100 Free A+ Core 2 220-1202 Practice Questions and Answers
100 questions for the A+ Core 2 220-1202 exam, each answer explained. Watch it here, try the questions yourself, or read the transcript.
Questions in this video
Tap an answer to see why it is right or wrong. Tap it again to reset.
Question 1 Play from 00:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Extensions add features to a browser and say nothing about whether a file was changed.
Not this one. Try another answer.
Why B is wrong
A certificate proves who runs a website, not that a downloaded file is intact.
Not this one. Try another answer.
Why C is wrong
A plug-in extends software and cannot validate a download.
Right, D is the answer.
Why D is right
Running the file through a hash function produces a short fingerprint. If that fingerprint matches the value the vendor publishes, the file has not been altered since it was released. Algorithms such as SHA-256 are commonly used for this check.
Question 2 Play from 01:25
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A mobile device management platform lets the company control which apps may be installed on its phones, enforce security settings, and even wipe a device remotely. That policy control is what stops further unauthorized installs.
Not this one. Try another answer.
Why B is wrong
Anti-malware can remove this one app but does not control what people are allowed to install later.
Not this one. Try another answer.
Why C is wrong
PAM controls privileged accounts, not apps on a phone.
Not this one. Try another answer.
Why D is wrong
Group Policy applies to domain-joined Windows computers, not company phones.
Question 3 Play from 02:53
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A virtual desktop hosts a workspace remotely and is not a meeting tool.
Not this one. Try another answer.
Why B is wrong
Remote Desktop Protocol connects one person to a computer and is not meant for group sessions.
Not this one. Try another answer.
Why C is wrong
Screen sharing shows one display but lacks the face to face discussion the session needs.
Right, D is the answer.
Why D is right
Videoconferencing lets everyone see and hear each other, present material, and discuss live, which suits a combined collaboration and training session.
Question 4 Play from 04:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Network bandwidth has no bearing on whether the program meets graphics needs.
Not this one. Try another answer.
Why B is wrong
Power supply wattage matters for stability, but not for a minimum hardware message from an installer.
Right, C is the answer.
Why C is right
Rendering software leans heavily on the graphics processor, so a graphics card that is too weak is the most likely reason for a hardware requirement error. Compare the card against the program's published minimum.
Not this one. Try another answer.
Why D is wrong
USB speed affects external devices and does not decide rendering capability.
Question 5 Play from 05:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Batch files run without any execution policy check.
Not this one. Try another answer.
Why B is wrong
JavaScript files are not controlled by the PowerShell execution policy.
Right, C is the answer.
Why C is right
PowerShell scripts are governed by an execution policy that decides whether unsigned code may run. Setting it to Unrestricted lets those scripts execute. The other script types have no equivalent built in gate.
Not this one. Try another answer.
Why D is wrong
Python scripts run through their own interpreter with no such policy.
Question 6 Play from 07:04
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Network speed would not explain slowness on every task.
Right, B is the answer.
Why B is right
Closing the lid usually puts the laptop to sleep rather than restarting it. After many days without a full restart, memory leaks and leftover processes pile up. Checking how long the system has been running points to a restart as the fix.
Not this one. Try another answer.
Why C is wrong
RAM capacity is not the issue when the pattern is tied to never restarting.
Not this one. Try another answer.
Why D is wrong
Free storage space is a lower priority than the missing restarts.
Question 7 Play from 08:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
UEFI and MBR are different things and changing them would not stop the installer from reloading.
Not this one. Try another answer.
Why B is wrong
Windows 11 needs the TPM, so turning it off does not help.
Right, C is the answer.
Why C is right
The machine is booting from the flash drive again because it is still plugged in. Removing it after the first restart lets the computer start from the internal drive and continue setup.
Not this one. Try another answer.
Why D is wrong
Disk checking does not change which device the system boots from.
Question 8 Play from 09:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Cache size only affects how fast pages load.
Not this one. Try another answer.
Why B is wrong
Antivirus status is worth checking later, but browser changes are the likely cause.
Not this one. Try another answer.
Why C is wrong
Network settings do not inject ads into pages.
Right, D is the answer.
Why D is right
A flood of ads while browsing usually comes from a hijacked home page or search engine, unwanted extensions, or notification permissions given to ad sites, all of which live in the browser settings. Start there.
Question 9 Play from 11:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The computer's own address would cause no connection, not a different website.
Right, B is the answer.
Why B is right
If the right name leads to the wrong site, name resolution is being redirected. Incorrect or hijacked DNS server entries send requests to unintended destinations, so check them first.
Not this one. Try another answer.
Why C is wrong
A wrong clock causes certificate warnings, not redirects.
Not this one. Try another answer.
Why D is wrong
Missing updates are too broad to explain this exact symptom.
Question 10 Play from 12:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rootkit hides other malicious software but is not mainly about recording a person.
Not this one. Try another answer.
Why B is wrong
A keylogger records typed keys and does not capture call audio or video.
Right, C is the answer.
Why C is right
Stalkerware is surveillance software installed secretly to watch one particular person. It can capture calls, switch on the camera and microphone, and report location and messages back to whoever put it there.
Not this one. Try another answer.
Why D is wrong
A trojan is disguised as something useful, but that does not describe targeted monitoring.
Show all 100 questionsShow fewer questions
Question 11 Play from 13:55
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RDP controls a remote desktop and does not on its own give secure network access.
Right, B is the answer.
Why B is right
A virtual private network builds an encrypted tunnel over the internet to the office network, so the employee can reach internal shares as if sitting at the office.
Not this one. Try another answer.
Why C is wrong
SSH gives command line access to a single host and is not meant for file shares.
Not this one. Try another answer.
Why D is wrong
VNC shares a remote screen and does not securely extend the network.
Question 12 Play from 15:17
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Tracert shows the hops a packet takes.
Not this one. Try another answer.
Why B is wrong
Pathping combines route and loss statistics, not drive mapping.
Not this one. Try another answer.
Why C is wrong
Nslookup queries DNS names.
Right, D is the answer.
Why D is right
The net use command ties a shared folder on another machine to a local drive letter, either for the session or persistently. The other tools test routes or look up names.
Question 13 Play from 16:25
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Net user manages accounts on Windows.
Right, B is the answer.
Why B is right
The su command switches to another user, most often the superuser, so administrative tasks can be performed. It plays the same role runas does on Windows.
Not this one. Try another answer.
Why C is wrong
Cmcl is not a recognized command.
Not this one. Try another answer.
Why D is wrong
Runas is the Windows tool for running a program as another user.
Question 14 Play from 17:32
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A new admin password protects the router settings but does not limit inbound connections.
Right, B is the answer.
Why B is right
Universal Plug and Play lets devices ask the router to open ports automatically, which can expose the network to inbound connections. Turning it off keeps outside traffic from being invited in.
Not this one. Try another answer.
Why C is wrong
Content filtering controls which sites users can visit, not inbound connections.
Not this one. Try another answer.
Why D is wrong
The network name has no effect on inbound access.
Question 15 Play from 18:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
User Account Control is a local prompt feature and is not needed to receive policy.
Right, B is the answer.
Why B is right
Group Policy objects come from the directory, so only computers that are members of the domain receive and apply them. Machines outside the domain are not covered.
Not this one. Try another answer.
Why C is wrong
BitLocker encrypts drives and is unrelated to receiving policy.
Not this one. Try another answer.
Why D is wrong
Turning off inheritance would block settings rather than deliver them.
Question 16 Play from 20:13
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MBR allows only four primary partitions and cannot handle a drive this large.
Right, B is one of the answers.
Why B is right
A GUID Partition Table handles large drives and allows far more than four primary partitions. NTFS is the file system Windows 11 installs to. MBR is capped at four primary partitions and cannot address a drive this size.
Not this one. Try another answer.
Why C is wrong
APFS is an Apple file system.
Right, D is one of the answers.
Why D is right
A GUID Partition Table handles large drives and allows far more than four primary partitions. NTFS is the file system Windows 11 installs to. MBR is capped at four primary partitions and cannot address a drive this size.
Not this one. Try another answer.
Why E is wrong
XFS is a Linux file system.
Not this one. Try another answer.
Why F is wrong
FAT16 is too old and too limited for a Windows 11 install.
Question 17 Play from 21:50
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A virus spreads by attaching to files, not mainly by collecting data.
Right, B is the answer.
Why B is right
Spyware is built to observe what a user does, collect information, and transmit it to an outside party without permission. That matches this description exactly.
Not this one. Try another answer.
Why C is wrong
A trojan pretends to be useful software, which is a delivery method, not data collection.
Not this one. Try another answer.
Why D is wrong
Ransomware locks files for payment instead of quietly stealing data.
Question 18 Play from 23:10
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Curl transfers data from a URL and is not a DNS lookup tool.
Right, B is the answer.
Why B is right
The dig utility sends queries to DNS servers and shows the records returned, such as A, MX, and CNAME, for any host name you ask about.
Not this one. Try another answer.
Why C is wrong
Find searches for files on disk.
Not this one. Try another answer.
Why D is wrong
The ip command manages network interfaces and routes.
Question 19 Play from 24:17
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Unsupported software usually keeps working, so that is not the main risk.
Not this one. Try another answer.
Why B is wrong
Cost changes are a business matter, not a security one.
Right, C is the answer.
Why C is right
Once support ends, the vendor no longer ships security fixes. Any flaw discovered afterward stays open for attackers to exploit, which is the actual security danger.
Not this one. Try another answer.
Why D is wrong
Missing new features is an inconvenience, not a security threat.
Question 20 Play from 25:39
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A TPM can protect keys on the device but does not guard the vault itself.
Right, B is the answer.
Why B is right
One master password protects everything inside the vault, so it needs to be strong and kept secret. If it is weak, every stored login is at risk.
Not this one. Try another answer.
Why C is wrong
A lock screen protects the session, not the vault contents.
Not this one. Try another answer.
Why D is wrong
Sign-in hour limits do not protect a locally stored vault.
Question 21 Play from 26:55
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A private cloud is a hosting model and does not set up a laptop.
Right, B is the answer.
Why B is right
With zero-touch deployment the device configures itself the first time it connects, pulling its operating system, drivers, and policies automatically. Nobody from IT needs to handle the laptop before it reaches the employee.
Not this one. Try another answer.
Why C is wrong
Remote Desktop Protocol offers access to a computer, not provisioning of one.
Not this one. Try another answer.
Why D is wrong
A clean install needs hands-on work on each machine, which defeats the goal.
Question 22 Play from 28:20
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A potentially unwanted program is bundled into an installer without clear disclosure. Typical examples are toolbars, adware, and trackers that ride along with legitimate software.
Not this one. Try another answer.
Why B is wrong
A trojan poses as a useful program to carry a harmful payload, which is different from an undisclosed bundled add-on.
Not this one. Try another answer.
Why C is wrong
Ransomware encrypts files for payment, which is not what happened here.
Not this one. Try another answer.
Why D is wrong
A virus replicates by attaching to other files.
Question 23 Play from 29:43
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
System Information lists hardware and software details but does not log crashes.
Not this one. Try another answer.
Why B is wrong
Device Manager manages hardware drivers and does not keep a crash history.
Not this one. Try another answer.
Why C is wrong
Performance Monitor tracks resource use over time and is not the best source for crash causes.
Right, D is the answer.
Why D is right
Event Viewer keeps logs of system errors, including crash details and error codes, which helps a technician trace the reason behind repeated blue screens.
Question 24 Play from 31:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A domain account ties the machine to corporate identities and gives far too much reach for a public terminal.
Not this one. Try another answer.
Why B is wrong
A service account is meant for background programs, not for walk up visitors.
Not this one. Try another answer.
Why C is wrong
A power user account has more permissions than a public terminal should allow.
Right, D is the answer.
Why D is right
A Guest account has very limited rights, so strangers cannot install software, reach sensitive areas, or change settings. That makes it the right fit for a public terminal.
Question 25 Play from 32:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A lock screen protects against casual physical access and cannot detect a modified phone.
Not this one. Try another answer.
Why B is wrong
Geofencing only reacts to location and does not spot a jailbroken device.
Right, C is the answer.
Why C is right
Mobile device management can detect a compromised device, such as one that is rooted or jailbroken, and then block it from corporate resources until it is fixed.
Not this one. Try another answer.
Why D is wrong
Encryption protects stored data, but does not stop a modified device from joining the network.
Question 26 Play from 33:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A mail gateway filters messages but does not change how users behave.
Not this one. Try another answer.
Why B is wrong
A firewall filters traffic and does not stop a user from running something harmful.
Right, C is the answer.
Why C is right
Training users to recognize phishing, risky downloads, and careless handling of data addresses the human side of both problems. Technical controls cannot stop a user who is tricked into acting.
Not this one. Try another answer.
Why D is wrong
Secure Boot checks the startup process and does nothing about user behavior.
Question 27 Play from 34:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Wireless connectivity only describes how the laptop joins the home network.
Right, B is the answer.
Why B is right
A virtual private network encrypts the connection and verifies the user before giving access to internal files and systems from outside the office.
Not this one. Try another answer.
Why C is wrong
A wide-area network is a type of network, not something configured to reach office files.
Not this one. Try another answer.
Why D is wrong
A proxy relays web traffic and does not provide secure access to internal shares.
Question 28 Play from 36:25
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Reinstalling does not grant a license that has not been assigned.
Right, B is the answer.
Why B is right
Features that stay locked until an account signs in point to licensing. Assigning a license to the artist's account unlocks them.
Not this one. Try another answer.
Why C is wrong
Repairing the app fixes damaged files, not missing entitlements.
Not this one. Try another answer.
Why D is wrong
A VPN has no effect on which features a license enables.
Question 29 Play from 37:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Antivirus protects individual hosts and lacks network wide visibility.
Not this one. Try another answer.
Why B is wrong
RADIUS handles authentication and not threat detection.
Not this one. Try another answer.
Why C is wrong
User Account Control prompts for elevation on a single computer.
Right, D is the answer.
Why D is right
Extended detection and response collects data from many security tools, correlates it, and lets the team respond to threats across the whole environment, not just on one host.
Question 30 Play from 39:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rollback plan describes how to undo a change after something goes wrong.
Right, B is the answer.
Why B is right
Trying a change in an isolated sandbox reveals problems without risking production systems. The other items document or approve a change rather than test it.
Not this one. Try another answer.
Why C is wrong
A request form records and starts the change process.
Not this one. Try another answer.
Why D is wrong
End-user acceptance comes later, after the change is delivered.
Question 31 Play from 40:11
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rootkit hides malicious activity and is not defined by watching a person.
Right, B is the answer.
Why B is right
Stalkerware is installed on a device to watch a specific person, using sensors such as location, microphone, and camera. Spyware is a broader term, and stalkerware is the more exact label here.
Not this one. Try another answer.
