A government organization forbids a systems administrator from configuring any servers without the presence of another employee. Which of the following threats is the company trying to mitigate?
A. Zero-day
B. On-path
C. Evil twin
D. Insider
Show Answer
Correct Answer: D
Explanation: Requiring a second employee to be present enforces separation of duties and reduces the risk that a trusted administrator could intentionally or unintentionally perform malicious actions. This control specifically mitigates insider threats, not external attacks like zero-day exploits, on-path attacks, or evil twin attacks.
Question 5
A user reports that their internally hosted CRM application splash screen attempts to load, pauses for a few seconds, and then disappears. A technician installs the application software on their computer and is able to recreate the issue. When checking the application logs, the technician sees the following:
Windows could not start the CRM Service on Local Computer 10169. The service did not start due to a log-on failure.
Which of the following would most likely cause this issue?
A. The user typed their account password incorrectly.
B. The bandwidth available is insufficient to run the application.
C. VLAN settings are blocking communication to the hosted application.
D. The LDAP service account used by the service is disabled.
E. The computer does not meet minimum hardware specifications.
Show Answer
Correct Answer: D
Explanation: The error explicitly states that the CRM Windows service failed to start due to a log-on failure. This points to a problem with the account configured to run the service. If the LDAP or service account is disabled (or otherwise invalid), Windows cannot authenticate it, causing the service to fail at startup. User password mistakes, bandwidth, VLANs, or hardware limitations would not produce a service log-on failure message.
Question 6
A company wants to prevent unauthorized physical access to its mobile devices. Which of the following should the company do? (Choose two.)
A. Disable built-in hotspots.
B. Configure VPN software.
C. Install an antivirus application.
D. Use PIN authentication.
E. Turn on location services.
F. Enable screen timeout.
Show Answer
Correct Answer: D, F
Explanation: Preventing unauthorized physical access focuses on securing the device itself if it is picked up or stolen. Using PIN authentication restricts access to the device, and enabling a screen timeout ensures the device locks automatically when not in use. The other options address network security, malware protection, or tracking, not physical access control.
Question 6
A technician needs to apply a settings file to all user workstations. Which of the following tools should the technician use to import the file?
A. lusrmgr.msc
B. devmgmt.msc
C. regedit.exe
D. msconfig.exe
Show Answer
Correct Answer: C
Explanation: The question asks which tool is used to import a settings file across user workstations. In Windows, settings files used for mass configuration are typically .reg files containing registry settings. These are imported using Registry Editor (regedit.exe). The other options manage users (lusrmgr.msc), hardware devices (devmgmt.msc), or startup/boot options (msconfig.exe), not registry imports.
Question 7
A vendor normally releases security patches for its operating system on a monthly basis. An administrator receives an email from the vendor that says the vendor has published a patch for a zero-day flaw in its operating system outside of the normal patch schedule. Which of the following actions should the administrator take first in order to properly address this issue in a production environment?
A. Wait until the next monthly patch is issued and deploy it with those updates.
B. Immediately deploy the patch to all company-owned computers.
C. Delay the patch deployment to not interfere with the production environment.
D. Deploy the patch to a small number of computers in order to test it in a lab.
Show Answer
Correct Answer: D
Explanation: An out-of-band patch for a zero-day vulnerability is urgent, but best practice in a production environment is to test any patch before full deployment. Deploying first to a small number of systems or a lab validates compatibility and stability, reducing the risk of outages, before rolling it out broadly.
Question 7
A technician is reviewing an organization's current incident management policy. The organization uses a third-party vendor to protect the organization's assets with multiple tools. Which of the following service types is the organization using?
A. PaaS
B. EDR
C. MDR
D. XDR
Show Answer
Correct Answer: C
Explanation: The scenario describes a third-party vendor that monitors, detects, and responds to security incidents using multiple security tools on behalf of the organization. This aligns with Managed Detection and Response (MDR). PaaS is a cloud computing model, EDR is a specific endpoint tool rather than a managed service, and XDR is an extended detection platform that may be vendor-provided but does not inherently imply a managed third-party service.
Question 8
An organization is creating a new application. As part of the deployment, the roles and responsibilities for supporting the application need to be documented. Which of the following is designed to contain this information?
A. SOP
B. NDA
C. DRM
D. EULA
Show Answer
Correct Answer: A
Explanation: An SOP (Standard Operating Procedure) documents roles, responsibilities, and processes for operating and supporting an application. The other options (NDA, DRM, EULA) address legal agreements or content protection, not operational support responsibilities.
Question 8
A company is implementing the 3-2-1 backup rule. Which of the following should the company do?
A. Perform both full and differential backups.
B. Test the backup integrity every three weeks.
C. Keep all backup media on site for fast recovery.
D. Use at least two different types of media.
Show Answer
Correct Answer: D
Explanation: The 3-2-1 backup rule requires keeping three total copies of data, stored on at least two different types of media, with one copy kept offsite. Using at least two different types of media directly satisfies the '2' component of this rule. The other options do not address the core requirements of 3-2-1.
Question 9
Which of the following is the best term to describe the concept in which AI makes incorrect assumptions because of limited training?
A. Bias
B. Hallucinations
C. Inconsistency
D. Plagiarism
Show Answer
Correct Answer: A
Explanation: The concept described is AI making skewed or incorrect assumptions due to limitations or imbalances in its training data. This is best characterized as bias, where the training data does not adequately represent reality and leads to systematic errors. Hallucinations refer instead to confident fabrication of information, not specifically to skewed assumptions from limited training.
Question 9
A technician is unable to upgrade a desktop computer from Windows 10 to Windows 11. Which of the following is most likely preventing the upgrade?
A. Missing TPM module
B. Slow HDD spindle speed
C. Low refresh rate
D. High RAM latency
Show Answer
Correct Answer: A
Explanation: Windows 11 has strict hardware requirements, including a Trusted Platform Module (TPM) version 2.0. If a system lacks a TPM 2.0 chip or it is disabled in UEFI/BIOS, the Windows 11 installer will block the upgrade as unsupported. The other options (HDD spindle speed, refresh rate, RAM latency) may affect performance but do not prevent the upgrade.
$19
Get all 187 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.