FC0-U61 Practice Test 37 — 15 Questions

Question 1

A small business uses a single external IP address from their ISP and has a network of 10 computers. They want to host a web server that must be accessible from the internet, but they also need to protect their internal network. They have a firewall/router that supports port forwarding. Which configuration should they implement?

Accepted Answer

Configure port forwarding on the router to direct HTTP (port 80) and HTTPS (port 443) traffic to the web server's internal IP address. Option D is correct because port forwarding allows the firewall/router to accept incoming HTTP (port 80) and HTTPS (port 443) traffic on the single public IP address and forward it to the web server's internal private IP address. This exposes only the necessary ports to the internet while keeping the web server behind the firewall, protecting the internal network from direct external access.

Answer

Connect the web server directly to the ISP modem, bypassing the firewall

Answer

Place the web server in the DMZ of the firewall and allow all inbound traffic to the server's IP

Answer

Assign a public IP address to the web server and connect it to the same switch as the other computers

Question 2

You are a support technician for a small company. An employee reports that their desktop computer will not turn on. You have verified that the power cable is securely connected to both the computer and the wall outlet. When you press the power button, you hear a faint clicking sound but the computer does not start. The power supply fan does not spin, and there are no lights on the motherboard. You have tested the wall outlet with a known working device and it provides power. What is the most likely cause of the issue?

Accepted Answer

The power supply is faulty.. The correct answer is C because the symptoms—faint clicking sound, no fan spin, no motherboard lights, and confirmed wall outlet power—strongly indicate a power supply failure. The clicking sound often comes from a relay or overload protection circuit inside the PSU attempting to start but failing due to internal component damage or short circuit. A faulty power supply cannot deliver the necessary voltages (e.g., +3.3V, +5V, +12V) to power the system, explaining the complete lack of activity.

Answer

The CPU is overheated.

Answer

The power button is not connected properly.

Answer

The motherboard has failed.

Question 3

You are a desktop support technician for a small accounting firm. The firm uses a legacy accounting application that only runs on Windows 7. The application stores data in a local SQL Server Express database. A user reports that since the IT department applied a mandatory security update last night, the accounting application fails to start and displays an error: 'Cannot connect to database server. Check that the SQL Server (MSSQLSERVER) service is running.' You verify that the SQL Server service is set to Automatic but is not running. When you attempt to start it manually, it fails with error 1069: 'The service did not start due to a logon failure.' Which of the following is the MOST likely cause and solution?

Accepted Answer

The password for the service account has expired or was changed. Update the service logon credentials.. Error 1069 specifically indicates a logon failure for the service account. When a mandatory security update is applied, it may enforce password expiration policies or reset the service account password, causing the SQL Server service to fail to start. Updating the service logon credentials in the Services console resolves the issue.

Answer

The security update changed the service startup type to Disabled. Set it back to Automatic.

Answer

The security update deleted the database file. Reinstall the application.

Answer

The security update corrupted the database files. Restore the database from backup.

Question 4

A small business uses a legacy inventory management application that runs on a Windows 10 workstation. The application stores data in a local Microsoft Access database. Recently, the application has started crashing intermittently when users attempt to generate reports. The error message indicates a 'database connection lost' error. The IT technician has verified that the network is stable and the workstation has sufficient disk space. The technician suspects the issue is related to software compatibility. Which of the following is the BEST course of action to resolve the issue while minimizing disruption to daily operations?

Accepted Answer

Configure the application to run in compatibility mode for Windows 7.. Running the application in compatibility mode for an earlier Windows version often resolves crashes in legacy software that expects older system behaviors. Upgrading to a subscription-based cloud application would be costly and disruptive. Repairing the database might help if the database were corrupt, but the error is about connection loss, not data integrity. Disabling the antivirus is a security risk and unlikely to fix a database connection issue.

Answer

Upgrade the application to a cloud-based subscription version.

Answer

Repair the Microsoft Access database using the built-in repair tool.

Answer

Disable the antivirus software temporarily to test if it is interfering.