Why C is wrong
Spyware is more general and does not capture the personal targeting described.
Not this one. Try another answer.
Why D is wrong
A trojan is defined by deception when installed, not by sensor based monitoring.
Question 32 Play from 41:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The strap is not a storage device for charge.
Right, B is the answer.
Why B is right
The strap gives static electricity a safe path from the technician's body to ground, which protects sensitive parts such as memory from electrostatic damage.
Not this one. Try another answer.
Why C is wrong
Raising the charge would make damage more likely.
Not this one. Try another answer.
Why D is wrong
A strap does not copy or duplicate charge.
Question 33 Play from 42:41
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
exFAT is a lightweight format for flash drives and is not a successor to NTFS.
Not this one. Try another answer.
Why B is wrong
APFS is the Apple file system.
Right, C is the answer.
Why C is right
The Resilient File System adds built in redundancy and corruption detection and repair, and it is Microsoft's forward looking replacement for NTFS.
Not this one. Try another answer.
Why D is wrong
XFS is a Linux file system.
Question 34 Play from 43:53
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Dust is not likely to ignite from a vacuum.
Not this one. Try another answer.
Why B is wrong
A vacuum pulls air in, so pressure is not the main danger.
Right, C is the answer.
Why C is right
Moving air through a plastic nozzle builds up static electricity, and a discharge can damage the motherboard, memory, or cards. For this reason only vacuums made safe for electronics should be used.
Not this one. Try another answer.
Why D is wrong
Disposal paperwork is not the main concern when cleaning a case.
Question 35 Play from 45:12
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Dig queries DNS records and shows no path.
Not this one. Try another answer.
Why B is wrong
Ping tests reachability but does not list hops.
Not this one. Try another answer.
Why C is wrong
The ip addr command shows local interface addresses.
Right, D is the answer.
Why D is right
The traceroute command lists every router along the path between the source and the destination, showing how traffic reaches the server.
Question 36 Play from 46:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A file name is easily changed and proves nothing.
Right, B is the answer.
Why B is right
A cryptographic hash such as SHA-256 is computed from the file's contents. If it matches the value published by the vendor, the installer is unchanged.
Not this one. Try another answer.
Why C is wrong
File size can match even when the contents differ.
Not this one. Try another answer.
Why D is wrong
A date is easy to fake and says nothing about the contents.
Question 37 Play from 47:29
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Deleting files leaves data that can be recovered.
Not this one. Try another answer.
Why B is wrong
Burning drives in house usually lacks certified proof of destruction.
Right, C is the answer.
Why C is right
A certified destruction vendor provides documented, auditable proof that the drives were destroyed, which is what compliance rules require for sensitive data.
Not this one. Try another answer.
Why D is wrong
A low-level format may leave data recoverable and gives no proof for auditors.
Question 38 Play from 48:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A VPN secures the connection but does not provide a remote desktop.
Not this one. Try another answer.
Why B is wrong
KVM is a virtualization technology and not a remote display tool.
Not this one. Try another answer.
Why C is wrong
SSH gives a text based session and cannot show a graphical program.
Right, D is the answer.
Why D is right
VNC shares the graphical desktop of the Linux server across the network, so a GUI only tool can be used from the remote laptop.
Question 39 Play from 50:11
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A zero-day flaw is used in attacks before the vendor knows about it or has a patch, so the vendor has had zero days to prepare a fix.
Not this one. Try another answer.
Why B is wrong
A DoS attack floods a service to make it unavailable and is not defined by an unpatched flaw.
Not this one. Try another answer.
Why C is wrong
Spoofing means pretending to be someone or something else.
Not this one. Try another answer.
Why D is wrong
Brute-force repeatedly guesses credentials and is not about unpatched flaws.
Question 40 Play from 51:19
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A VPN protects traffic in transit but does not stop the laptop from answering pings.
Not this one. Try another answer.
Why B is wrong
Network and Sharing Center shows and manages connections but is not where ping blocking is set.
Right, C is the answer.
Why C is right
The Windows firewall can block incoming ICMP echo requests, so the laptop stays silent when others ping it on public networks.
Not this one. Try another answer.
Why D is wrong
Internet Options controls browser settings only.
Question 41 Play from 52:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Reimaging is a remediation step and comes only after containment.
Right, B is the answer.
Why B is right
These symptoms suggest malware. The first move is to isolate the computer from the network so the infection cannot spread, and only after that should cleanup begin.
Not this one. Try another answer.
Why C is wrong
Updating the system is part of recovery and should wait until the machine is isolated.
Not this one. Try another answer.
Why D is wrong
Copying files from an infected machine could spread the problem, so isolation comes first.
Question 42 Play from 54:03
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A clean install wipes the drive and takes more effort.
Right, B is the answer.
Why B is right
An in-place upgrade installs the new version over the existing one and keeps files, apps, and settings. It is typically the fastest route that does not lose data.
Not this one. Try another answer.
Why C is wrong
Image deployment replaces the contents of the machine.
Not this one. Try another answer.
Why D is wrong
Gpupdate only refreshes Group Policy and does not upgrade the operating system.
Question 43 Play from 55:25
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Single sign-on lets people log in once and does not limit rights.
Not this one. Try another answer.
Why B is wrong
Multifactor authentication strengthens login and does not limit what an account can do.
Right, C is the answer.
Why C is right
Least privilege limits every account to the minimum permissions required, which reduces the damage that can be done by mistakes or by a stolen account.
Not this one. Try another answer.
Why D is wrong
Zero Trust is a wider approach that verifies every request, not the specific idea of minimum permissions.
Question 44 Play from 56:45
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
A PIN stops someone from unlocking the device, and a screen timeout locks it automatically when it sits idle. Together they block casual physical access. The other settings protect the network or help find the device but do not stop someone from opening it.
Not this one. Try another answer.
Why B is wrong
Location services help find a missing tablet and do not stop someone from using it.
Not this one. Try another answer.
Why C is wrong
Antivirus guards against malware and not against physical access.
Right, D is one of the answers.
Why D is right
A PIN stops someone from unlocking the device, and a screen timeout locks it automatically when it sits idle. Together they block casual physical access. The other settings protect the network or help find the device but do not stop someone from opening it.
Not this one. Try another answer.
Why E is wrong
Turning off the hotspot only affects sharing a connection.
Not this one. Try another answer.
Why F is wrong
A VPN protects network traffic and does nothing against someone holding the device.
Question 45 Play from 58:26
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Bollards only stop vehicles.
Not this one. Try another answer.
Why B is wrong
Badge readers log credentials but do not capture who is actually there.
Right, C is the answer.
Why C is right
Cameras monitor the area continuously and keep footage, which produces a record of who was present and when.
Not this one. Try another answer.
Why D is wrong
A fence is a barrier and does not record anything.
Question 46 Play from 59:34
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A reply to the ping shows the PC is connected.
Not this one. Try another answer.
Why B is wrong
Having IPv6 on is normal and does not block a domain join.
Not this one. Try another answer.
Why C is wrong
A firewall problem would likely have blocked the ping as well.
Right, D is the answer.
Why D is right
Joining a domain depends on resolving the domain name to find the controllers. Since the IP address works, basic connectivity is fine, and incorrect DNS settings are the likely problem.
Question 47 Play from 1:00:59
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Facial recognition measures facial geometry.
Right, B is the answer.
Why B is right
A retinal scanner reads the pattern of blood vessels at the back of the eye and compares it with the stored record to confirm identity.
Not this one. Try another answer.
Why C is wrong
Voice matching analyzes vocal patterns.
Not this one. Try another answer.
Why D is wrong
A fingerprint reader reads ridges on a fingertip.
Question 48 Play from 1:02:05
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
iPadOS is a closed, proprietary system.
Not this one. Try another answer.
Why B is wrong
Windows is proprietary software.
Right, C is the answer.
Why C is right
Android is built on the open-source Linux kernel and is released as open-source software, which matches an organization that supports open-source work.
Not this one. Try another answer.
Why D is wrong
macOS is proprietary and is not open source.
Question 49 Play from 1:03:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Dumpster diving is about discarded information, not hardware.
Right, B is the answer.
Why B is right
People who dig through discarded material can find passwords, financial records, and customer details. The main danger is theft of information.
Not this one. Try another answer.
Why C is wrong
Vandalism is not what a person searching through trash is after.
Not this one. Try another answer.
Why D is wrong
A lawsuit might follow a breach, but it is not the direct risk.
Question 50 Play from 1:04:37
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Lusrmgr manages local users and groups.
Right, B is the answer.
Why B is right
Device Manager lists the hardware, lets you update or roll back drivers, and shows device problems, so it is the place to check the touch pad driver.
Not this one. Try another answer.
Why C is wrong
Gpedit edits local policy settings.
Not this one. Try another answer.
Why D is wrong
Certmgr manages certificates.
Question 51 Play from 1:05:54
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Memory latency is not a requirement for the upgrade.
Not this one. Try another answer.
Why B is wrong
Disk speed does not decide eligibility.
Right, C is the answer.
Why C is right
Windows 11 requires a trusted platform module. Without it the machine fails the compatibility check, so the upgrade cannot proceed.
Not this one. Try another answer.
Why D is wrong
Refresh rate has nothing to do with eligibility.
Question 52 Play from 1:07:08
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Defragmenting could help a fragmented drive, but it is not a diagnostic tool for this symptom.
Not this one. Try another answer.
Why B is wrong
Computer Management groups admin tools and is not a performance view.
Not this one. Try another answer.
Why C is wrong
Reliability history records crashes and failures, and nothing failed here.
Right, D is the answer.
Why D is right
Resource Monitor shows live CPU, memory, disk, and network use for each process, which helps identify what is slowly consuming resources.
Question 53 Play from 1:08:26
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
WPA2 is supported by nearly every device and is still considered secure. WPA3 is stronger but older devices may not support it, and WEP is broken.
Not this one. Try another answer.
Why B is wrong
WEP is obsolete and easily cracked.
Not this one. Try another answer.
Why C is wrong
WPS is a quick connection feature, not an encryption standard.
Not this one. Try another answer.
Why D is wrong
WPA3 is newer, and not all devices can connect with it.
Question 54 Play from 1:09:49
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A dictionary attack guesses passwords from a word list.
Not this one. Try another answer.
Why B is wrong
A zero-day attack exploits an unknown flaw, but it does not describe tampering in the delivery chain.
Not this one. Try another answer.
Why C is wrong
Brute-force tries many passwords.
Right, D is the answer.
Why D is right
In a supply chain attack the software is compromised at its source or during distribution, so every downstream customer receives the tainted product.
Question 55 Play from 1:11:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A cryptominer uses computing power to mine currency.
Not this one. Try another answer.
Why B is wrong
Ransomware locks data and demands payment.
Not this one. Try another answer.
Why C is wrong
A trojan is defined by pretending to be legitimate, which is a delivery method.
Right, D is the answer.
Why D is right
Software that secretly collects information and transmits it to a remote server is spyware.
Question 56 Play from 1:12:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MSConfig adjusts startup settings on a single machine.
Not this one. Try another answer.
Why B is wrong
A firewall filters traffic and does not manage account policy.
Right, C is the answer.
Why C is right
Group Policy applies security settings, such as disabling guest sign in, to all domain computers from one place.
Not this one. Try another answer.
Why D is wrong
The management console hosts tools but is not the policy mechanism for the domain.
Question 57 Play from 1:13:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Nslookup looks up DNS names.
Right, B is the answer.
Why B is right
Running net use with no extra options prints the network shares that are currently mapped, along with their status.
Not this one. Try another answer.
Why C is wrong
Hostname prints only the computer name.
Not this one. Try another answer.
Why D is wrong
Systeminfo prints system details and not the mapped shares.
Question 58 Play from 1:14:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A screen lock is easily bypassed by removing the drive.
Not this one. Try another answer.
Why B is wrong
Login time limits do not protect data on a stolen drive.
Not this one. Try another answer.
Why C is wrong
Content filtering controls web access.
Right, D is the answer.
Why D is right
Disk encryption makes the stored data unreadable without the key, even if someone has the physical machine.
Question 59 Play from 1:15:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Mission Control arranges windows and desktops.
Right, B is the answer.
Why B is right
Continuity features like Handoff, Universal Clipboard, and AirDrop use Bluetooth to discover nearby Apple devices, along with Wi-Fi and the same Apple account.
Not this one. Try another answer.
Why C is wrong
Terminal is the command line.
Not this one. Try another answer.
Why D is wrong
Gestures are trackpad motions and need no Bluetooth.
Question 60 Play from 1:16:54
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Brute-force attacks guess credentials.
Not this one. Try another answer.
Why B is wrong
An on-path attack intercepts communication between two parties.
Right, C is the answer.
Why C is right
A distributed denial of service attack uses numerous compromised systems to flood one target so legitimate users cannot reach it.
Not this one. Try another answer.
Why D is wrong
SQL injection abuses database queries.
Question 61 Play from 1:18:09
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
macOS comes with Apple hardware and is not free to license.
Not this one. Try another answer.
Why B is wrong
Windows requires paid licensing.
Not this one. Try another answer.
Why C is wrong
Chrome OS leans on cloud storage rather than keeping everything local.
Right, D is the answer.
Why D is right
Linux is free and open source, so there are no license costs, and it stores files locally by default without relying on a cloud service.
Question 62 Play from 1:19:22
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Kerberos is a ticket based protocol and not a description of factor types.
Right, B is the answer.
Why B is right
Combining something you know with something you have is multifactor authentication, since it requires two different kinds of proof.
Not this one. Try another answer.
Why C is wrong
TACACS+ is an access control protocol, not a way of describing combined factors.
Not this one. Try another answer.
Why D is wrong
Biometric authentication relies on a body trait, which is not part of this scenario.
Question 63 Play from 1:20:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
FAT32 limits single files to about 4 GB, so the archive would not fit.
Not this one. Try another answer.
Why B is wrong
APFS is an Apple format that Windows cannot read.
Right, C is the answer.
Why C is right
FAT32 cannot hold a single file larger than 4 GB, while NTFS can. NTFS is also fully supported by Windows, so it works for this transfer.
Not this one. Try another answer.
Why D is wrong
ext4 is a Linux format that Windows does not support natively.
Question 64 Play from 1:22:06
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Patching is important but does not stop password guessing.
Not this one. Try another answer.
Why B is wrong
Hour limits only reduce the window and do not stop guessing.
Not this one. Try another answer.
Why C is wrong
Complex passwords help, but a guessed or leaked one still works on its own.
Right, D is the answer.
Why D is right
With multifactor authentication, a guessed password is not enough, because the attacker also needs a second factor. That blocks most guessing attacks.
Question 65 Play from 1:23:32
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Batch files are used on Windows.
Not this one. Try another answer.
Why B is wrong
Visual Basic tools are tied to Windows.
