CompTIA · Free Practice Questions · Last reviewed May 2026
36real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
18% of exam · 6 sample questions below
Which of the following is the correct file extension for a macOS installer package?
.msi
.pkg
macOS installer packages use the .pkg extension, a bundle format that the Installer application processes to place files and run scripts. This distinguishes it from .dmg disk images and .app application bundles, satisfying the question's requirement for the installer package extension.
.exe
.dmg
A user wants to install software on a Linux system. Which file types are most commonly used for installing applications?
.dmg and .pkg
.app and .apk
.deb and .rpm
Debian-based distributions such as Ubuntu use .deb packages managed by dpkg and apt, while Red Hat-based distributions such as Fedora and RHEL use .rpm packages managed by rpm and dnf. These are the two dominant native Linux package formats for installing applications.
.exe and .msi
A technician needs to install software on 50 company computers without user interaction. Which installation method should be used?
Manual installation
Installation from an app store
Silent installation
Silent installation runs the installer with command-line switches such as /quiet or /qn, suppressing all dialogue boxes and prompts. This directly satisfies the stem's constraint of no user interaction across 50 machines, allowing the technician to deploy the software unattended, typically via a script or management tool.
Trial installation
A developer writes code in Python and runs it without compiling. This is an example of which type of language?
Compiled language
Scripting language
Python code here executes directly by an interpreter at runtime, with no separate compilation step producing machine code. That interpreted, run-as-written execution model is precisely what defines a scripting language, satisfying the stem's stated constraint.
Markup language
Query language
A user is selecting a web browser for everyday use. Which of the following is NOT a web browser?
Microsoft Teams
Microsoft Teams is a collaboration and communication platform, not a web browser. It renders content within its own application shell and does not provide general-purpose URL navigation or browsing features, unlike Chrome, Edge, Firefox or Safari, so it is the correct non-browser answer.
Apple Safari
Mozilla Firefox
Google Chrome
Which of the following best describes a web application?
An application that runs only on mobile devices
An application installed locally that has direct hardware access
An application that runs within a web browser and processes data on a server
A web application executes its interface inside a browser while business logic and data processing occur on a remote server, satisfying both halves of the stem's definition. This client–server split distinguishes it from native desktop software, which processes locally, and from static websites, which serve content without server-side processing.
An application that connects services using APIs
Want more Applications and Software practice?
Practice this domain13% of exam · 6 sample questions below
Which of the following is a primary advantage of using a database over a flat file system for storing customer records?
Simpler to set up and manage
Supports simultaneous multi-user access
A database management system provides concurrency control, letting many users read and write customer records simultaneously without corrupting data. A flat file offers no such locking or transaction mechanism, so concurrent edits overwrite each other, making the database the appropriate choice.
Stores data in a non-structured format
No need for a query language
A database administrator wants to enforce that every record in the 'Orders' table must have a non-null unique value in the 'OrderID' column. Which database concept ensures this?
Referential integrity
Entity integrity
Entity integrity requires every row to have a unique, non-null primary key, so the OrderID column must contain a distinct value in each record. Referential integrity instead governs foreign-key relationships between tables, which the stem does not describe.
Input validation
Domain integrity
In a relational database, a foreign key in the 'Enrollments' table references the primary key of the 'Students' table. What does this relationship primarily enforce?
Referential integrity
A foreign key constraint enforces referential integrity: every value in Enrollments' student key must match an existing Students primary key, or be null. This prevents orphaned enrolment rows and blocks deletion of a referenced student, directly satisfying the stem's requirement that the relationship enforce valid cross-table references.
Entity integrity
Normalization
Domain integrity
A company stores product data in a MongoDB database. Each product document contains fields like 'name', 'price', and 'tags' (an array). What type of NoSQL database is MongoDB?
Document store
MongoDB stores data as BSON documents within collections, where each document holds field-value pairs including arrays such as 'tags'. This schema-flexible structure is the defining characteristic of a document store, distinguishing it from key-value, column-family, and graph NoSQL categories.
