.1 Mobile Device Security
12.6.2 Mobile Device Security Facts
q_mob_dev_sec_secure_dev_device_perf_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
20/103
3/17/25, 10:55 AM
Individual Response
Question 17.
Correct
You need to view detailed IP configuration information on your Windows workstation.
In addition to the IP address, subnet mask, and default gateway configuration, you need to
see the network card's MAC address and the addresses of the DHCP and DNS servers the
workstation is communicating with.
Which command would you enter at the command line to see this detailed information?
ipconfig /all
When you see the DNS server address, you realize that this information needs to be updated.
Earlier in the day, you implemented a new DNS server with a new IP address. The workstation
will update this information in 24 hours.
Which command can you enter at the command line to update the DNS server information
right away?
ipconfig /flushdns
Explanation
You can use ipconfig /all to view detailed configuration information, including the MAC
address and the DHCP and DNS servers the workstation is communicating with.
You can use ipconfig /flushdns to flush (or remove) all the entries in the workstation's current
DNS cache. If a network server's IP address is changed, your local cache will contain the old IP
address until the cache is updated (every 24 hours) or the flushdns option is used.
References
7.1.13 System Command Facts
11.8.1 Command Line Network Utilities
11.8.3 Use ipconfig Command
11.8.9 Command Line Network Utilities Facts
11.8.11 Explore Configuration Information 1
11.8.12 Explore Configuration Information 2
11.8.13 Explore Configuration Information 3
11.9.2 Troubleshoot Network Connectivity
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
21/103
3/17/25, 10:55 AM
Individual Response
q_tcp_util_ipconfig_all_pp7.question.fex
Question 18.
Incorrect
Which of the following IP addresses are Class B addresses? (Select three.)
129.0.0.0
224.15.55.2
190.65.2.0
132.12.0.0
195.155.0.0
115.33.0.0
64.2.2.64
Explanation
129.0.0.0, 132.12.0.0, and 190.65.2.0 are Class B addresses. The first octet of a Class B address
is in the range of 128 to 191. The first octet of a Class C address is in the range of 192 to 223.
The first octet of a Class A address is in the range of 1 to 126.
References
11.3.1 Device Addressing
11.3.2 IPv4 Addressing
11.3.3 IPv4 Address Facts
11.3.6 Configure TCP/IP Properties
11.3.7 Configure TCP/IP Settings on Windows 10
11.3.8 Configure TCP/IP Settings on Windows 11
q_addressing_ip_addr_class_b_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
22/103
3/17/25, 10:55 AM
Individual Response
Question 19.
Correct
You recently purchased a copy of Windows 11 from a retail store. The system that you want to
install Windows on does not have an optical drive.
What is the BEST option for installing Windows in this scenario?
Install Windows on a system that has an optical drive and then create a
disk image and copy it to the system that you originally wanted to install
Windows on.
Perform a reset installation.
Install the system over the network from a Windows Deployment
Services (WDS) server.
Download an ISO copy of the installation files to a USB flash drive.
Explanation
The best option in this scenario is to copy the Windows 11 installation media in an ISO (.iso)
format to a USB flash drive. Then you can boot the system on which you want to install
Windows from the flash drive.
While a network installation using a WDS server is possible in this scenario, this would require
considerably more time, expertise, and hardware. The same is true of using an imaging
solution.
You can only perform a reset installation on an existing Windows 11 system.
References
4.2.12 Windows Upgrade Facts
6.2.8 Installation Facts
q_inst_fct_no_optical_drive_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
23/103
3/17/25, 10:55 AM
Individual Response
Question 20.
Correct
As with other programming languages, improper structure, syntax, or systems testing can
cause scripts to negatively impact a machine.
Which of the following are common problems that can be introduced into a system or
network with a script? (Select two.)
Beeps upon startup
Unintentional introduction of malware
Black (or Blue) Screen of Death
Accidentally changed system settings
Strange characters on a printed page
Explanation
As with other programming languages, improper structure, syntax, or systems testing can
cause scripts to negatively impact a machine. These problems include:
Unintentional introduction of malware to a system.
System settings accidentally changed by the script.
Browser, application, or system crashes caused by poor resource management in a
script.
A Black (or Blue) Screen of Death is associated with Windows systems and indicates a fatal
system error. However, it is not normally caused by running a script.
Strange or jumbled characters on a printed page is normally a sign of an outdated or
corrupted printer driver.
If you hear a series of beeps when starting your computer, these sounds are normally
produced by the BIOS/UEFI and are codes for specific issues or states.
References
7.9.4 Scripting Facts
q_scripting_common_script_problems_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
24/103
3/17/25, 10:55 AM
Individual Response
Question 21.
Correct
You have been troubleshooting startup errors on your Windows 11 computer by undoing
recent changes, such as rolling back device drivers for a local printer and new graphics card
while in Safe Mode.
However, the changes you are making are not resolving the startup errors.
Which of the following steps will MOST likely help you to find the specific cause of the error
without the need to re-install Windows?
Disable and then enable devices and services one by one.
Launch and use the utilities provided in the Recovery Environment.
Disable Driver Signature Enforcement.
Disable automatic restart on system failure.
Explanation
If undoing recent changes does not fix the problem, you could disable all unnecessary devices
and services. If you can boot normally, you can then identify the component that was causing
the problem by enabling devices and services one by one until the system becomes unstable.
While selecting the Disable Driver Signature Enforcement in Advanced Startup Options would
cause Windows not to require a digital signature when loading a driver, this option would not
help you find the specific driver or service that might be causing the startup error.
While selecting the Disable automatic restart on system failure option in Advanced Startup
Options would prevent Windows from restarting when a critical system error occurs, it would
not help you find a specific driver or service that might be causing the startup error.
The Recovery Environment provides tools such as System Restore, System Image Recovery,
and Startup Repair, which could all potentially bring your Windows 11 system back to a usable
state. However, the tools (by themselves) would not be very helpful in finding the specific
cause of the startup error.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.7.1 Windows System Recovery
8.7.2 Use Restore Points
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
25/103
3/17/25, 10:55 AM
Individual Response
8.7.4 Use Windows System Recovery Tools
8.7.7 System Recovery Facts
8.8.6 Windows Boot Options
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
10.5.4 Device Troubleshooting Facts
q_trb_booto_enable_devices_one_by_one_pp7.question.fex
Question 22.
Correct
What is the name of the service included with the Windows Server operating system that
manages a centralized database containing user account and security information?
Active Directory
Access
Active Desktop
SQL
Explanation
Active Directory (AD) is the centralized database that is included with the Windows Server
operating system. Active Directory is used to store information about a network, such as user
accounts, computers, printers, and security policies.
Active Desktop was a feature of early versions of Microsoft Internet Explorer.
SQL and Access are relational databases.
References
8.1.6 Active Directory Facts
q_domain_fct_act_dir_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
26/103
3/17/25, 10:55 AM
Individual Response
Question 23.
Correct
Your company has a Windows software program that can only be used by one person at a
time. When you try to run the program, you are shown a message that indicates that the
program is in use and is not available.
It is critical that you get access to this program as soon as possible. You would like to know
who is currently logged on to the computer so you can find out who is using the program.
You connect to the remote computer using a remote desktop connection. Which of the
following is the BEST utility to use to find out who is using the program?
Device Manager
System Information
msconfig
usmt
Task Manager
Explanation
Using Task Manager, you can list all users who are currently logged on to the computer by
selecting the User tab.
Device Manager provides a central and organized view of all the Windows-recognized
hardware installed in a computer. Device Manager is used to manage the hardware devices,
like hard disk drives, keyboards, sound cards, USB devices, and more. This console does not
let you see who is logged on to a computer.
System Information collects system information, such as devices that are installed in your
computer or device drivers loaded in your computer, and provides a menu for displaying the
associated system topics. This console does not let you see who is logged on to a computer.
msconfig is a system utility to troubleshoot the Microsoft Windows startup process.
The usmt utility (User State Migration Tool) is a Microsoft command line utility program
intended to let advanced users transfer files and settings between PCs.
References
7.1.1 Use Task Manager
7.1.2 Task Manager Facts
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
27/103
3/17/25, 10:55 AM
Individual Response
7.3.2 Monitor System Performance
7.3.3 Performance Monitoring Facts
15.5 Configure the Windows Operating System
q_task_manager_remote_comp_connect_util_pp7.question.fex
Question 24.
Correct
Which of the following encryption algorithms is considered one of the strongest encryption
protocols and is used in more than just wireless networks?
TACACS+
TKIP
RADIUS
AES
Explanation
AES (Advanced Encryption Standard) is considered one of the strongest encryption protocols
and is used in more than just wireless networks.
TKIP (Temporal Key Integrity Protocol) is known to have several vulnerabilities and is no
longer considered secure. You should not use TKIP on modern wireless networks.
RADIUS and TACACS+ are authentication protocols. These protocols do not encrypt data
packets over a wireless network.
References
11.5.4 Wireless Security
11.5.5 Wireless Security Facts
11.5.6 Wireless Encryption and Authentication
11.5.7 Wireless Encryption and Authentication Facts
q_wireless_encrypt_aes_strongest_algorithm_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
28/103
3/17/25, 10:55 AM
Individual Response
Question 25.
Correct
While on a business trip, an employee accesses the company's internal network and transfers
files using an encrypted connection.
Which of the following digital security methods is the employee MOST likely using?
VPN
Firewall
DLP
Access control list
Explanation
A virtual private network (VPN) is an encrypted tunnel between remote users and a private
network.
Data loss prevention (DLP) programs monitor operations such as file transfers and emails for
user activity that could compromise data security.