Right, C is the answer.
Why C is right
Shell scripts run a series of commands and support loops, conditions, and variables, which makes them the usual tool for automating work in Linux.
Not this one. Try another answer.
Why D is wrong
JavaScript files are mainly for browsers and web applications.
Question 66 Play from 1:24:43
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
LDAP reads the directory but is not what a wireless access point uses to authenticate.
Right, B is the answer.
Why B is right
RADIUS is the authentication service that wireless access points can ask to check a user against a central directory such as Active Directory.
Not this one. Try another answer.
Why C is wrong
WPA3 secures the wireless link and does not by itself check directory accounts.
Not this one. Try another answer.
Why D is wrong
MFA adds another factor but does not connect Wi-Fi to the directory.
Question 67 Play from 1:26:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Drive size does not decide the architecture.
Not this one. Try another answer.
Why B is wrong
The processor name by itself does not decide the choice, since the memory limit does.
Not this one. Try another answer.
Why C is wrong
Network speed has no bearing on it.
Right, D is the answer.
Why D is right
A 32-bit system can use only about 4 GB of memory, so a machine with 16 GB needs a 64-bit system to make use of it.
Question 68 Play from 1:27:22
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Opening the cover is the step that comes after the power is removed.
Right, B is the answer.
Why B is right
Power must be disconnected before opening a case so there is no risk of shock to the technician or damage to the components.
Not this one. Try another answer.
Why C is wrong
Peripherals can be removed later, once the machine is safely powered down.
Not this one. Try another answer.
Why D is wrong
Grounding is done after power is removed, as part of the work.
Question 69 Play from 1:28:36
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Encrypting the device makes the data unreadable without the key, even if the finger unlock is somehow bypassed.
Not this one. Try another answer.
Why B is wrong
Location tracking helps locate the phone but does not protect its data.
Not this one. Try another answer.
Why C is wrong
A PIN lock still leaves stored data readable if someone gets around the screen.
Not this one. Try another answer.
Why D is wrong
Backups help recover data but do not stop another person from reading it.
Question 70 Play from 1:29:51
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
RDP is aimed at Windows hosts.
Not this one. Try another answer.
Why B is wrong
RMM software is for monitoring and managing systems, not for staff access.
Not this one. Try another answer.
Why C is wrong
FTP is for moving files and does not encrypt traffic by default.
Right, D is the answer.
Why D is right
A VPN encrypts traffic and works the same way regardless of the operating system on the servers, so it can serve both Linux and Windows.
Question 71 Play from 1:31:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Memory work does not change the boot order.
Not this one. Try another answer.
Why B is wrong
A reformat is not needed because nothing happened to the drive's data.
Right, C is the answer.
Why C is right
Working inside the case can easily pull out a cable. If the drive loses power, the system sees no boot device. Reseat the cable first.
Not this one. Try another answer.
Why D is wrong
Installation media is not needed to start an installed system.
Question 72 Play from 1:32:34
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Bias depends on the model and its data, not where it runs.
Not this one. Try another answer.
Why B is wrong
Appropriate use is a policy question and not a reason to host locally.
Right, C is the answer.
Why C is right
Running AI on your own servers means sensitive information does not leave your control, which is a privacy advantage.
Not this one. Try another answer.
Why D is wrong
Hallucinations happen with any model, wherever it runs.
Question 73 Play from 1:33:48
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Printing with this material releases fine particles and fumes that should not be inhaled, so respiratory protection comes first.
Not this one. Try another answer.
Why B is wrong
An ESD mat protects electronics from static, not people from fumes.
Not this one. Try another answer.
Why C is wrong
Antistatic bags protect components in storage.
Not this one. Try another answer.
Why D is wrong
Steel-toed boots protect against dropped heavy objects, not fumes.
Question 74 Play from 1:35:04
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
BitLocker encrypts drives and does not change sign in.
Not this one. Try another answer.
Why B is wrong
User Account Control prompts before system changes.
Not this one. Try another answer.
Why C is wrong
Single sign-on reduces repeated logins but still depends on the password.
Right, D is the answer.
Why D is right
Windows Hello lets people sign in with a fingerprint, face, or PIN instead of typing a password.
Question 75 Play from 1:36:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
XFS is a Linux file system that macOS does not write natively.
Not this one. Try another answer.
Why B is wrong
NTFS is read only on macOS without extra software.
Right, C is the answer.
Why C is right
exFAT is supported natively for reading and writing by macOS and Windows, which makes it a common choice for portable drives.
Not this one. Try another answer.
Why D is wrong
ReFS is a Windows server oriented format that macOS does not support.
Question 76 Play from 1:37:28
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
An acceptable use policy covers how systems may be used.
Right, B is the answer.
Why B is right
A service level agreement spells out how fast tickets of each priority should be answered, so it clarifies what response time the employee is entitled to.
Not this one. Try another answer.
Why C is wrong
An end user license agreement covers software licensing terms.
Not this one. Try another answer.
Why D is wrong
An SOP describes steps for performing a task.
Question 77 Play from 1:38:43
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Encryption is not the next simple step.
Not this one. Try another answer.
Why B is wrong
Drivers load after the system begins to start up.
Right, C is the answer.
Why C is right
If the hardware checks out, the firmware may be trying to start from the wrong device, so confirm the boot order in the BIOS or UEFI settings.
Not this one. Try another answer.
Why D is wrong
File system checks come after confirming the correct device is booting.
Question 78 Play from 1:39:51
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Videoconferencing software supports live presentations with screen sharing and live conversation with outside participants.
Not this one. Try another answer.
Why B is wrong
Secure file transfer moves files and does not present live.
Not this one. Try another answer.
Why C is wrong
WinRM is a remote management service for Windows.
Not this one. Try another answer.
Why D is wrong
RMM tools let IT manage devices remotely.
Question 79 Play from 1:41:04
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
MDM is a system for managing mobile devices.
Right, B is the answer.
Why B is right
A time based one time password is generated by an authenticator app or token and used as a second factor when signing in.
Not this one. Try another answer.
Why C is wrong
DLP prevents sensitive data from leaving.
Not this one. Try another answer.
Why D is wrong
FRT is facial recognition technology, not a code.
Question 80 Play from 1:42:12
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
System Information shows hardware and software details, not active sessions.
Right, B is the answer.
Why B is right
The Users tab in Task Manager lists the sessions that are signed in, including remote ones, along with their resource usage.
Not this one. Try another answer.
Why C is wrong
Group Policy Editor configures policies and not live sessions.
Not this one. Try another answer.
Why D is wrong
Local Users and Groups manages accounts rather than sessions.
Question 81 Play from 1:43:28
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
An after-action report summarizes what happened afterward and does not track evidence handling.
Right, B is the answer.
Why B is right
A chain of custody log records every person who held the evidence, when, and why. That unbroken record keeps the evidence reliable and admissible.
Not this one. Try another answer.
Why C is wrong
An acceptable use policy governs how employees use company systems.
Not this one. Try another answer.
Why D is wrong
Compliance requirements describe rules to follow, not a record of evidence handling.
Question 82 Play from 1:44:47
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Accessibility controls assistive features.
Not this one. Try another answer.
Why B is wrong
Finder is the file browser and not where app permissions are set.
Right, C is the answer.
Why C is right
The Privacy and Security pane in System Settings is where macOS lets the user allow an app that has not been signed or verified.
Not this one. Try another answer.
Why D is wrong
iCloud manages cloud storage and sync.
Question 83 Play from 1:46:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Electrical specifications belong in the product manual.
Not this one. Try another answer.
Why B is wrong
Setup and configuration belong in the product manual.
Right, C is the answer.
Why C is right
A safety data sheet covers the hazards of a product, along with first aid and emergency response steps for incidents such as a leak or fire.
Not this one. Try another answer.
Why D is wrong
Installation guidance belongs in the product manual, not the safety sheet.
Question 84 Play from 1:47:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Geofencing reacts to location and does not stop data from being read.
Not this one. Try another answer.
Why B is wrong
Facial recognition protects the unlock step but does not protect the stored data itself.
Right, C is the answer.
Why C is right
Encryption protects stored data all the time, even if nobody realizes the phone is gone. A remote wipe, by contrast, has to be started by someone after the loss is discovered.
Not this one. Try another answer.
Why D is wrong
Remote wipe needs someone to know the phone is missing and trigger it.
Question 85 Play from 1:48:37
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A remote wipe lets the administrator send a command that erases the device's data over the network, even though the phone is out of the owner's hands.
Not this one. Try another answer.
Why B is wrong
Antivirus detects malware and does not erase a lost phone.
Not this one. Try another answer.
Why C is wrong
Degaussing destroys data on magnetic media and does not apply to phones.
Not this one. Try another answer.
Why D is wrong
A password manager stores credentials and does not erase a device.
Question 86 Play from 1:49:49
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Netstat shows connections and listening ports.
Not this one. Try another answer.
Why B is wrong
Tracert shows the route to a destination.
Not this one. Try another answer.
Why C is wrong
Ping only tests whether another host replies.
Right, D is the answer.
Why D is right
Running ipconfig prints the adapter settings, including the IP address, subnet mask, and default gateway. Adding the all switch shows more detail such as DNS servers and the MAC address.
Question 87 Play from 1:50:59
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Secure Shell gives an encrypted command line session to network devices such as switches, so commands can be run and the output captured.
Not this one. Try another answer.
Why B is wrong
VNC shows a graphical desktop, which a switch does not have.
Not this one. Try another answer.
Why C is wrong
RDP is for Windows graphical sessions.
Not this one. Try another answer.
Why D is wrong
WinRM manages Windows systems, not network switches.
Question 88 Play from 1:52:13
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Net user manages user accounts.
Not this one. Try another answer.
Why B is wrong
Nslookup queries DNS.
Not this one. Try another answer.
Why C is wrong
Net use maps and shows network shares.
Right, D is the answer.
Why D is right
Netstat lists active connections and listening ports, which helps reveal which services are communicating over the network.
Question 89 Play from 1:53:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Content filtering limits web access and does not enforce updates.
Not this one. Try another answer.
Why B is wrong
BYOD is a policy for personal devices, not a tool for enforcement.
Not this one. Try another answer.
Why C is wrong
Antivirus detects malware but does not enforce company standards or patches.
Right, D is the answer.
Why D is right
Mobile device management enforces policy centrally, checks compliance, and can push operating system updates to every enrolled phone.
Question 90 Play from 1:54:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The TPM stores keys and does not load the operating system.
Right, B is the answer.
Why B is right
A quiet machine suggests the hardware is working, and a missing operating system points to a damaged boot record, which is what locates and starts the OS.
Not this one. Try another answer.
Why C is wrong
The firmware is working, since the machine got far enough to report the missing OS.
Not this one. Try another answer.
Why D is wrong
The file system is not what the boot process reads first to find the OS.
Question 91 Play from 1:56:10
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Degaussing ruins the drive and prevents reuse.
Not this one. Try another answer.
Why B is wrong
Deleting partitions leaves the data recoverable.
Not this one. Try another answer.
Why C is wrong
EFS encrypts files and does not erase them.
Right, D is the answer.
Why D is right
A low level format overwrites the drive's sectors, which removes the data for good and leaves the drive usable for something else.
Question 92 Play from 1:57:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Spear phishing targets a specific person, typically through email.
Not this one. Try another answer.
Why B is wrong
Whaling targets senior executives.
Right, C is the answer.
Why C is right
Smishing is phishing delivered by text message. The link tries to trick the user into entering credentials or installing something harmful.
Not this one. Try another answer.
Why D is wrong
Vishing happens over voice calls.
Question 93 Play from 1:58:29
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Administrative Tools is a collection of system management consoles.
Not this one. Try another answer.
Why B is wrong
Network and Sharing Center manages network connections.
Not this one. Try another answer.
Why C is wrong
System shows basic computer information.
Right, D is the answer.
Why D is right
Internet Options includes the security zones, where a site can be added to the trusted sites list.
Question 94 Play from 1:59:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
WPA3 is a wireless security standard.
Not this one. Try another answer.
Why B is wrong
TKIP is an older wireless encryption method.
Right, C is the answer.
Why C is right
RADIUS provides all three parts of AAA: it verifies who a user is, decides what they may do, and records what they did.
Not this one. Try another answer.
Why D is wrong
Kerberos handles authentication but does not include accounting.
Question 95 Play from 2:00:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Encrypted data still exists and could be attacked later.
Right, B is the answer.
Why B is right
Degaussing scrambles the magnetic data, and shredding destroys the drive physically, so recovery is impossible.
Not this one. Try another answer.
Why C is wrong
Software erasing can leave remnants and relies on the drive working correctly.
Not this one. Try another answer.
Why D is wrong
A low-level format still leaves some risk of data recovery.
Question 96 Play from 2:02:03
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
An update would not explain why the database cannot be reached.
Not this one. Try another answer.
Why B is wrong
Restarting is a later step after the obvious network link is checked.
Right, C is the answer.
Why C is right
The database sits on the internal network, so from home the executive must be connected through the VPN. A dropped VPN is the most likely cause.
Not this one. Try another answer.
Why D is wrong
Going to the office is not a troubleshooting step.
Question 97 Play from 2:03:24
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
macOS uses APFS.
Not this one. Try another answer.
Why B is wrong
Windows uses NTFS and other formats, not XFS.
Not this one. Try another answer.
Why C is wrong
iOS uses APFS.
Right, D is the answer.
Why D is right
XFS is a high performance journaling file system that is common on Linux. Windows uses NTFS, and Apple platforms use APFS.
Question 98 Play from 2:04:39
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Tracert shows each hop on the way to the destination, so you can see where responses stop or slow down.
Not this one. Try another answer.
Why B is wrong
Ping only shows whether the destination replies, not where the problem lies.
Not this one. Try another answer.
Why C is wrong
Nslookup checks name resolution.
Not this one. Try another answer.
Why D is wrong
Ipconfig shows local adapter settings.
Question 99 Play from 2:05:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Full storage does not drain the battery quickly.
Not this one. Try another answer.
Why B is wrong
The phone reaches a full charge, so the charger is working.
Right, C is the answer.
Why C is right
Since the phone charges completely each night, the charger is fine. Apps working in the background are the usual cause of rapid battery drain.
Not this one. Try another answer.
Why D is wrong
Unsupported software would not explain a sudden battery issue.
Question 100 Play from 2:06:58
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Spoofing pretends to be another source, but does not take a site offline.
Not this one. Try another answer.
Why B is wrong
Business email compromise targets people through email.
Not this one. Try another answer.
Why C is wrong
Cross site scripting injects code into pages viewed by users.
Right, D is the answer.
Why D is right
A distributed denial of service attack floods a site with traffic from many hijacked machines, using up its capacity so genuine visitors cannot get in.
Not this one. Try another answer.
