Knowledge + Practice

CompTIA Tech+ (FC0-U71) (FC0-U71) — Questions 1–75

988 questions total · 14pages · All types, answers revealed

Take a mock exam Exam hub

Page 1 of 14

1

Multi-Selecteasy

During the SDLC, testing is performed at different levels. Which TWO of the following are recognized levels of testing? (Select TWO.)

Select 2 answers

A.Maintenance

B.Code review

C.Integration testing

D.Unit testing

E.Deployment

AnswersC, D

Integration testing is a recognised SDLC test level: it verifies that individually tested modules interact correctly through their interfaces and data flows. This satisfies the stem's requirement for a distinct level, sitting between unit testing and system testing in the conventional hierarchy.

Why this answer

Integration testing (C) is a recognized level of testing in the SDLC, sitting between unit and system testing, where individual modules are combined and tested as a group to verify interfaces and interactions between components. Unit testing (D) is also a recognized level, focusing on verifying the smallest testable parts of an application, such as individual functions or methods, in isolation. These two are standard levels in the classic testing hierarchy (unit, integration, system, acceptance).

Maintenance (A) is an SDLC phase that follows deployment, not a testing level. Code review (B) is a static verification technique or peer-review activity, not a defined test level. Deployment (E) is a release/implementation phase, not a testing level.

Exam trap

FC0-U71 often tests whether candidates confuse SDLC phases (planning, design, development, testing, deployment, maintenance) with testing levels (unit, integration, system, acceptance), causing them to select 'maintenance' or 'deployment' as testing types.

Full explanation →

2

MCQmedium

A small e-commerce website uses a relational database to manage its products and orders. The most common query is retrieving a product by its unique product ID. This query is executed thousands of times per minute. The database currently has no indexes, and the query is slow, causing user-facing delays. The database administrator wants to improve performance with minimal downtime and cost. Which action should be taken first?

A.Partition the table by product category

B.Add an index on the product ID column

C.Increase the server's memory to allow more caching

D.Change the database to a NoSQL system for faster key-value access

AnswerB

A B-tree index on the product ID column lets the database locate rows directly instead of scanning the whole table, so the thousands-per-minute lookups return quickly. Creating an index is online and inexpensive, meeting the minimal-downtime and low-cost constraints.

Why this answer

Adding an index on the product ID column creates a B-tree data structure that allows the database to locate rows using a logarithmic search instead of a full table scan. Since the query is executed thousands of times per minute and the table has no indexes, this single-column index directly addresses the bottleneck with minimal downtime and cost, as it requires only a CREATE INDEX statement.

Exam trap

The trap here is that candidates often choose increasing memory (Option C) because they confuse caching with indexing, not realizing that caching only helps after the first access and does not prevent full table scans on cache misses or for new data.

How to eliminate wrong answers

Option A is wrong because partitioning the table by product category would add complexity and overhead without directly speeding up lookups by product ID, and it requires significant schema changes and downtime. Option C is wrong because increasing server memory may improve caching of frequently accessed data, but it does not eliminate the need for a full table scan on a cold cache or first access, and it incurs hardware cost without addressing the root cause. Option D is wrong because migrating to a NoSQL system would require a complete architectural overhaul, significant downtime, and application rewrites, which contradicts the requirement for minimal downtime and cost.

Full explanation →

3

Multi-Selectmedium

A technician is selecting a storage solution for a home server that requires fast access speeds and redundancy against a single drive failure. Which TWO technologies should be considered?

Select 2 answers

A.SSD

B.Cloud storage

C.HDD

D.RAID 1

E.RAID 0

AnswersA, D

SSD delivers the fast access speeds the home server requires, using flash memory with no moving parts and far lower latency than spinning disks. It addresses the performance half of the requirement, while redundancy against a single drive failure must come from a separate mechanism.

Why this answer

SSD (Solid State Drive) provides fast access speeds due to its use of NAND flash memory, which eliminates mechanical seek times and rotational latency found in HDDs. This makes it ideal for a home server requiring rapid data retrieval. RAID 1 (mirroring) writes identical data to two drives, offering redundancy against a single drive failure by allowing the system to continue operating if one drive fails.

Exam trap

The trap here is that candidates often confuse RAID 0 with RAID 1, mistakenly thinking RAID 0 provides redundancy because it improves performance, or they overlook that SSDs are necessary for fast access speeds, assuming HDDs are sufficient for a home server.

Full explanation →

4

MCQeasy

Which component of a computer stores data permanently even when the power is turned off?

A.SSD

B.CPU cache

C.GPU

D.RAM

AnswerA

An SSD uses non-volatile NAND flash memory, retaining stored data when power is removed, unlike DRAM which requires constant refresh. This non-volatile characteristic directly satisfies the stem's requirement for permanent data storage across power-off cycles.

Why this answer

An SSD (Solid State Drive) is non-volatile storage, meaning it retains data even when power is removed. It uses NAND flash memory to store data persistently, making it the correct answer for permanent storage. In contrast, CPU cache, GPU memory, and RAM are all volatile and lose their contents when power is cut.

Exam trap

The trap is conflating fast memory (RAM, cache, VRAM) with permanent storage — candidates may pick RAM because it's commonly associated with 'computer memory,' forgetting it is volatile.

How to eliminate wrong answers

Option B is wrong because CPU cache is volatile SRAM used for temporary high-speed data access by the processor, and its contents are lost on power-off. Option C is wrong because a GPU's memory (VRAM) is volatile and used for rendering and compute tasks, not permanent storage. Option D is wrong because RAM is volatile DRAM that holds active data only while powered, and all contents are lost on shutdown.

Full explanation →

5

Multi-Selectmedium

A company is planning to deploy tablets for field sales representatives. Which TWO mobile device features would be most useful for navigation and contactless payments?

Select 2 answers

A.Biometric authentication (fingerprint)

B.Gyroscope

C.Accelerometer

D.GPS

E.NFC

AnswersD, E

GPS receivers in tablets use satellite signals to determine location, enabling mapping and turn-by-turn navigation for field representatives travelling between client sites. This directly satisfies the navigation requirement in the scenario, independent of the contactless payment need covered by NFC.

Why this answer

Option D (GPS) is correct because GPS receivers in tablets use satellite signals to determine precise geographic position, which directly supports turn-by-turn navigation and location-based routing for field sales representatives. Option E (NFC) is correct because Near Field Communication enables short-range (typically within about 4 cm) contactless data exchange, which is the technology behind tap-to-pay mobile wallets such as Apple Pay and Google Pay. Option A (biometric authentication) is useful for securely unlocking the device and authorizing payments, but it is an authentication mechanism rather than a navigation or contactless-payment feature itself.

Option B (gyroscope) and Option C (accelerometer) are motion sensors used for screen orientation, gaming, and step detection, and neither provides navigation positioning or contactless payment capability.

Exam trap

FC0-U71 often tests whether candidates can map a stated business need (navigation, contactless payments) to the correct sensor/radio — distractors like accelerometer and gyroscope sound 'mobile' but have nothing to do with location or payments.

Full explanation →

6

MCQmedium

A web developer wants to identify why a web page is loading slowly. Which built-in browser tool is most appropriate to analyze network requests?

A.Password manager

B.Developer Tools

C.Download manager

D.Bookmark manager

AnswerB

Developer Tools includes a Network panel that records every HTTP request with timing, size and status, letting the developer pinpoint slow resources. This directly satisfies the need to analyse network requests, which no other built-in browser feature provides.

Why this answer

Developer Tools (F12) include a Network tab that captures all HTTP/HTTPS requests made by the page, showing timing details (DNS lookup, TCP handshake, TLS negotiation, time to first byte, content download) and response sizes. This allows the developer to pinpoint slow resources, such as large images, unoptimized scripts, or server delays, making it the correct tool for analyzing network performance.

Exam trap

The trap here is that candidates confuse the general-purpose 'Developer Tools' with other browser utilities that have 'manager' in their name, assuming any 'manager' can handle performance analysis, when only Developer Tools provides the network waterfall and timing breakdowns.

How to eliminate wrong answers

Option A is wrong because a password manager stores and autofills credentials; it has no capability to monitor or analyze network traffic. Option C is wrong because a download manager handles file downloads from the browser but does not provide a timeline or waterfall view of all page resources. Option D is wrong because a bookmark manager organizes saved URLs and cannot inspect request/response headers, status codes, or load times.

Full explanation →

7

MCQhard

A network technician observes that a DHCP server is not issuing IP addresses to clients. The DHCP server is running on a Windows Server with a static IP of 192.168.1.10. Clients are on the same subnet. Which of the following should the technician check FIRST?

A.Whether the DHCP Server service is running

B.Whether the DHCP scope is full

C.Whether a router is forwarding DHCP broadcasts

D.Whether the clients have a wireless connection

AnswerA

If the DHCP Server service is stopped, the server holds its static address but issues no leases, exactly matching the symptom. Verifying the service state first is the fastest check before investigating scope configuration, authorisation, or relay settings.

Why this answer

The most fundamental check when a DHCP server fails to issue IP addresses is whether the DHCP Server service itself is running. If the service is stopped, the server cannot respond to any DHCP Discover messages, regardless of scope configuration or network topology. Since the clients are on the same subnet, no router forwarding is required, making service status the logical first step.

Exam trap

The trap here is that candidates jump to scope exhaustion or router configuration issues, forgetting that the most basic service-level check is the first step in any troubleshooting methodology.

How to eliminate wrong answers

Option B is wrong because a full DHCP scope would prevent new leases but the server would still respond with a DHCPNAK; the service must be running to send any response. Option C is wrong because clients are on the same subnet as the DHCP server, so DHCP broadcasts do not need to cross a router; checking router forwarding is irrelevant here. Option D is wrong because the question states clients are on the same subnet and does not mention wireless issues; a wireless connection problem would manifest as no link, not a DHCP-specific failure.

Full explanation →

8

Multi-Selectmedium

A company is setting up a new branch office. The network administrator needs to choose a wireless standard and a frequency band. Which TWO of the following options would provide the fastest speeds and least interference? (Select TWO.)

Select 2 answers

A.5GHz

B.2.4GHz

C.802.11ax

D.802.11ac

E.Bluetooth

AnswersA, C

5GHz offers wider channels and far more non-overlapping ones than 2.4GHz, whose band is congested by microwaves, Bluetooth and neighbouring networks. This directly satisfies the stem's "least interference" constraint, while its higher throughput potential supports the "fastest speeds" requirement for the branch office.

Why this answer

Option A (5GHz) is correct because the 5GHz band offers more non-overlapping channels and is far less congested than 2.4GHz, which directly reduces interference in a branch office environment. Option C (802.11ax) is correct because Wi-Fi 6 (802.11ax) delivers the highest throughput and best spectral efficiency of the listed standards, using OFDMA, MU-MIMO, and 1024-QAM to provide the fastest speeds. Option B (2.4GHz) is not selected because it is heavily congested by neighboring networks, Bluetooth, and microwaves, causing more interference and lower speeds.

Option D (802.11ac) is not selected because, while fast, it is an older Wi-Fi 5 standard that is slower and less efficient than 802.11ax. Option E (Bluetooth) is not selected because it is a short-range personal area network technology with very low throughput, not a WLAN standard for branch office connectivity.

Exam trap

FC0-U71 often tests the misconception that 2.4GHz is 'better' because of longer range — candidates must remember that the question asks for fastest speeds and least interference, which favors 5GHz and the newest 802.11 standard.

Full explanation →

9

MCQmedium

A company requires all employees to use a smart card and a PIN to access the building. This is an example of which concept?

A.Authorization

B.Biometrics

C.Multi-factor authentication

D.Single sign-on

AnswerC

A smart card (something possessed) plus a PIN (something known) combines two different authentication factor categories, which is the definition of multi-factor authentication. Requiring both for building access therefore satisfies the MFA concept the stem describes.

Why this answer

Multi-factor authentication combines something you have (smart card) and something you know (PIN).

Full explanation →

10

MCQmedium

A user saves a document as 'report.docx'. Based on the file extension, what type of file is it?

