FC0-U71 Practice Test 43 — 15 Questions

Question 1

A user receives an email from their bank asking them to click a link and verify their account information. The email contains spelling errors and the sender's address looks suspicious. Which type of social engineering attack is this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send deceptive emails to trick recipients into revealing sensitive information.

Answer

Spear phishing

Answer

Pretexting

Answer

Vishing

Question 2

A company is developing a security policy. Which THREE of the following are examples of physical security controls?

Accepted Answer

Employing security guards to monitor entrances. Physical security controls protect hardware and facilities. Badge readers, locks, and guards are physical. Firewalls and antivirus are logical/technical controls.

Answer

Requiring employees to use strong passwords

Answer

Using a firewall to filter network traffic

Question 3

Which TWO of the following are best practices for password security?

Accepted Answer

Enabling multi-factor authentication whenever possible. Using a password manager helps generate and store strong, unique passwords. Enabling MFA adds an extra layer of security. Sharing passwords and using simple patterns are insecure.

Answer

Using simple patterns like '123456' or 'password'

Answer

Using the same password for multiple accounts

Answer

Sharing passwords with coworkers for convenience

Question 4

A software developer is using an integrated development environment (IDE) to write a Python script that processes a CSV file containing customer data. The script uses a for loop to iterate over rows and calculates a total purchase amount. When the developer runs the script, it throws an error: "IndexError: list index out of range". The developer suspects the error occurs when the script tries to access a column that doesn't exist in some rows. Which debugging strategy should the developer use first to isolate the issue?

Accepted Answer

Place a breakpoint inside the loop and step through each row in debug mode.. Placing a breakpoint inside the loop and stepping through each row in debug mode allows the developer to inspect the actual data in each row and identify exactly which row causes the IndexError. This is the most direct and efficient first step to isolate the issue, as it lets the developer see the state of the list and the index being accessed at the moment of failure.

Answer

Rewrite the script to use a dictionary instead of a list.

Answer

Add a try-except block to catch the exception and continue processing.

Answer

Examine the CSV file to ensure all rows have the same number of columns.

Question 5

A user reports that a spreadsheet application crashes every time they try to open a specific file. The file was created in a newer version of the software. What is the most likely cause?

Accepted Answer

The file was saved in a format incompatible with the installed version.. The most likely cause of a crash when opening a file created in a newer version of the software is a format incompatibility. Newer versions often use updated file formats (e.g., .xlsx vs. .xls in Excel) that older versions cannot parse correctly, leading to application instability or crashes. This is a common scenario in backward compatibility issues, where the installed software lacks the necessary codecs or schema to interpret the file's structure.

Answer

The computer does not have enough RAM.

Answer

The file is corrupted.

Answer

The user does not have permission to access the file.

Question 6

An administrator reviews the following access control policy:

{
  "Rule": {
    "Effect": "Deny",
    "Action": "delete",
    "Resource": "file-server",
    "Condition": {
      "IpAddress": {
        "SourceIp": "192.0.2.0/24"
      }
    }
  }
}

What does it do?

Accepted Answer

It denies delete access to the file server for requests from the 192.0.2.0/24 IP range. The policy explicitly denies delete actions for requests originating from the 192.0.2.0/24 IP range. This is achieved by using a Deny effect in the access control rule's Condition block with the SourceIp condition key. The policy does not affect other actions or IP ranges, so only delete access is denied for that specific CIDR block.

Answer

It allows delete access to the file server for all IPs

Answer

It allows read access to the file server from the IP range

Answer

It denies all actions to the file server

Question 7

A user needs to collaborate on a document with colleagues in real-time. Which type of application should they use?

Accepted Answer

Cloud-based productivity suite. A cloud-based productivity suite (e.g., Microsoft 365, Google Workspace) stores documents on remote servers and uses WebDAV or proprietary sync protocols (like Google Drive API) to enable multiple users to edit the same file simultaneously. This real-time collaboration relies on operational transformation or conflict-free replicated data types (CRDTs) to merge edits without conflicts. Local or offline tools lack the network infrastructure to synchronize changes across users in real time.

