FC0-U71 Hard Questions — 25 Difficult Questions

Question 1

A system administrator is reviewing a security policy that specifies that users must be uniquely identified and access must be audited. Which principle of the CIA triad is being addressed?

Accepted Answer

Integrity. The security policy requiring unique user identification and access auditing directly supports the Integrity principle of the CIA triad. Integrity ensures that data is accurate and not tampered with; auditing and identification provide non-repudiation, allowing actions to be traced back to individuals, thereby preventing unauthorized modifications and ensuring data integrity.

Answer

Availability

Answer

Accountability

Answer

Confidentiality

Question 2

Based on the exhibit, which of the following is the most likely cause of the error?

Accepted Answer

Application crash due to system library issue. The error message indicates a missing system library (DLL) dependency, which prevents the application from launching. This is a classic symptom of an application crash due to a corrupted or missing shared library, not a hardware or network issue.

Answer

Hard drive failure

Answer

Incorrect user permissions

Answer

Network connectivity loss

Question 3

A data center administrator is considering virtualization to consolidate multiple physical servers. Which of the following is the PRIMARY benefit of using virtual machines in this environment?

Accepted Answer

Better utilization of physical hardware resources. The primary benefit of virtualization in a data center is better utilization of physical hardware resources. By running multiple virtual machines on a single physical host, the hypervisor allows the underlying CPU, memory, and storage to be shared efficiently, reducing idle capacity and maximizing the return on hardware investment.

Answer

Reduction in the total amount of physical hardware needed

Answer

Increased performance for each application

Answer

Improved security by isolating applications

Question 4

An organization implements a security policy where users must provide a password and a one-time code generated by a mobile app to log in. Which type of authentication is being used?

Accepted Answer

Two-factor authentication. Multi-factor authentication requires two or more factors from different categories: something you know (password), something you have (smartphone app generating a code), and something you are (biometric).

Answer

Biometric authentication

Answer

Token-based authentication

Answer

Single-factor authentication

Question 5

A technician is recommending a device to protect a server from data loss during a power outage. Which device should the technician recommend?

Accepted Answer

Uninterruptible Power Supply (UPS). An Uninterruptible Power Supply (UPS) provides battery backup power to the server during a power outage, allowing for a safe shutdown or continued operation until power is restored. This directly prevents data loss by ensuring the server does not abruptly lose power while writing data to disk. Unlike other devices, a UPS combines surge protection with battery backup, making it the correct choice for this scenario.

Answer

Generator

Answer

Power strip

Answer

Surge protector

Question 6

A company's IT policy requires that all corporate smartphones be remotely wiped if lost. Which technology enables this capability?

Accepted Answer

MDM. Mobile Device Management (MDM) allows IT administrators to enforce policies, remotely lock, and wipe devices for security.

Answer

Bluetooth

Answer

NFC

Answer

GPS

Question 7

A company is choosing between HDD and SSD storage for new laptops. Which THREE of the following are advantages of SSDs over traditional HDDs? (Select THREE.)

Accepted Answer

Lower power consumption. SSDs are faster, more durable (no moving parts), and consume less power.

Answer

Louder operation

Answer

Higher capacity per dollar

Question 8

A programmer declares a variable 'price' and assigns it the value 19.99. In most programming languages, what is the data type of this variable?

Accepted Answer

Float. 19.99 is a number with a decimal point, so it is a floating-point number (float). Integer is a whole number, string is text, and boolean is true/false.

Answer

Boolean

Answer

String

Answer

Integer

Question 9

During a Scrum sprint review, stakeholders request a new feature that was not in the product backlog. The product owner wants to add it to the next sprint. What is the correct action according to Scrum?

Accepted Answer

Add the feature to the product backlog for future prioritization. In Scrum, new work is added to the product backlog and prioritized by the product owner for a future sprint; the current sprint scope is not changed.

Answer

Ask the development team to work overtime to include it

Answer

Reject the request because the sprint is complete

Answer

Add the feature to the current sprint immediately

Question 10

A company is deploying new laptops for employees. The IT department requires that the laptops have fast storage, support for external 4K monitors, and the ability to connect to a wireless network. Which THREE of the following should be included?

Accepted Answer

Wi-Fi 6 (802.11ax). NVMe SSD provides fast storage; HDMI/DisplayPort supports 4K; Wi-Fi 6 provides modern wireless.