A.PDF file

B.Presentation

C.Spreadsheet

D.Word processing document

AnswerD

The .docx extension identifies an Office Open XML word processing document, the default format produced by Microsoft Word. Other extensions map differently: .xlsx denotes spreadsheets, .pptx presentations and .pdf portable documents, so the extension alone determines the file type.

Why this answer

The .docx extension is the standard file format for Microsoft Word documents, which are word processing files. It indicates a document created in a word processor, containing formatted text, images, and other elements. Therefore, 'report.docx' is a word processing document.

Exam trap

FC0-U71 often tests the association between common file extensions and their corresponding application types, so candidates must memorize standard extensions like .docx for Word, .xlsx for Excel, and .pptx for PowerPoint.

How to eliminate wrong answers

Option A is wrong because PDF files use the .pdf extension, not .docx. Option B is wrong because presentation files typically use .pptx or .ppt extensions. Option C is wrong because spreadsheet files use .xlsx or .xls extensions.

Full explanation →

11

MCQeasy

Which of the following is the primary function of a router in a home network?

A.Converts ISP signal to digital

B.Assigns IP addresses to devices

C.Provides wireless connectivity only

D.Connects the home network to the internet

AnswerD

The router performs NAT and forwards packets between the LAN and the ISP's WAN link, providing the default gateway. This satisfies the stem's requirement of connecting the home network to the internet, unlike a switch or access point.

Why this answer

A router's primary function is to connect the home network to the internet by routing packets between the local network and the ISP's network, performing NAT and forwarding traffic based on IP addresses. It is the gateway device that sits at the boundary between the LAN and the WAN. While many home routers also include a switch, wireless AP, and DHCP server, those are secondary functions.

Exam trap

FC0-U71 often tests whether candidates conflate the router with the modem, DHCP server, or wireless AP — all of which are commonly integrated into the same physical box, making it easy to pick a secondary function as the 'primary' one.

How to eliminate wrong answers

Option A is wrong because converting the ISP signal to digital is the function of a modem (e.g., cable, DSL, or fiber ONT), not a router — the modem demodulates the ISP's signal into Ethernet/IP for the router. Option B is wrong because assigning IP addresses to devices is the role of a DHCP server, which is often integrated into a home router but is not its primary function. Option C is wrong because providing wireless connectivity is the function of a wireless access point, again often integrated into a home router but not its defining role.

Full explanation →

12

MCQmedium

A web application is not responding to user input. The developer checks the code and finds an infinite loop. Which change will fix the infinite loop?

A.Remove the loop body

B.Add a break statement

C.Add a counter variable that increments and check it in the condition

D.Change from a for loop to a while loop

AnswerC

An infinite loop occurs because the terminating condition never becomes false. Introducing a counter that increments each iteration and is evaluated in the loop condition gives the loop a reachable exit point, so execution terminates instead of repeating indefinitely.

Why this answer

An infinite loop occurs when the loop's termination condition is never met. By adding a counter variable that increments with each iteration and checking it in the condition, the loop will eventually exit when the counter reaches a specified limit, thus breaking the infinite loop.

Exam trap

The trap here is that candidates may think changing the loop type (e.g., for to while) or removing the body will fix the infinite loop, but the core issue is the lack of a proper termination condition, which only a counter or similar mechanism can resolve.

How to eliminate wrong answers

Option A is wrong because removing the loop body does not change the loop's condition; the loop will still run infinitely if the condition never becomes false. Option B is wrong because adding a break statement will exit the loop immediately, but it does not address the root cause of the infinite loop and may lead to premature termination or logic errors. Option D is wrong because changing from a for loop to a while loop does not inherently fix an infinite loop; the condition must still be properly defined to allow termination.

Full explanation →

13

MCQhard

A software developer writes code that interacts with the operating system to access hardware. Which layer of software is being used?

A.Application software

B.Firmware

C.System software

D.Utility software

AnswerC

System software, comprising the operating system and device drivers, sits directly above hardware and exposes the APIs a developer calls to access it. Application software cannot touch hardware directly, so this layer satisfies the stem's requirement for code interacting with the operating system.

Why this answer

System software, specifically the operating system kernel, provides the interface between application software and hardware. When a software developer writes code that interacts with the OS to access hardware, they are using system calls (e.g., Windows API, POSIX syscalls) that are part of the system software layer. This layer manages hardware resources and abstracts them for higher-level programs.

Exam trap

The trap here is that candidates confuse 'system software' with 'application software' because they think writing code that 'accesses hardware' must be an application, but the key phrase 'interacts with the operating system' points directly to the system software layer.

How to eliminate wrong answers

Option A is wrong because application software (e.g., word processors, web browsers) runs on top of the OS and does not directly interact with hardware; it relies on system software for hardware access. Option B is wrong because firmware is low-level software stored in ROM/Flash that initializes hardware (e.g., BIOS/UEFI) but is not the layer used by a developer to interact with the OS for hardware access during runtime. Option D is wrong because utility software (e.g., disk defragmenters, antivirus) is a subset of system software focused on maintenance tasks, not the primary layer for general hardware access via OS calls.

Full explanation →

14

MCQmedium

A technician is documenting a hospital system where each patient can have many appointments, but every appointment belongs to exactly one patient and one doctor. The technician must describe how the Appointment table relates to the Patient table. Which term correctly describes this relationship?

A.Many-to-many

B.Recursive

C.One-to-one

D.One-to-many

AnswerD

This is correct because one patient row can be referenced by many appointment rows, while each appointment row references exactly one patient through a foreign key. That is the definition of a one-to-many relationship. The same pattern applies between Doctor and Appointment, so documenting it as one-to-many accurately captures the cardinality in both directions.

Why this answer

Because one patient can be associated with many appointments while each appointment is tied to a single patient, the relationship is one-to-many. This is implemented by placing a PatientID foreign key in the Appointment table, which also allows a similar DoctorID foreign key to capture the appointment-to-doctor link.

Exam trap

The trap here is confusing one-to-many with many-to-many, which would only apply if a single appointment could involve multiple patients simultaneously.

Full explanation →

15

MCQeasy

A technician is setting up a new laptop for a traveling salesperson. The laptop must have a built-in cellular modem so the user can access the internet without relying on Wi-Fi hotspots or tethering to a phone. Which internal expansion slot is specifically designed to accept a cellular modem module in a modern laptop?

A.M.2 slot

B.SO-DIMM slot

C.SATA data connector

D.PCIe x16 slot

AnswerA

M.2 slots with key B or key B+M accept cellular modem modules, often in the 3042 or 3052 form factor. These slots connect via PCIe or USB signals to the chipset, allowing the modem to be recognized as a WWAN device. Many business laptops include a dedicated M.2 WWAN slot with antenna cables pre-routed, making it the standard internal interface for adding cellular connectivity without external dongles.

Why this answer

A cellular modem module in a laptop connects through an M.2 slot keyed for WWAN, typically using PCIe or USB lanes. This slot is designed for the small 3042/3052 module form factor and works with the pre-installed antenna cables found in business laptops. Other listed slots serve memory, storage, or desktop expansion roles and cannot accept or electrically support a WWAN module.

Exam trap

The trap here is assuming any M.2 slot can host any M.2 device, when keying and supported protocols determine whether a slot accepts a WWAN modem, an SSD, or neither.

Full explanation →

16

MCQeasy

A small e-commerce company uses a monolithic web application hosted on a single server. During peak shopping hours, the server becomes overloaded, causing slow page loads and occasional timeouts. The development team wants to improve scalability and maintainability. They are considering breaking the application into smaller, independent services that can be developed, deployed, and scaled separately. Which approach should the team adopt?

A.Migrate to a microservices architecture.

B.Move the application to a serverless computing platform.

C.Implement a service-oriented architecture (SOA) with an enterprise service bus.

D.Containerize the existing monolithic application.

AnswerA

Microservices split the monolith into independently deployable services, each scalable on its own. This directly addresses the overloaded single server by allowing horizontal scaling of only the busiest services, while separate codebases improve maintainability and deployment flexibility.

Why this answer

Microservices architecture decomposes a monolithic application into small, independently deployable services, each owning its own data and scaling independently. This directly addresses the stated goals: improve scalability (scale only the hot services) and maintainability (smaller, focused codebases with independent deployment cycles). The scenario explicitly describes breaking the app into smaller, independent services.

Exam trap

The trap is choosing 'containerize the monolith' because containers sound modern and scalable — but containerizing a monolith does not decompose it, so the independent scaling and maintainability goals are not met.

How to eliminate wrong answers

Option B is wrong because serverless computing changes the hosting model but does not by itself decompose a monolith — a monolithic serverless function still has the same coupling and scaling limitations. Option C is wrong because SOA with an enterprise service bus (ESB) is a heavier, centralized integration pattern that often introduces its own bottleneck and does not achieve the independent deployability and scaling of microservices. Option D is wrong because containerizing a monolith (a 'distributed monolith') improves packaging and portability but does not split the application into independently scalable services, so the core scalability and maintainability problems remain.

Full explanation →

17

Multi-Selectmedium

A junior database administrator is reviewing the structure of a relational database used by a library. The database contains a Books table, a Members table, and a Loans table that records which member borrowed which book and the loan date. Which TWO of the following statements accurately describe the role of the Loans table in this database? (Choose two.)

Select 2 answers

A.It is an example of a NoSQL document store.

B.It contains foreign keys that reference the primary keys of both the Books and Members tables.

C.It stores the complete details of each book, including title, author, and ISBN.

D.It resolves a many-to-many relationship between Books and Members.

E.It eliminates the need for a primary key in the Books table.

AnswersB, D

The Loans table typically includes foreign key columns such as BookID and MemberID that reference the primary keys of the Books and Members tables. These foreign keys enforce referential integrity, ensuring that a loan record cannot exist for a nonexistent book or member, which is a core principle of relational database design.

Why this answer

The Loans table is a junction table that resolves the many-to-many relationship between Books and Members by containing foreign keys to both. It does not duplicate book details, does not remove the need for primary keys, and is not a NoSQL document store. These characteristics are fundamental to relational database design and normalization.

Exam trap

The trap here is assuming that a junction table must store all descriptive data from the tables it links, rather than just the foreign keys and relationship-specific attributes.

Full explanation →

18

Multi-Selectmedium

A user notices their computer is running slowly and has many applications open. Which TWO hardware components are most likely to impact the speed at which multiple applications can run simultaneously? (Select TWO).

Select 2 answers

A.SSD vs HDD

B.Amount of RAM

C.Hard drive capacity

D.GPU memory

E.CPU speed and cores

AnswersB, E

More RAM allows more applications to run concurrently without swapping.

Why this answer

Option B (Amount of RAM) is correct because running many applications simultaneously requires enough physical memory to hold each process's working set; when RAM is exhausted, Windows pages data to disk via the pagefile, causing severe slowdowns, so more RAM directly allows more concurrent applications to stay resident in memory. Option E (CPU speed and cores) is correct because the processor executes the instructions for all running applications, and more cores plus higher clock speed let the CPU schedule and execute multiple threads/processes in parallel rather than time-slicing a single core, which is exactly what determines multitasking throughput. Option A (SSD vs HDD) affects storage read/write latency and boot or load times, but it is not the primary factor for keeping many already-running applications responsive.

Option C (Hard drive capacity) only concerns how much data can be stored, not how fast multiple apps run. Option D (GPU memory) mainly affects graphics rendering, gaming, and GPU-accelerated workloads, not general multitasking of ordinary applications.

Exam trap

FC0-U71 often tests the confusion between storage speed and capacity versus memory and CPU when diagnosing performance issues, causing candidates to select SSD or hard drive capacity instead of RAM and CPU.

Full explanation →

19

MCQhard

A user downloads a freeware application that displays occasional ads and offers paid upgrade options. This distribution model is best described as:

A.Shareware

B.Freeware

C.Freemium

D.Commercial

AnswerC

Freemium offers the core application free while displaying ads and prompting paid upgrades for additional features. This matches the stem exactly: free download, occasional advertisements, and optional paid tiers. Trialware and adware alone do not combine a free base product with paid upgrade options.

