FC0-U71 Practice Exam 51 — 20 Questions

Question 1

A software development team is in the process of gathering requirements from stakeholders, identifying project scope, and creating a project plan. After this phase, they will move to analyzing requirements in detail. In which phase of the SDLC is the team currently working?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Planning. The team is gathering requirements, identifying scope, and creating a project plan, which are all activities of the Planning phase in the SDLC. The Analysis phase follows Planning and involves detailed requirement analysis, not the initial gathering and scoping. Therefore, option D is correct.

Answer

Analysis

Answer

Design

Answer

Implementation

Question 2

A developer needs to visually represent the logic of a program, including decisions (yes/no branches) and processes. Which tool should the developer use?

Accepted Answer

Flowchart. A flowchart is a diagram that visually represents the step-by-step logic of a program using standardized symbols, including diamonds for decisions (yes/no branches) and rectangles for processes. Because the developer needs a visual representation that includes decision branches and processes, a flowchart is the correct tool. Flowcharts are commonly used in the design phase before coding to map control flow clearly.

Answer

Data dictionary

Answer

Algorithm

Answer

Pseudocode

Question 3

A security analyst notices that a user's computer is running slowly and displaying many pop-up ads. Which type of malware is most likely causing this?

Accepted Answer

Adware. Adware displays unwanted advertisements and often causes performance issues. Spyware collects information, ransomware encrypts files, and a rootkit hides itself.

Answer

Spyware

Answer

Ransomware

Answer

Rootkit

Question 4

Which of the following is the correct file extension for a macOS installer package?

Accepted Answer

.pkg. .pkg is the standard macOS installer package format.

Answer

.msi

Answer

.exe

Answer

.dmg

Question 5

A database administrator needs to perform CRUD operations on a table. Which TWO SQL statements are used for the 'Create' and 'Read' operations? (Select TWO.)

Accepted Answer

INSERT INTO. INSERT INTO (B) is correct because it is the SQL statement that creates new rows in a table, satisfying the 'Create' portion of CRUD. SELECT (D) is correct because it is the SQL statement used to read/query existing rows from a table, satisfying the 'Read' portion of CRUD. DELETE (A) is incorrect because it removes rows and corresponds to the 'Delete' operation, not Create or Read. CREATE TABLE (C) is incorrect because it defines a new table's schema (DDL) rather than creating row-level data as part of CRUD. UPDATE (E) is incorrect because it modifies existing rows and corresponds to the 'Update' operation.

Answer

DELETE

Answer

CREATE TABLE

Answer

UPDATE

Question 6

A software engineer is working on a collaborative project and needs to track changes to the source code. Which of the following tools is specifically designed for version control?

Accepted Answer

Git. Git is a distributed version control system (DVCS) designed specifically to track changes to source code, maintain history, and support branching/merging across collaborative teams. It records snapshots of the repository and lets multiple developers work concurrently without overwriting each other's changes. The other tools serve different roles in the development lifecycle and do not provide version history or change tracking.

Answer

Compiler

Answer

Debugger

Answer

IDE

Question 7

A company uses a web-based application that runs in a browser and stores data on a remote server. Which of the following best describes this type of application?

Accepted Answer

Web application. A web application runs in a browser and stores/processes data on a remote server, accessed over the network via HTTP/HTTPS. This matches the description exactly. Desktop, mobile, and hybrid apps run natively on a device rather than in a browser with server-side data storage.

Answer

Desktop application

Answer

Mobile app

Answer

Hybrid app

Question 8

A company uses a software license that allows anyone to view, modify, and distribute the source code, provided that any distributed modifications are also made available under the same license. Which type of license is this?

Accepted Answer

GNU General Public License (GPL). The GNU General Public License (GPL) is a copyleft license that requires any derivative works distributed to others to also be licensed under the GPL, keeping the source code open. This 'share-alike' or 'copyleft' provision is the defining characteristic described in the question — anyone can view, modify, and distribute, but modifications must remain under the same license. The MIT License, by contrast, is permissive and does not require derivative works to use the same license.

