Font size
Worksheets220-1102 E P2
Total questions: 68
Worksheet time: 36mins
A user reports that a workstation is operating sluggishly. Several other users operate on the same workstation and have reported that the workstation is operating normally. The systems administrator has validated that the workstation functions normally. Which of the following steps should the systems administrator most likely attempt NEXT?
Run the chkdsk command.
Rebuild the user's profile.
Add more system memory.
Defragment the hard drive.
Increase the paging file size.
A user is unable to log in to the domain with a desktop PC, but a laptop PC is working properly on the same network. A technician logs in to the desktop PC with a local account but is unable to browse to the secure intranet site to get troubleshooting tools. Which of the following is the
MOST likely cause of the issue?
Time drift
Dual in-line memory module failure
Application crash
Filesystem errors
A department has the following technical requirements for a new application:
Quad Core processor
250GB of hard drive space
6GB of RAM
Touch screens
The company plans to upgrade from a 32-bit Windows OS to a 64-bit OS. Which of the following will the company be able to fully take advantage of after the upgrade?
CPU
Hard drive
Touch screen
RAM
Which of the following Wi-Fi protocols is the MOST secure?
WPA3
WPA-AES
WEP
WPA-TKIP
Which of the following provide the BEST way to secure physical access to a data center server room? (Choose two.)
Biometric lock
Video surveillance
Locking rack
Access control vestibule
Badge reader
An organization is centralizing support functions and requires the ability to support a remote user's desktop. Which of the following technologies
will allow a technician to see the issue along with the user?
RDP
VNC
SSH
VPN
A technician found that an employee is mining cryptocurrency on a work desktop. The company has decided that this action violates its guidelines. Which of the following should be updated to reflect this new requirement?
AUP
IRP
EULA
MOM
A user reports that antivirus software indicates a computer is infected with viruses. The user thinks this happened while browsing the internet. The technician does not recognize the interface with which the antivirus message is presented. Which of the following is the NEXT step the technician should take?
Call the phone number displayed in the interface of the antivirus removal tool.
Proceed with initiating a full scan and removal of the viruses using the presented interface.
Investigate what the interface is and what triggered it to pop up.
Shut down the infected computer and swap it with another computer.
A user wants to set up speech recognition on a PC. In which of the following Windows Settings tools can the user enable this option?
Ease of Access
Personalization
System
Language
A technician is replacing the processor in a desktop computer. Prior to opening the computer, the technician wants to ensure the internal components are protected. Which of the following safety procedures would BEST protect the components in the PC? (Choose two.)
Placing the PSU in an antistatic bag
Utilizing an ESD strap
Removing dust from the ventilation fans
Ensuring equipment is grounded
Disconnecting the computer from the power source
A user attempts to open some files, but a message appears stating that the files are encrypted. The user was able to access these files before without receiving this message, and no changes have been made within the company. Which of the following has infected the computer?
Cryptominer
Phishing
Ransomware
Keylogger
A user connects a laptop that is running Windows 1 Oto a docking station with external monitors when working at a desk. The user would like to
close the laptop when it is docked, but the user reports it goes to sleep when it is closed. Which of the following is the BEST solution to prevent
the laptop from going to sleep when it is closed and on the docking station?
Power Options>What Closing the Lid Does>Undock
Power Options>What Closing the Lid Does>Open Windows
Power Options>When to Turn Off the Display>Never
Power Options>What Closing the Lid Does>When I Close the Lid>Do Nothing.
Once weekly, a user needs Linux to run a specific open-source application that is not available for the currently installed Windows platform. The user has limited bandwidth throughout the day. Which of the following solutions would be the MOST efficient. allowing for parallel execution of the Linux application and Windows applications?
Install and run Linux and the required application in a PaaS cloud environment.
Install and run Linux and the required application as a virtual machine installed under the Windows OS.