Why this answer

Freemium is the model where the base product is free but monetized through ads and/or paid premium upgrades. The scenario explicitly mentions both ads and paid upgrade options, which is the textbook definition of freemium. Freeware is free with no monetization path, and shareware is trial-limited software requiring payment to continue using.

Exam trap

FC0-U71 often tests the confusion between freeware, shareware, and freemium — candidates must spot that ads plus optional paid upgrades equals freemium, while freeware has no monetization and shareware is trial-limited.

How to eliminate wrong answers

Option A is wrong because shareware is distributed for a trial period (often time- or feature-limited) and requires payment to keep using it — it is not ad-supported with optional upgrades. Option B is wrong because freeware is fully free with no paid tier or ad-based monetization; the presence of paid upgrades and ads rules it out. Option D is wrong because commercial software requires upfront purchase or licensing before use, whereas this application is downloaded and used for free initially.

Full explanation →

20

MCQmedium

Which type of malware is designed to replicate itself and spread to other computers without needing to attach to a host file?

A.Worm

B.Trojan

C.Virus

D.Ransomware

AnswerA

A worm is self-replicating malware that spreads across networks independently, exploiting vulnerabilities or weak credentials to propagate. Unlike viruses, it requires no host file or user action to replicate, which is precisely the defining constraint stated in the stem.

Why this answer

Worms are self-replicating and spread independently, unlike viruses which attach to files.

Full explanation →

21

MCQmedium

A user is trying to connect a laptop to a high-definition monitor that supports 4K resolution at 60Hz. Which of the following ports on the laptop will support this video output?

A.HDMI

B.Ethernet RJ45

C.3.5mm audio jack

D.USB-A 3.0

AnswerA

HDMI carries digital video and supports 4K at 60Hz when using HDMI 2.0 or later, matching the monitor's stated resolution and refresh rate. Older standards such as VGA are analogue and cannot deliver this bandwidth.

Why this answer

HDMI supports 4K resolution at 60Hz, making it the correct port for connecting a laptop to a 4K monitor. HDMI 2.0 and later versions specifically support 4K at 60Hz, which is the standard for modern laptops and monitors. The other ports listed are not video output interfaces and cannot carry a display signal to a monitor.

Exam trap

The trap is that candidates may think any USB port can output video, but USB-A 3.0 does not natively carry a display signal — only HDMI, DisplayPort, or USB-C with Alt Mode do.

How to eliminate wrong answers

Option B is wrong because Ethernet RJ45 is a networking port for wired LAN connectivity, not a video output. Option C is wrong because a 3.5mm audio jack carries analog audio only and has no video capability. Option D is wrong because USB-A 3.0 is a data port that does not natively output video — while USB can carry video via DisplayLink or USB-C Alt Mode, USB-A 3.0 alone does not support 4K 60Hz display output.

Full explanation →

22

MCQmedium

A developer is trying to find why a program is producing incorrect output. The developer runs the program with a debugging tool, sets a breakpoint at a specific line, and examines the values of variables at that point. Which debugging technique is being used?

A.Code review

B.Step-through execution

C.Logging

D.Breakpoint inspection

AnswerD

Breakpoint inspection pauses execution at a chosen line so the developer can read live variable values at that exact moment. This directly matches the stem's described technique, unlike logging, stepping or static code review, which do not halt and examine state.

Why this answer

The developer is using breakpoint inspection, a debugging technique where execution is paused at a specific line of code (the breakpoint) to examine variable values at that exact moment. This allows the developer to inspect the program's state without stepping through each subsequent line, directly identifying why incorrect output occurs.

Exam trap

The trap here is that candidates confuse breakpoint inspection with step-through execution, but step-through involves actively moving through code line by line, whereas breakpoint inspection pauses at a single point for variable examination without stepping.

How to eliminate wrong answers

Option A is wrong because code review is a manual or automated analysis of source code without executing it, not a runtime debugging technique involving breakpoints or variable inspection. Option B is wrong because step-through execution involves executing code line by line, often using 'step into' or 'step over' commands, which is different from simply setting a breakpoint and examining variables without stepping. Option C is wrong because logging involves writing messages to a log file or console during execution, not pausing at a breakpoint to inspect variables interactively.

Full explanation →

23

MCQhard

A system administrator needs to deploy a software update to 500 computers without user interaction. Which installation method should be used?

A.Run the installer with the /quiet or /silent switch

B.Email the installer to each user and ask them to run it

C.Copy the program files manually to each computer

D.Install from an app store

AnswerA

The /quiet or /silent switch suppresses all installer UI and prompts, letting the update run unattended across 500 machines via scripting or deployment tools. This directly satisfies the no-user-interaction constraint, unlike interactive installers that require clicking through dialogue boxes on each host.

Why this answer

Running the installer with /quiet or /silent switches performs a silent installation, which requires no user interaction and can be scripted or pushed to many machines. This is the correct method for deploying an update to 500 computers unattended. The other options either require user action or are impractical at scale.

Exam trap

FC0-U71 often tests the distinction between silent installation (no user interaction) and network installation (source location) — candidates may pick network installation, but the requirement for no user interaction points to silent switches.

How to eliminate wrong answers

Option B is wrong because emailing the installer and asking users to run it depends on user interaction and is unreliable for 500 machines. Option C is wrong because manually copying program files bypasses proper installation (no registry entries, dependencies, or services configured) and is not a supported deployment method. Option D is wrong because app store installation typically requires user sign-in and interaction, and may not be available for the specific update in an enterprise context.

Full explanation →

24

MCQmedium

A graphic designer needs to choose a software for vector illustration. Which of the following is best suited?

A.Adobe Illustrator

B.GIMP

C.Adobe Photoshop

D.Microsoft Word

AnswerA

Adobe Illustrator creates resolution-independent vector artwork using mathematical paths and anchor points, so designs scale infinitely without pixelation. This directly satisfies the graphic designer's vector illustration requirement, unlike raster editors such as Photoshop that store fixed pixel grids and degrade when enlarged.

Why this answer

Adobe Illustrator is the industry-standard vector graphics editor, designed specifically for creating and editing scalable vector illustrations. GIMP and Adobe Photoshop are primarily raster (pixel-based) editors, while Microsoft Word offers only basic shape tools and is not intended for professional vector illustration. Therefore, Adobe Illustrator is the best suited choice.

Exam trap

Candidates may confuse raster and vector graphics, or assume that a common office tool like Word can handle professional vector illustration. The question specifically tests knowledge of dedicated vector software.

How to eliminate wrong answers

Option A is correct because Adobe Illustrator is the industry-standard vector illustration software, using mathematical paths (Bezier curves) to create scalable graphics. Option B is wrong because GIMP (GNU Image Manipulation Program) is a raster-based image editor focused on pixel manipulation, not vector graphics. Option C is wrong because Adobe Photoshop is primarily a raster graphics editor, though it has limited vector capabilities, it is not best suited for pure vector illustration.

Option D is wrong because Microsoft Word is a word processing application with only basic drawing tools, not a dedicated vector illustration program.

Full explanation →

25

MCQeasy

A small office has five desktop computers that need to be connected to share files and a printer. Which network device should be used to create a local area network?

A.Hub

B.Switch

C.Modem

D.Router

AnswerB

A switch forwards frames between the five desktops on the same LAN, letting them share files and the printer. It provides the multiple wired ports needed for a small office, unlike a router, which would instead join separate networks.

Why this answer

A switch is the correct device because it operates at Layer 2 of the OSI model, using MAC addresses to forward frames only to the specific port where the destination device is connected. This creates a dedicated, collision-free path between any two communicating devices, which is essential for a small office LAN where five computers need to share files and a printer efficiently.

Exam trap

The trap here is that candidates often confuse a hub with a switch because both have multiple Ethernet ports, but the hub's lack of intelligence and shared collision domain makes it obsolete for any practical LAN beyond legacy or lab use.

How to eliminate wrong answers

Option A is wrong because a hub operates at Layer 1, simply repeating electrical signals out all ports, which forces all devices to share the same collision domain and halves throughput under load — it is not suitable for a modern LAN. Option C is wrong because a modem (modulator-demodulator) converts digital signals to analog for transmission over telephone or cable lines; it connects a LAN to a WAN (e.g., the internet) but does not create the internal LAN itself. Option D is wrong because a router operates at Layer 3, forwarding packets based on IP addresses and typically connecting different networks; while it can include a built-in switch, a standalone router is overkill and not the primary device for creating a single local network segment.

Full explanation →

26

MCQeasy

A user wants to permanently delete files from a USB flash drive without any possibility of recovery. Which of the following techniques should be used?

A.Quick format

B.Change the file extension

C.Delete and empty Recycle Bin

D.Overwrite the drive with random data

AnswerD

Overwriting every sector with random data destroys the original file contents at the storage level, so forensic recovery tools cannot reconstruct them. This is the software-based method that permanently removes data from flash media without physical destruction.

Why this answer

Overwriting the drive with random data (a multi-pass overwrite) destroys the original file contents at the physical level, making recovery with forensic tools effectively impossible. This is the standard secure-erase technique for USB flash drives and other storage media. Simple deletion or formatting only removes file system references, leaving data recoverable.

Exam trap

FC0-U71 often tests the misconception that deleting files or quick-formatting a drive permanently removes data — candidates forget that only overwriting or physical destruction makes recovery impossible.

How to eliminate wrong answers

Option A is wrong because a quick format only rewrites the file system metadata and does not overwrite the actual data blocks, so files remain recoverable with tools like Recuva or PhotoRec. Option B is wrong because changing a file extension only alters the filename, not the file contents or storage location. Option C is wrong because deleting files and emptying the Recycle Bin (or Trash) only removes the directory entry; the data blocks remain until overwritten.

Full explanation →

27

MCQmedium

An attacker gains physical access to a secure area by following an authorized employee through a door that requires a badge. This social engineering technique is known as:

A.Pretexting

B.Phishing

C.Tailgating

D.Baiting

AnswerC

Following an authorised employee through a badge-controlled door without presenting credentials is tailgating, a physical social engineering technique. The stem's unauthorised entry behind a legitimate badge holder matches this definition precisely, distinguishing it from shoulder surfing or dumpster diving.

Why this answer

Tailgating (or piggybacking) is when an unauthorized person follows an authorized person into a restricted area without proper authentication.

Full explanation →

28

MCQmedium

A logistics analyst needs to record which driver delivered each shipment. A driver can deliver many shipments, and each shipment is delivered by exactly one driver. Which relationship type exists between drivers and shipments?

A.Zero-to-one

B.One-to-one

C.One-to-many

D.Many-to-many

AnswerC

One driver appears on many shipment records, while each shipment record names only one driver. That is the definition of a one-to-many relationship, and it is implemented by placing the driver identifier in the shipment table as a foreign key referencing the driver's primary key.

Why this answer

The business rule is asymmetric: one driver appears against many shipment rows, but each shipment row names only one driver. That is a one-to-many relationship, and it is normally implemented by storing the driver's key value in the shipment table rather than by creating a separate linking table.

Exam trap

The trap here is reaching for a junction table whenever two entities are involved, when a linking table is needed only for many-to-many relationships.

Full explanation →

29

MCQhard

A small business owner wants to protect customer data stored on laptops in case the devices are stolen. Which encryption method provides the best protection for the entire hard drive?

A.HTTPS encryption for web traffic

B.File-level encryption on individual documents

C.A VPN when connecting to the internet

D.Full disk encryption

AnswerD

Full disk encryption protects the entire drive, including the operating system, applications and all stored files, so data remains unreadable if a laptop is stolen. It satisfies the requirement to safeguard customer data on lost devices.

Why this answer

Full disk encryption (FDE) encrypts the entire storage volume — OS, applications, temp files, and user data — using a key protected by a TPM or pre-boot authentication, so a stolen laptop's drive is unreadable without the credential. Because it covers everything on the disk, it protects customer data regardless of which files or folders it lives in. This is the standard control for lost/stolen device scenarios.

Exam trap

The trap is conflating in-transit encryption (HTTPS, VPN) with at-rest encryption — candidates see 'encryption' and pick a transport control when the scenario is about a stolen device and data on disk.

