988 questions total · 14pages · All types, answers revealed
A user wants to store a file with lossless compression. Which TWO of the following file formats support lossless compression? (Select TWO.)
PNG uses lossless compression.
Why this answer
PNG and ZIP are lossless; JPEG is lossy; MP3 is lossy; BMP is uncompressed.
A software developer is using an integrated development environment (IDE) to write a Python script that processes a CSV file containing customer data. The script uses a for loop to iterate over rows and calculates a total purchase amount. When the developer runs the script, it throws an error: "IndexError: list index out of range". The developer suspects the error occurs when the script tries to access a column that doesn't exist in some rows. Which debugging strategy should the developer use first to isolate the issue?
Debugging allows step-by-step execution to identify which row and column access causes the IndexError.
Why this answer
Placing a breakpoint inside the loop and stepping through each row in debug mode allows the developer to inspect the actual data in each row and identify exactly which row causes the IndexError. This is the most direct and efficient first step to isolate the issue, as it lets the developer see the state of the list and the index being accessed at the moment of failure.
Exam trap
The trap here is that candidates often choose Option B (try-except) because it seems like a quick fix, but the question asks for the first step to isolate the issue, not to patch it—CompTIA tests the understanding that debugging should identify the root cause before applying a solution.
How to eliminate wrong answers
Option A is wrong because rewriting the script to use a dictionary does not address the root cause—the error is about accessing an index that doesn't exist, and a dictionary would still need to handle missing keys or columns. Option B is wrong because adding a try-except block merely hides the symptom by catching the exception and continuing processing, which could lead to incorrect results or data corruption without fixing the underlying data inconsistency. Option C is wrong because examining the CSV file manually is a valid step but is less efficient than using the debugger to pinpoint the exact row and column causing the error, especially in large files.
Which two of the following are types of malware? (Choose two.)
Ransomware is malware that encrypts data.
Why this answer
Ransomware is a type of malware that encrypts a victim's files or locks their system, demanding a ransom payment for the decryption key. Trojan horse malware disguises itself as legitimate software but performs malicious actions. Both are forms of malicious software (malware).
Phishing is a social engineering attack, not malware; DDoS is a network attack; adware can be annoying but is often not classified as malware unless it operates without consent. Therefore, the two correct answers are B (Ransomware) and D (Trojan).
Exam trap
CompTIA ITF+ often tests the distinction between attack types and malware types, so the trap here is that candidates confuse phishing (a social engineering technique) or DDoS (a network attack) with actual malicious software, because all are security threats but only ransomware and trojans are forms of malware.
A software engineer is debugging a program and needs to identify potential issues. Which THREE tools or techniques are commonly used in debugging? (Select THREE.)
Logs record events for analysis.
Why this answer
Breakpoints pause execution to inspect state, step-through executes line by line, and log files record events. Source code is not a tool, compilation is a build step.
A user needs to collaborate on a document with colleagues in real-time. Which type of application should they use?
Cloud suites like Google Workspace allow simultaneous editing.
Why this answer
A cloud-based productivity suite (e.g., Microsoft 365, Google Workspace) stores documents on remote servers and uses WebDAV or proprietary sync protocols (like Google Drive API) to enable multiple users to edit the same file simultaneously. This real-time collaboration relies on operational transformation or conflict-free replicated data types (CRDTs) to merge edits without conflicts. Local or offline tools lack the network infrastructure to synchronize changes across users in real time.
Exam trap
The trap here is that candidates confuse 'collaboration' with simply sharing files via email or local editing, overlooking that real-time sync requires a cloud-based platform with live co-authoring protocols.
How to eliminate wrong answers
Option A is wrong because an email client (e.g., Outlook, Gmail) is designed for asynchronous message exchange via SMTP/IMAP, not for real-time document editing; it cannot propagate live changes to a shared file. Option B is wrong because a file compression tool (e.g., WinZip, 7-Zip) reduces file size using algorithms like DEFLATE but provides no networking or collaboration features. Option C is wrong because a local word processor (e.g., Microsoft Word installed locally) operates on a single file system without network connectivity or multi-user sync capabilities, so it cannot support real-time co-authoring.
Which of the following SQL statements will add a new row to the 'Products' table?
Correct syntax for inserting a new row.
Why this answer
INSERT INTO table VALUES (value1, value2, ...) adds a new row.
A sales database has a Customers table with CustomerID as the primary key and an Orders table that includes CustomerID. Which type of relationship is typically established between Customers and Orders?
Correct; one customer can have many orders.
Why this answer
A customer can have multiple orders, but each order belongs to one customer, so it's a one-to-many relationship.
A computer has 8 GB of RAM. If the operating system and applications are using 3.2 GB, how much RAM is available for other processes?
8 - 3.2 = 4.8 GB.
Why this answer
Available RAM = total - used = 8 GB - 3.2 GB = 4.8 GB.
An office printer frequently jams and produces poor-quality color prints. The office manager decides to replace it with a printer that is faster and more cost-effective for high-volume black-and-white text documents. Which type of printer is most appropriate?
Laser is ideal for high-volume text.
Why this answer
Laser printers are faster and more cost-effective for high-volume black-and-white text printing compared to inkjet printers.
An API allows software to communicate via defined protocols.
Which of the following is a best practice for creating a strong password?
Correct: a long passphrase with complexity is strong.
Why this answer
Strong passwords should be at least 12 characters, include a mix of uppercase, lowercase, numbers, and symbols, and should not be reused across accounts.