Wide-column store
Graph database
Key-value store
Which SQL statement is used to retrieve all columns from a table named 'Customers' where the city is 'London'?
SELECT * FROM Customers WHERE city = 'London';
SELECT * retrieves every column, FROM Customers names the source table, and the WHERE clause filters rows where city equals 'London'. The asterisk wildcard expands to all columns, satisfying the requirement to return complete rows matching the specified city condition.
RETRIEVE * FROM Customers WHERE city = 'London';
SELECT * FROM Customers HAVING city = 'London';
GET * FROM Customers WHERE city = 'London';
A database designer wants to split a table into two to reduce data redundancy and avoid update anomalies. This process is known as:
Normalization
Normalization splits tables to eliminate redundancy.
Denormalization
Indexing
Partitioning
Want more Data and Database Fundamentals practice?
Practice this domain13% of exam · 6 sample questions below
A software development team follows a methodology where work is divided into fixed sequential phases: requirements, design, implementation, testing, deployment, and maintenance. Changes to requirements are difficult once a phase is completed. Which development methodology is being used?
Spiral
Waterfall
Waterfall matches the stem's fixed sequential phases, where each stage completes before the next begins and requirements freeze once design starts. Its linear, document-driven structure makes late requirement changes costly, satisfying the constraint that changes are difficult after a phase completes. Iterative and Agile approaches would instead accommodate evolving requirements.
Scrum
Agile
A product manager creates a list of user stories for a new feature. The development team estimates effort for each story and selects a set to complete in a two-week iteration. Daily standup meetings are held to discuss progress. At the end of the iteration, the team demonstrates working software to stakeholders. Which development framework is being used?
Waterfall
Scrum
Scrum matches because it prescribes fixed-length sprints, a prioritised backlog, team estimation, daily standups and a sprint review demonstrating working software. These ceremonies and artefacts are Scrum's defining structure, satisfying the stem's two-week iteration, daily progress meetings and stakeholder demonstration constraints.
V-Model
Kanban
A developer writes a set of instructions to sort an array of numbers in ascending order. The instructions include steps like 'compare first two numbers, swap if out of order, move to next pair, repeat until no swaps are needed.' This step-by-step procedure is known as a(n):
Pseudocode
Flowchart
Algorithm
A finite, ordered set of steps that transforms input into output defines an algorithm. The described compare-swap-repeat procedure is precisely such a sequence, satisfying the stem's requirement for the term naming a step-by-step sorting procedure. Data structures, programs and pseudocode denote other concepts.
Data structure
A developer needs to represent the logic of a program that decides whether a user is eligible for a discount. The process includes conditions (e.g., 'is member?') and actions (e.g., 'apply 10% discount'). Which tool would best visually represent this logic using standardized symbols like diamonds for decisions and rectangles for processes?
Pseudocode
Data flow diagram
Flowchart
A flowchart uses standardised ANSI symbols, diamonds for decisions and rectangles for processes, mapping conditions such as membership to actions such as applying a discount. This visual notation represents branching program logic directly, unlike pseudocode or a data dictionary, which lack decision symbols.
UML class diagram
A developer needs to store a collection of student names and their corresponding grades. The data should be accessed quickly by student name. Which data structure is most appropriate?
Array
Queue
Stack
Dictionary
A dictionary stores key-value pairs, mapping each student name directly to a grade. Hash-based lookup gives average constant-time access by name, satisfying the quick retrieval requirement that a list or array would only meet through linear searching.
A software tester writes tests to verify that individual functions in a module return correct results when given specific inputs. These tests are isolated from other parts of the system. Which type of testing is being performed?
Integration testing
User acceptance testing
Unit testing
Unit testing exercises individual functions in isolation, verifying that each returns correct results for given inputs. This directly matches the stem's constraints: tests target single functions within a module and remain isolated from other system components, confirming correctness at the smallest testable unit before integration.
System testing
Want more Software Development Concepts practice?
Practice this domain13% of exam · 6 sample questions below
Which of the following is the binary representation of the decimal number 5?