Use a swappable drive bay for the boot drive and install each OS with applications on its own drive. Swap the drives as needed.
Set up a dual boot system by selecting the option to install Linux alongside Windows.
Security software was accidentally uninstalled from all servers in the environment. After requesting the same version of the software be reinstalled, the security analyst learns that a change request will need to be filled out. Which of the following is the BEST reason to follow the change management process in this scenario?
Owners can be notified a change is being made and can monitor it for performance impact.
A risk assessment can be performed to determine if the software is needed.
End users can be aware of the scope of the change.
A rollback plan can be implemented in case the software breaks an application.
A technician is configuring a SOHO device. Company policy dictates that static IP addresses cannot be used. The company wants the server to maintain the same
IP address at all times. Which of the following should the technician use?
NAT
DNS A record
Port forwarding
DHCP reservation
Which of the following must be maintained throughout the forensic evidence life cycle when dealing with a piece of evidence?
Acceptable use
Chain of custody
Security policy
Information management
A technician has spent hours trying to resolve a computer issue for the company's Chief Executive Officer (CEO). The CEO needs the device returned as soon as possible. Which of the following step should the technician take NEXT?
Continue researching the issue.
Repeat the iterative processes.
Inform the CEO the repair will take a couple of weeks.
Escalate the ticket.
A user is configuring a new SOHO Wi-Fi router for the first time. Which of the following settings should the user change FIRST?
Encryption
Wi-Fi channel
Default passwords
Service set identifier
A user created a file on a shared drive and wants to prevent its data from being accidentally deleted by others. Which of the following applications should the technician use to assist the user with hiding the file?
Device Manager
Indexing Options
File Explorer
Administrative Tools
Which of the following is the MOST cost-effective version of Windows 10 that allows remote access through Remote Desktop?
Home
Pro for Workstations
Enterprise
Pro
A company has just refreshed several desktop PCs. The hard drives contain PII. Which of the following is the BEST method to dispose of the drives?
Drilling
Degaussing
Low-level formatting
Erasing/wiping
A user reports a PC is running slowly. The technician suspects it has a badly fragmented hard drive. Which of the following tools should the technician use?
resmon.exe
msconfig.exe
dfrgui.exe
msinfo32.exe
The network was breached over the weekend. System logs indicate that a single user's account was successfully breached after 500 attempts with a dictionary attack. Which of the following would BEST mitigate this threat?
Antivirus
Automatic screen lock
Account lockout
Encryption at rest
Someone who is fraudulently claiming to be from a reputable bank calls a company employee. Which of the following describes this incident?
Pretexting
Spoofing
Vishing
Scareware
An architecture firm is considering upgrading its computer-aided design (CAD) software to the newest version that forces storage of backups of all CAD files on the software's cloud server. Which of the following is MOST likely to be of concern to the IT manager?
All updated software must be tested with all system types and accessories
Extra technician hours must be budgeted during installation of updates.
Network utilization will be significantly increased due to the size of CAD files.
Large update and installation files will overload the local hard drives.
A user has requested help setting up the fingerprint reader on a Windows 10 laptop. The laptop is equipped with a fingerprint reader and is joined
to a domain. Group Policy enables Windows Hello on all computers in the environment. Which of the following options describes how to set up Windows Hello
Fingerprint for the user?
Start > Settings > Accounts > Sign-in options > Windows Hello Fingerprint
Start > Settings > Accounts > Sign-in options > Windows Biometrics
Start > Settings > Accounts > Sign-in options > Windows Hello PIN
Start > Settings > Accounts > Sign-in options > Insert Finger
Which of the following OS types provides a lightweight option for workstations that need an easy-to-use, browser-based interface?
FreeBSD
Chrome OS
macOS
Windows
A technician is unable to join a Windows 10 laptop to a domain. Which of the following is the MOST likely reason?
The domain's processor compatibility is not met.
The laptop has Windows 10 Home installed.