How to eliminate wrong answers

Option A is wrong because HTTPS only encrypts data in transit between a browser and a web server; it does nothing for data at rest on a stolen laptop's drive. Option B is wrong because file-level encryption only protects the specific documents that were encrypted — it leaves OS artifacts, temp files, swap files, and unencrypted documents exposed, and users often forget to encrypt new files. Option C is wrong because a VPN protects data in transit over untrusted networks; once the laptop is stolen and offline, the VPN provides no at-rest protection.

Full explanation →

30

MCQmedium

A user wants to connect a high-resolution 4K monitor to their desktop computer for gaming at 144Hz. Which port should they use to ensure the best performance?

A.DisplayPort

B.DVI

C.VGA

D.HDMI 1.4

AnswerA

DisplayPort carries enough bandwidth for 4K at 144Hz, whereas HDMI versions below 2.1 cap refresh rates at that resolution. Its packet-based link and higher lane throughput satisfy the stem's combined 4K and 144Hz performance constraint.

Why this answer

DisplayPort is the correct choice because it supports 4K resolution at 144Hz (and higher) with sufficient bandwidth, and it is the standard interface for high-refresh-rate gaming monitors. DisplayPort 1.4 and later natively handle 4K@144Hz without compression, making it the best performance option among the listed ports.

Exam trap

The trap is assuming any modern digital port can handle 4K@144Hz — candidates often pick HDMI because it is common, but HDMI 1.4 specifically caps at 4K@30Hz, and only HDMI 2.1 supports 4K@144Hz.

How to eliminate wrong answers

Option B is wrong because DVI, even in its dual-link variant, maxes out well below 4K@144Hz — dual-link DVI supports roughly 2560x1600 at 60Hz, far short of the requirement. Option C is wrong because VGA is an analog interface limited to about 1920x1080 at 60Hz with degraded signal quality, and it cannot carry 4K or high refresh rates at all. Option D is wrong because HDMI 1.4 supports 4K only at 30Hz (or 24Hz), which fails the 144Hz requirement — HDMI 2.1 would be needed for 4K@144Hz.

Full explanation →

31

MCQhard

A company wants to run multiple operating systems on a single physical server to maximize resource utilization. Which technology should they use?

A.Dual booting

B.Cloud computing

C.Virtual machines

D.Containerization

AnswerC

Virtual machines use a hypervisor to run multiple guest operating systems concurrently on one physical server, each isolated with its own kernel. This satisfies the stem's requirement to maximise resource utilisation while hosting several distinct operating systems on shared hardware.

Why this answer

Virtual machines use a hypervisor (such as VMware ESXi, Hyper-V, or KVM) to abstract physical hardware and run multiple independent guest operating systems concurrently on a single physical server. Each VM has its own virtual CPU, memory, storage, and network, allowing full OS isolation and high resource utilization without rebooting. This is the standard technology for server consolidation and maximizing hardware utilization.

Exam trap

FC0-U71 often tests the difference between virtualization (multiple full OSes on one host via a hypervisor) and containerization (shared kernel, app-level isolation), so candidates who equate 'multiple workloads' with containers pick the wrong answer.

How to eliminate wrong answers

Option A is wrong because dual booting only allows one OS to run at a time — the user must reboot to switch operating systems, so it does not maximize concurrent resource utilization. Option B is wrong because cloud computing refers to consuming compute resources from a provider over the internet; while it can host multiple OSes, it does not describe the on-premises technology for running multiple OSes on one physical server. Option D is wrong because containerization shares the host OS kernel and packages applications with their dependencies — containers are not full operating systems, so they do not satisfy the requirement to run multiple distinct operating systems on one physical server.

Full explanation →

32

Multi-Selecthard

A technician is evaluating the CPU specifications of two computers. Which THREE factors directly affect the CPU's performance? (Select THREE.)

Select 3 answers

A.Number of cores

B.Amount of RAM installed

C.Clock speed (GHz)

D.Power supply wattage

E.Cache size (L1/L2/L3)

AnswersA, C, E

More cores let the CPU execute additional instruction threads concurrently, raising throughput for parallelisable workloads. Core count is a primary hardware determinant of processing capability, directly affecting overall CPU performance alongside clock speed and cache size.

Why this answer

The number of cores (A) directly affects CPU performance because more cores allow the processor to execute multiple threads or processes simultaneously, improving throughput in multi-threaded workloads. Clock speed (C), measured in GHz, determines how many cycles the CPU can execute per second, so a higher clock speed generally means faster single-threaded execution. Cache size (E), including L1, L2, and L3 levels, directly impacts performance by reducing memory latency; larger caches keep frequently used data closer to the CPU cores, avoiding slower trips to RAM.

The amount of RAM installed (B) affects overall system performance and multitasking but is a separate memory subsystem, not a CPU specification. Power supply wattage (D) only determines whether the system can deliver enough power to components and does not directly influence CPU processing capability.

Exam trap

The trap is including RAM as a CPU performance factor because it's commonly associated with 'speed' — but the question asks specifically about CPU specifications, not overall system performance.

Full explanation →

33

MCQmedium

An employee allows a delivery person to enter a secure office building by holding the door open. The delivery person does not have an access badge. Which social engineering attack is this?

A.Phishing

B.Tailgating

C.Baiting

D.Pretexting

AnswerB

Tailgating occurs when an unauthorised person follows an authorised individual through a secured entry point without presenting credentials. The delivery person gained access solely because the employee held the door, satisfying the stem's scenario of bypassing badge control.

Why this answer

Tailgating (or piggybacking) occurs when an unauthorized person follows an authorized person into a restricted area without proper authentication.

Full explanation →

34

Multi-Selectmedium

Which TWO of the following are effective measures to protect against ransomware attacks? (Select two.)

Select 2 answers

A.Using the same password for all accounts

B.Installing the latest software updates and patches

C.Disabling the firewall

D.Regularly backing up important files

E.Opening email attachments from unknown senders

AnswersB, D

Patching closes the software vulnerabilities that ransomware exploits to gain initial access and propagate. Applying the latest updates directly removes the exposure the stem's attack relies on, making it an effective preventive measure alongside user education and endpoint protection.

Why this answer

Option B is correct because installing the latest software updates and patches closes known vulnerabilities (e.g., SMBv1/EternalBlue, RDP flaws) that ransomware such as WannaCry and NotPetya exploit to gain initial access and propagate laterally. Option D is correct because regularly backing up important files—ideally following the 3-2-1 rule with offline or immutable copies—allows restoration of data without paying a ransom, neutralizing the extortion leverage even if encryption occurs. Option A is wrong because reusing the same password across accounts enables credential-stuffing and lateral movement, dramatically increasing ransomware blast radius rather than protecting against it.

Option C is wrong because disabling the firewall removes network traffic filtering and exposes hosts and services to scanning, exploitation, and command-and-control communication. Option E is wrong because opening attachments from unknown senders is a primary ransomware delivery vector via malicious macros, executables, or exploit-laden documents.

Exam trap

The trap is including options that sound like security measures but actually weaken defenses (disabling firewall, reusing passwords) or are obvious attack vectors (opening unknown attachments), distracting from the two genuine best practices.

Full explanation →

35

MCQeasy

A user asks a technician why their computer can run multiple applications at once, such as a web browser, email client, and word processor, without them interfering with each other. Which of the following concepts should the technician use to explain this?

A.Multitasking

B.Virtualization

C.Pipelining

D.Multiprocessing

AnswerA

Multitasking is the ability of an operating system to run multiple processes seemingly at the same time by rapidly switching CPU time between them. This allows a user to have several applications open and active without them interfering. The scenario describes exactly this behavior, so multitasking is the correct concept. The technician should explain that the OS manages resources and schedules CPU time to create the illusion of simultaneous execution.

Why this answer

Multitasking is the operating system feature that allows multiple applications to run concurrently by sharing CPU time. It creates the illusion of simultaneous execution, enabling a user to switch between a browser, email client, and word processor. The other options refer to different concepts such as virtual machines, multiple CPUs, or CPU instruction optimization, which do not directly describe running multiple applications in one OS session.

Exam trap

The trap here is confusing multitasking with multiprocessing; multitasking is about the OS scheduling multiple processes, while multiprocessing requires multiple physical CPUs or cores.

Full explanation →

36

Multi-Selectmedium

Which TWO of the following are common characteristics of compiled programming languages?

Select 2 answers

A.The code is executed line-by-line by an interpreter.

B.The resulting executable is platform-specific.

C.Variables do not need to be declared before use.

D.The source code is translated into machine code before execution.

E.The source code is compiled every time the program runs.

AnswersB, D

Compilation produces machine code bound to a specific instruction set and operating system, so the executable cannot run unchanged elsewhere without recompiling or emulation. This platform dependency is a defining trait distinguishing compiled languages from interpreted ones, which rely on a runtime interpreter.

Why this answer

Option B is correct because a compiler produces a native executable (e.g., an ELF binary on Linux or a PE .exe on Windows) whose machine-code instructions and system calls target a specific CPU architecture and OS, so it is platform-specific. Option D is correct because compiled languages use a compiler to translate the entire source code into machine code (object files linked into an executable) before the program is executed, rather than at runtime. Option A is incorrect because line-by-line execution by an interpreter describes interpreted languages such as Python or JavaScript, not compiled ones.

Option C is incorrect because compiled languages like C and C++ require variables to be declared before use so the compiler can allocate types and memory. Option E is incorrect because compilation happens once ahead of time, not on every run; recompiling each execution is characteristic of interpreted or JIT-based environments.

Exam trap

The trap here is that candidates often confuse 'compiled every time the program runs' (Option E) with the actual compilation process, mistakenly thinking recompilation occurs at each execution, when in fact the executable is pre-built and reused.

Full explanation →

37

MCQmedium

Which network topology connects all devices to a single central cable?

A.Ring

B.Star

C.Mesh

D.Bus

AnswerD

A bus topology uses one central backbone cable with all devices tapping into it, so every node shares that single transmission medium. This directly matches the stem's description of devices connected to a single central cable.

Why this answer

A bus topology uses a single central cable, often called a backbone or trunk, to which all devices are connected via drop lines or taps. Data transmitted by any device travels along the entire cable, and each device checks the destination address to determine if it should accept the data. This contrasts with other topologies that use different physical or logical connection methods.

Exam trap

The trap here is that candidates often confuse the 'single central cable' of a bus topology with the 'central device' of a star topology, mistakenly thinking a hub or switch is a cable, or they assume 'central' implies a star layout.

How to eliminate wrong answers

Option A is wrong because a ring topology connects each device to exactly two neighbors, forming a closed loop, and data travels in one direction around the ring, not along a single central cable. Option B is wrong because a star topology connects all devices to a central hub or switch, not to a single shared cable; each device has its own dedicated link to the central device. Option C is wrong because a mesh topology provides multiple redundant paths between devices, with each device potentially connected to every other device, not a single shared cable.

Full explanation →

38

MCQeasy

Which of the following is a characteristic of a relational database table?

A.Rows represent records and columns represent fields

B.Rows represent fields and columns represent records

C.Each table must have a composite key

D.Tables are stored in a hierarchical structure

AnswerA

In a relational table, each row is a tuple representing one record, while each column is an attribute representing a field. This row-record, column-field mapping is the defining structural characteristic, distinguishing tables from unstructured or non-relational stores.

Why this answer

In a relational database table, the fundamental structure is that each row (tuple) represents a single record (instance of an entity), and each column (attribute) represents a field (property) of that record. This is the standard row-column orientation defined by E.F. Codd's relational model.

Therefore, option A correctly describes this characteristic.

Exam trap

The trap is the reversed wording in option B, which can confuse candidates who are not careful; also, option C might tempt those who think every table needs a composite key, but that is not a requirement.

How to eliminate wrong answers

Option B is wrong because it reverses the roles: rows do not represent fields, and columns do not represent records; that would be a transposed view and is not how relational tables are structured. Option C is wrong because not every table must have a composite key; a table can have a single-column primary key or even no primary key (though not best practice), and composite keys are only used when a single column cannot uniquely identify a row. Option D is wrong because relational tables are stored in a flat, two-dimensional structure, not a hierarchical one; hierarchical structures are used in hierarchical databases like IBM IMS, not relational databases.