An access control list contains users and groups that are granted access to files, folders, and
other resources.
Firewalls are usually placed between a company's network and the internet to filter network
traffic at the IP level. VPNs are what usually tunnel through these firewalls. In some cases,
both functions may be available on one device.
References
8.4.1 Virtual Private Networks (VPN)
8.4.2 Set Up a VPN Connection
8.4.3 VPN Facts
q_vpn_fct_vpn_int_network_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
29/103
3/17/25, 10:55 AM
Individual Response
Question 26.
Correct
An administrator configures the Time Machine application on macOS computers and develops
scripts that use the tar command on Linux computers.
Which of the following best practices is the administrator following?
Scheduled backups
Driver and firmware updates
Scheduled disk maintenance
Patch management
Explanation
The Time Machine application on macOS computers and the tar command on Linux are used
for backups.
While Time Machine and tar can restore disk files, scheduled disk maintenance is usually
performed to maintain disk and file system integrity.
Patch management involves updating operating systems and applications, not performing
backups.
Driver and firmware updates involves updating the middleware that interfaces with internal
and external devices, not performing backups.
References
8.6.2 Backup Facts
q_recovery_backup_best_prac_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
30/103
3/17/25, 10:55 AM
Individual Response
Question 27.
Correct
Which of the following BEST describes a Security Policy?
A document that defines how often backups should run and where they
should be saved.
A document or collection of documents that provide information about
an organization's network security.
A document that outlines who has access to company resources.
A document that outlines how long a password should be and which
characters can be used in the password.
Explanation
A Security Policy is a document or collection of documents that provide information about an
organization's network security.
While passwords, backups, and accessibility may be addressed in some portions of the
Security Policy, the policy itself covers more than these specific topics.
References
2.9.1 Documentation Types
q_documentation_security_policy_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
31/103
3/17/25, 10:55 AM
Individual Response
Question 28.
Correct
You provide desktop support at a bank's branch office. One of the Windows workstations you
manage is used to set up new customer accounts and fill out customer loan applications.
Each user account on the system has been assigned a strong password. File and folder
permissions have been assigned to prevent users from accessing each other's files.
Which of the following would MOST likely increase this system's security? (Select two. Each
option is a complete solution.)
Assign each user a simple password so that they won't be tempted to
write it down.
Make user accounts members of the Administrators group.
Install a privacy filter on the monitor.
Enable the Guest account.
Secure the computer system to the desk with a cable lock.
Explanation
Because this system is used in close proximity to customers, you should install a privacy filter
on the monitor. A privacy filter prevents customers from viewing sensitive information that is
displayed on the monitor (such as usernames, passwords, and account numbers).
You should also secure this system to the desk with a cable lock. Securing the computer to the
desk prevents a malicious person from stealing the computer and all of the sensitive
information the computer contains.
Enabling the Guest user account would decrease the system's security, as would assigning
simple passwords to user accounts and making all users members of the Administrators
group.
References
14.1.1 Best Practices for Securing Workstations
14.1.2 Workstation Security Facts
q_security_best_cable_lock_priv_filter_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
32/103
3/17/25, 10:55 AM
Question 29.
Individual Response
Correct
Which of the following is used to identify and record technical issues, manage their progress,
and verify full resolution?
Support systems
Ticketing system
Change management
Inventory management database
Explanation
A ticketing system is used to identify and record technical issues, manage their progress, and
verify full resolution.
Ticketing systems and inventory management software are both support systems. Although
you may record specific issues in an inventory management database, it's primary role is not
to track open issues.
You follow a change management process when you obtain and implement new devices.
References
2.8.2 Ticketing Systems Facts
q_ticketing_system_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
33/103
3/17/25, 10:55 AM
Individual Response
Question 30.
Correct
Susan has left the company and has been replaced by Manuel. You create a user account for
Manuel on Susan's computer. Manuel calls you and says that he can't open a specific file on
the computer.
Which of the following will MOST likely correct the problem?
Delete Susan's user account from the system.
Make Manuel's user account a member of the Power Users group.
Make Manuel the file owner.
Edit the Local Security Policy and modify user rights.
Explanation
You should make Manuel the file owner. The file owner has all the permissions for the file.
Deleting Susan's user account will change the file owner, but will not make Manuel the owner.
Making Manuel a member of the Power Users group would not increase file permissions,
although making Manuel a member of the Administrators group could be an alternative
solution.
User rights in the Local Security Policy control the ability to perform actions on the system,
such as shutting the system down. However, file access is controlled through permissions.
References
9.1.1 Windows File and Folder Properties
9.1.3 File Management Facts
9.2.1 NTFS and Share Permissions
9.2.2 NTFS and Share Permissions Facts
9.2.3 Configure Basic Folder Sharing on Windows
9.2.4 Configure Advanced Folder Sharing on Windows
9.2.5 Configure Share and NTFS Permissions
9.2.6 Configure NTFS Permissions
9.2.8 Configure NTFS Permissions
9.3.3 Encrypt Files
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
34/103
3/17/25, 10:55 AM
Individual Response
q_ntfs_make_owner_of_file_pp7.question.fex
Question 31.
Incorrect
Your computer has a single hard disk with a single volume that is used by the C:\ drive. You
have previously upgraded the disk to a dynamic disk.
The disk has run out of space, so you want to add more space to the C:\ volume. You add a
new hard disk to the computer.
Which of the following is the BEST step to complete while adding space to the C:\ drive?
Strip the C:\ volume to the second disk.
Span the C:\ volume to the second disk.
Extend the C:\ volume to the second disk.
Create a mount point using space on the second disk.
Explanation
A mount point is an empty folder on the existing volume that points to another partition. Data
saved to the folder is physically saved on the referenced partition.
Extending a volume adds space to the volume. Extending a volume using space on a different
disk creates a spanned volume. You cannot extend the system volume using space on a
second disk.
A striped volume uses two equal portions on two disks. You can create a new striped volume,
but you cannot stripe an existing volume.
References
5.6.4 Storage Management Facts
q_mountp_fct_create_mount_point_2nd_disk_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
35/103
3/17/25, 10:55 AM
Individual Response
Question 32.
Correct
Which mobile device vulnerability results in a user unlocking all of a mobile device's features
and capabilities?
Spoofed application
Jailbreaking
An APK signature
Developer Mode
Explanation
Jailbreaking a handheld device unlocks all the features and capabilities of that device. Once a
mobile device is jailbroken, large holes in the operating system can be exploited, including the
system files.
Developer Mode is made for software companies and manufacturers to be able to create and
test applications and features on mobile devices. Turning on this feature can lead to the
unlocking of system files on the operating system. However, Developer Mode does not unlock
all the features and capabilities of a mobile device.
A spoofed application looks like a real program, but is actually an infected version of a real
application. A spoofed application is not designed to unlock all the features and capabilities of
a mobile device.
Trusted websites that create installation software for handheld devices use APK files. These
files have APK signatures on them that only allow the vendor to install software on the
manufacturers' devices. APK files are not designed to unlock all the features and capabilities
of a mobile device.
References
14.11.3 Troubleshoot Mobile OS Security Issues
14.11.4 Troubleshoot Mobile OS Security Facts
q_trouble_mobile_security_jail_breaking_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
36/103
3/17/25, 10:55 AM
Individual Response
Question 33.
Correct
Rodney, an employee in the Research Department, reports that he is experiencing blue screen
errors while using his Windows computer.
You ask Rodney if anything has changed on the computer recently. Rodney explains that he
recently installed a TV tuner board in an expansion slot, and now he has to reboot the
computer every time he loads the TV tuner application to watch TV.
You need to fix Rodney's computer and prevent him from using the TV until you can install an
updated driver.
What should you do?
Boot the system from a Windows installation disc and select the Startup
Repair option.
Re-install Windows from the installation disc.
Boot the system in Safe Mode. Disable the TV tuner driver in Device
Manager.
Use the Reset This PC option in the Settings app.
Reboot the system and select Safe Mode. Edit the properties of the TV
tuner driver in Device Manager and select Roll Back Driver.
Explanation
You should disable the driver in Safe Mode instead of rolling the driver back. Although you
might be able to disable the driver without booting in Safe Mode, booting in Safe Mode is a
good way to prevent drivers that could interfere with your task.
Resetting or reinstalling the operating system are drastic troubleshooting options. You should
try simpler resolutions first before resorting to more aggressive options.
Because the boot process is functioning, there is no indication that the boot sector or Master
Boot Record need repairs.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.8.2 Boot Process Facts
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
37/103
3/17/25, 10:55 AM
Individual Response
8.8.3 Modify the Boot Order
8.8.4 Configure the Boot Order
8.8.6 Windows Boot Options
8.8.8 Startup Error Facts
q_trb_booto_boot_safe_mode_tv_tuner_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
38/103
3/17/25, 10:55 AM
Individual Response
Question 34.
Correct
One of the Windows workstations you manage has four user accounts defined on it. Two of
the users are Limited users, while the third (your account) is an Administrative user. The
fourth account is the Guest user account, which has been enabled to allow management
employees convenient workstation access.
Each Limited and Administrative user has been assigned a strong password. File and folder
permissions have been assigned to prevent users from accessing each other's files. Autorun
has also been disabled on the system.
Which of the following actions is MOST likely to increase this system's security?
Enable Autorun on the system.
Change your user account to a Limited user.
Disable the Guest account.
Change the two Limited user accounts to Administrative users.
Explanation
The Guest user account has no password and provides too much access to the system. Unless
its use is absolutely required, the Guest user account should remain disabled.
Changing your Administrative user account to a Limited user would prevent you from
completing management tasks on the workstation.