0100
0011
0110
0101
Binary 0101 equals 4 plus 1, which is 5 in decimal. Reading the bits right to left as powers of two (1, 2, 4, 8), the ones occupy the 4 and 1 positions, giving 4 + 1 = 5. The leading zero is just padding to four bits.
A technician needs to identify a network interface on a device. Which notational system is most commonly associated with MAC addresses?
Hexadecimal
MAC addresses are 48-bit identifiers written as six colon- or hyphen-separated octets, each expressed in hexadecimal (0–9, A–F). Hexadecimal's base-16 grouping maps cleanly onto 8-bit bytes, so this notation uniquely satisfies the stem's requirement for identifying a network interface's hardware address.
Binary
Octal
Decimal
A digital image is stored in a file that retains all original data without any loss. Later, the file is compressed using a technique that discards some data to reduce file size, but the image quality is lower. Which type of compression was applied?
Archive compression
Lossless compression
File compression
Lossy compression
Lossy compression permanently discards data during encoding to shrink file size, which is why the decompressed image shows reduced quality. Lossless techniques such as PNG or ZIP preserve every original pixel, so the observed degradation confirms the lossy method was applied.
A user notices that their computer runs slowly when multiple applications are open simultaneously. Which hardware component is most likely insufficient for the current workload?
GPU
CPU
Hard drive
RAM
Running many applications concurrently consumes memory for each process's working set. When RAM is exhausted, the system pages to disk, causing the slowdown described. Insufficient RAM is therefore the bottleneck for this simultaneous multi-application workload.
An IT professional is explaining to a client the difference between an HDD and an SSD. Which statement best describes a key advantage of an SSD over an HDD?
SSDs require a constant power supply to retain data.
SSDs provide larger storage capacities at a lower cost per gigabyte.
SSDs are more resilient to physical shock because they have no moving parts.
SSDs store data in flash memory with no spinning platters or actuator arms, so there is nothing mechanical to damage during drops or vibration. This directly satisfies the stem's requirement to describe a key advantage over HDDs.
SSDs use laser technology to read and write data.
A technician is troubleshooting a computer that fails to boot. The technician checks the system's low-level software stored on a chip on the motherboard. Which type of software is being inspected?
Firmware
Firmware is low-level software stored on a motherboard chip, typically a ROM or flash memory device, that initialises hardware and starts the boot process. Inspecting it directly addresses the stem's constraint: software residing on a chip rather than on disk, which is exactly what the technician examines when a computer fails to boot.
Device driver
Application software
Operating system
Want more Tech Concepts and Terminology practice?
Practice this domainA technician is upgrading a desktop computer's memory. Which component would the technician most likely replace to improve system performance using dual-channel architecture?
GPU
Storage drive
CPU
RAM
Dual-channel architecture requires matched memory modules installed in paired slots, so adding or replacing RAM in the correct slot pairs doubles the memory bus width. The technician therefore replaces RAM, not the CPU or storage.
A company issues smartphones to employees and needs to enforce security policies such as remote wipe and mandatory encryption. Which technology should the IT department implement?
Antivirus software
VPN
MDM
MDM centrally enforces device policies such as mandatory encryption and remote wipe across enrolled smartphones. It satisfies the requirement to apply security controls to company-issued devices, unlike standalone antivirus or VPN tools that do not manage device configuration.
Firewall
A network administrator is setting up a small office network with 20 computers. The network must be easy to troubleshoot and resilient to a single cable failure affecting only one device. Which topology is most appropriate?
Ring
Bus
Star
A star topology connects every node to a central switch, so a single cable failure isolates only that one device while all others keep communicating. This directly satisfies the resilience constraint and centralises troubleshooting at one point.
Mesh
A user's laptop has a SATA SSD, and they want to upgrade to a faster storage solution. Which interface technology would provide the most significant performance improvement?
Hybrid drive (SSHD)
NVMe M.2
NVMe M.2 drives communicate directly over the PCIe bus rather than the SATA AHCI interface, removing the roughly 600 MB/s SATA ceiling. This delivers the largest sequential and random throughput gain over the existing SATA SSD.