Full explanation →

39

MCQmedium

A graphic designer is working with a large image file in a proprietary software format. The designer needs to send the image to a client who uses a different operating system and does not have the same software. Which of the following is the BEST method to ensure the client can open the file?

A.Compress the file into a ZIP archive before sending.

B.Email the client the software license so they can install the same application.

C.Change the file extension to .jpg without altering the file contents.

D.Export the file to a commonly used format such as JPEG or PNG.

AnswerD

JPEG and PNG are cross-platform raster formats that any operating system can open without the proprietary software. Exporting flattens the image into a standard encoding, satisfying the constraint that the client lacks the original application and runs a different OS.

Why this answer

Exporting the file to a commonly used format like JPEG or PNG ensures cross-platform compatibility without requiring the client to have the proprietary software. JPEG and PNG are standardized, universally supported formats that can be opened by any operating system's default image viewer or basic graphics application, solving the problem of different OS and missing software.

Exam trap

The trap here is that candidates may think changing the file extension or compressing the file is sufficient, failing to recognize that the underlying file format must be converted to a universally supported standard for cross-platform compatibility.

How to eliminate wrong answers

Option A is wrong because compressing the file into a ZIP archive only reduces file size and bundles the file, but does not change the proprietary format; the client still cannot open the proprietary file without the correct software. Option B is wrong because emailing a software license does not provide the actual application installer, and the client may not be able to run the proprietary software on a different operating system due to platform incompatibility. Option C is wrong because simply changing the file extension to .jpg without converting the internal data does not change the file's binary structure; the client's system will attempt to decode it as a JPEG and fail, resulting in a corrupted or unopenable file.

Full explanation →

40

Multi-Selecthard

A security analyst is evaluating risks to the company's network. According to the risk formula (Risk = Likelihood × Impact), which THREE of the following are considered vulnerabilities?

Select 3 answers

A.Weak encryption used for data in transit

B.A hacker attempting to guess passwords

C.A fire in the data center

D.Employees not trained to recognize phishing emails

E.Unpatched software on the company's web server

AnswersA, D, E

Weak encryption for data in transit is a technical weakness in how information is protected, making it exploitable by interception or decryption attacks. It therefore qualifies as a vulnerability under the risk formula, since it is an internal flaw that raises the likelihood of a threat succeeding.

Why this answer

In the risk formula Risk = Likelihood × Impact, vulnerabilities are internal weaknesses or flaws that can be exploited or triggered by a threat. Option A (weak encryption for data in transit) is correct because using outdated or weak ciphers/protocols such as SSLv3, TLS 1.0, or RC4 is a configuration weakness that exposes data to interception. Option D (employees not trained to recognize phishing emails) is correct because lack of security awareness is a human vulnerability that enables social-engineering attacks like credential harvesting.

Option E (unpatched software on the company's web server) is correct because missing security patches leave known CVEs exploitable, a classic technical vulnerability. Option B (a hacker attempting to guess passwords) is a threat actor/action, not a vulnerability, and Option C (a fire in the data center) is a physical threat or hazard, not a vulnerability.

Full explanation →

41

MCQmedium

A user is working on a presentation for a client meeting. The user has been using Microsoft PowerPoint and has completed the slides. The user now needs to create handouts for the audience so they can follow along. The handouts should show the slides with space for notes. Which of the following is the BEST way to create these handouts?

A.Print the presentation with full-page slides.

B.Use PowerPoint's handout feature to print slides with note lines.

C.Manually copy each slide into a word processing document.

D.Take screenshots of each slide and arrange them in a document.

AnswerB

PowerPoint's handout master prints multiple slides per page with ruled note lines beside each, directly satisfying the requirement for slides plus writing space. Exporting to Word or printing full-page slides would not deliver the requested note-taking layout in one step.

Why this answer

PowerPoint's handout feature is specifically designed to create printed handouts that include slide thumbnails and adjacent note lines for audience notes. This built-in functionality (File > Print > Handouts) allows you to select the number of slides per page and automatically adds ruled lines for note-taking, making it the most efficient and correct method for this task.

Exam trap

The trap here is that candidates may think printing full-page slides (Option A) is sufficient for handouts, overlooking the specific requirement for note-taking space, or they may assume that manual methods (Options C and D) are acceptable workarounds when the built-in handout feature is the intended solution.

How to eliminate wrong answers

Option A is wrong because printing full-page slides produces one slide per page with no space for notes, which does not meet the requirement for handouts with note lines. Option C is wrong because manually copying each slide into a word processing document is time-consuming, error-prone, and lacks the automatic formatting and note lines provided by PowerPoint's handout feature. Option D is wrong because taking screenshots and arranging them in a document is inefficient, may result in inconsistent sizing and quality, and does not include the structured note lines that the handout feature provides.

Full explanation →

42

MCQhard

An IT specialist is explaining ASCII and Unicode to a trainee. Which statement accurately describes a difference between ASCII and Unicode?

A.ASCII uses 8 bits per character and supports 256 characters.

B.Unicode uses 16 bits per character, while ASCII uses 7 bits.

C.ASCII is a variable-width encoding, while Unicode uses a fixed width.

D.Unicode can represent characters from multiple languages, while ASCII is limited to English.

AnswerD

ASCII uses a 7-bit encoding covering 128 characters, essentially the English alphabet, digits and control codes. Unicode assigns a unique code point to characters across virtually all writing systems, so it represents multiple languages while ASCII remains limited to English.

Why this answer

Unicode is designed to represent characters from virtually all writing systems, including non-Latin scripts, emojis, and symbols, whereas ASCII is limited to 128 (or 256 in extended versions) characters primarily for English and Western European languages. This is the fundamental difference in character repertoire. The other options contain factual errors about bit widths and encoding schemes.

Exam trap

FC0-U71 often tests the misconception that Unicode is always 16-bit, confusing the encoding with the character set, and that ASCII is 8-bit when standard ASCII is 7-bit.

How to eliminate wrong answers

Option A is wrong because standard ASCII uses 7 bits and supports 128 characters; 8-bit extended ASCII supports 256, but the statement as written is inaccurate. Option B is wrong because Unicode is not fixed at 16 bits per character; it uses variable-width encodings like UTF-8, UTF-16, and UTF-32. Option C is wrong because ASCII is a fixed-width 7-bit encoding, while Unicode encodings can be variable-width (UTF-8) or fixed-width (UTF-32).

Full explanation →

43

MCQmedium

An analyst runs a query against a sales database and wants to return only the rows where the Region column equals 'West' and the SaleAmount column is greater than 1000. The analyst also wants the results sorted from highest SaleAmount to lowest. Which clause combination should the analyst use?

A.WHERE Region = 'West' OR SaleAmount > 1000 ORDER BY SaleAmount ASC

B.WHERE Region = West AND SaleAmount > 1000 ORDER BY SaleAmount DESC

C.HAVING Region = 'West' AND SaleAmount > 1000 ORDER BY SaleAmount DESC

D.WHERE Region = 'West' AND SaleAmount > 1000 ORDER BY SaleAmount DESC

AnswerD

This is correct because WHERE filters rows using both conditions joined by AND, and ORDER BY with DESC sorts the surviving rows from highest to lowest SaleAmount. The single quotes around West are required for a text comparison, and the numeric comparison needs no quotes. This combination satisfies every requirement in the scenario.

Why this answer

Row-level filtering with two conditions requires WHERE combined with AND, and descending order requires ORDER BY with DESC. Quoting the text literal 'West' keeps the comparison valid, so the clause that filters both conditions and sorts from highest to lowest SaleAmount meets the analyst's needs.

Exam trap

The trap here is mixing up WHERE and HAVING or swapping AND for OR, which changes which rows are returned even though the sorting clause looks correct.

Full explanation →

44

MCQeasy

Which type of memory is volatile and loses its data when the computer is turned off?

A.SSD

B.ROM

C.HDD

D.RAM

AnswerD

RAM stores data only while powered, since each cell relies on continuous electrical charge or refresh to hold its state. Removing power clears that charge, so all contents are lost — the defining volatile behaviour the question asks for.

Why this answer

RAM (Random Access Memory) is volatile semiconductor memory that requires continuous power to retain its contents; when the computer is powered off, all data stored in RAM is lost. This is why unsaved work disappears on a power failure. ROM, by contrast, is non-volatile and retains firmware even without power.

Exam trap

The trap here is conflating 'memory' with 'storage' — candidates may pick SSD or HDD thinking of where data is 'stored,' but the question asks about volatile working memory, which is RAM.

How to eliminate wrong answers

Option A is wrong because an SSD is non-volatile NAND flash storage that retains data without power, used for persistent storage, not working memory. Option B is wrong because ROM (Read-Only Memory) is non-volatile by design, holding firmware such as the BIOS/UEFI that must survive power cycles. Option C is wrong because an HDD is non-volatile magnetic storage that persists data when powered off, used for long-term storage rather than active working memory.

Full explanation →

45

MCQmedium

A developer is designing a program that stores a customer's mailing address, which consists of a street, city, state, and postal code. The developer wants to keep these related values grouped together and access them by name rather than by numeric position. Which data structure is the best fit?

A.An array of four strings

B.A single string containing all four values

C.A Boolean flag for each address component

D.A record or struct with named fields

AnswerD

A record or struct groups related values under one name and exposes each value through a named field, such as address.city or address.postalCode. This matches the requirement to keep the parts of an address together while accessing them by meaningful names instead of numeric positions, improving readability and reducing mistakes.

Why this answer

Grouping related values and accessing them by name is the defining purpose of a record or struct. It keeps the address components together as one logical unit while letting code refer to each part through a descriptive field name. Arrays use positional indexes, a single string loses structure, and Booleans cannot hold text, so a record or struct is the appropriate structure.

Exam trap

The trap here is treating an array as an equivalent substitute because it can hold the same values, overlooking that the scenario specifically requires access by name rather than by numeric position.

Full explanation →

46

Multi-Selectmedium

A REST API is used by a mobile app to retrieve data. The API returns responses in a specific format. Which THREE of the following are typical characteristics of a REST API?

Select 3 answers

A.Uses SOAP for message exchange

B.Maintains server-side session state

C.Is stateless between requests

D.Returns data in JSON format

E.Uses HTTP methods like GET and POST

AnswersC, D, E

Statelessness is a key constraint of REST.

Why this answer

REST APIs are stateless by design, meaning each request from a client to the server must contain all the information needed to understand and process the request. The server does not store any client context between requests, which improves scalability and reliability. This statelessness is a core constraint of the REST architectural style, as defined by Roy Fielding in his doctoral dissertation.

Exam trap

A common misconception in the CompTIA ITF+ exam is that REST APIs must use JSON exclusively, but while JSON is common, REST can return data in any format (e.g., XML, HTML, plain text) as long as it adheres to REST constraints.

Full explanation →

47

MCQeasy

A database table contains repeating groups of fields for multiple phone numbers per customer. Which normal form is being violated?

A.Second Normal Form

B.Third Normal Form

C.First Normal Form

D.No violation

AnswerC

Storing multiple phone numbers in one column creates a repeating group within a single attribute, which First Normal Form forbids. Atomic, single-valued columns are the 1NF requirement, so the design violates 1NF before second or third normal form is even considered.

Why this answer

First Normal Form (1NF) requires that each column in a table contains atomic (indivisible) values and that there are no repeating groups of columns. Storing multiple phone numbers per customer in a single row, such as Phone1, Phone2, Phone3, violates 1NF because it creates a repeating group of fields. To comply with 1NF, the phone numbers should be stored in a separate child table with one row per phone number per customer.

Exam trap

CompTIA often tests the misconception that repeating groups are a violation of Second or Third Normal Form, but the trap is that repeating groups are the defining characteristic of a First Normal Form violation, not a higher normal form.

How to eliminate wrong answers

Option A is wrong because Second Normal Form (2NF) addresses partial dependencies on a composite key, not repeating groups; it assumes 1NF is already satisfied. Option B is wrong because Third Normal Form (3NF) deals with transitive dependencies (non-key attributes depending on other non-key attributes), which is a higher-level concern after 1NF and 2NF are met. Option D is wrong because the presence of repeating groups is a clear violation of First Normal Form, so the table is not in 1NF.