Answer

SATA HDD

Answer

Bluetooth 4.0

Question 11

A database designer is normalizing a table that contains repeating groups (multiple values in one column). Which of the following are goals of normalization? (Select THREE.)

Accepted Answer

Eliminate update anomalies. Normalization aims to reduce redundancy, enforce data integrity, and eliminate update anomalies. It rarely improves query performance (often may reduce it due to more joins).

Answer

Simplify the database schema

Answer

Improve query performance

Question 12

A university database includes tables: 'Professors' (ProfessorID, Name, Department) and 'Courses' (CourseID, Title, ProfessorID). Which THREE statements about this design are correct?

Accepted Answer

The primary key of Professors is ProfessorID.. ProfessorID in Courses is a foreign key; many courses can have the same professor (one-to-many); the primary key of Professors is ProfessorID.

Answer

The primary key of Professors is CourseID.

Answer

The relationship between Professors and Courses is many-to-many.

Question 13

Which type of malware replicates itself across a network without user interaction?

Accepted Answer

Worm. A worm is a standalone malware program that replicates itself across a network by exploiting vulnerabilities or using network protocols (e.g., SMB, HTTP) without requiring any user action, such as opening a file or executing a payload. Unlike a virus, which attaches to a host file and needs user interaction to spread, a worm self-propagates automatically, making it the correct answer for malware that spreads without user interaction.

Answer

Virus

Answer

Ransomware

Answer

Trojan

Question 14

A user connects to a website using its domain name. Which server translates that domain name into an IP address?

Accepted Answer

DNS server. DNS (Domain Name System) servers resolve domain names to IP addresses, enabling browsers to locate web servers.

Answer

Proxy server

Answer

Web server

Answer

DHCP server

Question 15

Which THREE of the following are common types of network topologies? (Choose three.)

Accepted Answer

Star. Star, bus, and ring are three of the most common physical network topologies defined in networking standards. In a star topology, all devices connect to a central switch or hub, which manages traffic and isolates failures to individual links. Bus topology uses a single backbone cable with terminators at both ends, while ring topology passes data sequentially from one node to the next using a token-passing mechanism (e.g., Token Ring per IEEE 802.5).

Answer

Circle

Answer

Square

Question 16

A company has a server that hosts a critical database. The server uses RAID 5 with three disks. One disk fails. What is the immediate impact on data availability?

Accepted Answer

Data is still available, but performance may degrade. RAID 5 uses block-level striping with distributed parity. With three disks, the array can tolerate a single disk failure without data loss because the parity information on the remaining two disks can reconstruct the missing data on the fly. Therefore, data remains fully available immediately after one disk fails, though read and write performance may degrade due to the overhead of parity calculation and reconstruction.

Answer

Data is available only after replacing the disk

Answer

The server will shut down

Answer

All data on the array is lost

Question 17

A security analyst is evaluating risks to the company's network. According to the risk formula (Risk = Likelihood × Impact), which THREE of the following are considered vulnerabilities?

Accepted Answer

Weak encryption used for data in transit. A vulnerability is a weakness that can be exploited by a threat.

Answer

A hacker attempting to guess passwords

Answer

A fire in the data center

Question 18

A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?

Accepted Answer

A threat is a potential cause of harm, and a vulnerability is a weakness that can be exploited.. A vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.

Answer

A vulnerability is a risk, and a threat is a countermeasure.

Answer

A threat is a weakness in a system, and a vulnerability is an attack that exploits it.

Answer

A vulnerability is a potential harm, and a threat is likelihood times impact.

Question 19

A company implements a policy where employees must swipe their ID card and then enter a PIN to access the server room. Which two authentication factors are being used?

Accepted Answer

Something you have and something you know. The ID card is 'something you have' (possession factor) and the PIN is 'something you know' (knowledge factor). This is multi-factor authentication.

Answer

Something you know and something you are

Answer

Something you have and something you are

Answer

Something you know and somewhere you are

Question 20

A company is implementing a backup strategy. Which of the following best adheres to the 3-2-1 backup rule?

Accepted Answer

Original data on a server, a backup on a NAS in the same building, and a backup in the cloud. The 3-2-1 rule means 3 copies of data, on 2 different media types, with 1 offsite. Option B meets this: 3 copies (original + 2 backups), 2 media (NAS + cloud), 1 offsite (cloud).

Answer

Two backups on tape drives, both stored in the server room

Answer

Original data on a laptop, a backup on a USB drive, and a backup on a second USB drive stored in a safe

Answer

One backup on an external drive stored in the same room as the server