The laptop does not have an onboard Ethernet adapter.
The laptop does not have all current Windows updates installed.
A user's mobile phone has become sluggish. A systems administrator discovered several malicious applications on the device and reset the phone. The administrator installed MOM software. Which of the following should the administrator do to help secure the device against this threat in the future? (Choose two.)
Prevent a device root.
Enable developer mode.
Block a third-party application installation.
Prevent GPS spoofing.
Require a PIN on the unlock screen.
Upon downloading a new ISO, an administrator is presented with the following string:
59d15a16ce90c8ee97fa7c211b7673a8
Which of the following BEST describes the purpose of this string?
Digital signature verification
Hash verification
AES-256 verification
XSS verification
A user reports a computer is running slow. Which of the following tools will help a technician identify the issue?
Disk Cleanup
Group Policy Editor
Disk Management
Resource Monitor
The Chief Executive Officer at a bank recently saw a news report about a high-profile cybercrime where a remote-access tool that the bank uses for support was also used in this crime. The report stated that attackers were able to brute force passwords to access systems. Which of the following would BEST limit the bank's risk? (Choose two.)
Block all support accounts from logging in from foreign countries.
Limit remote access to destinations inside the corporate network.
Enable multifactor authentication for each support account.
Enforce account lockouts after five bad password attempts.
Purchase a password manager for remote-access tool users.
Which of the following could be used to implement secure physical access to a data center?
Geofence
Alarm system
Badge reader
Motion sensor
A customer reported that a home PC with Windows 10 installed in the default configuration is having issues loading applications after a reboot occurred in the middle of the night. Which of the following is the FIRST step in troubleshooting?
Install alternate open-source software in place of the applications with issues.
Run both CPU and memory tests to ensure that all hardware functionality is normal.
Check for any installed patches and roll them back one at a time until the issue is resolved
Reformat the hard drive, and then reinstall the newest Windows 10 release and all applications.
A technician is investigating an employee's smartphone that has the following symptoms:
The device is hot. even when it is not in use. Applications crash, especially when others are launched. Certain applications, such as GPS, are in portrait mode when they should be in landscape mode.
Which of the following can the technician do to MOST likely resolve these issues with minimal impact? (Choose two.)
Perform a factory reset.
Close unnecessary applications.
Activate airplane mode.
Turn on autorotation.
Update the device's operating system.
A technician is installing new software on a macOS computer. Which of the following file types will the technician MOST likely use?
deb
vbs
exe
app
msi
A user contacted the help desk to report pop-ups on a company workstation, indicating the computer has been infected with 137 viruses and payment is needed to remove them. The user thought the company-provided antivirus software would prevent this issue. The help desk ticket states that the user only receives these messages when first opening the web browser. Which of the following steps would MOST likely resolve the issue? (Choose two.)
Deploy an ad-blocking extension to the browser.
Uninstall the company-provided antivirus software.
Click the link in the messages to pay for virus removal.
Perform a reset on the user's web browser.
Scan the computer with the company-provided antivirus software.
A technician has been tasked with installing a workstation that will be used for point-of-sale transactions. The point-of-sale system will process credit cards and loyalty cards. Which of the following encryption technologies should be used to secure the workstation in case of theft?
Data-in-transit encryption
File encryption
USB drive encryption
Disk encryption
A user's smartphone data usage is well above average. The user suspects an installed application is transmitting data in the background. The user would like to be alerted when an application attempts to communicate with the internet. Which of the following BEST addresses the user's concern?
Operating system updates
Remote wipe
Antivirus
Firewall
A company installed a new backup and recovery system. Which of the following types of backups should be completed FIRST?
Full
Non-parity
Differential
Incremental
A technician needs to transfer a large number of files over an unreliable connection. The technician should be able to resume the process if the
connection is interrupted. Which of the following tools can be used?
robocopy
git clone
chkdsk
sfc
A technician is troubleshooting a customer's PC and receives a phone call. The technician does not take the call and sets the phone to silent. Which of the following BEST describes the technician's actions?