A security analyst discovers that a file on a server has been modified without authorization. Which element of the CIA triad has been compromised?
Integrity is compromised when data is altered without authorization.
Why this answer
Integrity ensures that data is not altered unexpectedly. Unauthorized modification violates integrity.
A small office uses a single ISP-provided modem/router combination device. Employees need to connect their desktops and printers to the network. Which of the following devices would allow them to connect multiple wired devices and also extend wireless coverage?
A switch provides multiple Ethernet ports to connect desktops and printers, and it works with the existing ISP router's wireless to provide both wired and wireless connectivity.
Why this answer
A switch allows multiple wired devices like desktops and printers to connect to the network via Ethernet ports. The existing ISP modem/router combo already provides wireless coverage, so a switch adds wired ports without additional routing functions. While a switch does not extend wireless coverage, the built-in wireless of the ISP device can be used; if further wireless extension is needed, a separate wireless access point would be required.
Among the given options, only the switch provides the necessary wired ports for the multiple devices.
Exam trap
Candidates often think a wireless access point can both add wired ports and extend Wi-Fi, but typical WAPs have only one uplink port. A switch provides the multiple wired ports needed, while the existing router's Wi-Fi covers wireless needs.
How to eliminate wrong answers
Option B (Modem) is wrong because a modem only converts signals between the ISP and the local network; it typically has a single Ethernet port and does not provide additional wired ports or wireless coverage. Option C (Switch) is wrong because a switch expands the number of wired Ethernet ports but does not include any wireless functionality to extend Wi-Fi coverage. Option D (Hub) is wrong because a hub is a legacy device that repeats all traffic to every port, lacks wireless capability, and is inefficient for modern networks due to collision domains.
Which internet connection type provides symmetric upload and download speeds over a fiber-optic cable?
Fiber-optic cables provide symmetric speeds, often up to 1 Gbps or more.
Why this answer
Fiber-optic internet (often referred to as Fiber-to-the-Home or FTTH) uses light pulses transmitted through glass strands to deliver data. Unlike DSL or cable, fiber connections are inherently symmetric, meaning they provide identical upload and download speeds because the technology does not rely on asymmetric frequency division or shared coaxial infrastructure. This makes fiber the correct answer for symmetric speeds.
Exam trap
The trap here is that candidates confuse 'fiber' as a general term for any high-speed internet, but the question specifically tests the property of symmetric speeds, which is unique to fiber-optic connections among the listed options, not just a marketing label.
How to eliminate wrong answers
Option A is wrong because satellite internet uses radio waves to communicate with orbiting satellites, which introduces high latency and typically asymmetric speeds (download faster than upload) due to the nature of the satellite link and power constraints. Option C is wrong because cable internet (DOCSIS) uses coaxial cable and shared bandwidth, with upstream channels allocated less spectrum than downstream, resulting in asymmetric speeds (e.g., 300 Mbps down / 10 Mbps up). Option D is wrong because DSL (Digital Subscriber Line) uses telephone lines and is inherently asymmetric (ADSL) or, in the case of SDSL, is rarely deployed and still limited by copper line quality and distance, not fiber-optic cable.
What is the primary risk of using public Wi-Fi without a VPN?
Correct. Without encryption, data can be intercepted.
Why this answer
Public Wi-Fi is often unencrypted, allowing attackers to intercept data transmitted over the network. A VPN encrypts traffic, protecting data in transit.
Refer to the exhibit. This JSON policy is associated with a user. Which of the following actions is the user permitted to perform?
Correct. The policy allows the GetObject action, which permits downloading objects from the bucket.
Why this answer
The JSON policy grants the 'read object' action on the example-bucket storage location, which allows the user to retrieve (download) objects from that bucket. The Effect is set to 'Allow', so the policy explicitly permits this action. No other actions are listed in the Statement, so only downloads are permitted.
Exam trap
The trap here is that candidates often assume that being able to download files implies the ability to list or upload, but access control policies require explicit permissions for each distinct action, and the absence of list or write actions means those actions are denied by default.
How to eliminate wrong answers
Option B is wrong because the policy does not include s3:PutObject, which is required to upload files to an S3 bucket. Option C is wrong because the policy does not include s3:DeleteObject, which is necessary to delete files from an S3 bucket. Option D is wrong because the policy does not include s3:ListBucket, which is needed to list the contents of a bucket (the ListObjects operation).
Which TWO of the following are appropriate steps when troubleshooting a user's inability to access the internet? (Select TWO.)
Verifies if the workstation has a valid IP.
Why this answer
Checking the IP address configuration is a fundamental first step in troubleshooting network connectivity. A misconfigured IP address, such as an Automatic Private IP Addressing (APIPA) address in the 169.254.x.x range, indicates that the device failed to obtain a valid IP from a DHCP server, which would prevent internet access. Verifying the IP configuration with commands like `ipconfig` (Windows) or `ifconfig` (Linux/macOS) helps identify if the device has a proper IP, subnet mask, and default gateway.
Exam trap
The trap here is that candidates often confuse general troubleshooting steps (like restarting the computer or power cycling the router) with the specific, targeted diagnostic steps required to isolate a network connectivity issue, leading them to select broad actions instead of precise checks like verifying the IP configuration or pinging the default gateway.
You are a desktop support technician for a small accounting firm. The firm uses a legacy accounting application that only runs on Windows 7. The application stores data in a local SQL Server Express database. A user reports that since the IT department applied a mandatory security update last night, the accounting application fails to start and displays an error: 'Cannot connect to database server. Check that the SQL Server (MSSQLSERVER) service is running.' You verify that the SQL Server service is set to Automatic but is not running. When you attempt to start it manually, it fails with error 1069: 'The service did not start due to a logon failure.' Which of the following is the MOST likely cause and solution?
