FC0-U71 Practice Test 47 — 15 Questions

Question 1

A company uses a proprietary application that requires a license per user. They have 100 employees but only 80 need access. Which licensing model would be most cost-effective?

Accepted Answer

Concurrent user license. Concurrent user licensing allows a set number of simultaneous users, which is cost-effective when not all employees need access at once. Per-seat licenses would require 100 licenses. Site licenses cover unlimited users but may cost more. Volume licenses with a minimum of 100 would still require 100.

Answer

Per-seat license

Answer

Site license

Answer

Volume license with minimum 100

Question 2

Which of the following types of networks covers the largest geographical area?

Accepted Answer

WAN. A WAN (Wide Area Network) spans large geographic areas, such as cities, countries, or even globally (the Internet).

Answer

WLAN

Answer

LAN

Answer

PAN

Question 3

A mobile app developer wants to integrate weather data into an app. The developer uses an HTTP request to a web service that returns JSON data. The web service requires an API key in the request header for authentication. What is this web service an example of?

Accepted Answer

REST API. This web service is a REST API because it uses HTTP requests to access and manipulate resources, returns data in JSON format, and requires an API key in the request header for authentication. REST APIs are stateless and rely on standard HTTP methods (GET, POST, etc.), making them ideal for integrating external data like weather information into mobile apps.

Answer

GraphQL API

Answer

WebSocket

Answer

SOAP API

Question 4

Which network device converts the signal from an Internet Service Provider (ISP) into a digital signal that a home network can use?

Accepted Answer

Modem. A modem modulates and demodulates signals from the ISP (e.g., cable, DSL) into digital data for the home network.

Answer

Access point

Answer

Switch

Answer

Router

Question 5

Match each security concept to its definition.

Accepted Answer

Confidentiality: Ensuring that information is not disclosed to unauthorized individuals, entities, or processes.. The CIA triad includes Confidentiality, Integrity, and Availability. Authentication verifies identity. Common mistakes include swapping the definitions of Confidentiality and Integrity.

Answer

Confidentiality: Ensuring that data is accurate and unaltered.

Answer

Integrity: Ensuring that information is not disclosed to unauthorized individuals.

Question 6

A database must be restored to the exact state at 11:00 AM. The last full backup was at 10:00 PM previous day, and transaction log backups were taken every hour. What is the minimum to restore?

Accepted Answer

Full backup plus all transaction log backups from after full backup. To restore a database to a specific point in time (11:00 AM) when only full and transaction log backups exist, you must restore the most recent full backup (from 10:00 PM previous day) and then apply all subsequent transaction log backups in sequence. Transaction log backups contain all committed transactions up to the time of the backup, so applying them in order after the full backup brings the database to the exact state at the time of the last log backup (which would be 11:00 AM if the hourly log backup was taken at that time). Option A is correct because it includes the full backup and all transaction log backups taken after it, which is the minimum required for point-in-time recovery.

Answer

Transaction log backup only

Answer

Full backup only

Answer

Full backup plus differential backup

Question 7

Which two of the following are types of malware? (Choose two.)

Accepted Answer

Ransomware. Ransomware is a type of malware that encrypts a victim's files or locks their system, demanding a ransom payment for the decryption key. Trojan horse malware disguises itself as legitimate software but performs malicious actions. Both are forms of malicious software (malware). Phishing is a social engineering attack, not malware; DDoS is a network attack; adware can be annoying but is often not classified as malware unless it operates without consent. Therefore, the two correct answers are B (Ransomware) and D (Trojan).

Answer

Phishing

Answer

DDoS

Answer

Adware

Question 8

Which of the following are phases in the software development lifecycle (SDLC)?

Accepted Answer

Design. The SDLC includes several phases: requirements gathering, design, testing, and deployment are all recognized phases. Compilation is a technical activity within the implementation phase, not a distinct phase.

Answer

Compilation

Question 9

A system administrator needs to automatically assign IP addresses to devices on the network. Which protocol should be configured on the server?

Accepted Answer

DHCP. The Dynamic Host Configuration Protocol (DHCP) is the correct protocol because it is specifically designed to automatically assign IP addresses and other network configuration parameters (such as subnet mask, default gateway, and DNS servers) to devices on a network. A DHCP server maintains a pool of available addresses and leases them to clients, eliminating the need for manual static IP configuration.

Answer

DNS

Answer

ICMP

Answer

ARP

Question 10

Refer to the exhibit. A security auditor reviews this application configuration. What is the most significant security concern?

Accepted Answer

The database password is stored in plaintext.. Storing a database password in plaintext within an application configuration file is a critical security vulnerability. If an attacker gains access to the file, they can immediately read the credentials and connect to the database, potentially compromising all stored data. This violates fundamental security principles such as least privilege and defense in depth, and it is explicitly warned against in secure coding guidelines like OWASP's Top 10 (A07:2021 – Identification and Authentication Failures).

Answer

The server name is hardcoded.

Answer

The log level is set to Debug.

Answer

The database name is SalesDB.

Question 11

A small business office has a network where each device is connected to a central switch. If the switch fails, all devices lose connectivity. Which network topology does this describe?

Accepted Answer

Star topology. In a star topology, all devices connect to a central device (e.g., switch or hub). If the central device fails, the entire network goes down.

Answer

Bus topology

Answer

Mesh topology

Answer

Ring topology

Question 12

A company wants to ensure that data transmitted between its web server and clients is encrypted. Which protocol should be used?

Accepted Answer

TLS. TLS (Transport Layer Security) is the correct protocol because it provides encryption for data in transit, ensuring confidentiality and integrity between a web server and clients. It operates over TCP and is commonly used to secure HTTP traffic as HTTPS, preventing eavesdropping and tampering.

Answer

FTP

Answer

SMTP

Answer

HTTP

Question 13

Which TWO of the following are valid data types in most programming languages?

Accepted Answer

Boolean. Boolean is a valid data type in most programming languages, representing true/false values. It is fundamental for conditional logic and control flow, typically stored as a single bit but often aligned to a byte for memory access efficiency.

Answer

Character

Answer

Array

Answer

Bit

Question 14

A small business runs a legacy inventory management application that was developed in-house. The application uses a local database stored on a single server running Windows Server 2016. Recently, the application has become slow during peak hours, and multiple users have reported timeouts. The server has 8GB of RAM and a quad-core processor. The application's database grows by about 500MB per month. The company's IT budget is limited, and they cannot rewrite the application. As an IT consultant, which recommendation would best improve performance without requiring application changes?

Accepted Answer

Schedule database archiving to reduce the active data size. Scheduling database archiving reduces the active data size, directly addressing the performance degradation caused by database growth without requiring any changes to the application. Option A is incorrect because adding RAM does not reduce the data volume and may only provide marginal benefit if the bottleneck is I/O or data size. Option C is incorrect because migrating to a cloud-based SQL service could improve scalability but often involves application modifications and higher costs, which the business cannot afford. Option D is incorrect because implementing database indexing and query optimization typically requires changes to the application or database schema, which is not feasible since the application cannot be rewritten.

Answer

Increase the server's RAM to 32GB

Answer

Migrate the database to a cloud-based SQL service

Answer

Implement database indexing and query optimization

Question 15

A small business needs to share files among employees within the same building. Which network topology is most efficient for this scenario?

Accepted Answer

Star. The star topology is most efficient for this scenario because all employee workstations connect to a central switch, which provides dedicated bandwidth per connection and simplifies troubleshooting. In a small office, the star topology allows easy addition or removal of devices without disrupting the network, and the central switch can manage traffic efficiently using MAC address tables.

Answer

Ring

Answer

Bus

Answer

Mesh