Networking practice questions

A user reports that their Windows 10 laptop is running very slowly after a recent software installation. You suspect a driver conflict. You need to boot the system with a minimal set of drivers and services to troubleshoot, but you must not use Safe Mode because the user needs network access for remote support. Which boot configuration should you set using the System Configuration tool?

Trap 1: Set the boot to 'Safe boot' with 'Network' selected under Boot…

This is a valid way to boot into Safe Mode with Networking, but it is not a 'minimal set of drivers'—Safe Mode loads a standard set. Also, the question asks for msconfig settings, which this is, but it's not the best fit for 'minimal'.

Trap 2: Under the General tab, select 'Selective startup' and uncheck 'Load…

Unchecking system services would disable critical services including networking, making remote support impossible.

Trap 3: Under the Boot tab, check 'No GUI boot' and set the timeout to 0.

This only removes the Windows splash screen and speeds boot slightly; it does not minimize drivers or services.

A
Set the boot to 'Safe boot' with 'Network' selected under Boot options.
Why wrong: This is a valid way to boot into Safe Mode with Networking, but it is not a 'minimal set of drivers'—Safe Mode loads a standard set. Also, the question asks for msconfig settings, which this is, but it's not the best fit for 'minimal'.
B
Under the General tab, select 'Diagnostic startup'.
Diagnostic startup loads only basic devices and services, and it does not disable networking entirely, allowing remote support.
C
Under the General tab, select 'Selective startup' and uncheck 'Load system services'.
Why wrong: Unchecking system services would disable critical services including networking, making remote support impossible.
D
Under the Boot tab, check 'No GUI boot' and set the timeout to 0.
Why wrong: This only removes the Windows splash screen and speeds boot slightly; it does not minimize drivers or services.

Study the full virtualization explanation →

Question 2easymultiple choice

A technician is deploying a new virtual machine on a Type 1 hypervisor. The VM will run a Linux web server and needs to be isolated from the corporate network except for HTTPS traffic. Which networking configuration should the technician implement?

Trap 1: Bridge the VM directly to the physical network adapter

Bridging gives the VM its own IP on the corporate network, exposing it to all network traffic and defeating isolation.

Trap 2: Attach the VM to a NAT network without any port forwarding

NAT without forwarding would allow the VM to access the internet but not receive inbound HTTPS traffic from the corporate network.

Trap 3: Assign the VM an IP from the corporate DHCP scope

This would place the VM directly on the corporate network, violating the isolation requirement.

A
Bridge the VM directly to the physical network adapter
Why wrong: Bridging gives the VM its own IP on the corporate network, exposing it to all network traffic and defeating isolation.
B
Use a virtual switch set to host-only mode and configure port forwarding for HTTPS
Host-only mode isolates the VM from the physical network, and port forwarding allows only HTTPS traffic from the host to the VM, meeting the security requirement.
C
Attach the VM to a NAT network without any port forwarding
Why wrong: NAT without forwarding would allow the VM to access the internet but not receive inbound HTTPS traffic from the corporate network.
D
Assign the VM an IP from the corporate DHCP scope
Why wrong: This would place the VM directly on the corporate network, violating the isolation requirement.

Question 3easymultiple choice

A user reports that their computer is infected with a virus and they have been trying to remove it using a free online scanner, but the problem persists. The technician suspects the malware may have disabled the antivirus software. Which safe mode should the technician use to run a full system scan?

Trap 1: Safe Mode

Safe Mode without networking does not allow internet access, which may be needed to update antivirus definitions.

Trap 2: Safe Mode with Command Prompt

This mode is useful for advanced troubleshooting but lacks network access and a graphical interface for most antivirus tools.

Trap 3: Last Known Good Configuration

This option reverts to the last successful boot configuration but does not provide a safe environment for malware removal.

A
Safe Mode
Why wrong: Safe Mode without networking does not allow internet access, which may be needed to update antivirus definitions.
B
Safe Mode with Command Prompt
Why wrong: This mode is useful for advanced troubleshooting but lacks network access and a graphical interface for most antivirus tools.
C
Safe Mode with Networking
This mode provides network access, allowing the technician to download updated tools while keeping malware disabled.
D
Last Known Good Configuration
Why wrong: This option reverts to the last successful boot configuration but does not provide a safe environment for malware removal.