Why E is wrong
A dictionary attack guesses passwords.
Transcript
Play from 00:00 Question 1. A software team lead wants every technician to confirm that an installer pulled from a vendor website arrived untouched. Which technique should they rely on? Here are the options. Option A. Extensions. Option B. SSL certificate. Option C. Plug-in. Option D. Hashing. Pause the video now if you want time to think about the answer.
The correct answer is D. Hashing. Running the file through a hash function produces a short fingerprint. If that fingerprint matches the value the vendor publishes, the file has not been altered since it was released. Algorithms such as SHA-256 are commonly used for this check. Now, why are the other options incorrect? Option A is incorrect. Extensions add features to a browser and say nothing about whether a file was changed. Option B is incorrect. A certificate proves who runs a website, not that a downloaded file is intact. Option C is incorrect. A plug-in extends software and cannot validate a download. Therefore, D, Hashing, is the correct answer.
Play from 01:25 Question 2. A retail chain's support team discovers a password-cracking app on one of its company-issued phones, and it wants to stop staff from loading unapproved apps in the future. What is the best action? Here are the options. Option A. Deploy MDM. Option B. Install anti-malware software. Option C. Implement PAM. Option D. Configure Group Policy. Pause the video now if you want time to think about the answer.
The correct answer is A. Deploy MDM. A mobile device management platform lets the company control which apps may be installed on its phones, enforce security settings, and even wipe a device remotely. That policy control is what stops further unauthorized installs. Now, why are the other options incorrect? Option B is incorrect. Anti-malware can remove this one app but does not control what people are allowed to install later. Option C is incorrect. PAM controls privileged accounts, not apps on a phone. Option D is incorrect. Group Policy applies to domain-joined Windows computers, not company phones. Therefore, A, Deploy MDM, is the correct answer.
Play from 02:53 Question 3. A school principal wants to hold a live session with staff who work from different campuses, with discussion and teaching built in. Which software technology fits best? Here are the options. Option A. Virtual desktop infrastructure. Option B. Remote Desktop Protocol. Option C. Screen sharing. Option D. Videoconferencing. Pause the video now if you want time to think about the answer.
The correct answer is D. Videoconferencing. Videoconferencing lets everyone see and hear each other, present material, and discuss live, which suits a combined collaboration and training session. Now, why are the other options incorrect? Option A is incorrect. A virtual desktop hosts a workspace remotely and is not a meeting tool. Option B is incorrect. Remote Desktop Protocol connects one person to a computer and is not meant for group sessions. Option C is incorrect. Screen sharing shows one display but lacks the face to face discussion the session needs. Therefore, D, Videoconferencing, is the correct answer.
Show full transcriptShow less
Play from 04:15 Question 4. A designer tries to set up a heavy 3-D modeling program on a fresh Windows workstation, but the installer stops and says the machine falls below the minimum hardware. What should the designer inspect first? Here are the options. Option A. NIC bandwidth. Option B. PSU wattage. Option C. GPU requirements. Option D. USB speed. Pause the video now if you want time to think about the answer.
The correct answer is C. GPU requirements. Rendering software leans heavily on the graphics processor, so a graphics card that is too weak is the most likely reason for a hardware requirement error. Compare the card against the program's published minimum. Now, why are the other options incorrect? Option A is incorrect. Network bandwidth has no bearing on whether the program meets graphics needs. Option B is incorrect. Power supply wattage matters for stability, but not for a minimum hardware message from an installer. Option D is incorrect. USB speed affects external devices and does not decide rendering capability. Therefore, C, GPU requirements, is the correct answer.
Play from 05:46 Question 5. Before a Windows technician can run an unsigned automation script, the local execution policy has to be loosened. Which script file type does that policy apply to? Here are the options. Option A. .bat. Option B. .js. Option C. .ps1. Option D. .py. Pause the video now if you want time to think about the answer.
The correct answer is C. .ps1. PowerShell scripts are governed by an execution policy that decides whether unsigned code may run. Setting it to Unrestricted lets those scripts execute. The other script types have no equivalent built in gate. Now, why are the other options incorrect? Option A is incorrect. Batch files run without any execution policy check. Option B is incorrect. JavaScript files are not controlled by the PowerShell execution policy. Option D is incorrect. Python scripts run through their own interpreter with no such policy. Therefore, C, .ps1, is the correct answer.
Play from 07:04 Question 6. A sales rep complains that a laptop has become sluggish. The rep always shuts the lid at the end of the day instead of powering down, and the technician has already confirmed all updates are installed. What should the technician check next? Here are the options. Option A. Network speed. Option B. System uptime. Option C. RAM. Option D. Hard drive space. Pause the video now if you want time to think about the answer.
The correct answer is B. System uptime. Closing the lid usually puts the laptop to sleep rather than restarting it. After many days without a full restart, memory leaks and leftover processes pile up. Checking how long the system has been running points to a restart as the fix. Now, why are the other options incorrect? Option A is incorrect. Network speed would not explain slowness on every task. Option C is incorrect. RAM capacity is not the issue when the pattern is tied to never restarting. Option D is incorrect. Free storage space is a lower priority than the missing restarts. Therefore, B, System uptime, is the correct answer.
Play from 08:30 Question 7. A technician does a clean Windows 11 install from a flash drive. After the first reboot the setup screen appears again. What should be done so the install can finish? Here are the options. Option A. Switch the drive style from MBR to UEFI. Option B. Turn off TPM. Option C. Take out the flash drive. Option D. Run chkdsk from the flash drive. Pause the video now if you want time to think about the answer.
The correct answer is C. Take out the flash drive. The machine is booting from the flash drive again because it is still plugged in. Removing it after the first restart lets the computer start from the internal drive and continue setup. Now, why are the other options incorrect? Option A is incorrect. UEFI and MBR are different things and changing them would not stop the installer from reloading. Option B is incorrect. Windows 11 needs the TPM, so turning it off does not help. Option D is incorrect. Disk checking does not change which device the system boots from. Therefore, C, Take out the flash drive, is the correct answer.
Play from 09:57 Question 8. A receptionist's PC suddenly fills every web page with ads. Where should the technician look first? Here are the options. Option A. Cache size. Option B. Antivirus. Option C. Network configuration. Option D. Web browser settings. Pause the video now if you want time to think about the answer.
The correct answer is D. Web browser settings. A flood of ads while browsing usually comes from a hijacked home page or search engine, unwanted extensions, or notification permissions given to ad sites, all of which live in the browser settings. Start there. Now, why are the other options incorrect? Option A is incorrect. Cache size only affects how fast pages load. Option B is incorrect. Antivirus status is worth checking later, but browser changes are the likely cause. Option C is incorrect. Network settings do not inject ads into pages. Therefore, D, Web browser settings, is the correct answer.
Play from 11:15 Question 9. Whenever a user types a popular search engine's name into the browser, an unfamiliar site loads. What should the technician check first? Here are the options. Option A. IP address. Option B. DNS servers. Option C. System time. Option D. Windows updates. Pause the video now if you want time to think about the answer.
The correct answer is B. DNS servers. If the right name leads to the wrong site, name resolution is being redirected. Incorrect or hijacked DNS server entries send requests to unintended destinations, so check them first. Now, why are the other options incorrect? Option A is incorrect. The computer's own address would cause no connection, not a different website. Option C is incorrect. A wrong clock causes certificate warnings, not redirects. Option D is incorrect. Missing updates are too broad to explain this exact symptom. Therefore, B, DNS servers, is the correct answer.
Play from 12:36 Question 10. Which kind of covert software on a phone can pass along a person's call audio and record camera footage without that person ever knowing? Here are the options. Option A. Rootkit. Option B. Keylogger. Option C. Stalkerware. Option D. Trojan. Pause the video now if you want time to think about the answer.
The correct answer is C. Stalkerware. Stalkerware is surveillance software installed secretly to watch one particular person. It can capture calls, switch on the camera and microphone, and report location and messages back to whoever put it there. Now, why are the other options incorrect? Option A is incorrect. A rootkit hides other malicious software but is not mainly about recording a person. Option B is incorrect. A keylogger records typed keys and does not capture call audio or video. Option D is incorrect. A trojan is disguised as something useful, but that does not describe targeted monitoring. Therefore, C, Stalkerware, is the correct answer.
Play from 13:55 Question 11. A city office employee will be working from home on a government laptop and must open files stored on the office file server. What should the technician configure? Here are the options. Option A. RDP. Option B. VPN. Option C. SSH. Option D. VNC. Pause the video now if you want time to think about the answer.
The correct answer is B. VPN. A virtual private network builds an encrypted tunnel over the internet to the office network, so the employee can reach internal shares as if sitting at the office. Now, why are the other options incorrect? Option A is incorrect. RDP controls a remote desktop and does not on its own give secure network access. Option C is incorrect. SSH gives command line access to a single host and is not meant for file shares. Option D is incorrect. VNC shares a remote screen and does not securely extend the network. Therefore, B, VPN, is the correct answer.
Play from 15:17 Question 12. Using only the command prompt, how should a technician connect a network share to a drive letter? Here are the options. Option A. tracert. Option B. pathping. Option C. nslookup. Option D. net use. Pause the video now if you want time to think about the answer.
The correct answer is D. net use. The net use command ties a shared folder on another machine to a local drive letter, either for the session or persistently. The other tools test routes or look up names. Now, why are the other options incorrect? Option A is incorrect. Tracert shows the hops a packet takes. Option B is incorrect. Pathping combines route and loss statistics, not drive mapping. Option C is incorrect. Nslookup queries DNS names. Therefore, D, net use, is the correct answer.
Play from 16:25 Question 13. A trainee asks which command on a Linux computer lets someone switch to another account, such as root, to carry out administrative work. Which is it? Here are the options. Option A. net user. Option B. su. Option C. cmcl. Option D. runas. Pause the video now if you want time to think about the answer.
The correct answer is B. su. The su command switches to another user, most often the superuser, so administrative tasks can be performed. It plays the same role runas does on Windows. Now, why are the other options incorrect? Option A is incorrect. Net user manages accounts on Windows. Option C is incorrect. Cmcl is not a recognized command. Option D is incorrect. Runas is the Windows tool for running a program as another user. Therefore, B, su, is the correct answer.
Play from 17:32 Question 14. A homeowner wants a new Wi-Fi router set up so that outside devices cannot easily open connections into the home network. What should the technician do? Here are the options. Option A. Change the administrator password. Option B. Turn off UPnP. Option C. Switch on content filtering. Option D. Rename the SSID. Pause the video now if you want time to think about the answer.
The correct answer is B. Turn off UPnP. Universal Plug and Play lets devices ask the router to open ports automatically, which can expose the network to inbound connections. Turning it off keeps outside traffic from being invited in. Now, why are the other options incorrect? Option A is incorrect. A new admin password protects the router settings but does not limit inbound connections. Option C is incorrect. Content filtering controls which sites users can visit, not inbound connections. Option D is incorrect. The network name has no effect on inbound access. Therefore, B, Turn off UPnP, is the correct answer.
Play from 18:57 Question 15. An organization pushes the same settings to every computer through Active Directory Group Policy. What must a computer do to get those settings? Here are the options. Option A. Configure UAC. Option B. Join the domain. Option C. Turn on BitLocker. Option D. Disable inheritance. Pause the video now if you want time to think about the answer.
The correct answer is B. Join the domain. Group Policy objects come from the directory, so only computers that are members of the domain receive and apply them. Machines outside the domain are not covered. Now, why are the other options incorrect? Option A is incorrect. User Account Control is a local prompt feature and is not needed to receive policy. Option C is incorrect. BitLocker encrypts drives and is unrelated to receiving policy. Option D is incorrect. Turning off inheritance would block settings rather than deliver them. Therefore, B, Join the domain, is the correct answer.
Play from 20:13 Question 16. A technician is installing Windows 11 on a 4TB solid state drive, and the plan calls for at least five primary partitions. Which two items should be used? (Choose two.) Here are the options. Option A. MBR. Option B. NTFS. Option C. APFS. Option D. GPT. Option E. XFS. Option F. FAT16. Pause the video now if you want time to think about the answer.
The correct answers are B. NTFS, and D. GPT. A GUID Partition Table handles large drives and allows far more than four primary partitions. NTFS is the file system Windows 11 installs to. MBR is capped at four primary partitions and cannot address a drive this size. Now, why are the other options incorrect? Option A is incorrect. MBR allows only four primary partitions and cannot handle a drive this large. Option C is incorrect. APFS is an Apple file system. Option E is incorrect. XFS is a Linux file system. Option F is incorrect. FAT16 is too old and too limited for a Windows 11 install. Therefore, B and D are the correct answers.
Play from 21:50 Question 17. Which type of malicious software quietly gathers information from a computer and sends it to an unknown party without the owner agreeing? Here are the options. Option A. Virus. Option B. Spyware. Option C. Trojan. Option D. Ransomware. Pause the video now if you want time to think about the answer.
The correct answer is B. Spyware. Spyware is built to observe what a user does, collect information, and transmit it to an outside party without permission. That matches this description exactly. Now, why are the other options incorrect? Option A is incorrect. A virus spreads by attaching to files, not mainly by collecting data. Option C is incorrect. A trojan pretends to be useful software, which is a delivery method, not data collection. Option D is incorrect. Ransomware locks files for payment instead of quietly stealing data. Therefore, B, Spyware, is the correct answer.
Play from 23:10 Question 18. Which command line utility would a technician use to query the DNS records of a remote hostname on a Linux machine? Here are the options. Option A. curl. Option B. dig. Option C. find. Option D. ip. Pause the video now if you want time to think about the answer.
The correct answer is B. dig. The dig utility sends queries to DNS servers and shows the records returned, such as A, MX, and CNAME, for any host name you ask about. Now, why are the other options incorrect? Option A is incorrect. Curl transfers data from a URL and is not a DNS lookup tool. Option C is incorrect. Find searches for files on disk. Option D is incorrect. The ip command manages network interfaces and routes. Therefore, B, dig, is the correct answer.
Play from 24:17 Question 19. A small clinic keeps running a program after its vendor has ended all support. What is the main security risk? Here are the options. Option A. The program will stop launching. Option B. Licensing fees will go up. Option C. Newly found weaknesses will go unpatched. Option D. The vendor will add no new features. Pause the video now if you want time to think about the answer.
The correct answer is C. Newly found weaknesses will go unpatched. Once support ends, the vendor no longer ships security fixes. Any flaw discovered afterward stays open for attackers to exploit, which is the actual security danger. Now, why are the other options incorrect? Option A is incorrect. Unsupported software usually keeps working, so that is not the main risk. Option B is incorrect. Cost changes are a business matter, not a security one. Option D is incorrect. Missing new features is an inconvenience, not a security threat. Therefore, C, Newly found weaknesses will go unpatched, is the correct answer.