Error 1069 indicates a logon failure, typically due to an incorrect password.
Why this answer
Error 1069 specifically indicates a logon failure for the service account. When a mandatory security update is applied, it may enforce password expiration policies or reset the service account password, causing the SQL Server service to fail to start. Updating the service logon credentials in the Services console resolves the issue.
Exam trap
The trap here is that candidates may confuse a service startup failure (error 1069) with a database corruption or missing file issue, but the error code directly points to authentication failure for the service account, not data integrity.
How to eliminate wrong answers
Option A is wrong because the service startup type is still set to Automatic (as verified), not Disabled, and error 1069 is unrelated to startup type changes. Option B is wrong because a deleted database file would cause a different error (e.g., 'database not found'), not a logon failure for the service. Option D is wrong because corrupted database files would produce database-level errors (e.g., 'database corrupt'), not a service logon failure (error 1069).
A technician is installing RAM in a desktop computer. The motherboard supports dual-channel memory. Which memory configuration will provide the BEST performance?
Correct configuration for dual-channel operation.
Why this answer
Dual-channel memory requires two identical memory modules installed in matching slots to double the memory bandwidth.
A developer is testing a piece of code that calculates discounts. The code should give 10% off for orders over $100, and 5% off for orders between $50 and $100. Which test input set would best verify boundary conditions?
This set tests below, at, and above each boundary, ensuring edge cases are covered.
Why this answer
It tests the exact boundary values for the discount tiers: $49.99 (just below $50, no discount), $50.00 (5% threshold), $99.99 (still 5%), $100.00 (boundary between 5% and 10%), and $100.01 (10% threshold). This set validates both the lower and upper edges of each range, ensuring the code handles floating-point comparisons correctly.
Exam trap
The trap here is that candidates often pick Option A or C, thinking that testing the exact boundary values ($50, $100) is sufficient, but they miss the need to test values just outside the boundaries to catch off-by-one or floating-point comparison errors.
How to eliminate wrong answers
Option A is wrong because it only tests $50, $100, and $150, missing the critical values just below and above the boundaries (e.g., $49.99, $100.01) that could expose off-by-one errors. Option B is wrong because it includes $0 and $200, which are not boundary values for the given ranges, and omits $49.99 and $100.01, failing to test the exact edges. Option C is wrong because it only tests the exact boundary values $50.00 and $100.00, but does not test values just below or above them (e.g., $49.99, $100.01), which are necessary to catch rounding or comparison errors.
Which of the following is the best practice for creating strong passwords?
This produces a strong password.
Why this answer
A strong password should be at least 12 characters long and include a mix of character types.
Refer to the exhibit. A user runs the query but gets no results, even though there are employees in the Sales department. Which of the following is the most likely cause?
Trailing spaces would make 'Sales' not match 'Sales '.
Why this answer
The query likely uses an exact match (e.g., WHERE Department = 'Sales'), but if the Department column contains trailing spaces (e.g., 'Sales '), the string comparison fails because SQL treats trailing spaces as significant in many databases (or the data was padded with spaces). This is a common data integrity issue where imported or manually entered data includes invisible whitespace, causing legitimate rows to be missed.
Exam trap
CompTIA often tests the subtlety that trailing whitespace in data can cause exact-match queries to fail, leading candidates to overlook data quality issues and instead suspect syntax or connectivity problems.
How to eliminate wrong answers
Option A is wrong because if the column name were misspelled, the query would typically return a syntax or invalid column name error, not an empty result set. Option B is wrong because if the database were offline, the query would fail with a connection error, not silently return zero rows. Option D is wrong because an incorrect table name would produce a 'table not found' error, not an empty result set.
Which TWO of the following are characteristics of a solid-state drive (SSD) compared to a hard disk drive (HDD)?
SSDs have no moving parts, so they operate silently.
Why this answer
SSDs have no moving parts; they use NAND flash memory to store data, which eliminates the mechanical noise produced by spinning platters and moving actuator arms in HDDs. This makes SSDs completely silent during operation, a key advantage in noise-sensitive environments like recording studios or quiet office spaces.
Exam trap
The trap here is that candidates often assume 'higher storage capacity' (option A) is a characteristic of SSDs because they are newer technology, but in reality, HDDs still dominate in raw capacity per dollar, and the question specifically asks for characteristics of an SSD compared to an HDD.
A user downloads a software installer from the internet. On Windows, which file extension is most likely to be used for the installer?
.exe is a common Windows executable installer.
Why this answer
.exe and .msi are common Windows installer file extensions.
An IT administrator is setting up a virtualization server to run multiple operating systems. The server will host critical business applications and requires maximum performance and reliability. Which type of hypervisor should the administrator choose?
Bare-metal hypervisor offers direct hardware access and high performance.
Why this answer
Type 1 hypervisors run directly on hardware without a host OS, providing better performance and reliability for server workloads.
A developer writes a script to calculate the average of a list of numbers. The script uses a loop to sum the numbers and then divides by the count. Which programming concept does this represent?
Iteration uses loops to repeat actions, as in summing numbers.
Why this answer
The script uses a loop to repeatedly access each number in the list and add it to a running total. This repeated execution of a block of code (the loop body) is the defining characteristic of iteration. Iteration is the correct programming concept because the average calculation depends on cycling through a sequence of elements, which is exactly what a loop provides.
