Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Core 2 Final Review

Total questions: 73

Worksheet time: 1hrs 13mins

Name
Class
Date
1.

A Linux admin wants secure, encrypted console access to a remote server. Which protocol should they use?

a)

Telnet

b)

SSH

c)

FTP

d)

RDP

2.

A user uses AI to draft a report but notices incorrect information included. What is this phenomenon called?

a)

Smishing

b)

Hallucination

c)

Social engineering

d)

Misclassification

3.

A user’s old tablet refuses to install a new app. What’s the MOST likely reason?

a)

The app is incompatible with the older OS version

b)

The battery is faulty

c)

The screen resolution is too low

d)

Too many cached files

4.

You need to enforce strong password requirements across all domain-joined computers. Where should you configure this setting?

a)

Group Policy on the domain controller

b)

Local Security Policy on each PC

c)

BIOS settings

d)

User Account Control

5.

A home user wants to dispose of a failed hard drive and ensure the data is permanently unrecoverable. What is the BEST way?

a)

Quick format

b)

Deleting all partitions

c)

Drilling holes through the drive

d)

Defragmenting

6.

After removing malware and confirming the system is clean, what should the technician do NEXT?

a)

Educate the user on security best practices

b)

Close the help desk ticket immediately

c)

Disable User Account Control

d)

Wipe and reinstall again

7.

You are using a 3D printer with carbon-fiber filament. What safety equipment is MOST important?

a)

Fire extinguisher

b)

Air filter mask

c)

Anti-static wrist strap

d)

Safety goggles

8.

A customer’s desktop won’t power on, and the data is extremely important. What should the technician do FIRST?

a)

Show confidence and maintain a positive attitude

b)

Begin disassembling the PC immediately

c)

Tell the customer data recovery isn’t possible

d)

Replace the power supply without testing

9.

Your organization wants centralized AAA (Authentication, Authorization, and Accounting) for users connecting to Wi-Fi. Which service should be used?

a)

RADIUS

b)

LDAP

c)

Kerberos

d)

DHCP

10.

A company wants a third-party service that not only monitors for threats but also actively investigates and responds in real time. What solution should they adopt?

a)

MDR (Managed Detection and Response)

b)

Antivirus software

c)

 IDS (Intrusion Detection System)

d)

Firewall

11.

A Windows user wants to replace their password with fingerprint scanning. Which feature should be enabled?

a)

BitLocker

b)

Windows Hello

c)

EFS

d)

Credential Guard

12.

A technician needs to format a USB drive so it can be read and written by both Windows and Linux systems. Which file system should they choose?

a)

NTFS

b)

HFS+

c)

exFAT

d)

ext4

13.

A user’s smartphone has very little free storage left and is now slow to switch between apps. What is the MOST likely cause?

a)

Malware infection

b)

Low storage space

c)

Wi-Fi misconfiguration

d)

Weak battery

14.

A user is in a video call but keeps getting popup notifications. Which Windows feature should they enable to stop interruptions?

a)

Airplane mode

b)

Do Not Disturb

c)

Firewall

d)

Device Guard

15.

A macOS user wants to securely store and autofill their passwords across apps. Which built-in app should they use?

a)

Time Machine

b)

Keychain

c)

Gatekeeper

d)

FileVault

16.

A server unexpectedly crashes, causing downtime for critical applications. As the technician, what should you complete to formally document the event, impact, and resolution steps?

a)

Change management request

b)

Incident report

c)

 SLA review

d)

NDA

17.

A Linux admin wants to see which processes are running in real time and how much CPU and memory they are using, similar to Task Manager in Windows. Which command should they use?

a)

ps

b)

top

c)

ls

d)

kill

18.

Your company has retired old hard drives containing sensitive customer data. You hired a third-party service to destroy them. Which document should you obtain from the vendor to prove this process was completed securely?

a)

Certificate of Destruction

b)

Service Level Agreement

c)

Chain of Custody

d)

NDA

19.

A Windows user wants to encrypt specific folders so that even if someone steals their computer, the files remain inaccessible. Which feature should they use?

a)

BitLocker

b)

EFS

c)

NTFS permissions

d)

Windows Hello

20.

Which wireless security protocol is considered the weakest and easiest to crack?

a)

WPA2

b)

WPA3

c)

WEP

d)

WPA

21.

A macOS user wants a simple built-in backup solution. Which feature should they use?

a)

File History

b)

Time Machine

c)

Icloud Keychain

d)

Disk Utility

22.