Play from 25:39 Question 20. An admin stores dozens of logins in a password vault application. What matters most for keeping that vault safe? Here are the options. Option A. A TPM chip. Option B. A strong master password. Option C. The sign-in lock screen on the PC. Option D. Limited sign-in hours. Pause the video now if you want time to think about the answer.
The correct answer is B. A strong master password. One master password protects everything inside the vault, so it needs to be strong and kept secret. If it is weak, every stored login is at risk. Now, why are the other options incorrect? Option A is incorrect. A TPM can protect keys on the device but does not guard the vault itself. Option C is incorrect. A lock screen protects the session, not the vault contents. Option D is incorrect. Sign-in hour limits do not protect a locally stored vault. Therefore, B, A strong master password, is the correct answer.
Play from 26:55 Question 21. A company is hiring remote staff and wants new laptops to go straight from the manufacturer to each employee's home, already set up with minimal IT effort. Which approach should the administrator choose? Here are the options. Option A. Private cloud. Option B. Zero-touch deployment. Option C. Remote Desktop Protocol. Option D. Clean install. Pause the video now if you want time to think about the answer.
The correct answer is B. Zero-touch deployment. With zero-touch deployment the device configures itself the first time it connects, pulling its operating system, drivers, and policies automatically. Nobody from IT needs to handle the laptop before it reaches the employee. Now, why are the other options incorrect? Option A is incorrect. A private cloud is a hosting model and does not set up a laptop. Option C is incorrect. Remote Desktop Protocol offers access to a computer, not provisioning of one. Option D is incorrect. A clean install needs hands-on work on each machine, which defeats the goal. Therefore, B, Zero-touch deployment, is the correct answer.
Play from 28:20 Question 22. A free utility installer quietly adds a browser toolbar and a coupon helper that the user never agreed to. What is this extra software called? Here are the options. Option A. Potentially unwanted program. Option B. Trojan. Option C. Ransomware. Option D. Virus. Pause the video now if you want time to think about the answer.
The correct answer is A. Potentially unwanted program. A potentially unwanted program is bundled into an installer without clear disclosure. Typical examples are toolbars, adware, and trackers that ride along with legitimate software. Now, why are the other options incorrect? Option B is incorrect. A trojan poses as a useful program to carry a harmful payload, which is different from an undisclosed bundled add-on. Option C is incorrect. Ransomware encrypts files for payment, which is not what happened here. Option D is incorrect. A virus replicates by attaching to other files. Therefore, A, Potentially unwanted program, is the correct answer.
Play from 29:43 Question 23. A bookkeeper's PC shows the blue crash screen about two times every day. Which Windows tool should the technician open to find out why? Here are the options. Option A. System Information. Option B. Device Manager. Option C. Performance Monitor. Option D. Event Viewer. Pause the video now if you want time to think about the answer.
The correct answer is D. Event Viewer. Event Viewer keeps logs of system errors, including crash details and error codes, which helps a technician trace the reason behind repeated blue screens. Now, why are the other options incorrect? Option A is incorrect. System Information lists hardware and software details but does not log crashes. Option B is incorrect. Device Manager manages hardware drivers and does not keep a crash history. Option C is incorrect. Performance Monitor tracks resource use over time and is not the best source for crash causes. Therefore, D, Event Viewer, is the correct answer.
Play from 31:01 Question 24. A museum plans to put a visitor information terminal in its lobby that anyone can walk up to. Which account type should the technician enable for it? Here are the options. Option A. Domain. Option B. Service. Option C. Power user. Option D. Guest. Pause the video now if you want time to think about the answer.
The correct answer is D. Guest. A Guest account has very limited rights, so strangers cannot install software, reach sensitive areas, or change settings. That makes it the right fit for a public terminal. Now, why are the other options incorrect? Option A is incorrect. A domain account ties the machine to corporate identities and gives far too much reach for a public terminal. Option B is incorrect. A service account is meant for background programs, not for walk up visitors. Option C is incorrect. A power user account has more permissions than a public terminal should allow. Therefore, D, Guest, is the correct answer.
Play from 32:16 Question 25. An employee has jailbroken a company phone so they can run apps that are not approved. What should the organization use to keep that phone away from the corporate network? Here are the options. Option A. Lock screen. Option B. Geofencing. Option C. Mobile device management. Option D. Encryption. Pause the video now if you want time to think about the answer.
The correct answer is C. Mobile device management. Mobile device management can detect a compromised device, such as one that is rooted or jailbroken, and then block it from corporate resources until it is fixed. Now, why are the other options incorrect? Option A is incorrect. A lock screen protects against casual physical access and cannot detect a modified phone. Option B is incorrect. Geofencing only reacts to location and does not spot a jailbroken device. Option D is incorrect. Encryption protects stored data, but does not stop a modified device from joining the network. Therefore, C, Mobile device management, is the correct answer.
Play from 33:36 Question 26. A manager wants staff themselves to be able to avoid installing malware and accidentally leaking confidential data. What helps most? Here are the options. Option A. Email security gateway. Option B. Firewall. Option C. Threat education. Option D. Secure Boot. Pause the video now if you want time to think about the answer.
The correct answer is C. Threat education. Training users to recognize phishing, risky downloads, and careless handling of data addresses the human side of both problems. Technical controls cannot stop a user who is tricked into acting. Now, why are the other options incorrect? Option A is incorrect. A mail gateway filters messages but does not change how users behave. Option B is incorrect. A firewall filters traffic and does not stop a user from running something harmful. Option D is incorrect. Secure Boot checks the startup process and does nothing about user behavior. Therefore, C, Threat education, is the correct answer.
Play from 34:57 Question 27. An accountant working from a spare room cannot open any files from the office file shares on a company laptop. Which setting should the technician set up so the files can be reached? Here are the options. Option A. Wireless network. Option B. Virtual private network. Option C. Wide-area network. Option D. Proxy network settings. Pause the video now if you want time to think about the answer.
The correct answer is B. Virtual private network. A virtual private network encrypts the connection and verifies the user before giving access to internal files and systems from outside the office. Now, why are the other options incorrect? Option A is incorrect. Wireless connectivity only describes how the laptop joins the home network. Option C is incorrect. A wide-area network is a type of network, not something configured to reach office files. Option D is incorrect. A proxy relays web traffic and does not provide secure access to internal shares. Therefore, B, Virtual private network, is the correct answer.
Play from 36:25 Question 28. A graphic artist finds several features of an image editing app locked, and the app asks for an account sign in that the artist has not been given. What is the fix? Here are the options. Option A. Program reinstallation. Option B. License assignment. Option C. Application repair. Option D. VPN connection. Pause the video now if you want time to think about the answer.
The correct answer is B. License assignment. Features that stay locked until an account signs in point to licensing. Assigning a license to the artist's account unlocks them. Now, why are the other options incorrect? Option A is incorrect. Reinstalling does not grant a license that has not been assigned. Option C is incorrect. Repairing the app fixes damaged files, not missing entitlements. Option D is incorrect. A VPN has no effect on which features a license enables. Therefore, B, License assignment, is the correct answer.
Play from 37:42 Question 29. A security team needs one tool that gives visibility across endpoints and the network and can respond to threats beyond a single computer. Which technology is designed for that? Here are the options. Option A. Antivirus. Option B. RADIUS. Option C. UAC. Option D. XDR. Pause the video now if you want time to think about the answer.
The correct answer is D. XDR. Extended detection and response collects data from many security tools, correlates it, and lets the team respond to threats across the whole environment, not just on one host. Now, why are the other options incorrect? Option A is incorrect. Antivirus protects individual hosts and lacks network wide visibility. Option B is incorrect. RADIUS handles authentication and not threat detection. Option C is incorrect. User Account Control prompts for elevation on a single computer. Therefore, D, XDR, is the correct answer.
Play from 39:01 Question 30. Before a change goes live, a team wants to find any problems it might cause. Which step is meant for that? Here are the options. Option A. Rollback plan. Option B. Sandbox testing. Option C. Request form. Option D. End-user acceptance. Pause the video now if you want time to think about the answer.
The correct answer is B. Sandbox testing. Trying a change in an isolated sandbox reveals problems without risking production systems. The other items document or approve a change rather than test it. Now, why are the other options incorrect? Option A is incorrect. A rollback plan describes how to undo a change after something goes wrong. Option C is incorrect. A request form records and starts the change process. Option D is incorrect. End-user acceptance comes later, after the change is delivered. Therefore, B, Sandbox testing, is the correct answer.
Play from 40:11 Question 31. A phone app secretly uses the camera, microphone, and location sensors to follow one person's activities without consent. What is it called? Here are the options. Option A. Rootkit. Option B. Stalkerware. Option C. Spyware. Option D. Trojan. Pause the video now if you want time to think about the answer.
The correct answer is B. Stalkerware. Stalkerware is installed on a device to watch a specific person, using sensors such as location, microphone, and camera. Spyware is a broader term, and stalkerware is the more exact label here. Now, why are the other options incorrect? Option A is incorrect. A rootkit hides malicious activity and is not defined by watching a person. Option C is incorrect. Spyware is more general and does not capture the personal targeting described. Option D is incorrect. A trojan is defined by deception when installed, not by sensor based monitoring. Therefore, B, Stalkerware, is the correct answer.
Play from 41:27 Question 32. Why does a technician put on an antistatic wrist strap before swapping memory modules? Here are the options. Option A. To store static charge. Option B. To ground static charge. Option C. To increase static charge. Option D. To copy static charge. Pause the video now if you want time to think about the answer.
The correct answer is B. To ground static charge. The strap gives static electricity a safe path from the technician's body to ground, which protects sensitive parts such as memory from electrostatic damage. Now, why are the other options incorrect? Option A is incorrect. The strap is not a storage device for charge. Option C is incorrect. Raising the charge would make damage more likely. Option D is incorrect. A strap does not copy or duplicate charge. Therefore, B, To ground static charge, is the correct answer.
Play from 42:41 Question 33. Which Microsoft file system was created as the modern, more resilient follow up to NTFS? Here are the options. Option A. exFAT. Option B. APFS. Option C. ReFS. Option D. XFS. Pause the video now if you want time to think about the answer.
The correct answer is C. ReFS. The Resilient File System adds built in redundancy and corruption detection and repair, and it is Microsoft's forward looking replacement for NTFS. Now, why are the other options incorrect? Option A is incorrect. exFAT is a lightweight format for flash drives and is not a successor to NTFS. Option B is incorrect. APFS is the Apple file system. Option D is incorrect. XFS is a Linux file system. Therefore, C, ReFS, is the correct answer.
Play from 43:53 Question 34. What is the biggest risk of using an ordinary household vacuum to remove dust from inside a computer case? Here are the options. Option A. Dust catching fire. Option B. Too much air pressure. Option C. Static discharge. Option D. Disposal rules for dust. Pause the video now if you want time to think about the answer.
The correct answer is C. Static discharge. Moving air through a plastic nozzle builds up static electricity, and a discharge can damage the motherboard, memory, or cards. For this reason only vacuums made safe for electronics should be used. Now, why are the other options incorrect? Option A is incorrect. Dust is not likely to ignite from a vacuum. Option B is incorrect. A vacuum pulls air in, so pressure is not the main danger. Option D is incorrect. Disposal paperwork is not the main concern when cleaning a case. Therefore, C, Static discharge, is the correct answer.
Play from 45:12 Question 35. A technician wants to see each hop a packet takes on its way to a remote server from a Linux workstation. Which command shows that? Here are the options. Option A. dig. Option B. ping. Option C. ip addr. Option D. traceroute. Pause the video now if you want time to think about the answer.
The correct answer is D. traceroute. The traceroute command lists every router along the path between the source and the destination, showing how traffic reaches the server. Now, why are the other options incorrect? Option A is incorrect. Dig queries DNS records and shows no path. Option B is incorrect. Ping tests reachability but does not list hops. Option C is incorrect. The ip addr command shows local interface addresses. Therefore, D, traceroute, is the correct answer.
Play from 46:20 Question 36. After downloading a new browser installer, a technician wants proof that the file is genuine and has not been tampered with. What should be compared? Here are the options. Option A. Name. Option B. Hash. Option C. Size. Option D. Date. Pause the video now if you want time to think about the answer.
The correct answer is B. Hash. A cryptographic hash such as SHA-256 is computed from the file's contents. If it matches the value published by the vendor, the installer is unchanged. Now, why are the other options incorrect? Option A is incorrect. A file name is easily changed and proves nothing. Option C is incorrect. File size can match even when the contents differ. Option D is incorrect. A date is easy to fake and says nothing about the contents. Therefore, B, Hash, is the correct answer.
Play from 47:29 Question 37. A defense contractor must dispose of drives holding confidential data and has to meet regulatory requirements. Which is the best choice? Here are the options. Option A. Targeted file deletion. Option B. In-house disk incineration. Option C. Certified third-party destruction. Option D. Low-level formatting. Pause the video now if you want time to think about the answer.
The correct answer is C. Certified third-party destruction. A certified destruction vendor provides documented, auditable proof that the drives were destroyed, which is what compliance rules require for sensitive data. Now, why are the other options incorrect? Option A is incorrect. Deleting files leaves data that can be recovered. Option B is incorrect. Burning drives in house usually lacks certified proof of destruction. Option D is incorrect. A low-level format may leave data recoverable and gives no proof for auditors. Therefore, C, Certified third-party destruction, is the correct answer.
Play from 48:46 Question 38. An administrator at a branch office has to use a graphical-only disk utility on a Linux server from a Windows laptop. What should be installed to make this possible? Here are the options. Option A. A VPN tunnel. Option B. A KVM hypervisor. Option C. SSH. Option D. VNC remote desktop software. Pause the video now if you want time to think about the answer.
The correct answer is D. VNC remote desktop software. VNC shares the graphical desktop of the Linux server across the network, so a GUI only tool can be used from the remote laptop. Now, why are the other options incorrect? Option A is incorrect. A VPN secures the connection but does not provide a remote desktop. Option B is incorrect. KVM is a virtualization technology and not a remote display tool. Option C is incorrect. SSH gives a text based session and cannot show a graphical program. Therefore, D, VNC remote desktop software, is the correct answer.
Play from 50:11 Question 39. What do you call a flaw that attackers take advantage of before the vendor has released any fix? Here are the options. Option A. Zero-day. Option B. DoS. Option C. Spoofing. Option D. Brute-force. Pause the video now if you want time to think about the answer.
The correct answer is A. Zero-day. A zero-day flaw is used in attacks before the vendor knows about it or has a patch, so the vendor has had zero days to prepare a fix. Now, why are the other options incorrect? Option B is incorrect. A DoS attack floods a service to make it unavailable and is not defined by an unpatched flaw. Option C is incorrect. Spoofing means pretending to be someone or something else. Option D is incorrect. Brute-force repeatedly guesses credentials and is not about unpatched flaws. Therefore, A, Zero-day, is the correct answer.