Avoid distractions
Deal appropriately with customer's confidential material
Adhere to user privacy policy
Set and meet timelines
A technician needs to recommend the best backup method that will mitigate ransomware attacks. Only a few files are regularly modified; however, storage space is a concern. Which of the following backup methods would BEST address these concerns?
Full
Differential
Off-site
Grandfather-father-son
An incident handler needs to preserve evidence for possible litigation. Which of the following will the incident handler MOST likely do to preserve the evidence?
Inform law enforcement.
Contact the cyber insurance company.
Clone any impacted hard drives.
Encrypt the files.
The command cat comptia.txt was issued on a Linux terminal. Which of the following results should be expected?
The contents of the text comptia.txt will be replaced with a new blank document.
The contents of the text comptia.txt would be displayed.
The contents of the text comptia.txt would be categorized in alphabetical order
The contents of the text comptia.txt would be copied to another comptia.txt file.
A technician is working with a company to determine the best way to transfer sensitive personal information between offices when conducting business. The company currently uses USB drives and is resistant to change. The company's compliance officer states that all media at rest must be encrypted. Which of the following would be the BEST way to secure the current workflow?
Deploy a secondary hard drive with encryption on the appropriate workstation.
Configure a hardened SFTP portal for file transfers between file servers.
Require files to be individually password protected with unique passwords.
Enable Bitlocker To Go with a password that meets corporate requirements.
As part of a CYOD policy, a systems administrator needs to configure each user's Windows device to require a password when resuming from a period of sleep or inactivity. Which of the following paths will lead the administrator to the correct settings?
Use Settings to access Screensaver settings.
Use Settings to access Screen Timeout settings.
Use Settings to access General.
Use Settings to access Display.
A technician needs to exclude an application folder from being cataloged by a Windows 1 0 search. Which of the following utilities should be used?
Privacy
Indexing Options
System
Device Manager
Following the latest Windows update, PDF files are opening in Microsoft Edge instead of Adobe Reader. Which of the following utilities should be used to ensure all PDF files open in Adobe Reader?
Network and Sharing Center
Programs and Features
Default Apps
Add or Remove Programs
A technician needs to format a USB drive to transfer 20GB of data from a Linux computer to a Windows computer. Which of the following filesystems will the technician MOST likely use?
FAT32
ext4
NTFS
exFAT
A user is unable to log in to the network. The network uses 802.1 X with EAP-TLS to authenticate on the wired network. The user has been on an extended leave and has not logged in to the computer in several months. Which of the following is causing the log-in issue?
OS update failure
Service not started
Application crash
Profile rebuild needed
Expired certificate
Which of the following is the MOST important environmental concern inside a data center?
Humidity levels
Toner disposal
Electrostatic discharge mats
Battery disposal
When a user calls in to report an issue, a technician submits a ticket on the user's behalf. Which of the following practices should the technician use to make sure the ticket is associated with the correct user?
Have the user provide a callback phone number to be added to the ticket.
Assign the ticket to the department's power user.
Register the ticket with a unique user identifier.
Provide the user with a unique ticket number that can be referenced on subsequent calls.
A call center technician receives a call from a user asking how to update Windows. Which of the following describes what the technician should do?
Have the user consider using an iPad if the user is unable to complete updates.
Have the user text the user's password to the technician
Ask the user to click in the Search field, type Check for Updates, and then press the Enter key.
Advise the user to wait for an upcoming, automatic patch
A technician is troubleshooting an issue involving programs on a Windows 1 O machine that are loading on startup but causing excessive boot times. Which of the following should the technician do to selectively prevent programs from loading?
Right-click the Windows button, then select Run ... entering shell:startup and clicking OK, and then move items one by one to the Recycle
Bin.
Remark out entries listed HKEY_LOCALMACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Run.