Exam trap
The trap here is that candidates may confuse 'sequence' (the general order of steps) with 'iteration' (the repeated execution of a block), especially since the script does follow a sequence of steps, but the key distinguishing concept is the loop that repeats the summing operation.
How to eliminate wrong answers
Option B (Selection) is wrong because selection involves making a decision based on a condition (e.g., if-else statements), not repeatedly executing a block of code. Option C (Recursion) is wrong because recursion involves a function calling itself to solve a problem by breaking it into smaller subproblems, whereas this script uses an explicit loop to process the list. Option D (Sequence) is wrong because sequence refers to the order in which statements are executed one after another, but the core mechanism here is the repeated execution of the summing operation, not just the linear order of steps.
A network technician needs to perform a bitwise AND operation on two binary numbers: 10110110 and 11001101. What is the result in decimal?
10000100 binary = 128 + 4 = 132.
Why this answer
Perform AND bitwise: 10110110 AND 11001101 = 10000100 (binary) = 132 decimal.
A user wants to remove a program that is no longer needed from a Windows computer. Which of the following is the correct method?
This is the standard method to properly uninstall software.
Why this answer
The correct method to remove a program from a Windows computer is to use the Add or Remove Programs feature (also known as Programs and Features) in Control Panel. This built-in tool runs the program's official uninstaller, which removes all associated files, registry entries, and shortcuts, ensuring a clean removal without leaving orphaned data or breaking system dependencies.
Exam trap
The trap here is that candidates mistakenly believe deleting the program folder or shortcut is sufficient, confusing file removal with proper uninstallation, while the exam tests the understanding that Windows requires a controlled uninstall process to maintain system integrity.
How to eliminate wrong answers
Option A is wrong because dragging a program's shortcut to the Recycle Bin only removes the shortcut icon, not the actual program files, registry entries, or installed components; the program remains fully installed and executable. Option C is wrong because deleting the program's folder from Program Files removes only the core application files but leaves behind registry entries, shared DLLs, and uninstall metadata, which can cause errors, orphaned entries, and system instability. Option D is wrong because while some programs may offer an 'Uninstall' option in the Start menu, this is not a universal method; many programs do not include this shortcut, and relying on it bypasses the official uninstaller if the shortcut is broken or missing, whereas the Control Panel method is the consistent, system-supported approach.
A report requires data from two tables: Customers and Orders. Which SQL clause is used to combine rows from both tables based on a related column?
JOIN merges rows from tables based on a condition, typically a foreign key.
Why this answer
The JOIN clause (specifically an INNER JOIN) is used to combine rows from two or more tables based on a related column between them, such as a foreign key. In this scenario, the Customers and Orders tables would typically be linked by a CustomerID column, and a JOIN allows you to retrieve data like customer names alongside their order details in a single result set.
Exam trap
The FC0-U61 exam often tests the distinction between set operations (UNION, INTERSECT) and join operations, so the trap here is that candidates confuse UNION (which stacks rows) with JOIN (which combines columns from related tables).
How to eliminate wrong answers
Option A is wrong because UNION combines rows from two or more SELECT statements into a single result set by stacking them vertically, not by matching related columns horizontally. Option B is wrong because a SUBQUERY is a nested query used to return a value or set of values for use in an outer query's WHERE, FROM, or SELECT clause, not to combine entire rows from two tables based on a related column. Option D is wrong because INTERSECT returns only the rows that appear in the result sets of both SELECT statements, which is used for set operations on identical row structures, not for joining distinct tables on a related column.
What is the primary purpose of a password manager?
This is the core function.
Why this answer
Password managers generate and store complex, unique passwords for each account, reducing password reuse and improving security.
Based on the exhibit, which commit introduced the password validation fix?
This commit has the message 'Fix password validation bug'.
Why this answer
Commit d4f5e6g is correct because it is the commit that implements the password validation fix. The other commits either predate the fix or address unrelated features such as UI updates or logging enhancements.
Exam trap
CompTIA often tests the ability to read a commit history exhibit and distinguish between commits that modify core logic versus those that only affect peripheral features, leading candidates to pick a commit that appears related but does not actually contain the fix.
How to eliminate wrong answers
Option A is wrong because commit e3a1b2c is a prior commit that only refactors authentication logic without adding any password validation rules. Option B is wrong because commit l0m1n2o introduces a new user interface component and does not modify password handling code. Option D is wrong because commit h7i8j9k is a merge commit that combines branches but does not itself contain the validation fix.
Which component of the CIA triad ensures that data cannot be modified by unauthorized users?
Correct. Integrity ensures data is not altered without authorization.
Why this answer
Integrity ensures that data is not altered unexpectedly by unauthorized parties. Confidentiality prevents unauthorized access, and availability ensures systems are accessible when needed.
A small business is experiencing intermittent network connectivity issues. Employees report that every few hours, the internet connection drops for about five minutes and then returns. The network uses a cable modem connected to a wireless router. The router logs show that the WAN interface renegotiates its connection around the same times. Which of the following is the MOST likely cause?
Overheating can cause the modem to reset, dropping the WAN connection periodically.
Why this answer
The router logs show the WAN interface renegotiating its connection, which indicates a physical or link-layer issue on the cable modem side. Overheating in the cable modem can cause intermittent resets or link drops, typically after hours of operation, matching the pattern of brief outages every few hours. This is a common hardware failure mode for cable modems, especially in poorly ventilated environments.