Full explanation →

48

MCQmedium

Which of the following best describes the function of a hypervisor?

A.It is a type of operating system designed for servers

B.It manages cloud resource allocation across multiple data centers

C.It allows multiple operating systems to run on a single physical machine

D.It provides antivirus protection for virtual machines

AnswerC

A hypervisor abstracts physical CPU, memory and I/O, then allocates them to isolated virtual machines. Each guest runs its own operating system concurrently on the same host hardware, which is precisely the multi-OS capability the question asks about.

Why this answer

A hypervisor, also known as a virtual machine monitor (VMM), is software that creates and runs virtual machines by abstracting the underlying physical hardware. It allows multiple guest operating systems to run concurrently on a single physical host, each isolated from the others. This is the core function of virtualization, enabling efficient use of hardware resources and flexibility in IT environments.

Exam trap

The trap here is confusing the hypervisor with an operating system or a cloud management platform; candidates might think a hypervisor is a specialized OS or that it handles cross-data-center orchestration, but its core function is local hardware virtualization.

How to eliminate wrong answers

Option A is wrong because a hypervisor is not an operating system; it runs directly on hardware (Type 1) or on top of an OS (Type 2) to manage VMs, whereas a server OS is a full-fledged operating system like Windows Server or Linux. Option B is wrong because managing cloud resource allocation across data centers is typically handled by cloud orchestration platforms (e.g., OpenStack, Kubernetes) or management software, not by a hypervisor, which operates on a single physical machine. Option D is wrong because antivirus protection is provided by security software running within each VM or at the hypervisor layer via introspection, but that is not the primary function of a hypervisor; its main role is hardware virtualization and VM management.

Full explanation →

49

MCQmedium

A company's database administrator notices that queries against a large customer table are running slowly. The table has millions of rows and is frequently filtered by the 'last_name' column. Which of the following is the BEST way to improve query performance without changing the application code?

A.Partition the table by row count.

B.Increase the database server's RAM.

C.Create an index on the 'last_name' column.

D.Denormalize the table to reduce joins.

AnswerC

An index on last_name lets the database locate matching rows without scanning the entire multi-million-row table. This accelerates the frequent filtering queries while requiring no changes to application code, unlike query rewrites or schema alterations.

Why this answer

Creating an index on the 'last_name' column allows the database to locate rows matching filter conditions without scanning the entire table. This dramatically reduces I/O and CPU overhead for queries that filter by last_name, directly addressing the performance bottleneck without requiring any changes to application code.

Exam trap

The trap here is that candidates often choose 'Increase the database server's RAM' because they think more memory will speed up all queries, but without an index the database still must read every row from disk or memory, and RAM alone cannot eliminate the need for a full table scan.

How to eliminate wrong answers

Option A is wrong because partitioning by row count does not inherently speed up queries filtered by a specific column; it only splits data into smaller physical segments, which can even increase overhead if the partition key does not align with the filter column. Option B is wrong because increasing RAM may help caching but does not change the fundamental need for a full table scan when no index exists; it is a hardware band-aid that does not optimize query execution paths. Option D is wrong because denormalization reduces joins but does not address the core issue of slow filtering on last_name; it introduces data redundancy and maintenance complexity without improving lookup speed on that column.

Full explanation →

50

MCQhard

A security policy grants the following permissions: Read and List. Based on the policy, what actions are permitted by this policy?

A.Read and List

B.Read only

C.Read and Delete

D.Write and Read

AnswerA

The policy explicitly enumerates Read and List as its granted permissions, so those are precisely the actions permitted. No other operations, such as Write or Delete, are conferred, because the policy defines permissions solely by what it lists.

Why this answer

The policy explicitly grants both the Read and List actions, as is common in many policy configurations. The trap is that candidates may assume Read alone is granted, but List is a separate permission that must be explicitly included.

Exam trap

The trap is that candidates may assume Read implies List, but in many security policies List is a separate action that must be explicitly granted.

How to eliminate wrong answers

Option A is wrong because ListObjects is not included in the policy's Action list; only GetObject is allowed. Option C is wrong because DeleteObject is not listed in the policy's Action list; the policy only grants GetObject. Option D is wrong because PutObject is not listed in the policy's Action list; the policy only grants GetObject.

Full explanation →

51

MCQhard

A database has a table 'Orders' with columns OrderID (primary key), CustomerID, OrderDate, and TotalAmount. Which SQL statement will delete all orders placed before January 1, 2023?

A.DROP FROM Orders WHERE OrderDate < '2023-01-01'

B.DELETE FROM Orders WHERE OrderDate < '2023-01-01'

C.DELETE OrderDate < '2023-01-01' FROM Orders

D.REMOVE FROM Orders WHERE OrderDate < '2023-01-01'

AnswerB

DELETE removes only rows satisfying the WHERE predicate, so OrderDate < '2023-01-01' purges pre-2023 orders while preserving the table, its schema and later records. This satisfies the stem's requirement to delete all orders placed before that date, unlike DROP or TRUNCATE, which would remove the table or every row.

Why this answer

DELETE FROM Orders WHERE OrderDate < '2023-01-01' is the correct SQL syntax for removing rows that match a condition. DELETE is the standard DML statement for row-level removal, and the WHERE clause filters which orders are affected. The date literal '2023-01-01' is compared against OrderDate to remove all orders placed before that date.

Exam trap

FC0-U71 often tests the confusion between DDL commands (DROP, TRUNCATE, ALTER) and DML commands (DELETE, INSERT, UPDATE), tricking candidates into choosing DROP when row-level deletion is required.

How to eliminate wrong answers

Option A is wrong because DROP is a DDL statement used to remove entire database objects (tables, views, indexes), not rows, and 'DROP FROM' is not valid SQL syntax. Option C is wrong because it places the WHERE condition before FROM, which violates SQL clause ordering; the correct order is DELETE FROM table WHERE condition. Option D is wrong because REMOVE is not a SQL keyword; no major RDBMS supports REMOVE FROM as a row-deletion command.

Full explanation →

52

MCQmedium

A user receives an email from their bank asking them to click a link and verify their account information. The email contains spelling errors and the sender's address looks suspicious. Which type of social engineering attack is this?

A.Spear phishing

B.Pretexting

C.Vishing

D.Phishing

AnswerD

Phishing is a fraudulent email impersonating a trusted entity, such as a bank, that lures the recipient into clicking a link and disclosing credentials. The suspicious sender address and spelling errors are classic phishing indicators, matching the stem's scenario precisely.

Why this answer

This is a phishing attack because it is a broad, untargeted email attempting to trick the recipient into clicking a link and providing account information. The presence of spelling errors and a suspicious sender address are classic indicators of phishing. Phishing typically targets many users indiscriminately, unlike spear phishing which is highly targeted.

Exam trap

FC0-U71 often tests the distinction between phishing (mass, generic) and spear phishing (targeted, personalized), so candidates may incorrectly choose spear phishing when the email is clearly generic.

How to eliminate wrong answers

Option A is wrong because spear phishing is a targeted attack aimed at specific individuals or organizations, often with personalized content; this email is generic. Option B is wrong because pretexting involves creating a fabricated scenario to gain trust, often over the phone or in person, not necessarily via a mass email. Option C is wrong because vishing is voice phishing conducted over the phone, not email.

Full explanation →

53

MCQeasy

A user complains that their laptop's built-in display is very dim and difficult to read, even when the brightness is set to maximum. The laptop is five years old and has never had any hardware replaced. Which component is most likely failing?

A.Backlight

B.Digitizer

C.Inverter

D.Video card

AnswerA

The backlight provides illumination for the LCD screen. Over time, backlights can degrade, especially in older laptops, leading to reduced brightness even at maximum settings. Since the laptop is five years old and the display is uniformly dim, a failing backlight is the most probable cause. Replacing the backlight or the entire display assembly would resolve the issue.

Why this answer

The backlight is responsible for illuminating the LCD panel. In an aging laptop, the backlight can lose brightness over time, resulting in a dim display even at maximum brightness. The other components would produce different symptoms, such as no backlight, touch issues, or image distortion.

Therefore, the backlight is the most likely failing component.

Exam trap

The trap here is assuming any display issue is caused by the video card, but gradual dimming points to backlight degradation.

Full explanation →

54

MCQeasy

A developer wants to represent the logic of a program before writing code. The diagram should show decisions with diamond shapes and processes with rectangles. Which representation is the developer creating?

A.Algorithm

B.Data structure

C.Pseudocode

D.Flowchart

AnswerD

A flowchart uses standard symbols: diamonds for decisions and rectangles for processes, exactly matching the developer's requirement to map program logic before coding. Unlike pseudocode or structured English, it is a visual diagram, satisfying the stem's demand for shapes representing decisions and processes.

Why this answer

A flowchart is the only representation that uses standardized geometric symbols to depict program logic visually: diamonds represent decisions (conditional branches), rectangles represent processes or actions, parallelograms represent input/output, and arrows show control flow. The question explicitly describes these shapes, which are the defining visual vocabulary of a flowchart. Algorithms, data structures, and pseudocode do not use diamond/rectangle diagrams.

Exam trap

FC0-U71 often tests the confusion between flowchart and pseudocode/algorithm by describing the visual symbols (diamonds, rectangles) — candidates who focus only on 'representing program logic' may pick algorithm or pseudocode and miss that the question is specifically asking about the graphical diagram.

How to eliminate wrong answers

Option A is wrong because an algorithm is a step-by-step logical procedure or set of rules for solving a problem — it is conceptual and can be expressed in plain language, pseudocode, or code, but it is not itself a shape-based diagram. Option B is wrong because a data structure is a way of organizing and storing data in memory (e.g., arrays, linked lists, trees, hash tables) to enable efficient access and modification; it describes data organization, not program control flow or decision logic. Option C is wrong because pseudocode is a text-based, informal high-level description of an algorithm that resembles programming language syntax but is not executable and contains no graphical symbols like diamonds or rectangles.

Full explanation →

55

MCQhard

A developer writes a function that calculates the average of a list of numbers. The function works correctly when the list contains values, but crashes when the list is empty. Which programming concept should the developer apply to handle the empty list case gracefully?

A.Inheritance

B.Polymorphism

C.Recursion

D.Exception handling

AnswerD

Exception handling allows the function to catch a division-by-zero or empty-list error and respond gracefully, such as returning zero or a message. Since the crash occurs at runtime when the list is empty, wrapping the calculation in a try-catch block directly addresses the failure and prevents the program from terminating unexpectedly, making it the appropriate concept here.

Why this answer

The function fails at runtime when the list is empty, likely due to division by zero. Exception handling lets the developer catch that error and define a graceful response, such as returning a default value or message. Recursion, inheritance, and polymorphism are unrelated to runtime error management and would not prevent the crash.

Exam trap

The trap here is selecting recursion because it involves lists, overlooking that the real issue is an unhandled runtime error requiring exception handling.

Full explanation →

56

MCQmedium

A technician needs to convert a decimal IP address octet value of 192 to binary. Which of the following is the correct binary representation?

A.10101010

B.11000000

C.11110000

D.10000001

AnswerB

192 equals 128 + 64, so bits 7 and 6 are set while the remaining six bits stay 0, giving 11000000. This satisfies the stem's requirement to convert the decimal octet 192 into its exact eight-bit binary representation.

Why this answer

To convert decimal 192 to binary, decompose it into powers of two: 128 + 64 = 192, so bits 7 and 6 (values 128 and 64) are set to 1 and the remaining six bits are 0. That yields 11000000. This is a standard octet value recognizable as the first octet of a Class C private range (192.168.x.x).

Exam trap

FC0-U71 often tests binary conversion with distractors that are valid-looking octets (170, 240, 129), catching candidates who guess by pattern rather than summing powers of two.

How to eliminate wrong answers

Option A (10101010) equals 128 + 32 + 8 + 2 = 170, not 192. Option C (11110000) equals 128 + 64 + 32 + 16 = 240, which is the subnet mask octet 255.255.255.240, not 192. Option D (10000001) equals 128 + 1 = 129, which is a common loopback-adjacent value but not 192.