Changing the two Limited user accounts to Administrative users would decrease the system's
security, as would enabling Autorun.
References
14.1.3 Best Practices for Account Management
14.1.4 Security Policy Facts
q_account_manage_disable_guest_acct_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
39/103
3/17/25, 10:55 AM
Individual Response
Question 35.
Correct
You are establishing a new security policy for user authentication and want to implement
multi-factor authentication.
Which of the following would BEST accomplish this?
Username and password
Smart card and one-time code text message
Fingerprint and iris scan
Fingerprint and one-time code text message
Explanation
Multi-factor authentication requires that a user demonstrate two of the following:
Something you are
Something you know
Something you have
The only answer that satisfies this requirement is a fingerprint (something you are) and a onetime code text message (something you have, as the user must have their cell phone to
receive the text message).
Fingerprint and iris scans are both something you are.
Usernames and passwords are both something you know.
A smart card and one-time code text message are both something you have.
References
14.1.1 Best Practices for Securing Workstations
14.1.2 Workstation Security Facts
q_security_best_multifactor_auth_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
40/103
3/17/25, 10:55 AM
Individual Response
Question 36.
Correct
You have responded to a call from a customer who is having problems with his computer.
After troubleshooting the problem, you discover the switch on the power strip was off. After
switching it on, all of the components and their functionality return to normal.
Which of the following is the BEST way to explain the solution to the customer?
"All I did was flip the power strip switch on. You probably bumped it by
accident. And that accident just cost you about $80. But don't feel bad,
accidents happen to everyone. Although, this one could have been easily
avoided."
"That was probably the easiest problem I've ever fixed. I am surprised
you had to call in. Thanks for making my day! All I had to do was flip this
little switch. You're good to go."
"Next time you need to call, check this power strip switch. It was turned
off. That's why nothing worked. If I were you, I would have checked this
first and saved both of us time."
"I found this power strip switch in the off position. Now that it's on, it
looks like everything is working. It appears as though that was the
problem. Can you confirm that the problem has been resolved?"
Explanation
In this case, the following is the best way to explain the problem to the customer:
"I found this power strip switch in the off position. Now that it's on, it looks like everything is
working. It appears as though that was the problem. Can you confirm that the problem has
been resolved?"
The response is clear without being judgmental or insulting. In addition, you are asking the
customer to make sure that the problem no longer exists. You should never insult, judge, or
belittle a customer in any way, even if the problem is directly related to their actions.
References
2.3.2 Professionalism Facts
q_proff_explain_solution_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
41/103
3/17/25, 10:55 AM
Individual Response
Question 37.
Correct
You are an IT technician for your company. Vivian, an employee, has been receiving error
messages, indicating that some of her Windows system files are corrupt or missing. To fix this
issue, you ran the Windows System File Checker tool (SFC.exe).
Shortly after the files were repaired, Vivian called again because she is still having the same
issue. You now suspect that a corruption or a renaming of the system files is being caused by
malware.
Which of the following is the FIRST step you should take to remove any malware on the
system?
Back up Vivian's critical files and perform a clean install of Windows.
Disconnect Vivian's computer from the network.
Disable System Restore.
Perform a scan using anti-malware software.
Explanation
When you suspect that a computer may be infected with malware, you should immediately
disconnect (quarantine) the computer from the network to prevent propagation of the
malware. After the computer is isolated, you can back up the computer and begin to remove
the malware by using a virus removal program (anti-malware software) in Safe Mode.
Disabling System Restore does not further any removal of malware.
Backing up an infected computer and performing a clean install of Windows does not resolve
any issues with Vivian's critical files, and it does not prevent any future issues with malware.
References
14.11.1 Troubleshoot PC Security Issues
14.11.2 Troubleshoot PC Security Facts
q_trouble_pc_security_quarantine_computer_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
42/103
3/17/25, 10:55 AM
Individual Response
Question 38.
Correct
Which of the following is the term for a set of programs that acts as an interface between the
applications that are running on a computer and the computer's hardware?
Command line
Driver
Operating system
Utilities
Kernel
Explanation
An operating system is a set of programs that acts as an interface between the applications
that are running on a computer and the computer's hardware. Operating systems perform
actions such as:
Receive user input from hardware devices, like the keyboard or mouse.
Send user output to hardware devices, like the monitor or printer.
Control the use of processing devices.
Serve as a platform for applications.
Moderate hardware.
Provide security.
Manage the file system.
The kernel is the part of the operating system core responsible for controlling security,
managing the file system, and providing a platform for applications to run on.
A driver is a type of computer program that enables the operating system to interact with
hardware devices.
A command line is a text-based interface for a computer.
Utilities are the features or programs included with an operating system that perform systemrelated tasks.
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
43/103
3/17/25, 10:55 AM
Individual Response
References
4.1.1 Workstation Operating Systems
4.1.2 Workstation Operating System Facts
4.2.1 Windows Operating Systems
4.2.2 Windows Operating System Facts
4.2.4 Windows 11 Editions
9.1.2 System File Locations
9.1.3 File Management Facts
q_os_operating_system_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
44/103
3/17/25, 10:55 AM
Question 39.
Individual Response
Correct
Which of the following provides a set of rules that specify which types of network traffic are
allowed through a firewall?
Packet filtering
ACL
Circuit-layer gateway
Application-level gateway
Explanation
ACLs (access control lists) are sets of rules used by firewalls. They specify which types of
network traffic are allowed through the firewall. Any traffic that does not match the rules are
blocked.
Packet filtering, circuit-layer gateways, and application-level gateways are types of firewalls
that use ACLs to filter network traffic.
References
14.8.1 Firewalls
14.8.2 Configure Windows Firewall
14.8.3 Firewall Facts
q_net_firew_access_control_list_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
45/103
3/17/25, 10:55 AM
Individual Response
Question 40.
Correct
Which of the following terms describes a Windows 11 operating system patch for a desktop
that targets a specific problem and is released on a short-term, periodic basis?
Hotfix
Service pack
Targeted software patch
Windows as a Service
Explanation
A hotfix is an operating system patch that targets a specific problem.
A targeted software patch helps describe what a hotfix does, but it is not a type of Windows
OS update.
Service packs included a collection of hotfixes and other system updates, but were
discontinued after Windows 7.
Windows as a Service is the approach Microsoft introduced with Windows 10 to deploy,
update, and service the operating system. However, it is not a type of update that targets a
specific problem.
References
8.5.1 Updates
8.5.3 Update Facts
14.11.1 Troubleshoot PC Security Issues
14.11.2 Troubleshoot PC Security Facts
q_sec_autou_hotfix_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
46/103
3/17/25, 10:55 AM
Individual Response
Question 41.
Correct
Which stage of a legacy BIOS startup loads the boot code in the Master Boot Record (MBR)
and then uses the partition table to identify the active disk partition?
OS startup
Bootmgr.exe
Boot loader
Winload.exe
Explanation
On the boot device, the BIOS searches for and loads the boot code in the Master Boot Record
(MBR). The MBR is on the first disk sector and uses the partition table to identify the active
disk partition.
The bootmgr.exe program looks for the BCD store in either the C:\ directory or the System
Reserved partition.
OS startup and Winload.exe occur after the boot loader.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.8.2 Boot Process Facts
8.8.3 Modify the Boot Order
8.8.4 Configure the Boot Order
8.8.6 Windows Boot Options
8.8.8 Startup Error Facts
q_bootordr_boot_loader_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
47/103
3/17/25, 10:55 AM
Individual Response
Question 42.
Correct
Jason owns a MacBook Pro and is having an issue with his USB drive.
Which of the following tools could Jason use to view information about the USB drive
controller?
System Information utility
Devices and Printers
ls usb
Device Manager
Explanation
The System Information utility on a Mac device provides detailed information about all the
hardware components in a system. For example, you can click USB in the System Information
utility to see all the information about the USB controller.
Device Manager is a utility that displays information about the hardware components in a
Windows system.
Devices and Printers is another utility that displays information about the hardware
components in a Windows system.
The ls usb command in Linux displays information about all of the USB devices that are
currently connected to the system.
References
10.4.5 Hardware Device Facts
q_dev_inst_sys_info_utility_mac_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
48/103
3/17/25, 10:55 AM
Individual Response
Question 43.
Correct
Which of the following are the FIRST settings you should check if you suspect that a malware
attack has impacted your internet connection? (Select two.)
Proxy settings
VPN settings
BIOS settings
Internet Connection Sharing settings
DNS settings
Explanation
The two recommended settings you should check first are proxy and DNS settings. Adjusting
the proxy settings can redirect the user to another location where the attacker can then
integrate penetration tools to find vulnerabilities. A DNS server can be reconfigured to take a
user outside the network and on to a similar web page.
BIOS, VPN, and Internet Connection Sharing settings are much less likely to be altered by a
malware attack.
References
14.11.1 Troubleshoot PC Security Issues
14.11.2 Troubleshoot PC Security Facts
q_trouble_pc_security_network_internet_setting_issues_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
49/103
3/17/25, 10:55 AM
Individual Response
Question 44.
Correct
Which of the following file extension types can be run from a Windows system Command
Prompt? (Select three.)
.sys
.com
.dll
.exe
.png
.rtf
.bat
Explanation
.exe, .bat, and .com files can all be run from Command Prompt.
.dll and .sys files work in conjunction with other programs.
.rtf and .png are document and graphic file extensions.
References
4.1.1 Workstation Operating Systems
4.1.2 Workstation Operating System Facts
4.2.1 Windows Operating Systems
4.2.2 Windows Operating System Facts
4.2.4 Windows 11 Editions
9.1.2 System File Locations
9.1.3 File Management Facts
q_os_files_run_frm_cmd_prmpt_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
50/103
3/17/25, 10:55 AM
Individual Response
Question 45.