A security scan reveals that malware has gained deep, hidden administrative access to a computer. Which type of malware is this MOST likely to be?

a)

Worm

b)

Rootkit

c)

Trojan

d)

Logic Bomb

23.

A company’s office was damaged in a fire. The insurance provider requires a list of all IT equipment that was lost. Which document is MOST useful in this situation?

a)

Group Policy settings

b)

Inventory List

c)

MSDS sheet

d)

Change control document

24.

You download a software installer from the internet and want to verify its integrity. The vendor provides a SHA-256 value. What should you do?

a)

Compare the downloaded file’s hash against the vendor’s provided hash

b)

Run Disk Cleanup

c)

Perform a chkdsk scan

d)

 Enable BitLocker

25.

A Windows user reports repeated Blue Screen of Death (BSOD) crashes. Which tool should a technician use FIRST to analyze the error codes and causes?

a)

Resource Monitor

b)

Task Manager

c)

Event Viewer

d)

System Restore

26.

An administrator wants to reduce the strain on production systems during backup operations. Instead of copying everything each time, the backup server reconstructs full backups from the last full plus incremental backups. What is this called?

a)

Differential backup

b)

Synthetic full backup

c)

Incremental backup

d)

Snapshots

27.

Your company has 200 new PCs that need operating systems installed. Instead of using USB drives, you want the machines to boot directly from the network to retrieve the installation image. Which technology should you use?

a)

PXE (Preboot Execution Environment)

b)

RDP

c)

SSH

d)

VPN

28.

Your company installs fixed steel posts around the entrance of the data center to prevent vehicles from ramming the building. What are these called?

a)

Mantraps

b)

Bollards

c)

Badge readers

d)

Turnstiles

29.

A user wants to install a 64-bit version of Windows but receives an error saying the processor is not supported. What is the limiting factor here?

a)

BIOS settings

b)

The CPU itself

c)

RAM size

d)

Hard drive size

30.

You want to stop users from installing unauthorized applications on their Windows PCs. Which of the following should you do?

a)

Remove users from the local Administrators group

b)

Disable Windows Update

c)

Enable Safe Mode

d)

Configure NTFS file permissions

31.

An administrator needs to enforce corporate security policies on employee iPhones, including limiting which apps can be installed and setting up Wi-Fi profiles automatically. Which solution should be used?

a)

Group Policy

b)

Local Security Policy

c)

MDM Profile

d)

Windows Defender Firewall

32.

Your company wants to ensure that if a laptop is stolen, all the data on its hard drive is protected from unauthorized access. Which Windows feature should you enable?

a)

EFS

b)

BitLocker

c)

NTFS permissions

d)

Windows Defender

33.

A financial analyst complains that a very large, complex spreadsheet causes their PC to slow down, freeze, and sometimes stop responding. What is the MOST likely cause?

a)

Insufficient CPU and RAM resources

b)

Corrupted user profile

c)

Incompatible file system

d)

Expired product license

34.

You are troubleshooting Wi-Fi connectivity issues at a coffee shop. A user reports that after connecting to the free Wi-Fi, their credentials were stolen. Investigation reveals an attacker created a malicious AP with the same SSID and settings as the legitimate Wi-Fi. What is this attack called?

a)

Rogue access point

b)

Packet injection

c)

Evil twin attack

d)

DNS poisoning

35.

A technician wants to automate the launch of scripts and programs every time a user signs into Windows. Which file type is commonly used for this purpose?

a)

.bat file

b)

.dll file

c)

.sys file

d)

.log file

36.

A company wants to prevent unauthorized users from both starting a computer and from altering BIOS/UEFI settings. Which configuration should be applied?

a)

Only set a user password

b)

Only set an administrator password

c)

Set both a user password and an administrator password

d)

Configure a Windows Hello PIN

37.

You have been instructed to move several heavy UPS batteries to a storage room for recycling later. Which safety best practice should you follow?

a)

Stack them vertically to save space

b)

 Use appropriate lifting techniques

c)

Place them near a heat source to keep them warm

d)

Carry multiple batteries at once to save time

38.

You are configuring multi-factor authentication (MFA) for a mobile device. The first factor is a password. Which of the following would be the BEST second factor to implement?

a)

Authentication app generating one-time codes

b)

Another password

c)

Security questions

d)

Device wallpaper lock

39.

Your company wants to prevent employees from installing unauthorized apps on company smartphones. Which solution should you implement?

a)

Group Policy

b)

Antivirus software

c)

Mobile Device Management (MDM)

d)

 Firewall rules

40.