Exam trap
The trap here is that candidates see 'WAN interface renegotiates' and immediately think of DHCP lease renewal (Option A), but the WAN interface renegotiation is a link-layer event (e.g., PPPoE or DHCP renewal on the WAN side), not a LAN-side DHCP lease issue, and the pattern of brief, periodic drops points to thermal cycling rather than ISP maintenance.
How to eliminate wrong answers
Option A is wrong because a DHCP lease time that is too short would cause IP address renewal issues for internal clients, not a WAN interface renegotiation on the router; the WAN interface uses a public IP from the ISP, and lease time affects the LAN side. Option B is wrong because a static IP conflict on the LAN would cause local connectivity problems for that specific device, not a WAN interface renegotiation or a complete internet drop for all users. Option C is wrong because ISP maintenance is typically scheduled and announced, and would usually last longer than five minutes or affect a broader area; the pattern of brief, recurring drops every few hours points to a local hardware issue, not planned maintenance.
A programmer needs to store a customer's name in a variable. Which data type is most appropriate?
String stores text such as names.
Why this answer
A customer's name is a sequence of characters (letters, spaces, possibly punctuation), which is best represented as a String data type. In most programming languages, strings are used to store text and are enclosed in quotes (e.g., "John Doe"). This aligns with the fundamental concept that names are not numeric or logical values.
Exam trap
The trap here is that candidates might confuse a customer's name with a numeric identifier (like an ID) and incorrectly choose Integer, but names are inherently textual and require a string data type.
How to eliminate wrong answers
Option B (Float) is wrong because a float is a data type for storing decimal numbers (e.g., 3.14), not textual data like a name. Option C (Integer) is wrong because an integer stores whole numbers (e.g., 42) and cannot hold alphabetic characters. Option D (Boolean) is wrong because a boolean stores only true or false values, which cannot represent a customer's name.
Which of the following best describes normalization in a relational database?
Correct; normalization reduces data redundancy.
Why this answer
Normalization is the process of organizing data to reduce redundancy and improve data integrity.
What is the output of the pseudocode in the exhibit?
num starts at 1, increments to 5, then exits and prints 5.
Why this answer
The loop increments num from 1 until num is no longer less than 5, so it stops when num is 5, which is printed.
A company issues smartphones to employees and needs to enforce security policies such as remote wipe and mandatory encryption. Which technology should the IT department implement?
MDM is specifically for managing mobile devices, including security policies.
Why this answer
Mobile Device Management (MDM) allows administrators to enforce policies, configure settings, and remotely wipe devices. It is designed for corporate device management.
A user is concerned about connecting to a public Wi-Fi network at a coffee shop. Which security measure can best protect their data?
Correct. VPNs encrypt data over public networks.
Why this answer
A VPN encrypts traffic between the user's device and the VPN server, protecting data on public networks.
A technician is installing a legacy application on Windows 10 and receives an error log indicating 'Access Denied'. Which of the following should the technician do FIRST?
This addresses the warning and may resolve the missing component errors due to permission issues.
Why this answer
Legacy applications often require elevated privileges to install on Windows 10 because they may attempt to write to system directories or registry keys that are protected by User Account Control (UAC). Running the installer as Administrator is the simplest and most common first troubleshooting step to resolve permission-related issues before considering other solutions like missing dependencies or application upgrades.
Exam trap
The trap here is that candidates see a legacy application and immediately assume a missing dependency (like MSXML or .NET) is the cause, overlooking the simple permission issue that is the most common first step in troubleshooting installation failures.
How to eliminate wrong answers
Option A is wrong because MSXML6 is a specific XML parser that would only be relevant if the log explicitly cited a missing MSXML component, not a general permission error. Option C is wrong because .NET Framework 3.5 is a runtime dependency that would produce a different error (e.g., 'Framework not found'), not an access-denied message. Option D is wrong because upgrading the application is a long-term solution that bypasses the root cause; the technician should first attempt to install with elevated privileges, which is simpler and preserves legacy compatibility.
A company is deploying a virtualization server to run multiple application servers. Which THREE resources are typically allocated to a virtual machine?
Virtual storage is allocated from physical disks.
Why this answer
Virtual machines use virtual CPU (vCPU), virtual RAM (vRAM), and virtual storage (vStorage) allocated from the physical host.
You are the IT administrator for a small accounting firm with 25 employees. The firm uses a Windows Server 2019 domain controller, a file server, and an email server running Microsoft Exchange. Each employee has a company-issued laptop running Windows 10. The firm recently experienced a ransomware attack that encrypted all files on the file server. The attacker demanded a ransom in Bitcoin. The firm restored the files from a backup that was taken the previous night. However, the CEO is concerned about future attacks and wants to implement additional security measures. The firm has a limited budget and cannot afford a full security suite. Which of the following is the BEST course of action to reduce the risk of another ransomware infection?
Application whitelisting allows only approved programs to run, blocking ransomware executables even if they are downloaded.
Why this answer
Application whitelisting prevents any unauthorized executable, script, or installer from running, which would block ransomware even if it reaches the system via email or web download. This is the most effective single control on a limited budget because it stops unknown malware at the execution point, regardless of patch status or user behavior.
Exam trap
The trap here is that candidates often choose email spam filtering (Option C) because they associate ransomware with phishing, but they overlook that application whitelisting provides a deterministic, policy-based defense that blocks execution regardless of the delivery vector.