Correct
Your organization employs a group of traveling salespeople who need to access the corporate
home network through the internet while they are on the road. You want to funnel remote
access to the internal network through a single server.
Which of the following solutions would be BEST to implement?
Site-to-site VPN
Screened subnet
VPN concentrator
Host-to-host VPN
Explanation
With a remote access VPN, a server on the edge of a network (called a VPN concentrator) is
configured to accept VPN connections from individual hosts. Hosts that are allowed to
connect using the VPN connection are granted access to resources on the VPN server or the
private network.
A screened subnet is a buffer network that sits between a private network and an untrusted
network (such as the internet).
With a host-to-host VPN, two hosts establish a secure channel and communicate directly with
each other.
With a site-to-site VPN, the routers on the edge of each site establish a VPN connection with
the router at the other location.
References
8.4.1 Virtual Private Networks (VPN)
8.4.2 Set Up a VPN Connection
8.4.3 VPN Facts
q_vpn_fct_vpn_concentrator_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
51/103
3/17/25, 10:55 AM
Individual Response
Question 46.
Correct
To improve the safety of your location and comply with regulations regarding work
environments with hazardous materials, you have been assigned to assemble Material Safety
Data Sheets (MSDS) for all chemicals used in your shop.
How should you obtain these documents?
Write them yourself after researching the issues.
Get them from your local workers' safety insurance office.
Download them from the chemical manufacturer's websites.
Ask your manager for them.
Explanation
Material Safety Data Sheets (MSDS) are written and distributed by chemical manufacturers.
You can download them from the manufacturer's website or request them from a company
representative.
MSDS sheets contain information that is only available from the manufacturer. Neither your
manager or a workers' safety insurance office can provide MSDS documents. Attempting to
write your own MSDS sheet can be dangerous, as you do not have all the critical information
necessary that is available from the manufacturer.
References
2.1.1 Safety
2.1.2 Safety Measures
2.2.1 Environmental Concerns
2.2.2 Environmental Facts
q_com_safm_find_msds_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
52/103
3/17/25, 10:55 AM
Individual Response
Question 47.
Correct
Which remote access solution provides you with full remote access to the graphical desktop of
a Windows system, including the ability to run programs, manipulate files, and restart or
power down the computer?
Telnet
Remote Assistance
Remote Desktop
Screen Sharing
Explanation
Remote Desktop provides a remote user with full access to the graphical desktop of a
Windows system. This allows them to run programs, manipulate files, and restart or power
down the computer (just like a regular user).
Remote Assistance does not provide full graphical desktop access.
Telnet does not provide full graphical desktop access.
Screen Sharing is designed for macOS.
References
8.3.1 Remote Access Technologies
8.3.2 Remote Access Technologies Facts
8.3.3 Remote Desktop
8.3.4 Use Remote Desktop
8.3.5 Remote Desktop Facts
8.3.9 Configure Remote Services
q_remote_access_remote_desktop_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
53/103
3/17/25, 10:55 AM
Individual Response
Question 48.
Correct
In which of the following situations should you NOT use an ESD wrist strap?
When replacing worn or frayed power cords.
When replacing memory modules.
When working with high-voltage components.
When wearing jewelry.
Explanation
Do not use an ESD wrist strap when working with monitors, power supplies, laptop LCD
panels, or other high-voltage components.
If you wear jewelry when working with hardware components, you need to be careful as it can
conduct electricity and cause physical harm. However, using an ESD wrist strap is designed to
protect hardware components and does not impact personal safety.
An ESD wrist strap protects hardware components and has no impact on personal safety
when replacing worn or frayed power cords.
An ESD wrist strap is specifically designed to protect memory modules from electrostatic
discharge when replacing memory modules in a computer.
References
2.1.1 Safety
2.1.2 Safety Measures
2.1.4 ESD Protection
2.1.5 ESD Facts
2.6.2 PC and Networking Tools Facts
3.6.6 Memory Installation Facts
q_com_safm_esd_not_use_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
54/103
3/17/25, 10:55 AM
Individual Response
Question 49.
Correct
While it takes 3,000 volts or more of ESD before you can feel it, it takes very little ESD to
damage a computer component.
What is the minimum ESD volt discharge that can actually damage a component?
100 volts
10 volts
50 volts
500 volts
Explanation
A discharge of as little as 100 volts, or less, can damage a component, but 3,000 volts or more
of ESD must occur before you can even feel it.
References
2.1.1 Safety
2.1.2 Safety Measures
2.1.5 ESD Facts
q_com_esdp_compare_cabling_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
55/103
3/17/25, 10:55 AM
Individual Response
Question 50.
Correct
Which of the following describes spyware?
It is a malicious program that is disguised as legitimate software.
It is a program that attempts to damage a computer system and
replicate itself to other computer systems.
It monitors the actions of a user and then sends pop-up ads to the user
that match their tastes.
It monitors the actions you take on your machine and sends the
information back to the originating source.
Explanation
Spyware monitors the actions you take on your machine and sends the information back to
the originating source.
Adware monitors the actions of a user that denote their personal preferences and then sends
pop-ups and ads to the user that match their tastes.
A virus is a program that attempts to damage a computer system and replicate itself to other
computer systems.
A Trojan horse is a malicious program that is disguised as legitimate software.
References
14.7.1 Malware
14.7.2 Malware Facts
q_sec_sw_spyware_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
56/103
3/17/25, 10:55 AM
Individual Response
Question 51.
Correct
Most operating systems have a GUI as part of their system. Which of the following BEST
describes an operating system's GUI?
The primary component of a computer that retrieves, processes, and
executes instructions.
An important component of a computer that is used to store data and
machine code while in use.
The microprocessor's program that starts the system up after the
computer is powered on.
A user-friendly interface that uses icons and visual components to
interact with the system.
Explanation
A GUI is a user-friendly interface that uses icons and visual components to interact with the
system.
The CPU is the primary component of a computer that retrieves, processes, and executes
instructions.
RAM is an important component of a computer that is used to store data and machine code
while in use.
The BIOS is the microprocessor's program. It starts the system up after the computer is
powered on.
References
4.1.2 Workstation Operating System Facts
q_workstation_os_gui_definition_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
57/103
3/17/25, 10:55 AM
Individual Response
Question 52.
Correct
Joe, a mobile device user, is allowed to connect his personally owned tablet to a company's
network.
Which of the following policies defines how company data is protected on Joe's tablet?
Remote Backup Policy
Trusted Sources Policy
Device Encryption Policy
BYOD Policy
Explanation
A Bring Your Own Device (BYOD) Policy addresses the issues of personal data privacy and
corporate data protection. This policy also addresses corporate versus individual mobile
device control.
A Trusted Sources Policy refers to the approved location for obtaining mobile applications,
such as Google Play Store, App Store, and Microsoft Store.
A Device Encryption Policy protects data if the device is lost or stolen. A BYOD Policy may or
may not require full device encryption from a Device Encryption Policy when storing corporate
data.
A Remote Backup Policy refers to applications that back up data on a mobile device. Usually,
the backup data is stored in the cloud.
References
12.6.2 Mobile Device Security Facts
q_mob_dev_sec_byod_policy_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
58/103
3/17/25, 10:55 AM
Individual Response
Question 53.
Incorrect
As the IT administrator for a small consulting firm, you want all the computers in the company
office to be able to share files, printers, and local network resources. There are currently 15
computers in the office.
Which of the following Windows features could you implement that would MOST closely
match your network requirements?
Workgroup
Bitlocker
Domain access
Remote Desktop Protocol (RDP)
Explanation
The Windows workgroup feature is designed to for small networks on a local network.
Workgroups allow users to share files, printers, and local network resources, and usually
consist of 20 or fewer computers.
Accessing a domain through a domain account is a good option for larger networks. However,
in this scenario, you only need to share resources on a small local network.
Bitlocker is designed to encrypt a whole disk or the data on a disk. It is not designed to
provide resource sharing on a network.
Remote Desktop Protocol (RDP) gives you remote access to a Windows computer. However, it
is not designed for sharing resources among a group of computers that are networked
together.
References
4.2.6 Windows Features
4.2.7 Windows Features Facts
8.1.1 Workgroup vs. Domain Setup
q_windows_features_workgroup_solution_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
59/103
3/17/25, 10:55 AM
Individual Response
Question 54.
Correct
You are working on your Windows 10 computer during a fierce thunder storm. Lightning
strikes the nearby transformer, and your office loses all power. Since your laptop's battery is
dead, your computer instantly turns off. Once power to the building has been restored, you
turn your computer on and notice that you are now getting a missing DLL error message.
Which of the following tools is MOST likely to rectify this issue?
defrag
SFC
chkdsk
bootrec
Explanation
System File Checker (SFC) is integrated with Windows Resource Protection, which protects
Registry keys and folders as well as critical system files. If any changes are detected to a
protected system file, the modified file is restored from a cached copy located in the Windows
folder itself.
The chkdsk (check disk) command checks the hard drive for errors, such as read errors and
other storage-related errors. If errors are found, chkdsk has the ability to try to fix these
errors.
The defrag command lets you defragment your hard disk, but this command does not fix
missing DLL files.
The bootrec command (or the bootrec.exe utility) is a tool provided by Microsoft in Windows
Recovery Environment, or Windows RE. This command is typically used to troubleshoot boot
issues and is capable of fixing such things as the mater boot record, the boot sector, and the
Boot Configuration Data (BCD) store.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
q_trouble_win_part2_sfc_missing_dll_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
60/103
3/17/25, 10:55 AM
Individual Response
Question 55.