A technician needs to connect a Windows workstation to a shared folder on a server so it appears as a drive letter. Which command line tool should be used?

a)

 ipconfig

b)

net use

c)

nslookup

d)

tracert

41.

A user installs a free video player but later notices extra toolbars, pop-ups, and performance slowdowns. Which term BEST describes this type of bundled software?

a)

Trojan horse

b)

Adware

c)

 Spyware

d)

 Potentially Unwanted Program (PUP)

42.

A Windows service has stopped unexpectedly and users are reporting errors. You need to find out why the service failed and obtain detailed error codes. Which tool should you use?

a)

Resource Monitor

b)

Event Viewer

c)

 Performance Monitor

d)

Device Manager

43.

A new employee will be working from home and needs secure access to company files stored on the internal file server. As the Cyber Warrior responsible for network security, which solution should you implement?

a)

Remote Desktop Protocol (RDP)

b)

Virtual Private Network (VPN)

c)

SMB file sharing over the internet

d)

FTP without encryption

44.

Your IT department needs to install the same operating system image on 100 newly purchased PCs in the office. What is the BEST solution?

a)

Image deployment over the network

b)

Copying the OS folder to a USB drive

c)

Using System Restore on each PC

d)

Reinstalling Windows manually

45.

Which document provides employees with guidelines on how they can use company devices and network resources appropriately?

a)

Service Level Agreement (SLA)

b)

Standard Operating Procedure (SOP)

c)

Acceptable Use Policy (AUP)

d)

End User License Agreement (EULA)

46.

Several employees share the same passcode to unlock a corporate smartphone. As a Cyber Warrior, what more secure authentication method should you recommend?

a)

 Remove the passcode entirely

b)

Use facial recognition

c)

Enable airplane mode when not in use

d)

Require users to sign an AUP

47.

A technician receives a service request but realizes it requires advanced troubleshooting beyond their expertise. What is the BEST action to take?

a)

Escalate the ticket to the next support level

b)

Close the ticket and let the user re-submit

c)

Guess at the solution and apply it

d)

Ignore the ticket until someone else handles it

48.

Your manager wants to block employees from visiting unauthorized websites such as social media or gambling during work hours. Which router/firewall feature should you implement?

a)

Content filtering

b)

Port forwarding

c)

NAT

d)

VLAN segmentation

49.

You notice an unsecured wireless network is broadcasting the same SSID as your company’s Wi-Fi. Employees accidentally connect to it, exposing sensitive data. What is this attack called?

a)

Man-in-the-middle attack

b)

Evil twin attack

c)

Phishing

d)

Packet sniffing

50.

A company wants to repurpose old hard drives but ensure that data is completely unrecoverable. Which method is BEST for this?

a)

Quick format

b)

File deletion

c)

Disk defragmentation

d)

Low-level format

51.

Which file system is most commonly used by modern Linux operating systems?

a)

FAT32

b)

NTFS

c)

ext4

d)

HFS+

52.

A developer suspects that their new application has a memory leak that causes system slowdown after several hours of use. Which Windows tool is BEST for monitoring application performance over time?

a)

Resource Monitor

b)

Event Viewer

c)

Performance Monitor

d)

Task Manager

53.

Your IT team is struggling with inconsistent methods of tracking and closing help desk requests. Management wants a consistent, documented way for technicians to enter and resolve tickets. What should you create for your technicians?

a)

Service Level Agreement (SLA)

b)

Standard Operating Procedures (SOPs)

c)

Change Management Document

d)

Acceptable Use Policy (AUP)

54.

An organization wants to move from Windows 10 Pro to Windows 11 Pro while keeping all user files and applications intact. Which upgrade method should be used?

a)

Clean install

b)

Dual boot

c)

Virtualization

d)

In-place upgrade

55.

A user attempts to install a new application on a Windows 11 PC but receives an error: “Dependency X is required for this application.” What should the technician do?

a)

Update the BIOS

b)

Reinstall Windows

c)

Enable the dependency in “Turn Windows features on or off”

d)

Disable User Account Control (UAC)

56.

A user wants to enable speech recognition to control their Windows 11 PC hands-free. Where should the technician direct them to enable this feature?

a)

 Device Manager

b)

 Task Manager

c)

Ease of Access

d)

Power Options

57.

A company’s software was compromised through a vulnerability before the vendor even knew about it or had time to create a patch. What type of attack is this?

a)

 Zero-day attack

b)

Denial of Service attack

c)

Man-in-the-middle attack

d)

Brute force attack

58.