Open the Startup tab and methodically disable items currently listed as enabled and reboot, checking for issue resolution at each startup.
Manually disable all startup tasks currently listed as enabled and reboot, checking for issue resolution at startup
A technician is setting up a SOHO wireless router. The router is about ten years old. The customer would like the most secure wireless network
possible. Which of the following should the technician configure?
WPA2 with TKIP
WPA2 with AES
WPA3 with AES-256
WPA3 with AES-128
A technician suspects a rootkit has been installed and needs to be removed. Which of the following would BEST resolve the issue?
Application updates
Anti-malware software
OS reinstallation
File restore
A manager reports that staff members often forget the passwords to their mobile devices and applications. Which of the following should the systems administrator do to reduce the number of help desk tickets submitted?
Enable multifactor authentication.
Increase the failed log-in threshold.
Remove complex password requirements.
Implement a single sign-on with biometrics.
A laptop user is visually impaired and requires a different cursor color. Which of the following OS utilities is used to change the color of the cursor?
Keyboard
Touch pad
Ease of Access Center
Display settings
A help desk technician is troubleshooting a workstation in a SOHO environment that is running above normal system baselines. The technician discovers an unknown executable with a random string name running on the system. The technician terminates the process, and the system returns to normal operation. The technician thinks the issue was an infected file, but the antivirus is not detecting a threat. The technician is concerned other machines may be infected with this unknown virus. Which of the following is the MOST effective way to check other machines on
the network for this unknown threat?
Monitor outbound network traffic.
Manually check each machine.
Provide a sample to the antivirus vendor.
Run a startup script that removes files by name.
Security Certificate Problem Detected Untrusted Authority
The CFO then reported the incident to a technician. The link is purportedly to the organization's bank. Which of the following should the technician perform FIRST?
Update the browser's CRLs.
File a trouble ticket with the bank.
Contact the ISP to report the CFO's concern
Instruct the CFO to exit the browser.
A user reports seeing random, seemingly non-malicious advertisement notifications in the Windows 1 O Action Center. The notifications indicate the advertisements are coming from a web browser. Which of the following is the BEST solution for a technician to implement?
Disable the browser from sending notifications to the Action Center.
Run a full antivirus scan on the computer.
Disable all Action Center notifications
Move specific site notifications from Allowed to Block.
A company is issuing smartphone to employees and needs to ensure data is secure if the devices are lost or stolen. Which of the following
provides the BEST solution?
Anti-malware
Remote wipe
Locator applications
Screen lock
A user calls the help desk to report that none of the files on a PC will open. The user also indicates a program on the desktop is requesting payment in exchange for file access. A technician verifies the user's PC is infected with ransomware. Which of the following should the technician do FIRST?
Scan and remove the malware.
Schedule automated malware scans.
Quarantine the system.
Disable System Restore.
A change advisory board just approved a change request. Which of the following is the MOST likely next step in the change process?
End user acceptance
Perform risk analysis
Communicate to stakeholders
Sandbox testing
A user is having phone issues after installing a new application that claims to optimize performance. The user downloaded the application directly from the vendor's website and is now experiencing high network utilization and is receiving repeated security warnings. Which of the following should the technician perform FIRST to mitigate the issue?
Reset the phone to factory settings.
Uninstall the fraudulent application.
Increase the data plan limits.
Disable the mobile hotspot.
A company wants to remove information from past users' hard drives in order to reuse the hard drives. Which of the following is the MOST secure method?
Reinstalling Windows
Performing a quick format
Using disk-wiping software
Deleting all files from command-line interface:
A help desk team lead contacts a systems administrator because the technicians are unable to log in to a Linux server that is used to access tools. When the administrator tries to use remote desktop to log in to the server, the administrator sees the GUI is crashing. Which of the following methods can the administrator use to troubleshoot the server effectively?
SFTP
SSH
VNC
MSRA