External USB 3.0 SSD
SATA M.2
Which device converts the signal from an ISP (e.g., cable or fiber) into a digital signal that a home network can use?
Access point
Router
Switch
Modem
A modem performs the required modulation/demodulation, translating the ISP's analogue carrier signal on cable or fibre into digital Ethernet frames the home router and devices can process. This directly satisfies the stem's constraint of converting the incoming ISP signal into a usable digital signal, unlike a switch, router or access point.
Which printer technology is most suitable for printing high-volume black-and-white text documents in an office environment due to its lower cost per page?
Laser
Laser printers fuse toner onto paper using a drum and heated fuser, avoiding the per-page ink and printhead costs of inkjet. Toner yields thousands of pages at a low unit cost, making laser the standard choice for high-volume monochrome office text printing.
Inkjet
Thermal
Impact
Want more Infrastructure practice?
Practice this domainWhich of the following best describes the principle of confidentiality in the CIA triad?
Data is not altered unexpectedly
Systems are accessible when needed
Ensuring data is backed up regularly
Preventing unauthorized access to information
Preventing unauthorized access to information directly satisfies the confidentiality principle, which safeguards data from disclosure to parties lacking authorisation. Unlike integrity, which preserves data accuracy, or availability, which ensures timely access, confidentiality centres on restricting read access through controls such as encryption, access permissions and Microsoft Entra ID authentication policies.
A company implements a policy requiring employees to use a password and a one-time code sent to their mobile phone when logging into the corporate network. Which security concept is being employed?
Role-based access control
Single sign-on
Multi-factor authentication
Combining a password (something known) with a one-time code sent to a mobile phone (something possessed) satisfies two distinct authentication factors, which is precisely what multi-factor authentication requires. The policy's two-step login therefore instantiates MFA rather than single-factor or knowledge-based authentication alone.
Biometrics
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The email contains urgent language and threats of account closure. What type of attack is this?
Spear phishing
Smishing
Phishing
Phishing exploits social engineering by masquerading as a trusted entity—here, the user’s bank—to trick the recipient into clicking a fraudulent link. The urgent language and threat of account closure create a false sense of crisis, bypassing rational scrutiny. This satisfies the constraint of unauthorised credential harvesting via deceptive communication, distinguishing it from technical exploits like malware injection.
Vishing
Which of the following is the strongest password?
12345678
P@ssw0rd
MyD0g!sF1d0
MyD0g!sF1d0 combines upper and lower case letters, digits and a symbol across twelve characters, giving far greater brute-force resistance than shorter or single-character-class alternatives. Length plus mixed character classes directly increases the search space an attacker must exhaust.
password
A security analyst discovers that a file on a server has been modified without authorization. However, the system logs show that the modification was made by an authenticated user who had legitimate access to the file. Which aspect of the CIA triad has been violated?
Non-repudiation
Integrity
Integrity means data remains unaltered except by authorised action. Although the user was authenticated and had legitimate access, the modification itself was unauthorised, so the file's trustworthiness was compromised. Confidentiality and availability are unaffected, as no data was exposed or made inaccessible.
Availability
Confidentiality
Which of the following malware types is characterized by self-replication without needing to attach to a host file?
Worm
A worm self-replicates across networks without attaching to a host file, satisfying the stem's defining constraint. Unlike viruses, which require a host executable to spread, worms propagate independently via exploits or network shares, consuming bandwidth and executing payloads autonomously. This distinction makes worm the precise match for the scenario described.
Virus
Trojan
Ransomware
Want more Security practice?
Practice this domainThe FC0-U71 exam has 75 questions and must be completed in 60 minutes. The passing score is 650/1000.
Multiple-choice and performance-based questions covering IT security, networking, and operations. Some questions are performance-based (PBQs), asking you to complete tasks in a simulated environment.
The exam covers 6 domains: Applications and Software, Data and Database Fundamentals, Software Development Concepts, Tech Concepts and Terminology, Infrastructure, Security. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official CompTIA FC0-U71 exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.