Answer

MIT License

Answer

Freeware

Answer

Shareware

Question 9

Which of the following best describes the function of a web API?

Accepted Answer

It allows different software applications to communicate and exchange data.. A web API (Application Programming Interface) is a set of defined endpoints, protocols, and data formats that allow different software applications to communicate and exchange data over HTTP/HTTPS. It abstracts backend logic so clients (web apps, mobile apps, third-party services) can request and submit data without knowing internal implementation details. Common examples include REST APIs using JSON and SOAP APIs using XML.

Answer

It encrypts data transmitted between a web browser and server.

Answer

It is a programming language used to query databases.

Answer

It provides a graphical user interface for web applications.

Question 10

What is the difference between a threat and a vulnerability?

Accepted Answer

A threat is a potential harm, and a vulnerability is a weakness. A threat is a potential source of harm (e.g., a hacker), while a vulnerability is a weakness that can be exploited (e.g., unpatched software).

Answer

They are the same thing

Answer

A threat is a weakness, and a vulnerability is a danger

Answer

A threat is a type of malware, and a vulnerability is a type of attack

Question 11

A query uses a LEFT JOIN between Customers and Orders. The result set includes customers with no orders. What does the Orders columns show for those customers?

Accepted Answer

NULL. In a LEFT JOIN, all rows from the left table (Customers) are retained, and for rows with no matching rows in the right table (Orders), the columns from the right table are filled with NULL. This is the standard SQL behavior defined by the SQL standard (ISO/IEC 9075). Therefore, for customers with no orders, the Orders columns show NULL, not zero, an empty string, or any other default value.

Answer

The same as the customer ID

Answer

Zero

Answer

Empty string

Question 12

After a ransomware attack, which step should be taken FIRST in the incident response process?

Accepted Answer

Disconnect affected systems from network. The first step in incident response after a ransomware attack is to contain the threat by disconnecting affected systems from the network. This prevents the ransomware from encrypting additional files on other systems and stops lateral movement, which is critical because ransomware often uses network shares and SMB protocols to spread. Immediate isolation preserves forensic evidence and limits the scope of the incident before any other actions are taken.

Answer

Notify law enforcement

Answer

Restore from backup

Answer

Pay the ransom

Question 13

A help desk technician receives a ticket that a user cannot access a shared folder. The technician verifies the network cable is connected and the user can ping the server. What should the technician check next?

Accepted Answer

Check the permissions on the shared folder. Since the user can ping the server, Layer 3 (network layer) connectivity is confirmed, ruling out issues with the network cable, DNS resolution, and default gateway. The inability to access a shared folder despite successful ping points to a permissions issue at the file system or share level, which is independent of basic network connectivity. Checking the permissions on the shared folder is the logical next step to verify that the user's account has the necessary read/write access rights.

Answer

Restart the user's computer

Answer

Check the DNS server settings

Answer

Check the default gateway configuration

Question 14

Refer to the exhibit. What is the purpose of the 'no shutdown' command in this router configuration?

Accepted Answer

Enable the interface. The 'no shutdown' command is used in Cisco IOS to administratively bring an interface from the 'administratively down' state to an operational 'up/up' state. By default, many router interfaces are placed in a shutdown state upon initial configuration, and issuing 'no shutdown' enables the interface to send and receive traffic.

Answer

Remove the IP address

Answer

Reset the interface configuration

Answer

Disable the interface

Question 15

A software team is developing a mobile payment application using the waterfall model. They have completed the requirements, design, and implementation phases. During system testing, testers discover that the app crashes when processing transactions over $10,000. Further investigation reveals that the design specification for the transaction module did not account for large amounts, causing an overflow error. The project manager holds a meeting to decide the next steps. The team estimates that fixing the issue will require redesigning the transaction module, updating the code, and retesting, which will add two weeks to the schedule. The client's contract includes a penalty for late delivery but also a clause requiring the software to be free of critical defects. The team has already used most of the contingency time. What is the BEST course of action?