How to eliminate wrong answers
Option A is wrong because monthly patching addresses known vulnerabilities but does not prevent ransomware delivered via phishing or social engineering, which exploits user trust rather than unpatched code. Option C is wrong because an email spam filter reduces the volume of phishing emails but cannot block all malicious attachments or links, and ransomware can also arrive via web downloads, USB drives, or remote desktop attacks. Option D is wrong because annual security awareness training is too infrequent to change ingrained user habits, and even well-trained users can be tricked by sophisticated phishing or zero-day exploits; training alone does not provide a technical execution barrier.
A user reports that a desktop application crashes every time it tries to save a file to a network drive. Other applications work fine. Which is the MOST likely cause?
Lack of permissions can cause the application to crash when saving.
Why this answer
The most likely cause is insufficient permissions on the network share (D). When a desktop application crashes specifically during a save operation to a network drive, but other applications work fine, it often indicates that the application lacks the necessary write permissions to the target folder or file. This can trigger an unhandled exception in the application's save routine, leading to a crash, whereas other applications may handle the permission denial gracefully or use different access methods.
Exam trap
The trap here is that candidates often assume a network-related issue (like a driver problem) because the symptom involves a network drive, but the key clue is that other applications work fine, isolating the problem to the specific application's permissions or handling of the save operation.
How to eliminate wrong answers
Option A is wrong because an outdated network driver would typically affect all network operations, not just saves from a single application, and would likely cause broader connectivity issues or slower performance. Option B is wrong because insufficient local disk space would affect saves to the local drive, not to a network share, and would usually produce a clear 'disk full' error rather than a crash. Option C is wrong because a corrupted application installation would likely cause crashes during multiple operations (e.g., opening, editing, or saving locally), not exclusively when saving to a network drive, and other applications working fine suggests the issue is environment-specific.
A small business wants to use a CRM system. They need to access it from mobile devices and desktops without installing software. Which deployment model fits?
SaaS delivers software over the internet, accessible via browser without installation.
Why this answer
Software as a Service (SaaS) delivers the CRM application over the internet, allowing users to access it from any device with a web browser without installing software. This model matches the requirement for mobile and desktop access with zero local installation, as the provider hosts and manages the entire application stack.
How to eliminate wrong answers
Option A (PaaS) is wrong because it provides a platform for developing and deploying custom applications, not a ready-to-use CRM application; the business would still need to build or install the CRM software. Option C (On-premises) is wrong because it requires installing and running the CRM software on the business's own servers, contradicting the 'without installing software' requirement. Option D (IaaS) is wrong because it offers virtualized computing resources (e.g., VMs, storage) but not a pre-built CRM application; the business would have to install and manage the CRM software on those resources.
Which of the following is the primary purpose of hashing a password before storing it in a database?
Hashing allows verification by comparing hashes.
Why this answer
Hashing is a one-way function that converts a password into a fixed-length string. It is used to securely store passwords so that even if the database is breached, the actual passwords are not easily recoverable.
A technician is configuring a new computer for a graphic designer who needs to process large images. Which hardware component should be upgraded to improve performance?
More RAM allows the system to hold large images in memory, reducing reliance on slower disk storage.
Why this answer
Processing large images requires storing and rapidly accessing massive amounts of temporary data. RAM provides the workspace for active files; upgrading it allows the system to hold more image data in memory, reducing reliance on slower storage and preventing performance bottlenecks during editing.
Exam trap
The trap here is that candidates often assume the CPU is always the performance bottleneck, but for large file manipulation, RAM capacity is the critical factor because insufficient memory forces the system to use slow virtual memory.
How to eliminate wrong answers
Option B (CPU) is wrong because while the CPU handles calculations, large image processing is often memory-bound; a faster CPU won't help if the system runs out of RAM and starts swapping. Option C (Monitor) is wrong because the monitor only displays the output and has no impact on processing speed or data handling. Option D (Hard drive) is wrong because although storage speed affects load/save times, it does not improve real-time editing performance; the primary bottleneck for large active files is insufficient RAM.
You are the IT security administrator for a mid-sized law firm that handles sensitive client data. The firm has a mix of Windows 10 workstations, a Windows Server 2019 domain controller, and a network printer. All users have standard user accounts. The senior partner recently received a phishing email that appeared to be from a known client, requesting that he click a link to review a document. He clicked the link and entered his domain credentials on a fake login page. Shortly after, the firm's file server began encrypting files and displaying a ransom note. The incident response team isolated the infected server and restored files from backup. However, the senior partner now reports that he cannot access the file server from his workstation. He receives an 'Access Denied' message. You check his account in Active Directory and find that his account is not locked out and the password is correct. The file server is back online and accessible by other users. You verify that the senior partner's workstation has network connectivity and can ping the file server. Which of the following is the MOST likely cause of the access issue?
After credential compromise, passwords are often reset. The workstation may be using cached old credentials, causing authentication failure despite network connectivity.
Why this answer
The senior partner's password was likely changed during the incident response process to prevent further unauthorized access using his compromised credentials. When a password is changed in Active Directory, the user's workstation still caches the old credentials (NTLM hash) until the user logs off and back on. Since the partner has not logged off, his workstation continues to present the old, invalid credentials to the file server, resulting in an 'Access Denied' error despite the account being active and the password being correct.
Exam trap
The trap here is that candidates may assume ransomware or containment scripts directly caused the access issue, overlooking the subtle credential caching behavior that persists after a password change without a logoff/logon cycle.
How to eliminate wrong answers
Option B is wrong because the senior partner's account is not locked out and is active in Active Directory, and the scenario states his account was not disabled by any automatic containment script. Option C is wrong because the file server was isolated and restored from backup, which would revert any permission changes made by ransomware; moreover, other users can access the server, indicating permissions are intact. Option D is wrong because IP address blacklisting would prevent network connectivity (ping) entirely, but the partner can ping the file server, ruling out IP-level blocking.