Correct
Micka, a tech-savvy employee, tried to upgrade her computer from Windows 10 to Windows
11 from the internet. Something went wrong during the upgrade, and Micka's computer will
no longer boot to Windows. She has brought her computer to the IT department for you to
repair.
You have tried to repair the computer, but you are unable to get it to boot to Windows.
Which of the following methods would be the QUICKEST way to get Micka's computer back to
its original Windows 10 operating system?
Restore her system using the recovery partition.
Using the Windows 10 DVD, perform an upgrade.
Connect her computer to your external flash drive and install Windows
10 from the data it contains.
Download and reinstall Windows 10 from the internet.
Explanation
The recovery partition contains a Windows 10 factory image as it came fresh from the factory,
including all of the correct drivers for its devices. Her system can be recovered using this
partition, but all of her data will be lost.
Since the original installation of Windows 10 was corrupted during the upgrade process,
trying to do an upgrade from the source DVD will not detect the old operating system, and it
will fail.
It would take more time to download and manually install than restoring the image from the
recovery partition.
Reinstalling Windows using the DVD or an external flash drive would be time-consuming and
may require additional steps to download and install the drivers required.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.7.1 Windows System Recovery
8.7.2 Use Restore Points
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
61/103
3/17/25, 10:55 AM
Individual Response
8.7.4 Use Windows System Recovery Tools
8.7.7 System Recovery Facts
8.8.6 Windows Boot Options
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
10.5.4 Device Troubleshooting Facts
q_recv_rcon_restore_recov_partition_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
62/103
3/17/25, 10:55 AM
Question 56.
Individual Response
Correct
In which of the following security attacks does the hacker intercept session cookies in order to
access the victim's account?
SQL injection
Cross-site scripting
Brute force
Session hijacking
Explanation
When a user logs into a website, a session cookie is generated. If the hacker can intercept this
data, they will be able to access the user's account. This is known as a session hijacking attack.
A cross-site scripting attack takes advantage of improperly configured input fields on a
website to send an attack to the server. The hacker does not intercept cookies in order to
access the victim's account in this attack.
A SQL injection attack does not intercept cookies in order to access the victim's account. In a
SQL injection attack, the attacker inputs SQL commands into text fields in order to access
data.
In a brute force attack, the attacker attempts to guess a password by using a cracking tool
that submits every possible letter, number, and symbol combination in a short amount of
time. The hacker does not intercept cookies in order to access the victim's account in this
attack.
References
14.5.3 Threats
14.5.4 Threat Facts
q_threats_session_hijacking_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
63/103
3/17/25, 10:55 AM
Individual Response
Question 57.
Correct
What is the FIRST step you should take if an error occurs during startup and your system
continually reboots?
Use the Disable automatic restart on system failure option.
Restore your system from backup.
Go back to the previous build.
Run startup repair.
Explanation
If an error occurs during startup, the system might continually reboot. Start by using the
Disable automatic restart on system failure option on the Advanced Boot Menu to stop the
automatic reboots. You should then be able to boot the system to complete other
troubleshooting tasks or to run Startup Repair.
You may need to restore a system from backup or go back to a previous build, but you should
complete other troubleshooting steps first.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.8.2 Boot Process Facts
8.8.3 Modify the Boot Order
8.8.4 Configure the Boot Order
8.8.6 Windows Boot Options
8.8.8 Startup Error Facts
q_trb_booto_disable_auto_restart_failure_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
64/103
3/17/25, 10:55 AM
Individual Response
Question 58.
Incorrect
A Help Desk technician receives a call from a user who is unable to download new messages
from the company's email server. The technician tells the user to open a command prompt,
ping the email server, and check the SMTP and POP3 server IP addresses.
Which of the following mistakes did the technician make?
The technician did not have the user check the workstation's IP address
first.
The technician did not walk to the user's desk and conduct the tests for
the user.
The technician used jargon that the user probably didn't understand.
The technician had a negative attitude and failed to take notes.
Explanation
By using technical jargon, the technician did not handle the request properly. While words like
ping, SMTP, POP3, and IP address are familiar to system administrators and help desk
technicians, most end users are not familiar with these terms.
The technician did not exhibit a negative attitude.
Most Help Desk issues can be handled either verbally or remotely without the technician
visiting the user face-to-face.
The technician's mistake was an improper communication technique, not a technical mistake.
References
2.3.1 Professionalism
2.3.2 Professionalism Facts
q_proff_jargon_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
65/103
3/17/25, 10:55 AM
Individual Response
Question 59.
Correct
Mission Control is a desktop and window management utility that is used to access several
macOS features. Which of the following are macOS features that you can access through
Mission Control? (Select three.)
Boot Camp
Multiple Desktops
Dashboard
Spotlight
System Preferences
All windows
Secure Notes
Explanation
Through Mission Control, you can access:
Multiple desktops: at the top of Mission Control is the Multiple Desktops feature that is
used to manage and navigate between multiple desktops.
All windows: when activated, Mission Control tiles all application windows on the screen
and groups multiple windows from the same application together.
Dashboard: from Mission Control, you can access the Dashboard, which contains macOS
widgets.
References
4.4.5 macOS Facts
q_mac_mission_control_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
66/103
3/17/25, 10:55 AM
Question 60.
Individual Response
Incorrect
Which of the following protocols provides authentication and encryption services for VPN
traffic?
SSL
TCP
L2TP
IPsec
Explanation
IPsec is a security implementation that provides security for all other TCP/IP-based protocols.
IPsec provides authentication through a protocol called IPsec Authentication Header (AH) and
encryption services through a protocol called IPsec Encapsulating Security Payloads (ESP).
Transmission Control Protocol (TCP) is a Transport layer, connection-oriented protocol that
provides data transmission services. It is not a secure protocol and relies on other measures,
such as IPsec, to provide security.
Secure Sockets Layer (SSL) is an Application layer protocol that is designed to secure network
traffic from certain other protocols, such as HyperText Transfer Protocol (HTTP) and Post
Office Protocol version 3 (POP3). SSL does not provide security for protocols lower in the
TCP/IP protocol stack, such as TCP and UDP.
The Layer 2 Tunneling Protocol (L2TP) is a protocol used to encapsulate Point-to-Point
Protocol (PPP) traffic.
References
8.4.1 Virtual Private Networks (VPN)
8.4.2 Set Up a VPN Connection
8.4.3 VPN Facts
q_vpn_fct_auth_and_ecrypt_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
67/103
3/17/25, 10:55 AM
Individual Response
Question 61.
Correct
You are working on your computer when a person from the shipping department delivers a
new external solid-state drive (SSD) you ordered. When you plug the drive into your USB port,
Windows cannot find a suitable device driver for the drive.
Which of the following Windows consoles would you access Device Manager from to resolve
the issue?
Component Services
Control Panel
System Configuration
Services
Explanation
The best way to add the device driver for your SSD is to use Device Manager. Control Panel is
the only listed Windows console that will give you access to the Device Manager console.
Microsoft Component Services (also known as COM+) provides a system for developing,
deploying, and managing high-performance enterprise, internet, and intranet server
applications. COM+ does not provide tools for managing devices.
Windows Services are applications that start when the computer boots and run in the
background until they are shut down.
The Microsoft System Configuration (msconfig) tool can be used to change configuration
settings, such as which software opens with Windows. This tool does not provide functionality
for managing devices.
References
7.1.4 Control Panel Facts
10.4.2 Install and Manage Device Drivers on Windows
10.4.5 Hardware Device Facts
10.4.6 Device Driver Installation Facts
10.4.7 Manage Devices
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
68/103
3/17/25, 10:55 AM
Individual Response
10.5.3 Work with Legacy Devices and Drivers
10.5.4 Device Troubleshooting Facts
10.5.5 Manage Devices 1
q_controlpanel_access_ext_ssd_tool_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
69/103
3/17/25, 10:55 AM
Individual Response
Question 62.
Correct
List the steps you need to follow to add more disk space to a storage space in Windows. Drag
the correct step from the left to the correct step number on the right. (Not all steps on the left
will be used.)
Step 1
Install a new storage device on the system.
Step 2
Add free space on a new storage device to a storage pool.
Step 3
Allocate space from the storage pool to an existing storage space.
Explanation
When you need to add more disk space to a storage space, follow the steps listed below.
Install a new storage device on the system.
Add the free space on that device to a storage pool.
Allocate space to an existing storage space.
References
5.5.2 View File System Components
5.5.8 Create Volumes with Disk Management
5.5.10 Convert Volumes
5.5.13 Disk Status Facts
5.6.1 Add Storage
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
70/103
3/17/25, 10:55 AM
Individual Response
5.6.2 Create Mount Points and Extending Volumes
5.6.3 Shrink and Split Partitions
5.6.4 Storage Management Facts
5.6.5 Add Space to Existing Volumes
5.7.3 Storage Space Facts
7.1.5 Use Management Consoles
7.1.6 Management Consoles Facts
q_storage_space_task_order_more_space_pp7.question.fex
Question 63.
Correct
Which of the following is an example of a soft token?
Smart card
Key fob
USB security device
Authentication app
Explanation
A soft token is any digital authentication key that is used to authenticate a user. Of these
options, only the authentication app is a soft token, since an authentication app is a digital
app on a phone or tablet.
All the other options are examples of hard tokens, which are hardware devices that
authenticate users.
References
14.4.1 Logical Security Measures
14.4.2 Logical Security Measures Facts
14.4.9 Manage Authentication on Windows
q_logical_security_soft_token_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
71/103
3/17/25, 10:55 AM
Individual Response
Question 64.
