FC0-U71 Practice Exam 59 — 20 Questions

Question 1

A user is working from a coffee shop and needs to access the corporate file server. The user connects to the coffee shop's open Wi-Fi network and wants to ensure that the data transmitted between the laptop and the corporate network cannot be read by others on the same network. Which of the following should the user implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use a VPN connection to the corporate network. When using an untrusted network such as open Wi-Fi, data in transit can be intercepted. A VPN encrypts the connection between the user's device and the corporate network, ensuring confidentiality. The other choices either do not encrypt traffic or address local sharing rather than protecting data as it travels, so they fail to meet the user's security need.

Answer

Change the Wi-Fi network password

Answer

Enable the laptop's host-based firewall

Answer

Disable file sharing on the laptop

Question 2

A warehouse supervisor reports that an unknown person wearing a delivery uniform walked through the open loading dock, entered the server room, and left with a backup drive. The company wants to prevent unauthorized entry into the server room without rebuilding the entire facility. Which control should be implemented FIRST?

Accepted Answer

Install an electronic badge reader on the server room door that logs each entry attempt. The incident shows an outsider reaching a restricted area through an uncontrolled opening, so the first fix must prevent unauthorized entry at that boundary. A badge reader on the server room door authenticates individuals and logs attempts, directly addressing the gap. A SIEM, awareness training, and drive encryption are valuable but do not stop someone from walking in and carrying equipment out.

Answer

Deploy a security information and event management (SIEM) platform to correlate logs

Answer

Encrypt the backup drives stored in the server room

Answer

Provide security awareness training to all warehouse employees

Question 3

A user is setting up a new smartphone for work and wants to reduce the risk of unauthorized access if the device is lost. Which two measures should the user implement? (Choose two.)

Accepted Answer

Turn on remote wipe and locate services. Protecting a lost phone requires both a preventive control and a response capability. A strong screen lock, backed by a PIN or biometric, keeps a finder from opening the device and leverages the storage encryption tied to the lock credential. Remote wipe and locate services let the user erase work data after the loss is discovered. Disabling updates, rooting the device, and storing plain text passwords all increase exposure.

Answer

Disable automatic operating system updates

Answer

Store passwords in a plain text note on the device

Answer

Root or jailbreak the device to install security tools

Question 4

A small business owner wants to keep a record of the software installed on each employee laptop and receive an alert if unauthorized software is installed later. The owner asks a technician for the BEST tool to accomplish this. Which of the following should the technician recommend?

Accepted Answer

Software inventory tool. The business owner needs both a current list of installed applications and an alert when unauthorized software appears. A software inventory tool provides this by scanning systems, maintaining a baseline, and flagging deviations. Other options address network traffic filtering, general asset tracking, or file change detection, none of which deliver the specific software installation monitoring and alerting required here.

Answer

File integrity monitoring

Answer

Asset inventory system

Answer

Host-based firewall

Question 5

An employee working from a coffee shop connects a laptop to an open wireless network to check webmail. The employee wants to prevent other patrons on that same network from capturing the login credentials in transit. Which technology BEST provides this protection?

Accepted Answer

A virtual private network (VPN) tunnel to the company network. On an open wireless network, frames are broadcast over a shared medium where any nearby device can capture them, so confidentiality must come from encryption applied to the traffic itself. A VPN creates an encrypted tunnel from the laptop to a trusted endpoint, hiding credentials and content from local eavesdroppers. Firewalls, screen filters, and disk encryption each defend different assets and none encrypts data in transit.

Answer

Full-disk encryption enabled on the laptop drive

Answer

A screen privacy filter placed over the laptop display

Answer

A host-based firewall enabled on the laptop

Question 6

A user is browsing the web on a public Wi-Fi network at a coffee shop and needs to check a personal bank account. The bank's website address begins with https. Which statement BEST describes how the user's connection is protected?

Accepted Answer

HTTPS encrypts the connection between the browser and the bank's web server.. HTTPS wraps HTTP in TLS, which encrypts the session between the browser and the bank's server and verifies the server's identity through a certificate. That encryption persists regardless of how untrusted the local Wi-Fi network is, so an eavesdropper on the same network captures unreadable data. The other options either misattribute the protection to the network or describe local privacy features that do not secure the connection.

Answer

The bank's firewall prevents anyone on the same Wi-Fi network from viewing the user's traffic.

Answer

The public Wi-Fi network encrypts all traffic between the user and the bank automatically.

Answer

The browser's private browsing or incognito mode protects the session from interception.

Question 7

A finance team member must share a spreadsheet containing customer account numbers with an external auditor. The team member wants to ensure that only the intended recipient can read the file contents. Which action BEST accomplishes this?