Full explanation →

57

MCQmedium

A user reports that their computer has been displaying unwanted pop-up advertisements frequently. Which type of malware is most likely responsible?

A.Ransomware

B.Adware

C.Spyware

D.Rootkit

AnswerB

Adware specifically injects or displays unwanted advertisements, matching the frequent pop-ups described. Unlike spyware, which covertly gathers data, or a trojan, which masquerades as legitimate software, adware's primary payload is advertising delivery. This directly satisfies the stem's constraint of persistent unwanted pop-up advertisements on the user's computer.

Why this answer

Adware displays unwanted advertisements, often in pop-ups or banners.

Full explanation →

58

Multi-Selecthard

A small business needs to manage customer contacts, sales leads, and communication history. Which THREE types of software could be used? (Choose THREE.)

Select 3 answers

A.Accounting software.

B.Word processing software.

C.Customer relationship management (CRM) software.

D.Database software.

E.Spreadsheet software.

AnswersC, D, E

CRM software directly stores contacts, tracks sales leads through pipelines, and logs communication history in one system, matching all three stated needs. It is purpose-built for exactly this scenario, unlike generic tools that require manual structuring.

Why this answer

CRM software (C) is purpose-built to manage customer contacts, sales leads, and communication history, tracking interactions and pipelines in one system. Database software (D) can store and relate customer, lead, and interaction records, supporting queries and reporting for a small business. Spreadsheet software (E) can serve as a lightweight contact/lead tracker with columns for names, statuses, and communication notes, and is commonly used by small businesses without a dedicated CRM.

Accounting software (A) focuses on financial transactions, ledgers, and invoicing rather than contact or lead management. Word processing software (B) only creates text documents and lacks structured data management for contacts, leads, or communication history.

Exam trap

The trap here is that candidates may confuse general-purpose tools like spreadsheets or databases with specialized CRM software, not realizing that while spreadsheets can store data, they lack the automated workflow and relationship tracking features of a dedicated CRM.

Full explanation →

59

MCQmedium

A developer needs to represent the logic of a program that decides whether a user is eligible for a discount. The process includes conditions (e.g., 'is member?') and actions (e.g., 'apply 10% discount'). Which tool would best visually represent this logic using standardized symbols like diamonds for decisions and rectangles for processes?

A.Pseudocode

B.Data flow diagram

C.Flowchart

D.UML class diagram

AnswerC

A flowchart uses standardised ANSI symbols, diamonds for decisions and rectangles for processes, mapping conditions such as membership to actions such as applying a discount. This visual notation represents branching program logic directly, unlike pseudocode or a data dictionary, which lack decision symbols.

Why this answer

A flowchart uses standardized symbols—diamonds for decisions, rectangles for processes, parallelograms for input/output, and ovals for start/end—to visually represent program logic and control flow. It is the canonical tool for depicting conditional branching such as eligibility checks and resulting actions.

Exam trap

FC0-U71 often tests whether candidates can distinguish visual modeling tools (flowchart, DFD, UML) from textual logic representations (pseudocode), and whether they know which symbol set corresponds to decision logic versus data movement.

How to eliminate wrong answers

Option A is wrong because pseudocode is a text-based, informal high-level description of logic, not a visual tool with standardized symbols. Option B is wrong because a data flow diagram models how data moves between processes, data stores, and external entities, not decision logic or control flow. Option D is wrong because a UML class diagram models object-oriented structure (classes, attributes, methods, relationships), not procedural decision logic.

Full explanation →

60

Multi-Selecthard

A technician is cleaning up a Windows workstation that has accumulated many installed programs. The technician wants to remove applications that were installed as part of a bundled package and also wants to free disk space consumed by leftover installation files. Which TWO actions should the technician perform? (Choose two.)

Select 2 answers

A.Disable the Windows Installer service in Services.msc

B.Delete the contents of the Program Files directory

C.Run Disk Cleanup and select the temporary files and Windows Update cleanup categories

D.Move the pagefile to a different drive

E.Use the Programs and Features control panel to uninstall the bundled applications

AnswersC, E

Disk Cleanup targets files that are safe to remove, such as temporary files and superseded Windows Update packages, directly addressing the goal of reclaiming disk space. Selecting these categories removes installation leftovers that accumulate over time without touching installed applications, complementing the uninstall step performed through Programs and Features.

Why this answer

Removing bundled applications requires invoking each program's registered uninstaller, which is exposed through Programs and Features, so that associated files and registry entries are removed together. Reclaiming space from leftover installation files is a separate task handled by Disk Cleanup categories such as temporary files and Windows Update cleanup. Manually deleting Program Files, disabling the installer service, or relocating the pagefile do not accomplish either goal.

Exam trap

The trap here is treating disk cleanup and application removal as the same task, when each requires a different built-in tool.

Full explanation →

61

MCQmedium

Which of the following file attributes on a Windows system would prevent a user from accidentally modifying a document when set?

A.Hidden

B.Read-only

C.System

D.Archive

AnswerB

Setting the read-only attribute blocks write and modify operations on the file, so any attempt to save changes is refused until the attribute is cleared. This directly satisfies the stem's requirement to prevent accidental modification of a document, while still allowing the user to open and read it.

Why this answer

The read-only attribute in Windows prevents a file from being modified or deleted (though it can be overridden by the user). Hidden hides the file, system marks it as a system file, and archive is used for backup.

Full explanation →

62

Multi-Selecteasy

Which TWO of the following are examples of input devices? (Select TWO).

Select 2 answers

A.Printer

B.Speaker

C.Monitor

D.Mouse

E.Keyboard

AnswersD, E

A mouse translates physical hand movement into digital cursor coordinates and click events, feeding data into the computer for processing. This satisfies the stem's requirement for an input device, since input hardware sends commands or data to the system rather than receiving output from it.

Why this answer

The mouse and keyboard are classic examples of input devices because they allow users to send data and commands to a computer. A mouse translates physical movement and button clicks into cursor control signals, while a keyboard converts key presses into electrical signals that the system interprets as characters or commands. Both operate by sending input to the computer for processing, not by receiving or outputting data.

Exam trap

The trap here is that candidates may confuse the direction of data flow, mistakenly thinking that devices like printers or monitors can also accept user input (e.g., via touchscreens or control panels), but in their standard definition as peripherals, they are classified strictly as output devices unless specified otherwise.

Full explanation →

63

MCQhard

A company's server room is experiencing intermittent overheating. The administrator notices that the perforated floor tiles are blocked by equipment. What is the most likely consequence of this obstruction?

A.Reduced cooling efficiency and hot spots

B.Increased electrical load on the UPS

C.Increased humidity levels

D.Reduced battery backup time

AnswerA

Perforated tiles supply the cold-air plenum's airflow into the cold aisle. Blocking them starves racks of supply air, so cooling efficiency drops and hot spots form where airflow is insufficient, directly matching the intermittent overheating described.

Why this answer

Blocking perforated floor tiles restricts the flow of cold air from the raised-floor plenum into the server room. This reduces the overall cooling efficiency of the HVAC system and creates localized hot spots around the obstructed tiles, which can lead to equipment overheating and failure.

Exam trap

The trap here is that candidates may confuse airflow obstruction with electrical or power-related issues, but the direct consequence is always thermal—reduced cooling and hot spots—not changes to the UPS or battery system.

How to eliminate wrong answers

Option B is wrong because an increased electrical load on the UPS would result from adding more equipment or increasing power draw, not from obstructing airflow. Option C is wrong because blocked floor tiles reduce airflow, which typically lowers humidity levels (as cold air carries less moisture) or has no direct effect on humidity; increased humidity is more often caused by poor sealing or HVAC malfunction. Option D is wrong because reduced battery backup time is a function of battery age, load, or capacity, not of airflow obstruction in the server room.

Full explanation →

64

MCQeasy

Refer to the exhibit. A user cannot access the internet. What is the most likely issue based on the configuration shown?

A.The default gateway is missing

B.The DNS server is not configured

C.The IP address is invalid

D.The subnet mask is incorrect

AnswerA

A missing default gateway leaves the host with no route to off-subnet destinations, so all internet-bound traffic is dropped despite valid IP address and subnet mask. The exhibit shows no gateway configured, directly explaining the total loss of external connectivity while local subnet communication still functions.

Why this answer

The exhibit shows an IP address of 192.168.1.10 with a subnet mask of 255.255.255.0, but no default gateway is configured. Without a default gateway, the device can communicate within its local subnet (192.168.1.0/24) but cannot route traffic to any external network, including the internet. The default gateway is the router's IP address that provides the next-hop path for all off-subnet traffic.

Exam trap

CompTIA often tests the misconception that a missing DNS server prevents internet access entirely, but the real issue is the lack of a default gateway for routing traffic beyond the local subnet.

How to eliminate wrong answers

Option B is wrong because DNS is used for name resolution, not for routing; even without DNS, the user could access the internet by IP address. Option C is wrong because 192.168.1.10 is a valid private IP address within the 192.168.0.0/16 range. Option D is wrong because 255.255.255.0 is the correct subnet mask for a /24 network, matching the IP address 192.168.1.10.

Full explanation →

65

MCQmedium

Which DBMS is an example of a proprietary relational database system?

A.MySQL

B.PostgreSQL

C.SQLite

D.Oracle Database

AnswerD

Oracle Database is a proprietary relational DBMS, satisfying the stem's requirement for a commercial, closed-source system. Unlike open-source alternatives such as MySQL or PostgreSQL, its source code is owned by Oracle Corporation and licensed commercially, which is precisely the defining characteristic of a proprietary relational database system.

Why this answer

Oracle Database is a proprietary relational database management system owned by Oracle Corporation. It is commercial, closed-source, and requires a license for use, which distinguishes it from open-source alternatives. Therefore, it is the correct example of a proprietary relational DBMS.

Exam trap

FC0-U71 often tests the distinction between open-source and proprietary software; the trap is that MySQL is owned by Oracle, leading some to think it is proprietary, but it remains open-source under GPL.

How to eliminate wrong answers

Option A is wrong because MySQL is an open-source relational database (though now owned by Oracle, it is available under GPL and is not proprietary in the same sense; there is a commercial edition, but the core is open-source). Option B is wrong because PostgreSQL is an open-source object-relational database under the PostgreSQL License, which is permissive. Option C is wrong because SQLite is a public-domain, open-source embedded relational database, not proprietary.

Full explanation →

66

MCQhard

A database administrator needs to ensure that only authorized users can access sensitive data. Which of the following concepts describes this requirement?

A.Availability

B.Non-repudiation

C.Integrity

D.Confidentiality

AnswerD

Confidentiality ensures sensitive data is disclosed only to authorised users, enforced through access controls, encryption, and authentication. This satisfies the stated requirement precisely, whereas integrity addresses unauthorised modification, availability addresses uptime, and non-repudiation addresses proving an action occurred.

Why this answer

Confidentiality ensures that sensitive data is accessible only to authorized users, typically enforced through access controls, encryption, and authentication mechanisms. In database administration, this is implemented via permissions, roles, and encryption at rest (e.g., AES-256) to prevent unauthorized disclosure.

Exam trap

The trap here is that candidates often confuse confidentiality with integrity, mistakenly thinking that preventing unauthorized changes (integrity) is the same as preventing unauthorized viewing (confidentiality), but the CIA triad separates these clearly.

How to eliminate wrong answers

Option A is wrong because availability refers to ensuring systems and data are accessible when needed (e.g., via redundancy or failover), not restricting access to authorized users. Option B is wrong because non-repudiation provides proof of origin or delivery (e.g., digital signatures), preventing denial of actions, but does not control who can view data. Option C is wrong because integrity ensures data is accurate and unaltered (e.g., via checksums or hashing), not that access is limited to authorized users.

Full explanation →

67

MCQhard

After a network upgrade, a user reports that their computer intermittently loses network connectivity. The link light remains on, but the activity light flashes rapidly and irregularly. What is the most likely cause?

A.IP address conflict

B.Bad Ethernet cable

C.Driver corruption

D.Faulty NIC

AnswerB

A rapidly, irregularly flashing activity light with the link light still lit indicates frames are being transmitted but corrupted, typically by a damaged or poorly terminated cable. Replacing the Ethernet cable satisfies the intermittent-connectivity symptom without a link-state failure.