Correct
Which of the following troubleshooting utilities scans the operating system files and replaces
corrupt files?
System File Checker
System Image Recovery
System Restore
Services
Explanation
System File Checker scans the operating system files and replaces corrupt files when possible.
System Restore is a utility that lets you revert the system back to a previously created restore
point.
The Services app lets you control the services that run on your operating system.
System Image Recovery is a utility that installs a complete image of the Windows system,
including the operating system, settings, personal files, hardware drivers, and software.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
q_trouble_win_part1_system_file_checker_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
72/103
3/17/25, 10:55 AM
Individual Response
Question 65.
Correct
You have decided to install a new Ethernet network adapter in your Windows 11 desktop
computer. After installing the card and booting to Windows, you notice that you have no
network connection. After looking in Device Manager, you see that the new network card was
detected, but Windows doesn't know what it is.
After doing a quick search on the internet, you find what looks like the correct driver and
install it. A reboot of Windows is performed, but almost immediately after logging on, your
computer crashes. Thinking this must be a fluke, you reboot again with the same result.
Which of the following is the BEST method in this scenario to get Windows to load properly?
Boot from the Windows installation DVD and run Start-up Repair.
Boot from the Windows installation DVD and restore your computer
back to a previous restore point.
Boot to the computer's BIOS/UEFI settings and uninstall the network
driver.
Boot to Safe Mode and uninstall the network driver.
Explanation
When a computer starts in Safe Mode, only the bare minimum background services that are
very important to boot and run Windows are initialized. From this mode, you can then find the
driver that is causing problems and uninstall it.
On some systems, booting to the BIOS/UEFI settings will let you boot to Safe Mode, but you
cannot uninstall the driver causing your computer to crash from the BIOS/UEFI settings
interface.
The Start-up Repair option scans your PC for problems like missing or damaged system files,
but it won't let you uninstall the bad device driver that's causing your computer to crash.
System Restore lets you restore your computer back to a previous restore point. Although this
would work, it will undo any other changes you may have made since the last restore point
was created. So, it's best to try boot to Safe Mode and uninstall the bad driver from there.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
73/103
3/17/25, 10:55 AM
Individual Response
8.7.1 Windows System Recovery
8.7.2 Use Restore Points
8.7.4 Use Windows System Recovery Tools
8.7.7 System Recovery Facts
8.8.6 Windows Boot Options
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
10.5.4 Device Troubleshooting Facts
q_dev_mgm_boot_to_safe_mode_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
74/103
3/17/25, 10:55 AM
Individual Response
Question 66.
Correct
You are choosing a method to secure a mobile device.
Which of the following types of screen locks is LEAST secure?
Swipe lock
Face lock
Fingerprint lock
Passcode lock
Explanation
Swipe lock is the least secure of the choices presented. It is relatively easy to duplicate the
swipe pattern, even as far as six feet away.
Face lock uses facial recognition. This is secure and will become even more sophisticated in
the future.
Passcode lock is the most common lock method. It is more effective when letters are mixed
with digits.
Fingerprint lock is the most secure of the choices presented.
References
12.6.1 Mobile Device Security
12.6.2 Mobile Device Security Facts
q_mob_dev_sec_least_secure_screen_lock_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
75/103
3/17/25, 10:55 AM
Individual Response
Question 67.
Correct
Adding more RAM does not necessarily improve system performance. Which of the following
must you also do to make sure that system performance does improve?
Uninstall the most current update.
Upgrade the CPU to one with multiple cores.
Reboot the system.
Rebuild the Windows profile.
Explanation
Adding more RAM by itself may not increase the speed of a sluggish system because
increased RAM requires more processing power. Upgrading the CPU when you add RAM can
improve system performance.
Rebuilding the Windows profile does not affect the added RAM's performance.
Rebooting the system can help with leaky RAM, but this won't have a lasting impact on added
RAM performance.
Uninstalling the most current update is not related to added RAM's increased performance.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
q_trouble_win_part1_upgrade_cpu_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
76/103
3/17/25, 10:55 AM
Individual Response
Question 68.
Correct
Jared receives an email relating that an account containing a large sum of money has been
frozen by the government of a small African nation. Jared is offered a 25 percent share of this
account if he will help the sender transfer it to a bank in the United States.
Jared replies to the sender and is instructed to send his bank account number so that it can be
used to facilitate the transfer. Jared sends the requested information, and then the sender
uses the information to drain Jared's bank account.
Which type of attack occurred?
Tailgating
Phishing
Eavesdropping
Vishing
Explanation
Jared was the victim of a phishing attack. This particular attack is sometimes referred to as a
Nigerian 419 attack and is very common.
Tailgating occurs when an unauthorized person follows an authorized person into a secure
building or area.
Eavesdropping refers to an unauthorized person listening to conversations of employees or
other authorized personnel discussing sensitive topics.
Vishing is a social engineering attack that takes place over the phone.
References
14.5.1 Social Engineering
14.5.2 Social Engineering Facts
q_social_engineering_phishing_ex_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
77/103
3/17/25, 10:55 AM
Individual Response
Question 69.
Incorrect
While managing disk space for computers in your network, you want to know what the impact
of a new application would be on your available free space.
Where can you find the approximate size of a potential app?
In Network & internet in Settings.
In the app's description in the Microsoft Store.
In Apps & Features in Settings.
In Programs and Features in the Control Panel.
Explanation
You can find the approximate size of an application in the app's description in the Microsoft
Store.
You can find an application's size in Apps & Features in Settings and in Programs and Features
in Control Panel once the application is installed (not before).
You cannot find the approximate size of an application in Network & internet in Settings.
References
4.4.1 macOS Introduction
7.4.8 Microsoft Store Applications Facts
q_store_apps_app_size_before_install_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
78/103
3/17/25, 10:55 AM
Individual Response
Question 70.
Correct
Which remote assistance solution provides the user with a six-digit code to share with the
corresponding remote user?
Remote Assistance
Screen Sharing
Remote Desktop
Quick Assist
Explanation
Quick Assist is a newer Windows app that provides an even easier method to receive or
provide assistance remotely. To assist another user, you access Quick Assist and are provided
a six-digit code that you can send to the person you want to help. After they enter the number
into Quick Assist, you will be able to either view their screen or take control of their system.
Remote Desktop, Remote Assistance, and Screen Sharing require the use of usernames and
passwords, not a six-digit code to share with a remote user.
References
7.1.11 Windows System Tool Facts
8.3.1 Remote Access Technologies
8.3.2 Remote Access Technologies Facts
8.3.6 Remote Assistance
8.3.7 Remote Assistance Facts
8.3.8 Use Remote Assistance
q_remote_asst_quick_assist_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
79/103
3/17/25, 10:55 AM
Individual Response
Question 71.
Correct
You are the IT technician for your company.
Which of the following mechanisms would BEST allow you to resolve a hostname to its
associated IP address? (Select two.)
FTP
hosts file
DNS
BOOTP
DHCP
Explanation
You can use the Domain Name System (DNS) to get the IP address from a given hostname.
You can also use the local hosts file to map hostnames to IP addresses. On Windows systems,
this file is located in C:\Windows\system32\drivers\etc\.
You use FTP to transfer files.
You use either the DHCP protocol or the BOOTP protocol to assign IP addresses and other
configuration information to hosts automatically.
References
11.3.2 IPv4 Addressing
11.3.3 IPv4 Address Facts
11.3.6 Configure TCP/IP Properties
11.3.7 Configure TCP/IP Settings on Windows 10
11.3.8 Configure TCP/IP Settings on Windows 11
q_addressing_name_resolution_solutions_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
80/103
3/17/25, 10:55 AM
Individual Response
Question 72.
Correct
To protect a Windows 11 system, you've configured System Restore to automatically protect
your system using restore points. Will this adequately protect the user data on the system?
No. You need to implement a RAID 0 array to protect your data.
Yes. The user data is protected.
No. You need to enable File History.
No. You need to enable Storage Spaces.
Explanation
You also need to create a backup of your user data. You can do this using the File History or
Backup and Restore (Windows 7) features.
Storage Spaces is used to aggregate available storage space from multiple storage devices in
the system.
A RAID 0 array does not provide data redundancy.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.7.1 Windows System Recovery
8.7.2 Use Restore Points
8.7.4 Use Windows System Recovery Tools
8.7.7 System Recovery Facts
8.8.6 Windows Boot Options
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
10.5.4 Device Troubleshooting Facts
q_recv_rcon_sys_restore_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
81/103
3/17/25, 10:55 AM
Individual Response
Question 73.
Correct
Which of the following file extensions indicate a Windows system file? (Select two.)
.msi
.rtf
.vxd
.com
.dll
Explanation
Windows system file extensions include .dll (dynamic link library), .drv (device driver), and .vxd
(virtual device driver).
Program file extensions include .exe and .com. Document file extensions include .rtf (rich
text). Windows Installer files use the .msi extension.
References
4.1.1 Workstation Operating Systems
4.1.2 Workstation Operating System Facts
4.2.1 Windows Operating Systems
4.2.2 Windows Operating System Facts
4.2.4 Windows 11 Editions
9.1.2 System File Locations
9.1.3 File Management Facts
q_os_files_win_sys_file_ext_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
82/103
3/17/25, 10:55 AM
Individual Response
Question 74.
Correct
Alice recently purchased a new cell phone. After her vacation, she decides to transfer her
holiday photos to her computer, where she can do some touchup work before sending the
pictures to her children.