Play from 51:19 Question 40. A traveler often uses cafe Wi-Fi and wants the laptop to ignore ping requests from other devices. Which Windows feature handles that? Here are the options. Option A. Virtual Private Networking. Option B. The Control Panel network center. Option C. Windows Defender Firewall. Option D. Internet Options. Pause the video now if you want time to think about the answer.
The correct answer is C. Windows Defender Firewall. The Windows firewall can block incoming ICMP echo requests, so the laptop stays silent when others ping it on public networks. Now, why are the other options incorrect? Option A is incorrect. A VPN protects traffic in transit but does not stop the laptop from answering pings. Option B is incorrect. Network and Sharing Center shows and manages connections but is not where ping blocking is set. Option D is incorrect. Internet Options controls browser settings only. Therefore, C, Windows Defender Firewall, is the correct answer.
Play from 52:40 Question 41. A customer calls in because their PC keeps flashing pop-up windows and playing odd sounds. What should the technician do before starting any cleanup? Here are the options. Option A. Reimage the workstation. Option B. Quarantine the machine. Option C. Install the latest OS updates. Option D. Copy the customer's files to a backup drive. Pause the video now if you want time to think about the answer.
The correct answer is B. Quarantine the machine. These symptoms suggest malware. The first move is to isolate the computer from the network so the infection cannot spread, and only after that should cleanup begin. Now, why are the other options incorrect? Option A is incorrect. Reimaging is a remediation step and comes only after containment. Option C is incorrect. Updating the system is part of recovery and should wait until the machine is isolated. Option D is incorrect. Copying files from an infected machine could spread the problem, so isolation comes first. Therefore, B, Quarantine the machine, is the correct answer.
Play from 54:03 Question 42. A department wants to move its computers from Windows 10 to Windows 11 as fast as possible while keeping all user files in place. Which method fits best? Here are the options. Option A. Clean install. Option B. In-place upgrade. Option C. Image deployment. Option D. Running gpupdate. Pause the video now if you want time to think about the answer.
The correct answer is B. In-place upgrade. An in-place upgrade installs the new version over the existing one and keeps files, apps, and settings. It is typically the fastest route that does not lose data. Now, why are the other options incorrect? Option A is incorrect. A clean install wipes the drive and takes more effort. Option C is incorrect. Image deployment replaces the contents of the machine. Option D is incorrect. Gpupdate only refreshes Group Policy and does not upgrade the operating system. Therefore, B, In-place upgrade, is the correct answer.
Play from 55:25 Question 43. Which security principle gives each person only the access needed to do their own job and nothing more? Here are the options. Option A. Single sign-on. Option B. Multifactor authentication. Option C. Least privilege. Option D. Zero Trust. Pause the video now if you want time to think about the answer.
The correct answer is C. Least privilege. Least privilege limits every account to the minimum permissions required, which reduces the damage that can be done by mistakes or by a stolen account. Now, why are the other options incorrect? Option A is incorrect. Single sign-on lets people log in once and does not limit rights. Option B is incorrect. Multifactor authentication strengthens login and does not limit what an account can do. Option D is incorrect. Zero Trust is a wider approach that verifies every request, not the specific idea of minimum permissions. Therefore, C, Least privilege, is the correct answer.
Play from 56:45 Question 44. A law firm wants to stop strangers who pick up a lawyer's tablet from using it. Which two steps help most? (Choose two.) Here are the options. Option A. Enable screen timeout. Option B. Enable GPS tracking. Option C. Install an antivirus app. Option D. Require a PIN to unlock. Option E. Turn off the built-in hotspot. Option F. Set up VPN software. Pause the video now if you want time to think about the answer.
The correct answers are A. Enable screen timeout, and D. Require a PIN to unlock. A PIN stops someone from unlocking the device, and a screen timeout locks it automatically when it sits idle. Together they block casual physical access. The other settings protect the network or help find the device but do not stop someone from opening it. Now, why are the other options incorrect? Option B is incorrect. Location services help find a missing tablet and do not stop someone from using it. Option C is incorrect. Antivirus guards against malware and not against physical access. Option E is incorrect. Turning off the hotspot only affects sharing a connection. Option F is incorrect. A VPN protects network traffic and does nothing against someone holding the device. Therefore, A and D are the correct answers.
Play from 58:26 Question 45. A data center wants a way to both spot and keep a record of everyone who enters a restricted room. Which control does this? Here are the options. Option A. Bollards. Option B. Badge readers. Option C. Video surveillance. Option D. Fence. Pause the video now if you want time to think about the answer.
The correct answer is C. Video surveillance. Cameras monitor the area continuously and keep footage, which produces a record of who was present and when. Now, why are the other options incorrect? Option A is incorrect. Bollards only stop vehicles. Option B is incorrect. Badge readers log credentials but do not capture who is actually there. Option D is incorrect. A fence is a barrier and does not record anything. Therefore, C, Video surveillance, is the correct answer.
Play from 59:34 Question 46. A new hire's PC can reach the domain controller by its IP address but fails every time it tries to join the company domain. What is the most likely cause? Here are the options. Option A. The PC has lost its network link. Option B. IPv6 is turned on for the PC. Option C. The firewall rules are incorrect. Option D. Name resolution is misconfigured. Pause the video now if you want time to think about the answer.
The correct answer is D. Name resolution is misconfigured. Joining a domain depends on resolving the domain name to find the controllers. Since the IP address works, basic connectivity is fine, and incorrect DNS settings are the likely problem. Now, why are the other options incorrect? Option A is incorrect. A reply to the ping shows the PC is connected. Option B is incorrect. Having IPv6 on is normal and does not block a domain join. Option C is incorrect. A firewall problem would likely have blocked the ping as well. Therefore, D, Name resolution is misconfigured, is the correct answer.
Play from 1:00:59 Question 47. Which biometric method checks a person by matching the blood vessel layout in the eye against a saved template? Here are the options. Option A. Facial recognition. Option B. Retinal scanner. Option C. Voice matching. Option D. Fingerprint reader. Pause the video now if you want time to think about the answer.
The correct answer is B. Retinal scanner. A retinal scanner reads the pattern of blood vessels at the back of the eye and compares it with the stored record to confirm identity. Now, why are the other options incorrect? Option A is incorrect. Facial recognition measures facial geometry. Option C is incorrect. Voice matching analyzes vocal patterns. Option D is incorrect. A fingerprint reader reads ridges on a fingertip. Therefore, B, Retinal scanner, is the correct answer.
Play from 1:02:05 Question 48. A nonprofit that champions open-source software is buying phones for its volunteers. Which devices fit its values? Here are the options. Option A. Tablets running iPadOS. Option B. Windows desktops. Option C. Android smartphones. Option D. Notebooks running macOS. Pause the video now if you want time to think about the answer.
The correct answer is C. Android smartphones. Android is built on the open-source Linux kernel and is released as open-source software, which matches an organization that supports open-source work. Now, why are the other options incorrect? Option A is incorrect. iPadOS is a closed, proprietary system. Option B is incorrect. Windows is proprietary software. Option D is incorrect. macOS is proprietary and is not open source. Therefore, C, Android smartphones, is the correct answer.
Play from 1:03:20 Question 49. Why is it dangerous for a company to throw sensitive paperwork into the trash without shredding it, given dumpster diving? Here are the options. Option A. Equipment could be stolen. Option B. Data could be stolen. Option C. Vandalism could occur. Option D. Lawsuits could be filed. Pause the video now if you want time to think about the answer.
The correct answer is B. Data could be stolen. People who dig through discarded material can find passwords, financial records, and customer details. The main danger is theft of information. Now, why are the other options incorrect? Option A is incorrect. Dumpster diving is about discarded information, not hardware. Option C is incorrect. Vandalism is not what a person searching through trash is after. Option D is incorrect. A lawsuit might follow a breach, but it is not the direct risk. Therefore, B, Data could be stolen, is the correct answer.
Play from 1:04:37 Question 50. A laptop's touch pad has stopped working, though an external mouse works fine. Which Windows console should the technician open to look for a newer driver? Here are the options. Option A. lusrmgr.msc. Option B. devmgmt.msc. Option C. gpedit.msc. Option D. certmgr.msc. Pause the video now if you want time to think about the answer.
The correct answer is B. devmgmt.msc. Device Manager lists the hardware, lets you update or roll back drivers, and shows device problems, so it is the place to check the touch pad driver. Now, why are the other options incorrect? Option A is incorrect. Lusrmgr manages local users and groups. Option C is incorrect. Gpedit edits local policy settings. Option D is incorrect. Certmgr manages certificates. Therefore, B, devmgmt.msc, is the correct answer.
Play from 1:05:54 Question 51. An office PC refuses to move to Windows 11 even though everything else seems fine. Which missing item most likely blocks the upgrade? Here are the options. Option A. High memory latency. Option B. Slow disk speed. Option C. A TPM module. Option D. A slow screen refresh speed. Pause the video now if you want time to think about the answer.
The correct answer is C. A TPM module. Windows 11 requires a trusted platform module. Without it the machine fails the compatibility check, so the upgrade cannot proceed. Now, why are the other options incorrect? Option A is incorrect. Memory latency is not a requirement for the upgrade. Option B is incorrect. Disk speed does not decide eligibility. Option D is incorrect. Refresh rate has nothing to do with eligibility. Therefore, C, A TPM module, is the correct answer.
Play from 1:07:08 Question 52. A program gets slower and slower throughout the day, but it never shows an error or crashes. Which tool should a technician start with? Here are the options. Option A. Disk defragment. Option B. Computer management. Option C. Reliability history. Option D. Resource monitor. Pause the video now if you want time to think about the answer.
The correct answer is D. Resource monitor. Resource Monitor shows live CPU, memory, disk, and network use for each process, which helps identify what is slowly consuming resources. Now, why are the other options incorrect? Option A is incorrect. Defragmenting could help a fragmented drive, but it is not a diagnostic tool for this symptom. Option B is incorrect. Computer Management groups admin tools and is not a performance view. Option C is incorrect. Reliability history records crashes and failures, and nothing failed here. Therefore, D, Resource monitor, is the correct answer.
Play from 1:08:26 Question 53. A technician sets up Wi-Fi for a building with many mixed older and newer devices and wants the widest device support. Which security option should be chosen? Here are the options. Option A. WPA2. Option B. WEP. Option C. WPS. Option D. WPA3. Pause the video now if you want time to think about the answer.
The correct answer is A. WPA2. WPA2 is supported by nearly every device and is still considered secure. WPA3 is stronger but older devices may not support it, and WEP is broken. Now, why are the other options incorrect? Option B is incorrect. WEP is obsolete and easily cracked. Option C is incorrect. WPS is a quick connection feature, not an encryption standard. Option D is incorrect. WPA3 is newer, and not all devices can connect with it. Therefore, A, WPA2, is the correct answer.
Play from 1:09:49 Question 54. Malicious code is slipped into a vendor's software before release without the vendor realizing, and then reaches all customers through a normal update. What type of attack is this? Here are the options. Option A. Dictionary attack. Option B. Zero-day attack. Option C. Brute-force attack. Option D. Supply chain attack. Pause the video now if you want time to think about the answer.
The correct answer is D. Supply chain attack. In a supply chain attack the software is compromised at its source or during distribution, so every downstream customer receives the tainted product. Now, why are the other options incorrect? Option A is incorrect. A dictionary attack guesses passwords from a word list. Option B is incorrect. A zero-day attack exploits an unknown flaw, but it does not describe tampering in the delivery chain. Option C is incorrect. Brute-force tries many passwords. Therefore, D, Supply chain attack, is the correct answer.
Play from 1:11:07 Question 55. A worker unknowingly installs a program that quietly sends information from the company PC to an outside server. How should this software be classified? Here are the options. Option A. Cryptominer. Option B. Ransomware. Option C. Trojan. Option D. Spyware. Pause the video now if you want time to think about the answer.
The correct answer is D. Spyware. Software that secretly collects information and transmits it to a remote server is spyware. Now, why are the other options incorrect? Option A is incorrect. A cryptominer uses computing power to mine currency. Option B is incorrect. Ransomware locks data and demands payment. Option C is incorrect. A trojan is defined by pretending to be legitimate, which is a delivery method. Therefore, D, Spyware, is the correct answer.
Play from 1:12:16 Question 56. An IT admin wants to switch off the guest account on every computer joined to the domain at once. What should be used? Here are the options. Option A. MSConfig. Option B. Firewall. Option C. Group Policy. Option D. Microsoft Management Console. Pause the video now if you want time to think about the answer.
The correct answer is C. Group Policy. Group Policy applies security settings, such as disabling guest sign in, to all domain computers from one place. Now, why are the other options incorrect? Option A is incorrect. MSConfig adjusts startup settings on a single machine. Option B is incorrect. A firewall filters traffic and does not manage account policy. Option D is incorrect. The management console hosts tools but is not the policy mechanism for the domain. Therefore, C, Group Policy, is the correct answer.
Play from 1:13:30 Question 57. From a command prompt, a technician wants to list the SMB shares currently connected on a Windows computer. Which command should be run? Here are the options. Option A. nslookup. Option B. net use. Option C. hostname. Option D. systeminfo. Pause the video now if you want time to think about the answer.
The correct answer is B. net use. Running net use with no extra options prints the network shares that are currently mapped, along with their status. Now, why are the other options incorrect? Option A is incorrect. Nslookup looks up DNS names. Option C is incorrect. Hostname prints only the computer name. Option D is incorrect. Systeminfo prints system details and not the mapped shares. Therefore, B, net use, is the correct answer.
Play from 1:14:35 Question 58. A consultant is flying overseas with a work laptop and needs the strongest protection for the data if it is lost or seized. What should the technician set up? Here are the options. Option A. A screen lock. Option B. Restricted login times. Option C. Content filtering. Option D. Disk encryption. Pause the video now if you want time to think about the answer.
The correct answer is D. Disk encryption. Disk encryption makes the stored data unreadable without the key, even if someone has the physical machine. Now, why are the other options incorrect? Option A is incorrect. A screen lock is easily bypassed by removing the drive. Option B is incorrect. Login time limits do not protect data on a stolen drive. Option C is incorrect. Content filtering controls web access. Therefore, D, Disk encryption, is the correct answer.
Play from 1:15:45 Question 59. Which Mac feature, such as handing off work from a nearby iPhone, depends on Bluetooth to detect devices close by? Here are the options. Option A. Mission Control. Option B. Continuity. Option C. Terminal. Option D. Gestures. Pause the video now if you want time to think about the answer.