Accepted Answer

Encrypt the file using the auditor's public key. Ensuring that only the intended recipient can read a file requires confidentiality that survives interception, which means cryptography tied to that recipient's identity. Encrypting with the auditor's public key ensures only the auditor's private key can decrypt the contents. Renaming, read-only attributes, and weak archive passwords all leave the data readable or easily recovered by anyone who obtains the file.

Answer

Compress the spreadsheet into a password-protected ZIP archive and email the password separately

Answer

Rename the file with a .txt extension before attaching it to the email

Answer

Apply a read-only permission to the file before sending it

Question 8

A technician is helping a small office set up basic physical security for its server closet. Which TWO of the following are physical security controls that would protect the equipment in the closet? (Choose two.)

Accepted Answer

Mounting a security camera aimed at the closet entrance.. Physical security controls focus on the tangible environment and who can reach the equipment. A locked, keypad-controlled door and a monitoring camera both restrict or record physical access to the server closet. The other choices are logical or technical controls that protect data and accounts but do not prevent someone from physically touching, unplugging, or removing the servers.

Answer

Enabling full-disk encryption on the servers' storage drives.

Answer

Configuring a firewall rule to block inbound traffic to the servers.

Answer

Requiring complex passwords for the server administrator accounts.

Question 9

A user's web browser warns that the connection to an online store is not private because the site's certificate cannot be validated. The user ignores the warning and enters payment card details anyway. Which type of attack is the user MOST at risk of in this situation?

Accepted Answer

On-path attack intercepting the unverified connection.. When a browser cannot validate a site's certificate, the identity of the server is in doubt, which is the hallmark of an on-path attack redirecting traffic to an imposter endpoint. Entering payment details in that state can hand them directly to the attacker. The other listed attacks target availability or server-side application flaws and are not signaled by a certificate validation warning.

Answer

SQL injection against the store's product database.

Answer

Denial-of-service attack flooding the store's web server.

Answer

Cross-site scripting running in the store's checkout page.

Question 10

An administrator reviews a server's audit log and finds a long series of failed login attempts against many different usernames, all originating from a single external address within a few minutes. No attempt succeeded. Which term BEST describes this activity?

Accepted Answer

A password spraying attack. The distinguishing feature in the log is breadth: many different usernames targeted from one source in a short window. That pattern matches password spraying, where an attacker tests a few common passwords across a large user list to stay under per-account lockout thresholds. Brute force would hammer one account, a denial-of-service attack would aim at availability, and a man-in-the-middle attack would involve interception rather than direct login attempts.

Answer

A denial-of-service attack

Answer

A brute-force attack against one account

Answer

A man-in-the-middle attack

Question 11

A technician is comparing storage technologies for a new workstation that will run a database with frequent random reads and writes. The technician needs a storage device with no moving parts, low latency, and high durability. Which of the following should the technician choose?

Accepted Answer

Solid-state drive (SSD). An SSD meets all the stated requirements: it has no moving parts, provides low latency, and is durable against shock. It is specifically designed for fast random access, making it ideal for database workloads. The other options involve mechanical components and are better suited for bulk storage or backup rather than performance-critical random I/O.

Answer

Tape drive

Answer

Optical disc drive (ODD)

Answer

Magnetic hard disk drive (HDD)

Question 12

A user's workstation has become slow and shows unexpected pop-up windows even when no browser is open. A technician suspects malware and wants to reduce the risk of further compromise while investigating. Which TWO actions should the technician take FIRST? (Choose two.)

Accepted Answer

Document the observed symptoms and note the time they began.. Containment and evidence preservation come before remediation. Disconnecting the workstation stops active communication with external infrastructure and prevents lateral spread, while documenting symptoms and timestamps preserves information needed for analysis. Scanning, reimaging, or sharing credentials either allows the threat to continue operating or destroys evidence, so those actions belong later in the response process.

Answer

Run a full antivirus scan while leaving the machine connected.

Answer

Share the user's login credentials with the security team by email.

Answer

Immediately reinstall the operating system without further checks.

Question 13

A user is setting up a new smartphone and wants to protect the data on it in case the device is lost or stolen. The user wants to ensure that if the phone falls into the wrong hands, the data cannot be easily accessed. Which of the following should the user enable FIRST?

Accepted Answer

Configure a screen lock with a strong PIN or biometric authentication.. The first step to protect a lost or stolen phone is to enable a screen lock with a strong PIN or biometrics. This prevents unauthorized access and often triggers full-disk encryption. Other measures like updates, antivirus, and Bluetooth management are useful but secondary to locking the device.

Answer

Enable Bluetooth only when needed.