When Alice attaches her phone to her computer, she sees that Windows detected her phone
and tried to load the applicable software to give her access to her phone. Unfortunately, after
trying for several minutes, Windows displays a message indicating that the attempt was
unsuccessful. When Alice explores her available drives, her phone is not listed.
Which of the following would be the BEST administrative tool to help Alice gain access to her
phone?
Event Viewer
Device Manager
Component Services
System Configuration
Services
Explanation
When Alice plugged in her phone, Windows detected the new device and automatically tried
to find a device driver that would give her access to her phone and pictures. Since Windows
was unsuccessful at locating a driver automatically, Alice should open Device Manager, from
which she could install the applicable driver.
System Configuration controls the initial startup, boot files, and services loaded along with
other tasks.
Component Services is used to access the local Event Viewer to examine administrative events
and system logs.
Event Viewer maintains logs about program, security, and system events on Windows and can
be used to view and manage the event logs, gather information about hardware and software
problems, and monitor Windows security events.
The Services console lets you disable or enable Windows services. These are system-level
programs that typically start when Windows boots up.
References
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
83/103
3/17/25, 10:55 AM
Individual Response
5.5.2 View File System Components
7.1.5 Use Management Consoles
7.1.6 Management Consoles Facts
10.4.2 Install and Manage Device Drivers on Windows
10.4.5 Hardware Device Facts
10.4.6 Device Driver Installation Facts
10.4.7 Manage Devices
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
10.5.3 Work with Legacy Devices and Drivers
10.5.4 Device Troubleshooting Facts
10.5.5 Manage Devices 1
q_dev_mgm_device_manager_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
84/103
3/17/25, 10:55 AM
Individual Response
Question 75.
Correct
You want to set up a Windows system to also be able to boot to Linux. To be able to dual boot,
the system needs a partition on which to install Linux. However, you don't have an extra hard
disk that can be used for the Linux partition. The existing disk has no unpartitioned space
available, but it has about 300 GB of free space.
Which of the following disk management operations will BEST prepare your hard disk for dual
boot in this scenario?
Convert the disk from basic to dynamic.
Convert the disk from physical to logical partitions.
Reformat the disk with the partitions needed for a dual boot system.
Shrink the primary partition.
Explanation
You can decrease the space used by primary partitions and logical drives by shrinking them
into adjacent, contiguous space on the same disk. For example, if you discover that you need
an additional partition, but do not have additional disks, you can shrink the existing partition
from the end of the volume to create new unallocated space that can then be used for a new
partition.
Reformatting the disk, converting it from basic to dynamic, or converting it from physical to
logical partitions are not the best solutions for this scenario.
References
5.5.3 File System Facts
5.5.5 MBR Partitioning Facts
5.5.6 GPT Partitioning
5.5.7 GPT Partitioning Facts
5.5.8 Create Volumes with Disk Management
q_mbr_part_disk_mng_op_prepare_hdd_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
85/103
3/17/25, 10:55 AM
Individual Response
Question 76.
Correct
Your organization has 75 workstations that each need a software program installed. Which of
the following is the BEST choice to accomplish this?
Purchase a personal license for the software program and reuse the
activation code for each workstation.
Purchase an enterprise license for the software program and reuse the
activation code for each workstation.
Purchase one personal license for the software program and then search
online for additional activation codes provided by third parties or
activation code generators.
Purchase 75 personal licenses for the software program and use each
unique activation code for each workstation.
Explanation
The best choice is to purchase an enterprise license for the software program that allows 75
installations. Generally, this will give you one activation code that can be used 75 times. This
would be the most cost-effective, legal choice.
Purchasing 75 personal license would almost always be much more expensive than buying
the enterprise alternative.
A personal license usually only allows one to three installations for the activation code.
Purchasing one personal license for the software and then searching online for additional
activation codes provided by third parties or activation code generators is illegal. Choosing
this route could expose your organization to litigation and could cost you your job.
References
7.6.1 Software Licensing
7.6.2 Digital Rights Management (DRM)
7.6.3 Digital Content Management Facts
q_drm_fcts_ent_reuse_act_code_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
86/103
3/17/25, 10:55 AM
Individual Response
Question 77.
Correct
You are an IT technician for your company. Fred calls you to complain that every time he
opens his internet browser, the default home page has been changed to a site he is not
familiar with.
You suspect this change is being caused by a malware infection on his system. However, after
you run antimalware and antivirus software on Fred's system, it is still having the same issue.
Which of the following would be the next BEST way to remove the malware?
Restore Fred's computer back to a previous restore point.
Format Fred's disks and perform a clean installation of the operating
system.
Purchase a new disk and deploy a backup image of Windows.
Perform an image deployment from a backup image to restore Fred's
computer to a known good point.
Explanation
Although all of the options could remove the malware and virus, the best first step is to try to
restore the computer back to a restore point prior to the infection.
If the infection has been included in all of the restore points, the next best thing would be to
restore the drive using a good image that contains the operating system and the programs
and files required by your company.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.7.1 Windows System Recovery
8.7.2 Use Restore Points
8.7.4 Use Windows System Recovery Tools
8.7.7 System Recovery Facts
8.8.6 Windows Boot Options
10.5.1 Device Driver Troubleshooting
10.5.2 Troubleshoot Devices
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
87/103
3/17/25, 10:55 AM
Individual Response
10.5.4 Device Troubleshooting Facts
q_recv_rcon_restore_back_to_restore_pt_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
88/103
3/17/25, 10:55 AM
Individual Response
Question 78.
Correct
You have logged into your banking website using a password, but now the website indicates
that it sent you an email with a confirmation code that you need to retrieve and enter before
you can continue to access the website.
Which of the following security measures is being used?
Extensions
Hash code
Two-factor authentication
Certificate authority
Explanation
Two-factor authentication is using two authentication credentials to access one account. For
example, once you enter your password to access your account, you receive an alert via email,
text message, or voicemail message with a confirmation code that you need to also enter
before accessing the website.
Certificate authority (CA) information is stamped on all packets coming from a website to
validate where they came from. If any packets are misdirected through an untrusted site, the
browser will detect that the certificate is now invalid and will give the user a warning in a the
form of a dialog box. This is not associated with authentication to a website.
Extensions are one or more functions added to the browser that can be created by the
affiliated browser or a third party.
Hashing is a feature associated with password managers. Hashing generates a string of
values (hash code) that jumbles the password into symbols and letters. Hash codes cannot be
reversed, which makes them a good deterrent to security threats. The actual password is then
saved to the account.
References
14.10.1 Browsers
14.10.2 Browser Facts
q_browsers_two_factor_auth_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
89/103
3/17/25, 10:55 AM
Individual Response
Question 79.
Incorrect
Your computer has a single NTFS partition that is used for the C: drive with the folders below.
C:\Confidential
C:\PublicReports
In the C:\Confidential folder, you edit the properties for the two files below and assign the
Deny Read permission to the Users group.
Reports.doc
Costs.doc
The C:\PublicReports folder allows the Full Control permission for the Users group. There are
no other permissions assigned except the default permissions. You then take the following
actions. You:
Move Reports.doc from C:\Confidential to C:\PublicReports.
Copy Costs.doc from C:\Confidential to C:\PublicReports.
Which of the following BEST describes the permission the members of the Users group will
have for the two files in the C:\PublicReports folder?
Allow Full Control for both.
Deny Read for Reports.doc and Allow Full Control for Costs.doc.
Allow Full Control for Reports.doc and Deny Read for Costs.doc.
Deny Read for both.
Explanation
Users will have Deny Read for the Reports.doc file. Moving the file to the new folder on the
same drive preserves the NTFS permissions assigned to the file.
Users will have Allow Full Control for the Costs.doc file. Copying the file to the new folder
removes any existing NTFS permissions so that only inherited permissions apply.
References
9.1.1 Windows File and Folder Properties
9.1.3 File Management Facts
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
90/103
3/17/25, 10:55 AM
Individual Response
9.2.1 NTFS and Share Permissions
9.2.2 NTFS and Share Permissions Facts
9.2.3 Configure Basic Folder Sharing on Windows
9.2.4 Configure Advanced Folder Sharing on Windows
9.2.5 Configure Share and NTFS Permissions
9.2.6 Configure NTFS Permissions
9.2.8 Configure NTFS Permissions
9.3.3 Encrypt Files
q_ntfs_deny_read_to_reports_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
91/103
3/17/25, 10:55 AM
Individual Response
Question 80.
Correct
Which of the following is a common malware symptom?
Increase in pop-up ads
Increase in internet speeds
Anti-malware software updating itself
Decrease in network traffic
Explanation
Some common malware symptoms include the following:
Devices running slow
Files being deleted, renamed, or altered
Heavy network traffic
Inability to access the internet
Increased pop-up ads
False antivirus ads
None of the other options are common malware symptoms.
References
14.7.7 Malware Removal Best Practice
14.7.8 Malware Removal Best Practice Facts
q_malware_removal_increased_popup_ads_symptom_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
92/103
3/17/25, 10:55 AM
Individual Response
Question 81.
Correct
Jared, an employee in Human Resources, left the company two months ago as part of a
company downsizing initiative. A new Human Resources VP is now running the department
and has re-hired Jared to work as a manager in Human Resources.
As a new IT system administrator for the company, you have been assigned to re-establish all
of Jared's accounts, including network accounts, email, software, and VPN access. However,
you discover that no accounts exist for Jared.
What should have been done during Jared's offboarding process to make sure his accounts
were still available for a period of time?
The accounts should have been left in place for a required period of
time.
The accounts should have been disabled instead of deleted.
The account passwords should have been changed.
The accounts should have been deleted, but not removed from the
trash.