After a phishing attack, a computer was reimaged, new endpoint security installed, and scans confirmed it was clean. What is the NEXT step a technician should take?

a)

Close the ticket and move on

b)

Change the computer’s hostname

c)

Run a memory diagnostic

d)

Educate the user on security best practices

59.

A developer reports that their application cannot retrieve data from a local database. As the technician, you suspect a connectivity issue. Which command line tool is BEST for troubleshooting whether the application is establishing connections to the database?

a)

ipconfig

b)

netstat

c)

ping

d)

nslookup

60.

A Linux administrator needs to perform system-level tasks that require root permissions. Which command should they use to temporarily elevate their privileges?

a)

chmod

b)

su

c)

ls

d)

cat

61.

You receive an urgent call: multiple computers on the network are infected with ransomware. As the “Cyber Warrior” on duty, what is the FIRST action you should take?

a)

Begin educating users about phishing prevention

b)

Reinstall Windows on all infected computers

c)

Quarantine the infected computers immediately

d)

Scan the systems with updated antivirus software

62.

A user reports that they cannot access a single cloud application through the company’s single sign-on (SSO) portal, but all other apps work fine. Which of the following should the technician try FIRST?

a)

Clear the browser’s cache and cookies or use a private window

b)

Reset the user’s password in Active Directory

c)

Reinstall the browser entirely

d)

Disable SSO and log in directly

63.

An employee receives a text message on their phone claiming to be from their bank. The message says, “Your account is locked. Click this link to reset your password immediately.” What type of attack is this?

a)

Phishing

b)

Smishing

c)

Spear phishing

d)

Whaling

64.

An IT administrator needs to deploy a custom Windows image across 50 new computers in the organization. Instead of manually installing the OS on each system, the admin wants to push the installation over the network. Which solution is BEST?

a)

Configure cloud storage file sharing

b)

Create bootable USB drives for each system

c)

Use a network-based remote installation tool

d)

Use RDP to log into each computer individually

65.

A technician is informing employees that they must upgrade from Windows 10 to Windows 11 before October 14, 2025. Why is this upgrade mandatory?

a)

Windows 10 will no longer boot without internet access

b)

Windows 10 will delete all files automatically on that date

c)

Windows 10 licenses will expire for all users

d)

Windows 10 will stop receiving security updates after that date

66.

Your company wants to track who enters restricted areas such as the server room and ensure that unauthorized personnel cannot gain access. Which technology should be implemented?

a)

Badge readers

b)

CCTV cameras

c)

Smart lockers

d)

 Security guards

67.

Your organization wants to ensure that sensitive data on USB flash drives cannot be accessed if the devices are lost or stolen. Which Windows feature would BEST meet this requirement?

a)

BitLocker to Go

b)

Encrypting File System (EFS)

c)

NTFS permissions

d)

Windows Defender

68.

A user reports that when they power on their computer, they see an error message stating “Operating System not found.” Upon inspection, you notice a USB thumb drive is still connected to the machine. Which of the following is the BEST first step to resolve the issue?

a)

Reinstall the operating system immediately

b)

Replace the hard drive with a new one

c)

Remove the USB drive or adjust boot order in BIOS/UEFI

d)

Update the BIOS firmware

69.

A user is unable to authenticate using a mobile MFA app after returning from international travel. What is the most likely cause?

a)

 Device time not synchronized

b)

Incorrect username

c)

Expired password

d)

Disabled account

70.

While troubleshooting a laptop, you notice the battery is swollen and leaking a small amount of fluid. You want to know the correct emergency procedures before handling the damaged battery. Where should you look for this information?

a)

The Windows 11 user guide

b)

The Material Safety Data Sheet (MSDS)

c)

The manufacturer’s warranty card

d)

The Device Manager

71.

A firewall in your company’s network is reaching end-of-life and no longer receives security updates. As the IT lead, you are expected to address this issue following the organization’s official change management process. What is the FIRST step you should take in this process?

a)

Test the replacement firewall in a lab environment

b)

Deploy the new firewall during a maintenance window

c)

Document the configuration settings of the old firewall

d)

Propose the change to management or the change control board

72.

When attempting to join a Windows computer to a Windows Domain, what must the computer’s DNS settings point to in order for the join to succeed?

a)

Public DNS server

b)

DNS server that resolves local host names to private IPs

c)

WINS server

d)

DHCP server

73.

A technician needs to remotely connect from a Windows 11 computer to a Linux Desktop Computer. The technician must be able to see the Linux desktop and control it with a mouse and keyboard. Which of the following should be used?

a)

SSH

b)

VNC

c)

RDP

d)

Telnet