Answer

Install a mobile antivirus app.

Answer

Enable automatic OS updates.

Question 14

A user reports that their desktop computer powers on, the fans spin, but the monitor shows no signal and there are no beep codes. A technician notices the monitor's cable is connected to a port on the motherboard, but the computer has a dedicated graphics card installed. Which of the following is the MOST likely explanation?

Accepted Answer

The monitor cable is connected to the motherboard's integrated video port instead of the discrete graphics card's port.. The system powers on and fans spin, indicating power and basic operation, but no video appears because the display cable is attached to the motherboard's video port. When a dedicated graphics card is present, integrated video is often disabled, so the motherboard port produces no signal. Connecting the monitor to the graphics card's output resolves the issue.

Answer

The power supply unit is failing and cannot provide enough wattage to the graphics card.

Answer

The monitor is defective and needs to be replaced.

Answer

The RAM is not seated properly, preventing the system from completing POST.

Question 15

A help desk technician is creating a spreadsheet to track support tickets. They want each ticket to have a unique identifier that is automatically generated when a new row is added, and they want the value to never repeat even if rows are deleted. Which spreadsheet feature should they use?

Accepted Answer

Use an AutoNumber or automatic row ID feature. An automatic row ID or AutoNumber feature is designed to produce a unique value for every new record without user intervention. It continues to generate new values even after records are deleted, so duplicates do not occur. Data validation, text formatting, and sorting do not automatically create or guarantee unique identifiers.

Answer

Apply a data validation rule to the ticket ID column

Answer

Format the ticket ID column as text

Answer

Sort the ticket ID column in ascending order

Question 16

A user complains that their laptop battery drains quickly even when the laptop is idle. A technician suspects that a background process is consuming resources. Which of the following Windows tools should the technician use to identify the process consuming the most CPU or disk resources?

Accepted Answer

Task Manager. Task Manager is the built-in Windows utility that shows real-time resource usage by process. By sorting on CPU or disk columns, the technician can quickly identify a background process causing high usage and draining the battery. The other tools serve different purposes and do not provide per-process resource monitoring.

Answer

Event Viewer

Answer

Device Manager

Answer

Disk Management

Question 17

A spreadsheet user needs to display the text from cell A2 in all uppercase letters in cell B2, without altering the original value in A2. Which function should be entered in B2?

Accepted Answer

=UPPER(A2). The UPPER function is the correct tool because it returns an uppercase copy of the referenced text without modifying the source cell. Functions like LOWER and PROPER change case in different ways, and CONCATENATE only joins strings. Only UPPER converts every character in A2 to uppercase while leaving the original data intact.

Answer

=LOWER(A2)

Answer

=CONCATENATE(A2)

Answer

=PROPER(A2)

Question 18

A user installs a productivity suite on a Windows 11 laptop. The license agreement states the software may be installed on only one computer and cannot be copied or modified. Which type of software license does this describe?

Accepted Answer

Proprietary license. A proprietary license is the only model that restricts installation to one computer and forbids copying or modifying the software. Open source, freeware, and shareware each permit broader use or imply a trial-then-pay model, none of which match the single-machine, no-copy restriction stated in the scenario.

Answer

Open source license

Answer

Shareware license

Answer

Freeware license

Question 19

A technician is configuring a new Windows workstation and needs to assign a static IPv4 address that allows the computer to communicate with other devices on the same local network segment. The network uses a 255.255.255.0 subnet mask. Which of the following addresses should the technician assign to the workstation?

Accepted Answer

192.168.10.100. A valid static IPv4 host address on a /24 subnet must fall between the network address and broadcast address. With 192.168.10.0/24, usable hosts are 192.168.10.1 to 192.168.10.254. Only 192.168.10.100 meets this requirement and keeps the workstation on the same local segment.

Answer

192.168.10.255

Answer

192.168.11.100

Answer

192.168.10.0

Question 20

A small business wants to connect its office computers to a network that provides centralized authentication, file sharing, and printer sharing without relying on a cloud service. The owner wants to minimize recurring costs and keep data on-site. Which of the following should the technician implement?

Accepted Answer

A client-server network with a dedicated server running directory services and shared folders.. A client-server network with an on-premises server delivers centralized authentication, file sharing, and printer sharing while avoiding cloud subscriptions. Directory services on the server allow unified account management and access control. This setup meets the small business's needs for local data storage, centralized administration, and low recurring cost.

Answer

A workgroup where each computer manages its own user accounts and shared resources.

Answer

A peer-to-peer network using each workstation as both client and server for shared resources.

Answer

A virtual private network (VPN) connecting all computers to a remote cloud directory.