Question 4mediummultiple choice

A technician is troubleshooting a Windows 10 workstation that displays a fake security alert claiming the system is infected and prompting the user to call a toll-free number. The user cannot close the alert window or open Task Manager. Which type of malware is causing this behavior, and what is the best removal approach?

Trap 1: It is a rootkit; use a rootkit removal tool from within Windows.

Rootkits hide deep in the OS, but this scenario describes a browser-based scareware, not a rootkit.

Trap 2: It is ransomware; pay the fee to remove the alert.

This is not ransomware because files are not encrypted; it is a scam demanding payment for fake support.

Trap 3: It is a worm; disconnect the network and reinstall the operating…

Worms spread across networks, but this is a standalone scam; a full OS reinstall is excessive and not the first step.

A
It is a rootkit; use a rootkit removal tool from within Windows.
Why wrong: Rootkits hide deep in the OS, but this scenario describes a browser-based scareware, not a rootkit.
B
It is ransomware; pay the fee to remove the alert.
Why wrong: This is not ransomware because files are not encrypted; it is a scam demanding payment for fake support.
C
It is a tech support scam; boot into Safe Mode with Networking and run an anti-malware scan.
Safe Mode prevents the scam from running, and an anti-malware scan can remove the associated files and registry entries.
D
It is a worm; disconnect the network and reinstall the operating system.
Why wrong: Worms spread across networks, but this is a standalone scam; a full OS reinstall is excessive and not the first step.

Question 5mediummultiple choice

A technician is troubleshooting a computer that displays a fake security alert claiming the system is infected and urging the user to call a toll-free number. The alert cannot be closed and appears on top of all other windows. What is the best removal approach?

Trap 1: End the process 'svchost.exe' in Task Manager.

The fake alert process is likely not named 'svchost.exe'; ending that may harm system stability.

Trap 2: Call the toll-free number to get help removing the alert.

Calling the number connects to scammers who may demand payment or install more malware.

Trap 3: Use System Restore to revert to a previous restore point.

System Restore may remove the malware but is not always effective if the restore point is also infected.

A
End the process 'svchost.exe' in Task Manager.
Why wrong: The fake alert process is likely not named 'svchost.exe'; ending that may harm system stability.
B
Restart the computer and press F8 to boot into Safe Mode with Networking, then run a malware scan.
Safe Mode loads minimal drivers and services, preventing the scareware from running and allowing removal.
C
Call the toll-free number to get help removing the alert.
Why wrong: Calling the number connects to scammers who may demand payment or install more malware.
D
Use System Restore to revert to a previous restore point.
Why wrong: System Restore may remove the malware but is not always effective if the restore point is also infected.

Question 6mediummultiple choice

A user calls the help desk because their computer is running slowly and they see a fake antivirus program warning that their system is infected. The user cannot close the warning window. Which type of malware is this, and what is the best removal approach?

Trap 1: Ransomware; pay the fee to remove the warning.

Ransomware encrypts files, and paying is not recommended; this is scareware, not ransomware.

Trap 2: Spyware; run a full scan in normal mode.

Spyware typically captures data without displaying warnings; running a scan in normal mode may be blocked.

Trap 3: Adware; uninstall the program from Control Panel.

Adware shows ads but not fake warnings; uninstalling may not work if the malware blocks it.

A
Ransomware; pay the fee to remove the warning.
Why wrong: Ransomware encrypts files, and paying is not recommended; this is scareware, not ransomware.
B
Spyware; run a full scan in normal mode.
Why wrong: Spyware typically captures data without displaying warnings; running a scan in normal mode may be blocked.
C
Rogue antivirus; boot into Safe Mode with Networking and run Malwarebytes.
Safe Mode prevents the malware from loading, and a dedicated tool can remove it.
D
Adware; uninstall the program from Control Panel.
Why wrong: Adware shows ads but not fake warnings; uninstalling may not work if the malware blocks it.