A gaming enthusiast is building a new PC. They want to install a dedicated graphics card, a network interface card, and a sound card. Which type of expansion slot on the motherboard should these cards be inserted into?
PCIe is the current standard for expansion cards.
Why this answer
PCIe (PCI Express) slots are the standard for modern expansion cards including GPU, NIC, and sound cards.
Which of the following is a characteristic of open-source software?
Open-source licenses grant permission to view and modify the source code.
Why this answer
Open-source software is defined by its license, which grants users the right to view, modify, and distribute the source code. This characteristic is the core principle of open-source, as codified by the Open Source Initiative (OSI). The ability to modify the source code allows for customization, auditing, and community-driven improvements.
Exam trap
The trap here is that candidates often confuse 'free of charge' with 'open-source,' but open-source is about freedom to modify the source code, not necessarily zero cost, and some open-source software may have paid support or enterprise versions.
How to eliminate wrong answers
Option B is wrong because open-source software does not require payment for a license; while some open-source projects may charge for support or distribution, the software itself is freely licensed. Option C is wrong because open-source software does not inherently require a subscription; subscriptions are a business model, not a technical or licensing requirement of open-source. Option D is wrong because open-source software can typically be installed and used on any number of devices, as the license usually permits unlimited use; restrictions on device count are more common in proprietary or commercial licenses.
A developer is writing a program that processes whole numbers only. Which data type should be used?
Integers store whole numbers without decimals.
Why this answer
(Integer) because the program processes whole numbers only, and the integer data type is specifically designed to store non-fractional numeric values without decimal points. In most programming languages, integers are stored as 32-bit or 64-bit binary values, making them efficient for arithmetic operations on whole numbers.
Exam trap
The trap here is that candidates often confuse 'whole numbers' with 'numbers that might have decimals' and choose Float, not realizing that integer types are the correct and efficient choice for non-fractional data.
How to eliminate wrong answers
Option A (Float) is wrong because the float data type stores numbers with decimal points (floating-point representation), which is unnecessary and can introduce rounding errors when only whole numbers are needed. Option B (String) is wrong because strings store sequences of characters, not numeric values, and using a string would require conversion for arithmetic operations, violating the requirement to process numbers. Option C (Boolean) is wrong because the Boolean data type only stores true/false values (typically 1 or 0), which cannot represent the full range of whole numbers required for processing.
In a relational database, which constraint ensures that a foreign key value matches an existing primary key value in the referenced table?
Correct; foreign key enforces referential integrity.
Why this answer
Referential integrity is enforced by foreign key constraints, ensuring that relationships between tables remain consistent.
Drag and drop the steps to shut down a Windows 10 computer properly into the correct order.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Why this order
Proper shutdown prevents data loss and ensures the system powers off safely. Always save files and close programs before selecting Shut down from the Start menu.
Which of the following is an example of system software?
Linux is an operating system, a type of system software.
Why this answer
System software includes the operating system and utilities that manage hardware. Linux is an operating system, hence system software. Word processor, web browser, and spreadsheet are application software.
Which of the following best describes the role of an operating system?
This describes the core purpose of an OS.
Why this answer
An OS manages hardware resources and provides services for application software. It acts as an intermediary between user and hardware.
A software developer needs to track changes to source code over time. Which type of software should they use?
Version control software (e.g., Git, SVN) is the correct tool for tracking source code changes, enabling collaboration and revision history.
Why this answer
Version control software (e.g., Git) is specifically designed to track changes to source code over time, allowing developers to manage revisions, collaborate, and revert to previous states. Graphic design software, project management tools, and database management systems do not provide the necessary functionality for source code versioning.
Exam trap
Candidates may incorrectly assume that graphic design software's version history feature can track code changes, but version control systems are purpose-built for this task and offer features like branching, merging, and commit histories.
How to eliminate wrong answers
Option A is wrong because project management software (e.g., Jira, Trello) is used for planning, tracking tasks, and managing workflows, not for tracking source code changes. Option C is wrong because graphic design software (e.g., Adobe Photoshop, GIMP) is used for creating and editing visual content, not for version tracking of code. Option D is wrong because database management software (e.g., MySQL, Oracle) is used for storing, querying, and managing structured data, not for tracking code revisions.
A user wants to upgrade their computer's RAM for better performance. Which of the following are characteristics of DDR4 and DDR5 RAM? (Select THREE).
DDR5 uses 1.1V compared to DDR4's 1.2V, improving power efficiency.
Why this answer
DDR4 and DDR5 are both types of RAM used in modern computers. DDR5 has higher data rates and uses dual channel architecture for performance. Both are notched differently and are not interchangeable.
Which TWO of the following are types of system software? (Select two.)
An OS manages hardware and software resources.
Why this answer
The operating system (B) is the core system software that manages hardware resources, provides services for application programs, and acts as an intermediary between the user and the computer hardware. Device drivers (D) are system software that allow the operating system to communicate with and control specific hardware devices, such as a graphics card or network adapter.
Exam trap
The trap here is that candidates often confuse application software (like a DBMS or web browser) with system software because they are essential for productivity, but the exam specifically tests the distinction that system software manages hardware and provides a platform for applications, not the applications themselves.
A database administrator is designing a normalized database. Which TWO are benefits of normalization?
One of the main goals of normalization.