Why this answer

The intermittent connectivity with the link light on but the activity light flashing rapidly and irregularly is a classic symptom of a faulty or marginal Ethernet cable. A bad cable can cause excessive collisions or frame errors, leading to retransmissions that manifest as rapid, irregular activity light flashing while the physical link (link light) remains established. This is distinct from issues like IP conflicts or driver corruption, which typically do not produce this specific link/activity light behavior.

Exam trap

The trap here is that candidates often confuse physical layer symptoms (bad cable) with Layer 2 or Layer 3 issues (IP conflict, driver corruption), assuming that intermittent connectivity must be a software or configuration problem rather than a hardware fault.

How to eliminate wrong answers

Option A is wrong because an IP address conflict would cause complete loss of network access or intermittent connectivity, but it would not cause the activity light to flash rapidly and irregularly while the link light remains on; IP conflicts are a Layer 3 issue and do not affect physical layer indicators. Option C is wrong because driver corruption typically results in the NIC not being recognized or failing to establish a link at all, often with the link light off or flickering erratically, not with a steady link light and rapid activity flashing. Option D is wrong because a faulty NIC usually causes the link light to be off or unstable, or the NIC may fail to initialize entirely; a faulty NIC would not maintain a steady link light while producing rapid, irregular activity flashes.

Full explanation →

68

MCQhard

A technician is troubleshooting a network issue where a client cannot reach a server on a different subnet. The client's IP is 192.168.1.10/24, and the server's IP is 10.0.0.50/24. The client can ping its default gateway. Which device is most likely misconfigured?

A.The client's DNS settings

B.The router between subnets

C.The server's firewall

D.The switch

AnswerB

The router between subnets must route traffic across the 192.168.1.0/24 and 10.0.0.0/24 boundaries, since the client's /24 mask confines it to its own subnet. The client reaching its gateway proves local connectivity works, so the fault lies in the router's routing configuration or interfaces, not the client or server.

Why this answer

The client can ping its default gateway, indicating that its local subnet (192.168.1.0/24) connectivity and the gateway's interface are working. However, the client cannot reach a server on a different subnet (10.0.0.0/24). This points to a routing issue: the router between the subnets is likely misconfigured—either missing a route to the 10.0.0.0/24 network or not performing inter-VLAN routing correctly.

Without proper routing, the router drops or fails to forward packets destined for the server's subnet.

Exam trap

CompTIA often tests the misconception that a client's inability to reach a different subnet is due to DNS or the server's firewall, but the key clue is that the client can ping its default gateway, isolating the problem to Layer 3 routing between subnets.

How to eliminate wrong answers

Option A is wrong because DNS settings resolve hostnames to IP addresses, but the client already knows the server's IP (10.0.0.50) and can ping the gateway, so DNS is irrelevant to the subnet reachability issue. Option C is wrong because the server's firewall would only block traffic if packets reached the server; the client cannot even get past the router, so the firewall is not the first point of failure. Option D is wrong because a switch operates at Layer 2 and forwards frames within the same subnet; the client can ping its gateway, proving the switch is correctly forwarding traffic on the local VLAN.

Full explanation →

69

MCQmedium

A user wants to prevent unauthorized access to their laptop if stolen. Which is the best method?

A.Antivirus

B.Use a strong password

C.Firewall

D.Enable BitLocker

AnswerD

BitLocker encrypts the entire drive, so removing the disk or booting another operating system yields only ciphertext. The pre-boot authentication requirement blocks access without the correct credentials, directly preventing unauthorised data access on a stolen laptop.

Why this answer

BitLocker is a full-disk encryption feature built into Windows that encrypts the entire drive, making data inaccessible without the decryption key. If the laptop is stolen, the thief cannot read any files even if they remove the hard drive and connect it to another system. This directly prevents unauthorized access to data, unlike other options that only protect against network or software threats.

Exam trap

The trap here is that candidates confuse authentication (password) with encryption (BitLocker), assuming a strong password alone protects data against physical theft, but it only protects against casual login attempts, not direct disk access.

How to eliminate wrong answers

Option A is wrong because antivirus software detects and removes malware but does not protect data if the laptop is physically stolen and the drive is accessed offline. Option B is wrong because a strong password only protects the OS login screen; a thief can bypass it by booting from a live USB or removing the hard drive to read data directly. Option C is wrong because a firewall controls network traffic but offers no protection against physical theft or offline access to the storage device.

Full explanation →

70

MCQeasy

A technician is setting up a brand-new all-in-one desktop for a home user. The user wants to connect to the internet using the existing home router without running any cables. Which built-in capability should the technician verify is working?

A.Wi-Fi adapter

B.Ethernet port

C.Optical drive

D.Bluetooth adapter

AnswerA

A Wi-Fi adapter allows the desktop to connect wirelessly to the home router, which is exactly what the user requested. All-in-one systems often include integrated Wi-Fi, so the technician should confirm it is enabled and can see the network. This satisfies the no-cables requirement directly.

Why this answer

The user wants internet access without cables, so the desktop must have a working Wi-Fi adapter to connect to the home router wirelessly. Ethernet would require a cable, while Bluetooth and an optical drive do not provide network access at all. Only Wi-Fi meets the stated need.

Exam trap

The trap here is confusing any wireless technology, such as Bluetooth, with the specific wireless networking standard used to reach a router for internet access.

Full explanation →

71

MCQhard

A table has columns: EmployeeID (PK), DepartmentID, DepartmentName, Salary. Which normal form violation exists?

A.No violation

B.Second Normal Form

C.First Normal Form

D.Third Normal Form

AnswerD

DepartmentName depends on DepartmentID, not directly on the primary key EmployeeID, creating a transitive dependency. Third Normal Form eliminates such non-key attributes dependent on other non-key attributes, so the table violates 3NF. This satisfies the stem's requirement to identify the specific normal form breached by the redundant DepartmentName column.

Why this answer

The table violates Third Normal Form (3NF) because DepartmentName depends on DepartmentID, which is not a candidate key. In 3NF, every non-key column must depend solely on the primary key (EmployeeID), not on another non-key column. This transitive dependency (EmployeeID → DepartmentID → DepartmentName) requires splitting the table into Employees and Departments to achieve 3NF.

Exam trap

The trap here is that candidates often confuse transitive dependencies with partial dependencies, leading them to incorrectly select Second Normal Form (2NF) instead of Third Normal Form (3NF).

How to eliminate wrong answers

Option A is wrong because the table clearly has a transitive dependency, so a normal form violation exists. Option B is wrong because Second Normal Form (2NF) is satisfied: there is no partial dependency since the primary key is a single column (EmployeeID), and all non-key columns are fully functionally dependent on it. Option C is wrong because First Normal Form (1NF) is satisfied: all columns contain atomic values, and there are no repeating groups or arrays.

Full explanation →

72

MCQhard

A network technician is troubleshooting a slow wireless connection in a crowded office. The office uses many Wi-Fi networks and devices. Which Wi-Fi standard would be best to minimize interference and provide faster speeds?

A.802.11g

B.802.11n (Wi-Fi 4)

C.802.11ax (Wi-Fi 6)

D.802.11ac (Wi-Fi 5)

AnswerC

Wi-Fi 6 offers better performance in dense deployments.

Why this answer

802.11ax (Wi-Fi 6) is the best choice because it operates on both 2.4 GHz and 5 GHz (and 6 GHz in Wi-Fi 6E) and introduces OFDMA, MU-MIMO, BSS Coloring, and Target Wake Time. BSS Coloring specifically reduces interference in dense environments by allowing overlapping BSSs to distinguish each other's frames, and OFDMA improves spectral efficiency for many simultaneous clients. These features directly address the crowded-office scenario.

Exam trap

FC0-U71 often tests the misconception that the newest/highest-numbered standard is always best, but the real trap is confusing raw throughput (802.11ac) with density efficiency (802.11ax) in interference-heavy environments.

How to eliminate wrong answers

Option A is wrong because 802.11g is a legacy 2.4 GHz-only standard capped at 54 Mbps, highly susceptible to interference from other 2.4 GHz networks and non-Wi-Fi devices. Option B is wrong because 802.11n (Wi-Fi 4) supports 2.4/5 GHz but lacks OFDMA and BSS Coloring, so it degrades badly in high-density deployments. Option D is wrong because 802.11ac (Wi-Fi 5) is 5 GHz-only and, while faster than 802.11n, lacks OFDMA and BSS Coloring, making it less effective than Wi-Fi 6 in dense, interference-heavy environments.

Full explanation →

73

MCQmedium

A user wants to connect an external storage drive to a laptop for fast file transfers. The laptop has USB-A, USB-C, and Thunderbolt 3 ports. Which connection provides the fastest theoretical data transfer speed?

A.USB-A 2.0

B.USB-A 3.0

C.USB-C 3.1

D.Thunderbolt 3

AnswerD

Thunderbolt 3 provides 40Gbps over USB-C, exceeding USB 3.2 Gen 2's 10Gbps and far surpassing USB-A implementations. This satisfies the stem's fastest-transfer constraint, since the drive's own interface, not the port alone, ultimately limits real-world throughput.

Why this answer

Thunderbolt 3 offers a theoretical bandwidth of 40 Gbps, far exceeding USB-A 2.0 (480 Mbps), USB-A 3.0 (5 Gbps), and USB-C 3.1 (10 Gbps). For an external storage drive, Thunderbolt 3 therefore provides the fastest theoretical transfer rate among the listed options, making it the correct choice.

Exam trap

FC0-U71 often tests the assumption that USB-C always means the fastest speed, when in fact USB-C is just a connector — the underlying protocol (USB 3.1 vs Thunderbolt 3) determines the actual bandwidth.

How to eliminate wrong answers

Option A is wrong because USB-A 2.0 is limited to 480 Mbps, the slowest of all listed interfaces. Option B is wrong because USB-A 3.0 (USB 3.1 Gen 1) tops out at 5 Gbps, well below Thunderbolt 3. Option C is wrong because USB-C 3.1 (Gen 2) delivers 10 Gbps, which is fast but still only a quarter of Thunderbolt 3's 40 Gbps.

Full explanation →

74

Multi-Selectmedium

A user wants to store a file with lossless compression. Which TWO of the following file formats support lossless compression? (Select TWO.)

Select 2 answers

A.MP3

B.PNG

C.BMP

D.JPEG

E.ZIP

AnswersB, E

PNG uses DEFLATE compression, which is lossless, so the original image data is fully reconstructed on decompression. This satisfies the requirement to store a file without discarding any data, unlike lossy formats such as JPEG.

Why this answer

PNG and ZIP are lossless; JPEG is lossy; MP3 is lossy; BMP is uncompressed.

Full explanation →

75

Multi-Selecthard

A software engineer is debugging a program and needs to identify potential issues. Which THREE tools or techniques are commonly used in debugging? (Select THREE.)

Select 3 answers

A.Compiler

B.Log files

C.Breakpoints

D.Source code editor

E.Step-through execution

AnswersB, C, E

Log files record runtime events, errors and stack traces, giving the engineer historical evidence of what the program actually did before failing. This satisfies the debugging need to identify potential issues without halting execution, complementing interactive tools that inspect live state.

Why this answer

Log files (B) are correct because they record runtime events, errors, and warnings that help engineers trace the sequence of actions leading to a defect. Breakpoints (C) are correct because they let a debugger pause program execution at a specific line or condition, allowing the engineer to inspect variables, call stack, and memory state at that moment. Step-through execution (E) is correct because it lets the engineer execute code line by line (step over, step into, step out) to observe how state changes and pinpoint where behavior diverges from expectations.

A compiler (A) only translates source code into machine code or bytecode and reports syntax/type errors, but it does not provide runtime debugging capabilities. A source code editor (D) is merely a tool for writing and editing code and, while often integrated with debuggers, is not itself a debugging technique.

Full explanation →

Page 1 of 14

All pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14

Practice FC0-U71 by domain

Target a specific domain to shore up weak areas.

Applications and Software Data and Database Fundamentals Software Development Concepts Tech Concepts and Terminology Infrastructure Security

See all domains with question counts →