Question 5

You are the IT security administrator for a mid-sized law firm that handles sensitive client data. The firm has a mix of Windows 10 workstations, a Windows Server 2019 domain controller, and a network printer. All users have standard user accounts. The senior partner recently received a phishing email that appeared to be from a known client, requesting that he click a link to review a document. He clicked the link and entered his domain credentials on a fake login page. Shortly after, the firm's file server began encrypting files and displaying a ransom note. The incident response team isolated the infected server and restored files from backup. However, the senior partner now reports that he cannot access the file server from his workstation. He receives an 'Access Denied' message. You check his account in Active Directory and find that his account is not locked out and the password is correct. The file server is back online and accessible by other users. You verify that the senior partner's workstation has network connectivity and can ping the file server. Which of the following is the MOST likely cause of the access issue?

Accepted Answer

The senior partner's password was changed during incident response, and his workstation has cached old credentials. The senior partner's password was likely changed during the incident response process to prevent further unauthorized access using his compromised credentials. When a password is changed in Active Directory, the user's workstation still caches the old credentials (NTLM hash) until the user logs off and back on. Since the partner has not logged off, his workstation continues to present the old, invalid credentials to the file server, resulting in an 'Access Denied' error despite the account being active and the password being correct.

Answer

The senior partner's account was disabled by the automatic containment script

Answer

The ransomware modified the file server's permissions to deny access to the senior partner's account

Answer

The senior partner's workstation IP address was blacklisted on the file server

Question 6

A small business has a single server running Windows Server 2019 that acts as a domain controller, file server, and DHCP server. The server has a single network interface with IP address 192.168.1.10/24. The office has 30 client computers running Windows 10. All clients obtain IP addresses automatically. The network uses a single unmanaged switch. The internet connection is provided by a cable modem with IP 192.168.1.1. The server is configured with a static IP of 192.168.1.10, and the DHCP scope is 192.168.1.100-192.168.1.200. Recently, users have reported that they cannot access the internet. The technician checks that the cable modem is online and that the server can ping the modem. The technician runs 'ipconfig /all' on a client and sees: IP: 192.168.1.101, Subnet: 255.255.255.0, Default Gateway: 192.168.1.10, DNS: 192.168.1.10. The client can ping the server (192.168.1.10) but cannot ping the modem (192.168.1.1). What is the most likely cause?

Accepted Answer

Change the DHCP scope option for the default gateway to 192.168.1.1. The correct answer is D. The DHCP scope is configured with the default gateway option set to 192.168.1.10 (the server's IP), but the actual default gateway for internet access is the cable modem at 192.168.1.1. Since clients receive their gateway via DHCP, they are sending all off-subnet traffic to the server, which is not configured to route to the internet. Changing the DHCP scope option for the default gateway to 192.168.1.1 will allow clients to route internet traffic through the modem.

Answer

Disable the Windows Firewall on the server to allow traffic

Answer

Replace the cable modem as it is not routing traffic correctly

Answer

Configure the DNS server to forward queries to 8.8.8.8

Question 7

A hospital uses a legacy application that runs on a Windows 7 workstation. The application stores patient data in a local database. The IT department is migrating all workstations to Windows 10. The legacy application is not compatible with Windows 10. The hospital needs to continue using the application and ensure patient data is accessible from the new workstations. The application requires a dedicated workstation due to licensing. Which solution should the IT department implement?

Accepted Answer

Install a virtual machine with Windows 7 on a Windows 10 workstation and run the application in the VM. Option C is correct because running a virtual machine (VM) with Windows 7 on a Windows 10 workstation allows the legacy application to operate in its native OS environment without hardware compatibility issues. The VM isolates the application and its local database, ensuring patient data remains accessible from the new workstation while satisfying the dedicated workstation licensing requirement by using a single physical host.

Answer

Keep the old Windows 7 workstation on the network for the application and use it as is

Answer

Upgrade the legacy application to a version that supports Windows 10

Answer

Set up a dual-boot configuration on the new workstation to boot into Windows 7 when needed

Question 8

A company has a server room with two UPS units, each connected to a separate power circuit. The server room contains 10 servers, each with dual power supplies. One UPS fails and stops providing power. The administrator notices that half of the servers shut down, while the other half remain on. The servers that shut down were all connected to the failed UPS. However, the servers that remained on were also connected to the same UPS via their second power supply. Why did those servers not fail?

