FC0-U71 Practice Exam 55 — 20 Questions

Question 1

A company implements a policy requiring employees to use a password and a one-time code sent to their mobile phone when logging into the corporate network. Which security concept is being employed?

Accepted Answer

Multi-factor authentication. Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).

Answer

Role-based access control

Answer

Single sign-on

Answer

Biometrics

Question 2

Refer to the exhibit. The database administrator sees this error in the log. Which action should the administrator take to resolve the deadlock?

Accepted Answer

The database will automatically roll back one of the transactions; no immediate action is needed.. When a deadlock occurs in a database, the database management system (DBMS) automatically detects the circular dependency and selects one of the transactions as a victim, rolling it back to break the deadlock. This is a built-in mechanism in most relational databases, such as SQL Server, Oracle, or MySQL, and does not require manual intervention. Therefore, no immediate action is needed from the administrator, as the database will resolve the deadlock itself.

Answer

Increase the transaction isolation level to Serializable to prevent deadlocks.

Answer

Remove all indexes from the involved tables to reduce lock contention.

Answer

Manually kill one of the processes to break the deadlock.

Question 3

Which TWO of the following are common file formats for images?

Accepted Answer

PNG. PNG (Portable Network Graphics) is a common image file format that uses lossless compression, making it ideal for images requiring high detail and transparency. It supports up to 48-bit true color and an alpha channel for transparency, which distinguishes it from other formats like JPEG.

Answer

PDF

Answer

TXT

Answer

MP3

Question 4

Which THREE are common steps in troubleshooting software issues?

Accepted Answer

Test the solution. Testing the solution (Option A) is a common step in troubleshooting software issues because it verifies that the implemented fix resolves the original problem without introducing new errors. This step follows the implementation of a solution and ensures the software operates as expected, often involving user acceptance testing or automated test scripts.

Answer

Reinstall the operating system

Answer

Replace hardware

Question 5

A small business uses a single external IP address from their ISP and has a network of 10 computers. They want to host a web server that must be accessible from the internet, but they also need to protect their internal network. They have a firewall/router that supports port forwarding. Which configuration should they implement?

Accepted Answer

Configure port forwarding on the router to direct HTTP (port 80) and HTTPS (port 443) traffic to the web server's internal IP address. Port forwarding allows the firewall/router to accept incoming HTTP (port 80) and HTTPS (port 443) traffic on the single public IP address and forward it to the web server's internal private IP address. This exposes only the necessary ports to the internet while keeping the web server behind the firewall, protecting the internal network from direct external access.

Answer

Connect the web server directly to the ISP modem, bypassing the firewall

Answer

Place the web server in the DMZ of the firewall and allow all inbound traffic to the server's IP

Answer

Assign a public IP address to the web server and connect it to the same switch as the other computers

Question 6

An administrator is configuring access to a cloud storage bucket. The policy is applied to a user. Which of the following actions will the user be allowed to perform?

Accepted Answer

Read and write objects in my-company-bucket. The access policy applied to the user explicitly grants 'Read' and 'Write' actions on the 'my-company-bucket' resource, which correspond to reading and writing objects. This is the only action set permitted by the policy, so the user can read and write objects in the bucket.

Answer

List all objects in my-company-bucket

Answer

Delete objects from my-company-bucket

Answer

Change the bucket policy of my-company-bucket

Question 7

A software developer writes code that stores sensitive user data. To comply with data protection regulations, which application-level security measure should be implemented?

Accepted Answer

Use encryption for data storage and transmission.. Encryption (e.g., AES-256 for data at rest and TLS 1.3 for data in transit) renders sensitive user data unreadable to unauthorized parties, directly addressing data protection regulations such as GDPR or HIPAA that mandate confidentiality. This is an application-level security measure implemented within the software code or database layer, not a network or perimeter control.

Answer

Install a firewall on the server.

Answer

Run regular antivirus scans.

Answer

Require multi-factor authentication for login.

Question 8

A company wants to ensure data redundancy in case of a single hard drive failure. Which RAID level should they use?

Accepted Answer

RAID 1. RAID 1 (mirroring) writes identical data to two or more drives simultaneously, providing full data redundancy. If one drive fails, the system continues to operate using the mirrored copy, ensuring no data loss and minimal downtime. This makes RAID 1 the correct choice for protecting against a single hard drive failure.

Answer

RAID 0

Answer

RAID 5

Answer

JBOD

Question 9

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the email address is slightly misspelled (e.g., 'support@bankk.com' instead of 'support@bank.com'). Which type of attack is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send fraudulent emails pretending to be from legitimate sources to steal sensitive information.

Answer

Smishing

Answer

Spear phishing

Answer

Vishing

Question 10

A support technician is explaining file compression to a user. Which THREE of the following are examples of lossless compression formats? (Select THREE).