Explanation
As part of the offboarding process, you should disable a user account instead of deleting it
right away. This ensures that you can back up or transfer any valuable data that the user
might have saved as well as save time in re-establishing those accounts.
Accounts are normally designed to either be disabled or deleted. There is no retrieving them
from a trash location once they have been deleted.
Leaving the accounts in place for a period of time (such as a couple of months) would have
allowed Jared to continue accessing sensitive company information, which could have
resulted in a security breach.
While you could have changed the passwords on all the accounts, the best way would have
been to disable the accounts immediately.
References
2.9.3 Onboarding and Offboarding Checklists
2.9.4 Onboarding and Offboarding Checklists Facts
q_onboard_offboard_disable_accounts_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
93/103
3/17/25, 10:55 AM
Individual Response
Question 82.
Correct
A large number of compromised computers are infected with malware that allows an attacker
(herder) to control the computers to spread email spam and launch denial-of-service attacks.
Which of the following does this security threat describe?
Phishing
Spoofing
On-path attack
Zombie/botnet
Explanation
Devices that are infected with malware that can be remote controlled by an attacker are
known as zombies. A collection of these zombies that are controlled by the same attacker are
known as a botnet (robot network).
Phishing is an attempt to trick a user into compromising personal information or
downloading malware. Most often, phishing involves an email that contains a malicious
attachment or hyperlink.
An on-path attack intercepts communications between two systems and alters the message
before sending it on to the original recipient.
Spoofing is when an entity misrepresents itself by using a fake IP address or, more commonly,
a fake email address that resembles a real address. The person being spoofed may not
immediately discover that the address is fake.
References
14.7.1 Malware
14.7.2 Malware Facts
q_sec_sw_zombie_botnet_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
94/103
3/17/25, 10:55 AM
Individual Response
Question 83.
Correct
Which of the following security solutions would prevent you from reading a file that you did
not create?
EFS
IPSec
BitLocker
VPN
Explanation
EFS is a Windows file encryption option that encrypts individual files so that only the user who
created the file can open it. Decryption is automatic when the file owner opens it. Other users
cannot open the encrypted file unless specifically authorized.
A virtual private network (VPN) uses an encryption protocol (such as IPsec, PPTP, or L2TP) to
establish a secure communication channel between two hosts (or between one site and
another site). Data that passes through the unsecured network is encrypted and protected.
BitLocker is a Microsoft security solution that encrypts the entire contents of a hard drive,
protecting all files on the disk. BitLocker uses a special key, which is required to unlock the
hard disk. You cannot unlock/decrypt a drive simply by moving it to another computer.
References
9.3.2 File Encryption Facts
9.3.3 Encrypt Files
9.3.4 Configure File Encryption
9.3.8 BitLocker Facts
q_sec_data_efs_sol_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
95/103
3/17/25, 10:55 AM
Individual Response
Question 84.
Incorrect
You recently purchased a USB audio headset and connected it to a USB port on your Windows
system. The headset includes a microphone that can be used to record audio. However, when
you launch your audio recording program, no audio is recorded. You need to reconfigure the
system to use the headset mic instead of the built-in mic.
Click the tab you would use in the Sound Properties window to accomplish this task.
Explanation
You can set sound properties in Control Panel by going to Hardware and Sound > Sound. Use
the Recording tab to configure the default audio recording device.
Use the Playback tab to configure the default audio playback device.
The Sounds tab configures the sound scheme.
Use the Communications tab to configure the system audio to be automatically muted when
the computer places or receives phone calls.
References
3.12.5 Sound Card Installation Facts
7.1.3 Use Control Panel
7.1.4 Control Panel Facts
q_audio_recfg_for_headset_tab_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
96/103
3/17/25, 10:55 AM
Individual Response
Question 85.
Correct
What method is used to ensure proper ventilation in a server room?
Internal cooling systems
Internal fans
Maintaining a steady temperature
Hot and cold aisles
Explanation
Server rooms and data centers often use hot and cold aisles that are designed to ensure that
hot air is removed and cool air is pushed into the room.
Internal fans, cooling systems, and a well-maintained temperature are important, but do not
assist with the ventilation concerns in a server room.
References
2.1.3 Electrostatic Discharge
2.2.1 Environmental Concerns
2.2.2 Environmental Facts
2.5.1 PC Maintenance Best Practices
2.5.2 PC Maintenance Facts
q_env_cncrn_server_room_vent_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
97/103
3/17/25, 10:55 AM
Individual Response
Question 86.
Correct
Which of the following disk maintenance utilities locates and disposes of files that can be
safely removed from a disk?
Disk Management
Disk Cleanup
Check Disk
Disk Defragmenter
Explanation
Disk Cleanup helps manage disks by locating and disposing of files that can be safely removed
from the disk.
Disk Defragmenter optimizes the performance of your hard drive by joining fragments of files
that are in different locations into a single location.
Check Disk is a utility that verifies a hard disk's file system integrity.
Disk Management is a tool for viewing, modifying, and creating partitions.
References
5.8.1 Storage Optimization
5.8.5 Disk Optimization Facts
5.8.6 Perform Disk Maintenance
q_dsk_opt_disk_cleanup_def_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
98/103
3/17/25, 10:55 AM
Individual Response
Question 87.
Correct
Which of the following are included in a network topology diagram? (Select two.)
A layout of all electrical wiring and components.
A layout of server racks, cooling, and air circulation systems.
A layout of all plumbing and HVAC components.
The location and IP addresses of hubs, switches, routers, and firewalls.
The relationship between remote locations and the WAN links that
connect them.
Explanation
A network diagram provides a visual representation of the logical and physical layout of your
network. A single diagram or a collection of diagrams can include the location and IP
addresses of hubs, switches, routers, and firewalls. It can also show the relationship between
remote locations and the WAN links that connect them.
A floor plan provides a layout of all electrical, plumbing, HVAC, and wiring components. For
example, a server room's floor plan would include information on server racks, cooling, air
circulation, and fire suppression systems.
References
2.9.1 Documentation Types
2.9.2 Documentation Types Facts
q_documentation_net_top_diagram_details_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-42…
99/103
3/17/25, 10:55 AM
Individual Response
Question 88.
Incorrect
You have four volumes on a basic hard disk.
Which of the following are you MOST likely to see as the status of the fourth volume if it is
valid and has no errors?
Healthy (Dynamic)
Healthy (Logical Drive)
Healthy (Primary Partition)
Healthy (Basic)
Healthy
Explanation
A basic hard disk can have only have four primary partitions. To get around this limitation on
basic disks, the fourth partition is automatically configured as an extended partition that can
hold logical drives, so the fourth partition would show a status of Healthy (Logical Drive).
The first three partitions would show a status of Healthy (Primary Partition). If the disk had
been a dynamic disk, the status would just be Healthy. If the disk is converted from basic to
dynamic, the status would be changed to show just Healthy.
References
5.5.2 View File System Components
5.5.8 Create Volumes with Disk Management
5.5.10 Convert Volumes
5.5.13 Disk Status Facts
5.6.1 Add Storage
5.6.2 Create Mount Points and Extending Volumes
5.6.3 Shrink and Split Partitions
5.6.4 Storage Management Facts
5.6.5 Add Space to Existing Volumes
5.7.3 Storage Space Facts
7.1.5 Use Management Consoles
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-4…
100/103
3/17/25, 10:55 AM
Individual Response
7.1.6 Management Consoles Facts
q_disk_stat_hdd_4th_vol_status_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-4…
101/103
3/17/25, 10:55 AM
Individual Response
Question 89.
Correct
You are troubleshooting a Windows 11 system that won't boot. The system appears to
initialize just fine, and POST completes correctly.
However, Windows does not load, and an error message is displayed on the screen, indicating
that the operating system is not found. You determine that the Master Boot Record (MBR) is
corrupt.
To fix the issue, you perform the following steps:
1. Boot the system from the Windows 11 installation DVD.
2. Access the Recovery Environment.
3. Open a Command Prompt window.
Enter the command that you should run at the Command Prompt to address this issue.
bootrec /fixmbr
Explanation
The bootrec /fixmbr command writes a Windows-compatible MBR to the system partition.
This command does not overwrite the existing partition table. Use this method when you
need to resolve MBR corruption issues or when you have to remove non-standard code from
the MBR.
References
7.8.1 Troubleshooting Windows Part 1
7.8.2 Troubleshooting Windows Facts Part 1
8.8.2 Boot Process Facts
8.8.3 Modify the Boot Order
8.8.4 Configure the Boot Order
8.8.6 Windows Boot Options
8.8.8 Startup Error Facts
q_trb_err_bootrec_fixmbr_cmd_pp7.question.fex
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-4…
102/103
3/17/25, 10:55 AM
Individual Response
Question 90.
Correct
Which of the following commands displays a listing of the Group Policy Objects that have
been applied to a computer and the user?
gpupdate
gpupdate /force
gpresult
gpedit.msc
Explanation
gpresult displays a listing of the Group Policy Objects that have been applied to a computer
and the user.
gpupdate forces a computer to ask the domain controller for new or updated Group Policy
objectives. These updates usually occur automatically, but on occasion, you may need to force
the updates on a computer.
gpedit.msc is the Group Policy editing tool in Windows.
References
7.1.13 System Command Facts
8.1.12 Group Policy Facts
q_gp_fcts_gpresult_cmd_pp7.question.fex
Copyright © CompTIA, Inc. All rights reserved.
https://labsimapp.testout.com/v6_0_671/exam-engine.html/9d996078-e82d-4603-aa56-3514304ed0f1/exam-session/42913378/e1b3357f-ca16-4…
103/103