Answer

Email client

Answer

File compression tool

Answer

Local word processor

Question 8

Which TWO of the following are best practices for creating strong passwords?

Accepted Answer

Avoid using dictionary words or common phrases. Options B and D are correct. Option B is correct because strong passwords should avoid dictionary words or common phrases, as these are vulnerable to dictionary attacks where attackers use precomputed lists of common words and phrases to crack passwords. Option D is correct because including a mix of uppercase, lowercase, numbers, and symbols increases the password's entropy, making it much harder for attackers to guess or crack using brute-force methods. Using such patterns significantly reduces the vulnerability to both dictionary and brute-force attacks.

Answer

Use a common pattern like 'password123'

Answer

Use easily remembered personal information like birth dates

Answer

Write the password on a sticky note and attach it to the monitor

Question 9

A small business wants to set up a local network with internet access. They have a modem from the ISP and need to share the connection among five computers. Which device should they use to connect all computers to the modem and manage traffic?

Accepted Answer

Router. A router is the correct device because it connects the local network to the internet via the modem and performs Network Address Translation (NAT) to allow multiple computers to share a single public IP address. It also manages traffic between the LAN and WAN and provides basic firewall protection. A switch alone cannot perform these functions; it only forwards frames within the same network segment.

Answer

Hub

Answer

Bridge

Answer

Switch

Question 10

A small office has a network with all devices connected to a central switch. If one device fails, only that device is affected and the rest of the network continues to function. Which network topology does this describe?

Accepted Answer

Star topology. In a star topology, all devices connect to a central device. A failure in one node does not affect others.

Answer

Ring topology

Answer

Bus topology

Answer

Mesh topology

Question 11

A user reports that their computer is slow. Which of the following is the BEST first step to troubleshoot?

Accepted Answer

Check Task Manager for high resource usage.. The first step in troubleshooting a slow computer is to identify the cause of the performance issue. Task Manager provides real-time data on CPU, memory, disk, and network utilization, allowing you to pinpoint which process or resource is being overused. This diagnostic approach follows the standard troubleshooting methodology of gathering information before making changes.

Answer

Replace the hard drive.

Answer

Upgrade the RAM.

Answer

Reinstall the operating system.

Question 12

A company needs to ensure that all employees can collaborate on documents in real time. Which type of software should the company choose?

Accepted Answer

Cloud-based document editing suite.. Cloud-based document editing suites (e.g., Google Workspace, Microsoft 365) enable simultaneous real-time collaboration, unlike local-only applications, email attachments, or version control systems.

Answer

Word processor with local file saving.

Answer

Version control system like Git.

Answer

Email attachment sharing.

Question 13

A technician is troubleshooting a desktop that does not power on. The power supply fan spins, but there is no display and no beep codes. Which component should the technician check first?

Accepted Answer

RAM. When the power supply fan spins but there is no display and no beep codes, the system is likely failing the Power-On Self-Test (POST) before it can initialize the video subsystem. RAM is the most common cause of a 'no POST' condition because if the memory is faulty, loose, or incompatible, the motherboard cannot complete the memory initialization step, halting the boot process silently without beeps or display.

Answer

Motherboard

Answer

CPU

Answer

Power supply

Question 14

Which backup strategy involves keeping three copies of data on two different media types with one copy offsite?

Accepted Answer

3-2-1 backup rule. The 3-2-1 rule: three copies of data, on two different media types, with one copy stored offsite to ensure redundancy and disaster recovery.

Answer

Full backup

Answer

Differential backup

Answer

Incremental backup

Question 15

Refer to the exhibit. A user reports that an application is running slowly. Based on the exhibit, which process is using the most memory?

Accepted Answer

explorer.exe. The exhibit shows that explorer.exe is using the highest memory value (e.g., 1,234 MB) among the listed processes. In Windows Task Manager, the 'Memory' column displays the current working set in megabytes, and explorer.exe's memory consumption exceeds that of the other processes, making it the correct answer.

Answer

svchost.exe (PID 832)

Answer

notepad.exe

Answer

System