Accepted Answer

FLAC. Lossless compression preserves all original data. ZIP and PNG are lossless. FLAC is a lossless audio format. JPEG and MP3 are lossy.

Answer

MP3

Answer

JPEG

Question 11

A help desk technician receives an alert from the security monitoring system showing multiple events like the one in the exhibit. The technician is investigating a possible brute-force attack. Based on the exhibit, which of the following is the primary attack vector being used?

Accepted Answer

RDP brute-force attack. The exhibit shows repeated failed authentication attempts targeting TCP port 3389, which is the default port for Remote Desktop Protocol (RDP). A brute-force attack on RDP involves systematically trying many username/password combinations to gain unauthorized remote access to a Windows system. This matches the definition of an RDP brute-force attack.

Answer

VPN brute-force attack

Answer

SSH brute-force attack

Answer

Web application attack

Question 12

A technician needs to verify that a twisted-pair Ethernet cable is wired correctly and has no breaks. Which tool should be used?

Accepted Answer

Cable tester. A cable tester sends signals through each conductor in the twisted-pair cable and checks for continuity, correct pin-to-pin wiring (e.g., T568A or T568B), and shorts or opens. This makes it the correct tool to verify proper wiring and detect breaks in an Ethernet cable.

Answer

Multimeter

Answer

Loopback plug

Answer

Toner probe

Question 13

A company decides to deploy a new accounting application. The vendor offers a subscription model where users pay monthly. This is an example of:

Accepted Answer

Software as a Service (SaaS). Software as a Service (SaaS) is a subscription-based model where users pay a recurring fee (e.g., monthly) to access the application hosted by the vendor over the internet. Option A (Shareware) is typically free for a trial period but may require a one-time purchase after trial, not a monthly subscription. Option C (Freeware) is free to use with no payment required. Option D (Open source) refers to software with freely available source code and does not inherently involve a subscription model.

Answer

Shareware

Answer

Freeware

Answer

Open source

Question 14

Which of the following is an example of multi-factor authentication?

Accepted Answer

Using a PIN and a smart card. MFA requires two or more factors: something you know (PIN), something you have (smart card), something you are (biometric). Option A combines a PIN (know) and a smart card (have).

Answer

Using a password and answering a security question

Answer

Using a fingerprint scanner alone

Answer

Using a password and a one-time code sent via SMS

Question 15

Which TWO of the following are examples of application software? (Select TWO).

Accepted Answer

Adobe Photoshop. Adobe Photoshop is an example of application software because it is a program designed to perform specific tasks for end users, such as photo editing and graphic design. Application software runs on top of system software (like an operating system) and directly serves user needs, unlike system software which manages hardware or provides a platform for other software.

Answer

Printer driver

Answer

Microsoft Windows 10

Answer

BIOS

Question 16

Which TWO of the following are types of malware?

Accepted Answer

Virus. A virus is a type of malware that attaches itself to a legitimate program or file and replicates when the host is executed, often causing damage or stealing data. It requires user interaction (e.g., opening an infected attachment) to spread, distinguishing it from other malware types.

Answer

Patch

Answer

Encryption

Answer

Firewall

Question 17

Which TWO of the following are primitive data types commonly used in programming?

Accepted Answer

Integer. Integer and Boolean are primitive data types because they represent single, indivisible values directly supported by the hardware and language runtime. An Integer stores whole numbers (e.g., 42), while a Boolean stores true/false values. These are fundamental building blocks that are not composed of other data types.

Answer

String

Answer

Array

Answer

Function

Question 18

A company is setting up a new office and needs to connect multiple computers within the same building to share files and printers. Which type of network should they implement?

Accepted Answer

LAN. A LAN (Local Area Network) is designed to connect devices within a limited area such as a single building, allowing resource sharing like files and printers.

Answer

WAN

Answer

PAN

Answer

WLAN

Question 19

An IT administrator is configuring a virtualized environment on a single server. The administrator needs to allocate resources to multiple virtual machines. Which THREE of the following are resources that can be allocated to a VM? (Select THREE.)

Accepted Answer

Virtual storage. In virtualization, vCPU (virtual CPUs), vRAM (virtual RAM), and virtual storage are typical resources allocated to VMs.

Answer

Physical GPU

Answer

Hypervisor license

Question 20

A user needs to create a presentation for a sales meeting. Which type of software should they use?

Accepted Answer

Presentation software.. Presentation software, such as Microsoft PowerPoint or Google Slides, is specifically designed to create slide-based presentations for meetings, lectures, or sales pitches. It provides tools for adding text, images, charts, animations, and transitions to effectively communicate information to an audience.

Answer

Spreadsheet.

Answer

Database.

Answer

Word processor.