The correct answer is B. Continuity. Continuity features like Handoff, Universal Clipboard, and AirDrop use Bluetooth to discover nearby Apple devices, along with Wi-Fi and the same Apple account. Now, why are the other options incorrect? Option A is incorrect. Mission Control arranges windows and desktops. Option C is incorrect. Terminal is the command line. Option D is incorrect. Gestures are trackpad motions and need no Bluetooth. Therefore, B, Continuity, is the correct answer.
Play from 1:16:54 Question 60. Many hijacked computers all send traffic at one web server at the same moment to knock it offline. What kind of attack is this? Here are the options. Option A. Brute-force attack. Option B. On-path attack. Option C. A DDoS attack. Option D. SQL injection. Pause the video now if you want time to think about the answer.
The correct answer is C. A DDoS attack. A distributed denial of service attack uses numerous compromised systems to flood one target so legitimate users cannot reach it. Now, why are the other options incorrect? Option A is incorrect. Brute-force attacks guess credentials. Option B is incorrect. An on-path attack intercepts communication between two parties. Option D is incorrect. SQL injection abuses database queries. Therefore, C, A DDoS attack, is the correct answer.
Play from 1:18:09 Question 61. A small design studio wants new computers without paying operating system license fees, and it wants every file stored on the machines themselves. Which operating system should the technician suggest? Here are the options. Option A. macOS. Option B. Windows. Option C. Chrome OS. Option D. Linux. Pause the video now if you want time to think about the answer.
The correct answer is D. Linux. Linux is free and open source, so there are no license costs, and it stores files locally by default without relying on a cloud service. Now, why are the other options incorrect? Option A is incorrect. macOS comes with Apple hardware and is not free to license. Option B is incorrect. Windows requires paid licensing. Option C is incorrect. Chrome OS leans on cloud storage rather than keeping everything local. Therefore, D, Linux, is the correct answer.
Play from 1:19:22 Question 62. To reach a company network, an employee has to enter a memorized password and also use a hardware token they carry. What kind of authentication is this? Here are the options. Option A. Kerberos. Option B. Multifactor. Option C. TACACS+. Option D. Biometric. Pause the video now if you want time to think about the answer.
The correct answer is B. Multifactor. Combining something you know with something you have is multifactor authentication, since it requires two different kinds of proof. Now, why are the other options incorrect? Option A is incorrect. Kerberos is a ticket based protocol and not a description of factor types. Option C is incorrect. TACACS+ is an access control protocol, not a way of describing combined factors. Option D is incorrect. Biometric authentication relies on a body trait, which is not part of this scenario. Therefore, B, Multifactor, is the correct answer.
Play from 1:20:44 Question 63. An analyst must copy an email archive file of about 4.6 GB from one Windows PC to another using a flash drive. How should the drive be formatted? Here are the options. Option A. FAT32. Option B. APFS. Option C. NTFS. Option D. ext4. Pause the video now if you want time to think about the answer.
The correct answer is C. NTFS. FAT32 cannot hold a single file larger than 4 GB, while NTFS can. NTFS is also fully supported by Windows, so it works for this transfer. Now, why are the other options incorrect? Option A is incorrect. FAT32 limits single files to about 4 GB, so the archive would not fit. Option B is incorrect. APFS is an Apple format that Windows cannot read. Option D is incorrect. ext4 is a Linux format that Windows does not support natively. Therefore, C, NTFS, is the correct answer.
Play from 1:22:06 Question 64. A security lead worries that attackers are getting better at guessing passwords by trial and error. Which control is the strongest defense? Here are the options. Option A. Update the operating system everywhere. Option B. Limit sign in to certain hours. Option C. Require longer, more complex passwords. Option D. Make everyone use multifactor authentication. Pause the video now if you want time to think about the answer.
The correct answer is D. Make everyone use multifactor authentication. With multifactor authentication, a guessed password is not enough, because the attacker also needs a second factor. That blocks most guessing attacks. Now, why are the other options incorrect? Option A is incorrect. Patching is important but does not stop password guessing. Option B is incorrect. Hour limits only reduce the window and do not stop guessing. Option C is incorrect. Complex passwords help, but a guessed or leaked one still works on its own. Therefore, D, Make everyone use multifactor authentication, is the correct answer.
Play from 1:23:32 Question 65. Which type of file would an admin most likely write to automate a routine job from the command line on a Linux system? Here are the options. Option A. Batch file. Option B. Visual Basic utility. Option C. Shell script. Option D. JavaScript file. Pause the video now if you want time to think about the answer.
The correct answer is C. Shell script. Shell scripts run a series of commands and support loops, conditions, and variables, which makes them the usual tool for automating work in Linux. Now, why are the other options incorrect? Option A is incorrect. Batch files are used on Windows. Option B is incorrect. Visual Basic tools are tied to Windows. Option D is incorrect. JavaScript files are mainly for browsers and web applications. Therefore, C, Shell script, is the correct answer.
Play from 1:24:43 Question 66. A hospital wants employees to sign in to its Wi-Fi with the same accounts stored in its directory service. What should be used to make that work? Here are the options. Option A. LDAP. Option B. RADIUS. Option C. WPA3. Option D. MFA. Pause the video now if you want time to think about the answer.
The correct answer is B. RADIUS. RADIUS is the authentication service that wireless access points can ask to check a user against a central directory such as Active Directory. Now, why are the other options incorrect? Option A is incorrect. LDAP reads the directory but is not what a wireless access point uses to authenticate. Option C is incorrect. WPA3 secures the wireless link and does not by itself check directory accounts. Option D is incorrect. MFA adds another factor but does not connect Wi-Fi to the directory. Therefore, B, RADIUS, is the correct answer.
Play from 1:26:01 Question 67. A support specialist is picking between a 32-bit and a 64-bit operating system for a newly built PC. Which spec decides the choice? Here are the options. Option A. A 500 GB hard drive. Option B. An Intel i7 processor. Option C. 1 Gbps Ethernet. Option D. 16 GB of RAM. Pause the video now if you want time to think about the answer.
The correct answer is D. 16 GB of RAM. A 32-bit system can use only about 4 GB of memory, so a machine with 16 GB needs a 64-bit system to make use of it. Now, why are the other options incorrect? Option A is incorrect. Drive size does not decide the architecture. Option B is incorrect. The processor name by itself does not decide the choice, since the memory limit does. Option C is incorrect. Network speed has no bearing on it. Therefore, D, 16 GB of RAM, is the correct answer.
Play from 1:27:22 Question 68. A user complains about an odd rattling noise from a tower PC, and the technician plans to look inside. What should be done right before opening the case? Here are the options. Option A. Take off the side cover. Option B. Unplug the power. Option C. Disconnect all peripherals. Option D. Ground the system. Pause the video now if you want time to think about the answer.
The correct answer is B. Unplug the power. Power must be disconnected before opening a case so there is no risk of shock to the technician or damage to the components. Now, why are the other options incorrect? Option A is incorrect. Opening the cover is the step that comes after the power is removed. Option C is incorrect. Peripherals can be removed later, once the machine is safely powered down. Option D is incorrect. Grounding is done after power is removed, as part of the work. Therefore, B, Unplug the power, is the correct answer.
Play from 1:28:36 Question 69. A diplomat already uses fingerprint unlock on a phone but is nervous about it being lost abroad. Which extra measure best protects the stored data? Here are the options. Option A. Device encryption. Option B. Location tracking. Option C. A PIN screen lock. Option D. Remote backups. Pause the video now if you want time to think about the answer.
The correct answer is A. Device encryption. Encrypting the device makes the data unreadable without the key, even if the finger unlock is somehow bypassed. Now, why are the other options incorrect? Option B is incorrect. Location tracking helps locate the phone but does not protect its data. Option C is incorrect. A PIN lock still leaves stored data readable if someone gets around the screen. Option D is incorrect. Backups help recover data but do not stop another person from reading it. Therefore, A, Device encryption, is the correct answer.
Play from 1:29:51 Question 70. A company wants staff working from home to connect safely to both its Linux and Windows servers. Which remote access option best satisfies this? Here are the options. Option A. Remote Desktop Protocol. Option B. RMM software. Option C. File Transfer Protocol. Option D. Virtual private network. Pause the video now if you want time to think about the answer.
The correct answer is D. Virtual private network. A VPN encrypts traffic and works the same way regardless of the operating system on the servers, so it can serve both Linux and Windows. Now, why are the other options incorrect? Option A is incorrect. RDP is aimed at Windows hosts. Option B is incorrect. RMM software is for monitoring and managing systems, not for staff access. Option C is incorrect. FTP is for moving files and does not encrypt traffic by default. Therefore, D, Virtual private network, is the correct answer.
Play from 1:31:15 Question 71. A technician finishes adding memory to a desktop, but the machine now says it cannot find a boot device. What is the most likely reason? Here are the options. Option A. The boot order needs changing. Option B. The disk must be wiped and formatted again. Option C. The hard drive's power cable came loose. Option D. The install media is missing. Pause the video now if you want time to think about the answer.
The correct answer is C. The hard drive's power cable came loose. Working inside the case can easily pull out a cable. If the drive loses power, the system sees no boot device. Reseat the cable first. Now, why are the other options incorrect? Option A is incorrect. Memory work does not change the boot order. Option B is incorrect. A reformat is not needed because nothing happened to the drive's data. Option D is incorrect. Installation media is not needed to start an installed system. Therefore, C, The hard drive's power cable came loose, is the correct answer.
Play from 1:32:34 Question 72. A law office is deciding between AI running in its own server room and AI delivered from a public cloud service. What reason favors keeping it on site? Here are the options. Option A. Avoiding bias. Option B. Appropriate use. Option C. Data privacy. Option D. Avoiding hallucinations. Pause the video now if you want time to think about the answer.
The correct answer is C. Data privacy. Running AI on your own servers means sensitive information does not leave your control, which is a privacy advantage. Now, why are the other options incorrect? Option A is incorrect. Bias depends on the model and its data, not where it runs. Option B is incorrect. Appropriate use is a policy question and not a reason to host locally. Option D is incorrect. Hallucinations happen with any model, wherever it runs. Therefore, C, Data privacy, is the correct answer.
Play from 1:33:48 Question 73. A hobbyist prints parts from carbon fiber filament. Which piece of protective gear matters most? Here are the options. Option A. A particulate respirator mask. Option B. An ESD mat. Option C. Antistatic bags. Option D. Steel-toed boots. Pause the video now if you want time to think about the answer.
The correct answer is A. A particulate respirator mask. Printing with this material releases fine particles and fumes that should not be inhaled, so respiratory protection comes first. Now, why are the other options incorrect? Option B is incorrect. An ESD mat protects electronics from static, not people from fumes. Option C is incorrect. Antistatic bags protect components in storage. Option D is incorrect. Steel-toed boots protect against dropped heavy objects, not fumes. Therefore, A, A particulate respirator mask, is the correct answer.
Play from 1:35:04 Question 74. A Windows laptop user keeps forgetting their password and wants a different way to sign in, such as a fingerprint or short PIN. What should the technician turn on? Here are the options. Option A. BitLocker. Option B. User Account Control. Option C. Single sign-on. Option D. Windows Hello. Pause the video now if you want time to think about the answer.
The correct answer is D. Windows Hello. Windows Hello lets people sign in with a fingerprint, face, or PIN instead of typing a password. Now, why are the other options incorrect? Option A is incorrect. BitLocker encrypts drives and does not change sign in. Option B is incorrect. User Account Control prompts before system changes. Option C is incorrect. Single sign-on reduces repeated logins but still depends on the password. Therefore, D, Windows Hello, is the correct answer.
Play from 1:36:15 Question 75. A designer wants an external drive that a Mac can both read and write without extra software. Which file system works? Here are the options. Option A. XFS. Option B. NTFS. Option C. exFAT. Option D. ReFS. Pause the video now if you want time to think about the answer.
The correct answer is C. exFAT. exFAT is supported natively for reading and writing by macOS and Windows, which makes it a common choice for portable drives. Now, why are the other options incorrect? Option A is incorrect. XFS is a Linux file system that macOS does not write natively. Option B is incorrect. NTFS is read only on macOS without extra software. Option D is incorrect. ReFS is a Windows server oriented format that macOS does not support. Therefore, C, exFAT, is the correct answer.
Play from 1:37:28 Question 76. An employee flagged a help desk ticket as urgent but has still heard nothing at the end of the day. Which document should the help desk manager go over with them? Here are the options. Option A. AUP. Option B. SLA. Option C. EULA. Option D. SOP. Pause the video now if you want time to think about the answer.
The correct answer is B. SLA. A service level agreement spells out how fast tickets of each priority should be answered, so it clarifies what response time the employee is entitled to. Now, why are the other options incorrect? Option A is incorrect. An acceptable use policy covers how systems may be used. Option C is incorrect. An end user license agreement covers software licensing terms. Option D is incorrect. An SOP describes steps for performing a task. Therefore, B, SLA, is the correct answer.
Play from 1:38:43 Question 77. A PC will not start Windows. A technician has already confirmed the hardware is fine. What should be examined next? Here are the options. Option A. Encryption. Option B. Drivers. Option C. Boot order. Option D. File system. Pause the video now if you want time to think about the answer.
The correct answer is C. Boot order. If the hardware checks out, the firmware may be trying to start from the wrong device, so confirm the boot order in the BIOS or UEFI settings. Now, why are the other options incorrect? Option A is incorrect. Encryption is not the next simple step. Option B is incorrect. Drivers load after the system begins to start up. Option D is incorrect. File system checks come after confirming the correct device is booting. Therefore, C, Boot order, is the correct answer.
Play from 1:39:51 Question 78. A team member needs software for giving a project update to clients who are in other cities. Which software type should be installed? Here are the options. Option A. Videoconferencing. Option B. Secure file transfer. Option C. WinRM. Option D. RMM. Pause the video now if you want time to think about the answer.
The correct answer is A. Videoconferencing. Videoconferencing software supports live presentations with screen sharing and live conversation with outside participants. Now, why are the other options incorrect? Option B is incorrect. Secure file transfer moves files and does not present live. Option C is incorrect. WinRM is a remote management service for Windows. Option D is incorrect. RMM tools let IT manage devices remotely. Therefore, A, Videoconferencing, is the correct answer.
Play from 1:41:04 Question 79. When someone signs in using multifactor authentication, which of these do they receive as the extra code? Here are the options. Option A. MDM. Option B. TOTP. Option C. DLP. Option D. FRT. Pause the video now if you want time to think about the answer.
The correct answer is B. TOTP. A time based one time password is generated by an authenticator app or token and used as a second factor when signing in. Now, why are the other options incorrect? Option A is incorrect. MDM is a system for managing mobile devices. Option C is incorrect. DLP prevents sensitive data from leaving. Option D is incorrect. FRT is facial recognition technology, not a code. Therefore, B, TOTP, is the correct answer.