Accepted Answer

The servers that remained on had both power supplies connected to different UPS units. Option B is correct because the servers that remained on had each of their dual power supplies connected to different UPS units (one to the failed UPS and one to the working UPS). When one UPS failed, the working UPS continued to supply power through the second power supply, allowing those servers to stay operational. The servers that shut down were only connected to the failed UPS via both power supplies or had their second power supply connected to the same failed UPS, providing no redundancy.

Answer

The servers that shut down were not connected to the working UPS

Answer

The failed UPS was overloaded and only some servers lost power

Answer

The servers that remained on had only one power supply connected

Question 9

You are a system administrator for a small marketing firm. The firm uses a web-based project management application (Trello) for task tracking. One morning, users report that they cannot access Trello from any workstation. However, other websites (e.g., Google, YouTube) are accessible. The network uses a single router with default settings. No changes were made to the network or firewall overnight. You check the DNS settings on a workstation and it points to the ISP's DNS server (8.8.8.8 and 8.8.4.4). What is the most likely cause and the best course of action?

Accepted Answer

Change the DNS server settings on the router to use the ISP's DNS servers.. The workstation DNS settings point to 8.8.8.8 and 8.8.4.4, which are Google Public DNS servers, not the ISP's DNS servers. Since other websites are accessible, the issue is likely that the router's DHCP is not distributing these DNS servers, causing workstations to use the router's default DNS (often the ISP's) which may have a cached or incorrect entry for Trello. Changing the router's DNS settings to use the ISP's DNS servers ensures consistent resolution across all devices, resolving the Trello access issue.

Answer

Contact the ISP to unblock Trello.

Answer

Reset the router to factory defaults.

Answer

Clear the browser cache on all workstations.

Question 10

You are a junior developer at a small company that uses a monolithic web application written in Python. The application runs on a single server and uses a MySQL database. Recently, the application has become slow during peak hours. The operations team reports high CPU usage on the server. You suspect that the database queries are not optimized. You propose to refactor the application to use a caching layer. However, your manager is concerned about adding complexity and suggests that you first optimize the most frequently executed queries. You review the code and find that the most frequent query selects all columns from a large table without a WHERE clause. The table has over 1 million rows. Which course of action should you take?

Accepted Answer

Modify the query to include a WHERE clause that filters on an indexed column.. Option D is correct because the query selects all columns from a large table without a WHERE clause, which forces a full table scan. Adding a WHERE clause that filters on an indexed column reduces the number of rows scanned, dramatically improving performance without introducing the complexity of a caching layer. This directly addresses the high CPU usage caused by inefficient query execution.

Answer

Implement a caching layer using Redis.

Answer

Upgrade the server to have more CPU and RAM.

Answer

Add an index on all columns used in the query.

Question 11

A small business uses a MySQL database to manage inventory and sales. The database has two tables: Products (ProductID, ProductName, QuantityInStock) and Sales (SaleID, ProductID, QuantitySold, SaleDate). The business runs a nightly script that updates QuantityInStock by subtracting QuantitySold from the Products table based on the day's sales. Recently, the inventory levels have become inaccurate. For example, a product shows negative stock even though no sales occurred that day. The database administrator suspects the issue is related to how transactions are handled. The nightly script runs multiple UPDATE statements in a loop. If the script fails partway through, some products' stock is updated while others are not, leaving inconsistent data. The administrator wants to ensure that either all updates succeed or none do, and that the script does not interfere with daytime operations. Which action should the administrator take?

Accepted Answer

Wrap all UPDATE statements in a single transaction with READ COMMITTED isolation level and add error handling to roll back on failure. Option D is correct because wrapping all UPDATE statements in a single transaction with READ COMMITTED isolation level ensures atomicity: either all updates commit or none do, preventing partial updates. Adding error handling with a rollback on failure guarantees that if the script fails partway through, the entire transaction is undone, leaving the database consistent. READ COMMITTED isolation prevents dirty reads and minimizes locking, reducing interference with daytime operations.

Answer

Use a stored procedure that updates all products in one statement without error handling

Answer

Increase the frequency of the script to run every hour with smaller batches

Answer

Remove the transaction and use individual UPDATE statements with error logging

Question 12

A small business uses a legacy desktop application for inventory management. The application was designed for Windows 7 and has not been updated. The company recently upgraded its workstations to Windows 10. Now, when employees try to run the inventory application, it either crashes immediately or displays errors about missing components. The company relies on this application daily and cannot afford downtime. The IT administrator has tried running the application in compatibility mode for Windows 7, but the crashes persist. There is no alternative application available, and the vendor is out of business. Which of the following is the BEST course of action to allow the business to continue using this application?

