A PC begins rebooting repeatedly after a recent driver installation. The technician wants to load Windows with only the most essential drivers and services to isolate the problem. Which option should they choose?

After updating a graphics driver, the system crashes frequently with blue screens. The technician decides to restore the previous stable driver. Which tool should be used?

A technician suspects Windows system files are corrupted after multiple crashes and missing icons. Which command should they run to verify and automatically repair those files?

A forensic investigation reveals malware that has embedded itself deep in the OS, intercepting system calls and running with kernel-level privileges. What type of malware is this?

An executive connects to a Wi-Fi hotspot called “Hotel_Conference_Free” and later discovers their credentials were stolen. Security logs reveal the access point was maliciously created. Which attack does this represent?

The security team enforces the CIA triad. Which principle ensures data is only accessible by authorized personnel?

During an incident response, the first step taken is to disconnect the infected laptop from the network to prevent spreading. Which malware removal best practice does this demonstrate?

An attacker calls the help desk pretending to be the CEO, demanding urgent password resets. Which social engineering technique is this?

A user reports that a payroll application crashes every time it runs. The technician needs to determine the source of the error. Which Event Viewer log should they check?

A user unknowingly installed malware disguised as a legitimate app. It allows attackers to log in remotely, install programs, and view files. What type of malware is this?

An employee reports that their workstation displays a message: “Your files have been encrypted. Pay 1 Bitcoin to restore access.” Which type of malware is this?