Play from 1:42:12 Question 80. An administrator needs a quick count of how many people are currently signed in to a server over remote desktop. Which tool shows that? Here are the options. Option A. System Information. Option B. Task Manager. Option C. Group Policy Editor. Option D. The local accounts and groups console. Pause the video now if you want time to think about the answer.
The correct answer is B. Task Manager. The Users tab in Task Manager lists the sessions that are signed in, including remote ones, along with their resource usage. Now, why are the other options incorrect? Option A is incorrect. System Information shows hardware and software details, not active sessions. Option C is incorrect. Group Policy Editor configures policies and not live sessions. Option D is incorrect. Local Users and Groups manages accounts rather than sessions. Therefore, B, Task Manager, is the correct answer.
Play from 1:43:28 Question 81. During an investigation involving seized computers, which practice documents who handled each item and so keeps the evidence trustworthy? Here are the options. Option A. After-action report. Option B. Chain of custody. Option C. Acceptable use policy. Option D. Business compliance requirements. Pause the video now if you want time to think about the answer.
The correct answer is B. Chain of custody. A chain of custody log records every person who held the evidence, when, and why. That unbroken record keeps the evidence reliable and admissible. Now, why are the other options incorrect? Option A is incorrect. An after-action report summarizes what happened afterward and does not track evidence handling. Option C is incorrect. An acceptable use policy governs how employees use company systems. Option D is incorrect. Compliance requirements describe rules to follow, not a record of evidence handling. Therefore, B, Chain of custody, is the correct answer.
Play from 1:44:47 Question 82. After downloading a utility from outside the app store, a Mac user gets a message saying the developer cannot be verified and the app will not open. Where should the user go to approve it? Here are the options. Option A. Accessibility. Option B. Finder. Option C. Privacy and Security. Option D. iCloud. Pause the video now if you want time to think about the answer.
The correct answer is C. Privacy and Security. The Privacy and Security pane in System Settings is where macOS lets the user allow an app that has not been signed or verified. Now, why are the other options incorrect? Option A is incorrect. Accessibility controls assistive features. Option B is incorrect. Finder is the file browser and not where app permissions are set. Option D is incorrect. iCloud manages cloud storage and sync. Therefore, C, Privacy and Security, is the correct answer.
Play from 1:46:01 Question 83. A safety data sheet comes with a UPS battery unit. Which type of information would a technician expect to find on it? Here are the options. Option A. Voltage specifications. Option B. Configuration steps. Option C. Emergency procedures. Option D. Installation instructions. Pause the video now if you want time to think about the answer.
The correct answer is C. Emergency procedures. A safety data sheet covers the hazards of a product, along with first aid and emergency response steps for incidents such as a leak or fire. Now, why are the other options incorrect? Option A is incorrect. Electrical specifications belong in the product manual. Option B is incorrect. Setup and configuration belong in the product manual. Option D is incorrect. Installation guidance belongs in the product manual, not the safety sheet. Therefore, C, Emergency procedures, is the correct answer.
Play from 1:47:20 Question 84. A company is issuing phones and wants the data to stay protected even if an employee loses a phone and does not notice it is missing. Which measure works without any action from anyone? Here are the options. Option A. Geofencing. Option B. Facial recognition. Option C. Encryption. Option D. Remote wipe. Pause the video now if you want time to think about the answer.
The correct answer is C. Encryption. Encryption protects stored data all the time, even if nobody realizes the phone is gone. A remote wipe, by contrast, has to be started by someone after the loss is discovered. Now, why are the other options incorrect? Option A is incorrect. Geofencing reacts to location and does not stop data from being read. Option B is incorrect. Facial recognition protects the unlock step but does not protect the stored data itself. Option D is incorrect. Remote wipe needs someone to know the phone is missing and trigger it. Therefore, C, Encryption, is the correct answer.
Play from 1:48:37 Question 85. An employee reports a work phone missing. Which feature lets the company erase the device's stored information from afar so no one else can read it? Here are the options. Option A. Remote wipe. Option B. Antivirus. Option C. Degaussing. Option D. Password manager. Pause the video now if you want time to think about the answer.
The correct answer is A. Remote wipe. A remote wipe lets the administrator send a command that erases the device's data over the network, even though the phone is out of the owner's hands. Now, why are the other options incorrect? Option B is incorrect. Antivirus detects malware and does not erase a lost phone. Option C is incorrect. Degaussing destroys data on magnetic media and does not apply to phones. Option D is incorrect. A password manager stores credentials and does not erase a device. Therefore, A, Remote wipe, is the correct answer.
Play from 1:49:49 Question 86. At a Windows command prompt, which command lists the machine's IP address, subnet mask, and default gateway? Here are the options. Option A. netstat. Option B. tracert. Option C. ping. Option D. ipconfig. Pause the video now if you want time to think about the answer.
The correct answer is D. ipconfig. Running ipconfig prints the adapter settings, including the IP address, subnet mask, and default gateway. Adding the all switch shows more detail such as DNS servers and the MAC address. Now, why are the other options incorrect? Option A is incorrect. Netstat shows connections and listening ports. Option B is incorrect. Tracert shows the route to a destination. Option C is incorrect. Ping only tests whether another host replies. Therefore, D, ipconfig, is the correct answer.
Play from 1:50:59 Question 87. An engineer asks a junior technician to log in to a remote network switch, run several commands, and send back what the switch printed. What should the technician use? Here are the options. Option A. SSH. Option B. VNC. Option C. RDP. Option D. WinRM. Pause the video now if you want time to think about the answer.
The correct answer is A. SSH. Secure Shell gives an encrypted command line session to network devices such as switches, so commands can be run and the output captured. Now, why are the other options incorrect? Option B is incorrect. VNC shows a graphical desktop, which a switch does not have. Option C is incorrect. RDP is for Windows graphical sessions. Option D is incorrect. WinRM manages Windows systems, not network switches. Therefore, A, SSH, is the correct answer.
Play from 1:52:13 Question 88. A laptop user says the internet feels slow, and the technician suspects background programs are eating bandwidth. Which command line tool shows the laptop's active connections? Here are the options. Option A. net user. Option B. nslookup. Option C. net use. Option D. netstat. Pause the video now if you want time to think about the answer.
The correct answer is D. netstat. Netstat lists active connections and listening ports, which helps reveal which services are communicating over the network. Now, why are the other options incorrect? Option A is incorrect. Net user manages user accounts. Option B is incorrect. Nslookup queries DNS. Option C is incorrect. Net use maps and shows network shares. Therefore, D, netstat, is the correct answer.
Play from 1:53:21 Question 89. A company issues a new phone to a salesperson and requires that it follow corporate security standards and stay current on operating system updates. What should the technician rely on? Here are the options. Option A. Content filtering. Option B. BYOD. Option C. Antivirus software. Option D. MDM. Pause the video now if you want time to think about the answer.
The correct answer is D. MDM. Mobile device management enforces policy centrally, checks compliance, and can push operating system updates to every enrolled phone. Now, why are the other options incorrect? Option A is incorrect. Content filtering limits web access and does not enforce updates. Option B is incorrect. BYOD is a policy for personal devices, not a tool for enforcement. Option C is incorrect. Antivirus detects malware but does not enforce company standards or patches. Therefore, D, MDM, is the correct answer.
Play from 1:54:44 Question 90. A PC powers on quietly, with no strange sounds, but displays a message that no operating system could be found. Which component is most likely damaged? Here are the options. Option A. Trusted Platform Module. Option B. Master boot record. Option C. Basic input/output system. Option D. The NTFS file system. Pause the video now if you want time to think about the answer.
The correct answer is B. Master boot record. A quiet machine suggests the hardware is working, and a missing operating system points to a damaged boot record, which is what locates and starts the OS. Now, why are the other options incorrect? Option A is incorrect. The TPM stores keys and does not load the operating system. Option C is incorrect. The firmware is working, since the machine got far enough to report the missing OS. Option D is incorrect. The file system is not what the boot process reads first to find the OS. Therefore, B, Master boot record, is the correct answer.
Play from 1:56:10 Question 91. A department wants to wipe old drives so the data cannot come back but keep using the drives afterward. Which approach does this? Here are the options. Option A. Degaussing the drive. Option B. Deleting the partitions. Option C. Enabling EFS. Option D. Low-level formatting. Pause the video now if you want time to think about the answer.
The correct answer is D. Low-level formatting. A low level format overwrites the drive's sectors, which removes the data for good and leaves the drive usable for something else. Now, why are the other options incorrect? Option A is incorrect. Degaussing ruins the drive and prevents reuse. Option B is incorrect. Deleting partitions leaves the data recoverable. Option C is incorrect. EFS encrypts files and does not erase them. Therefore, D, Low-level formatting, is the correct answer.
Play from 1:57:20 Question 92. An employee gets a text message saying their account has expired and tapping a link will renew it. What kind of social engineering attack is this? Here are the options. Option A. Spear phishing. Option B. Whaling. Option C. Smishing. Option D. Vishing. Pause the video now if you want time to think about the answer.
The correct answer is C. Smishing. Smishing is phishing delivered by text message. The link tries to trick the user into entering credentials or installing something harmful. Now, why are the other options incorrect? Option A is incorrect. Spear phishing targets a specific person, typically through email. Option B is incorrect. Whaling targets senior executives. Option D is incorrect. Vishing happens over voice calls. Therefore, C, Smishing, is the correct answer.
Play from 1:58:29 Question 93. An employee needs a specific outside website to be treated as trusted by the browser on a Windows PC. Which settings area should the technician open? Here are the options. Option A. Administrative Tools. Option B. The Control Panel network center. Option C. System. Option D. Internet Options. Pause the video now if you want time to think about the answer.
The correct answer is D. Internet Options. Internet Options includes the security zones, where a site can be added to the trusted sites list. Now, why are the other options incorrect? Option A is incorrect. Administrative Tools is a collection of system management consoles. Option B is incorrect. Network and Sharing Center manages network connections. Option C is incorrect. System shows basic computer information. Therefore, D, Internet Options, is the correct answer.
Play from 1:59:35 Question 94. Which protocol is used to handle authentication, authorization, and accounting for users who connect to network services? Here are the options. Option A. WPA3. Option B. TKIP. Option C. RADIUS. Option D. Kerberos. Pause the video now if you want time to think about the answer.
The correct answer is C. RADIUS. RADIUS provides all three parts of AAA: it verifies who a user is, decides what they may do, and records what they did. Now, why are the other options incorrect? Option A is incorrect. WPA3 is a wireless security standard. Option B is incorrect. TKIP is an older wireless encryption method. Option D is incorrect. Kerberos handles authentication but does not include accounting. Therefore, C, RADIUS, is the correct answer.
Play from 2:00:44 Question 95. A defense agency needs to guarantee that classified information on retired hard drives can never be recovered. Which disposal method is best? Here are the options. Option A. Encrypting the drives and locking them away. Option B. Degaussing, then shredding the drives. Option C. Running a secure erase tool. Option D. Doing a low-level format. Pause the video now if you want time to think about the answer.
The correct answer is B. Degaussing, then shredding the drives. Degaussing scrambles the magnetic data, and shredding destroys the drive physically, so recovery is impossible. Now, why are the other options incorrect? Option A is incorrect. Encrypted data still exists and could be attacked later. Option C is incorrect. Software erasing can leave remnants and relies on the drive working correctly. Option D is incorrect. A low-level format still leaves some risk of data recovery. Therefore, B, Degaussing, then shredding the drives, is the correct answer.
Play from 2:02:03 Question 96. An executive working from home opens the accounting application and sees a message that it cannot reach its database. What should the executive check first? Here are the options. Option A. Whether the application has updates. Option B. Whether the PC needs a restart. Option C. The status of the VPN. Option D. Whether to go back to the office. Pause the video now if you want time to think about the answer.
The correct answer is C. The status of the VPN. The database sits on the internal network, so from home the executive must be connected through the VPN. A dropped VPN is the most likely cause. Now, why are the other options incorrect? Option A is incorrect. An update would not explain why the database cannot be reached. Option B is incorrect. Restarting is a later step after the obvious network link is checked. Option D is incorrect. Going to the office is not a troubleshooting step. Therefore, C, The status of the VPN, is the correct answer.
Play from 2:03:24 Question 97. Which statement correctly describes the XFS file system? Here are the options. Option A. It is used by macOS. Option B. It is used by Windows. Option C. It is used by iOS. Option D. It is used by Linux. Pause the video now if you want time to think about the answer.
The correct answer is D. It is used by Linux. XFS is a high performance journaling file system that is common on Linux. Windows uses NTFS, and Apple platforms use APFS. Now, why are the other options incorrect? Option A is incorrect. macOS uses APFS. Option B is incorrect. Windows uses NTFS and other formats, not XFS. Option C is incorrect. iOS uses APFS. Therefore, D, It is used by Linux, is the correct answer.
Play from 2:04:39 Question 98. Employees at a branch cannot reach a supplier's website. Which Windows command line tool would help find where along the path the connection fails? Here are the options. Option A. tracert. Option B. ping. Option C. nslookup. Option D. ipconfig. Pause the video now if you want time to think about the answer.
The correct answer is A. tracert. Tracert shows each hop on the way to the destination, so you can see where responses stop or slow down. Now, why are the other options incorrect? Option B is incorrect. Ping only shows whether the destination replies, not where the problem lies. Option C is incorrect. Nslookup checks name resolution. Option D is incorrect. Ipconfig shows local adapter settings. Therefore, A, tracert, is the correct answer.
Play from 2:05:45 Question 99. A new phone is fully charged overnight but is nearly empty by afternoon. What should the technician check first? Here are the options. Option A. How much storage is used. Option B. Charger wattage. Option C. Apps running in the background. Option D. Whether software support has ended. Pause the video now if you want time to think about the answer.
The correct answer is C. Apps running in the background. Since the phone charges completely each night, the charger is fine. Apps working in the background are the usual cause of rapid battery drain. Now, why are the other options incorrect? Option A is incorrect. Full storage does not drain the battery quickly. Option B is incorrect. The phone reaches a full charge, so the charger is working. Option D is incorrect. Unsupported software would not explain a sudden battery issue. Therefore, C, Apps running in the background, is the correct answer.
Play from 2:06:58 Question 100. Which attack is designed to make a website unavailable to its visitors? Here are the options. Option A. Spoofing. Option B. BEC. Option C. XSS. Option D. DDoS. Option E. Dictionary. Pause the video now if you want time to think about the answer.
The correct answer is D. DDoS. A distributed denial of service attack floods a site with traffic from many hijacked machines, using up its capacity so genuine visitors cannot get in. Now, why are the other options incorrect? Option A is incorrect. Spoofing pretends to be another source, but does not take a site offline. Option B is incorrect. Business email compromise targets people through email. Option C is incorrect. Cross site scripting injects code into pages viewed by users. Option E is incorrect. A dictionary attack guesses passwords. Therefore, D, DDoS, is the correct answer.