Accepted Answer

Set up a virtual machine running Windows 7 and install the application there.. Option C is correct because using a virtual machine with Windows 7 provides a full compatible environment, allowing the legacy application to run as before. Option A is wrong because reinstalling the application on Windows 10 will likely result in the same issues since the application is incompatible. Option B is wrong because contacting a vendor that is out of business is futile. Option D is wrong because rewriting the application is costly, time-consuming, and not a quick fix.

Answer

Contact the vendor for an updated version of the software.

Answer

Hire a developer to rewrite the application for Windows 10.

Answer

Uninstall the application and reinstall it using the original installation media.

Question 13

You are an IT support specialist for a mid-sized company. A user in the accounting department, Jane, reports that her accounting software (QuickBooks 2021) crashes every time she tries to export a report to PDF. The crash occurs immediately after clicking 'Export to PDF' and displays the error: 'The application has stopped working.' Jane's workstation runs Windows 10 Pro with 8GB RAM and an SSD. She has sufficient disk space. Other users in the same department using the same software version do not experience this issue. Jane recently installed a free PDF printer driver for personal use. What is the most likely cause and the best course of action?

Accepted Answer

Remove the recently installed PDF printer driver and test the export again.. The most likely cause is the recently installed free PDF printer driver, which conflicts with QuickBooks' PDF export functionality. QuickBooks relies on its own PDF generation engine or system PDF printers, and a third-party PDF driver can intercept or corrupt the export process, causing the crash. Removing the driver and testing is the best first step because it isolates the change without affecting other software or system files.

Answer

Reinstall QuickBooks 2021 using the original installation media.

Answer

Reinstall Windows 10 because the operating system is corrupted.

Answer

Update all printer drivers to the latest versions.

Question 14

A small business uses a single Linux server to host a custom inventory management application written in Python. The application reads from a CSV file on the server to display current stock levels. Recently, users have reported that the inventory numbers are incorrect and sometimes the application crashes with a 'Permission denied' error when trying to save updates. The server has two user accounts: 'admin' (with sudo privileges) and 'app_user' (a standard user under which the application runs). The CSV file is located at /var/data/inventory.csv and currently has permissions -rw-rw---- and owner root:root. The application code uses the open() function to read and write the file. Which of the following actions should be taken to resolve the issue?

Accepted Answer

Change the group ownership to a group that includes 'app_user' and ensure the file has group write permission.. The application runs as 'app_user', which needs to write to /var/data/inventory.csv. The file is owned by root:root with permissions -rw-rw----, meaning only root and the root group can write. Changing the group ownership to a group that includes 'app_user' and granting group write permission (e.g., chown root:app_group /var/data/inventory.csv; chmod 664 /var/data/inventory.csv) allows the application to write without elevating privileges or exposing the file to all users.

Answer

Modify the application to run as 'admin' using sudo.

Answer

Set the file permissions to 644 so all users can read the file.

Answer

Change the file owner to 'app_user' and set permissions to 755.

Question 15

You are the IT administrator for a small company with 50 employees. The company uses a shared network drive for project files. Employees have read/write access to all folders on the drive. Recently, a ransomware attack encrypted many files on the network drive after an employee's workstation became infected. The employee had mapped the drive as a local letter. Backups are available but restoring takes several hours. Management wants to reduce the risk of future ransomware damage to the network drive. You are considering implementing one of the following controls. Which control would be most effective in limiting the spread of ransomware to the network drive?

Accepted Answer

Implement file-level permissions so users only have write access to folders they need.. Option A is correct because implementing file-level permissions with least privilege limits the number of files a ransomware infection can encrypt. Option B is wrong because VPN is for remote access, not internal protection. Option C is wrong because antivirus may not prevent malware from running. Option D is wrong because disk encryption protects data at rest but does not prevent ransomware from encrypting files.

Answer

Enable disk encryption on the network drive.

Answer

Install antivirus software on all workstations and schedule weekly scans.

Answer

Require all employees to use a VPN when accessing the network drive.