Accepted Answer

Submit a formal change request to the change control board to approve a redesign of the transaction module.. In a waterfall project, changes to baselined requirements or design must go through formal change control. The defect requires a redesign of the transaction module, which is a significant scope change that will impact the schedule and possibly the contract. The project manager should submit a formal change request to the change control board (CCB) to evaluate the impact, approve the redesign, and authorize the additional time and resources needed. This ensures the fix is properly governed and the client's defect-free requirement is met.

Answer

Switch to an agile methodology immediately and iterate on the fix without formal approval.

Answer

Ignore the issue because only a few transactions exceed $10,000, and hope testers overlook it.

Answer

Continue with current implementation and patch the crash after release as a maintenance update.

Question 16

A security analyst is reviewing access logs and notices that an employee in the marketing department was able to read files in the human resources shared folder. The employee's account should only have access to marketing resources. Which security principle was violated?

Accepted Answer

Least privilege. The principle of least privilege states that users should be granted only the access required for their role. The marketing employee reading HR files indicates excessive permissions. Separation of duties, defense in depth, and zero trust are related concepts but do not directly name the violation of over-provisioned access.

Answer

Zero trust

Answer

Separation of duties

Answer

Defense in depth

Question 17

A user wants to install a program on their Ubuntu Linux system. Which TWO file extensions are commonly used for Linux installer packages? (Select TWO.)

Accepted Answer

.deb. Option A (.deb) is correct because Debian-based distributions such as Ubuntu use .deb packages, which are installed with dpkg or apt (e.g., apt install ./package.deb). Option D (.rpm) is correct because .rpm is the standard package format used by RPM-based Linux distributions like Red Hat Enterprise Linux, Fedora, and openSUSE, and it is commonly recognized as a Linux installer package format. Option B (.dmg) is incorrect because it is a macOS disk image format, not a Linux package. Option C (.exe) is incorrect because it is a Windows executable format. Option E (.msi) is incorrect because it is a Windows Installer package format.

Answer

.dmg

Answer

.exe

Answer

.msi

Question 18

An employee receives an email from an unknown sender that includes an attachment labeled 'Invoice.pdf'. The employee does not recall ordering anything. What is the most secure action for the employee to take?

Accepted Answer

Forward the email to the IT security team and then delete it.. The most secure action when receiving an unsolicited email with an attachment from an unknown sender is to forward it to the IT security team for analysis and then delete it. This prevents potential malware execution (e.g., macro-based payloads in PDFs) and allows the security team to investigate the threat, such as checking for phishing indicators or malicious scripts. Opening or replying could compromise the system or reveal user information, while simply deleting may miss the opportunity to alert others.

Answer

Open the attachment to check if it is a legitimate invoice.

Answer

Reply to the sender requesting more information.

Answer

Delete the email without opening any attachments.

Question 19

A user wants to upgrade their desktop computer to faster storage. Which of the following storage interfaces provides the highest data transfer speeds?

Accepted Answer

NVMe M.2. NVMe M.2 drives connect directly to the PCIe bus, bypassing the SATA/AHCI bottleneck entirely. NVMe was designed for flash storage with deep parallel command queues (up to 64K queues with 64K commands each), delivering sequential reads in the 3,000–7,000+ MB/s range on PCIe 3.0/4.0. This makes it the fastest storage interface among the options by a wide margin.

Answer

USB 2.0 flash drive

Answer

SATA SSD

Answer

External HDD

Question 20

A user reports that their computer is slow. Which of the following is the BEST first step to troubleshoot?

Accepted Answer

Check Task Manager for high resource usage.. The first step in troubleshooting a slow computer is to identify the cause of the performance issue. Task Manager provides real-time data on CPU, memory, disk, and network utilization, allowing you to pinpoint which process or resource is being overused. This diagnostic approach follows the standard troubleshooting methodology of gathering information before making changes.

Answer

Replace the hard drive.

Answer

Upgrade the RAM.

Answer

Reinstall the operating system.