Why this answer
Normalization reduces data redundancy (Option A) and eliminates update anomalies (Option B). Option C is false because normalization often increases the number of joins, which can degrade query performance. Option D is false because normalization decreases redundancy.
Option E is false because normalization typically results in more tables, not fewer.
A company's backup strategy requires three copies of data, on two different media types, with one copy offsite. Which backup rule does this follow?
Correct. This is the 3-2-1 backup rule.
Why this answer
The 3-2-1 backup rule: three copies, two different media types, one offsite.
Which TWO of the following are valid SQL functions used to aggregate data?
COUNT returns the number of rows in a result set.
Why this answer
COUNT and SUM are both aggregate functions in SQL. COUNT returns the number of rows in a result set or the number of non-NULL values in a column, while SUM calculates the total sum of a numeric column. These functions operate on a set of rows and return a single summary value, which is the defining characteristic of aggregate functions in SQL.
Exam trap
The trap here is that candidates often confuse SQL clauses (like ORDER BY for sorting) or scalar functions (like LENGTH) with aggregate functions, because they see them used in queries but fail to recognize the fundamental difference between row-level operations and set-level summarization.
A company is developing a security policy. Which THREE of the following are examples of physical security controls?
Guards are physical security.
Why this answer
Physical security controls protect hardware and facilities. Badge readers, locks, and guards are physical. Firewalls and antivirus are logical/technical controls.
A software company uses a development model where work is divided into 2-week sprints. Each sprint begins with a planning meeting, includes daily standups, and ends with a review and retrospective. A product owner prioritizes features, and a scrum master facilitates the process. Which methodology is being used?
Scrum is characterized by sprints, daily standups, and defined roles.
Why this answer
Scrum is an agile framework that uses sprints, daily standups, sprint reviews, and specific roles (product owner, scrum master, development team).
A user reports that when they try to open a PDF file attached to an email, nothing happens. Which of the following is the most likely cause?
A PDF viewer (e.g., Adobe Acrobat Reader) is required to open PDF files. If none is installed, the file won't open.
Why this answer
If no software is installed that can handle PDF files, the operating system has no default handler to open the file. When a user clicks on a PDF attachment in an email client, the system attempts to launch the associated application (e.g., Adobe Acrobat Reader, a web browser with PDF support). If no such application is present, nothing happens—the file simply does not open, and no error message may appear depending on the email client's configuration.
Exam trap
The trap here is that candidates may confuse 'nothing happens' with a network issue or antivirus blocking, but the key is that the file is already present locally and the problem is the lack of an application to interpret the file format.
How to eliminate wrong answers
Option A is wrong because read-only file permissions do not prevent a file from opening; they only prevent modifications to the file. Option B is wrong because if antivirus software quarantines the file, the user would typically see a notification or the file would be missing from its location, not a scenario where 'nothing happens' when trying to open it. Option D is wrong because the network connection being down would affect the ability to download the email or attachment, but once the email is already displayed with the attachment, the network is not required to open a locally stored PDF file.
Which file extension typically indicates a compressed archive in Windows?
.zip is a compressed archive.
Why this answer
.zip is the standard archive format for compression. .docx is Word document, .jpg is image, .mp4 is video.
A developer is troubleshooting an issue where a user can list the files in a shared folder but cannot download any of them. Based on the exhibit, what is the most likely cause?
Correct. An explicit Deny on read files prevents access, overriding any Allow.
Why this answer
The exhibit shows an explicit Deny statement for read access, which overrides any Allow statements due to access control evaluation logic. Even if the user has list permission, the Deny on read prevents downloading files. This is the most likely cause because Deny statements are absolute and cannot be overridden by Allow statements.
Exam trap
The trap here is that candidates often assume that having list permission implies full read access, but access control separates listing from reading file data, and an explicit deny on read overrides any allow.
How to eliminate wrong answers
Option A is wrong because the user can list objects, which requires s3:ListBucket permission, so they clearly have that permission. Option B is wrong because s3:ListBucket only grants permission to list objects, not to download them; downloading requires s3:GetObject, which is a separate action. Option D is wrong because if the policy were malformed, AWS would return a policy validation error and the bucket operations would likely fail entirely, but the user can still list objects, indicating the policy is syntactically valid.
Which of the following BEST describes the primary function of an operating system?
This is the core function of an OS.
Why this answer
The primary function of an operating system is to manage hardware resources, including the CPU, memory, storage, and input/output devices, by abstracting them into a usable interface for applications. Without an OS, software cannot directly coordinate hardware access, as the OS handles scheduling, memory allocation, and device drivers. This resource management is fundamental to all other OS roles, such as file system management and process control.
Exam trap
The trap here is that candidates confuse the OS's role as a resource manager with specific application functions (like document creation or internet access), leading them to pick options that describe user-facing tasks rather than the underlying system management.
How to eliminate wrong answers
Option A is wrong because securing network traffic is a function of firewalls, VPNs, or security software, not the primary purpose of an operating system; the OS can provide basic security features (e.g., user permissions), but it is not its core function. Option C is wrong because creating documents is an application-level task performed by word processors (e.g., Microsoft Word), not by the operating system itself. Option D is wrong because providing internet access is the role of network hardware (e.g., routers, modems) and network configuration, not the OS; the OS manages network interfaces but does not supply connectivity.
Match each cable type to its typical use.
Drag a concept onto its matching description — or click a concept then click the description.
Ethernet networks up to 1 Gbps
Ethernet networks up to 10 Gbps
Long distance, high speed
Cable TV and broadband internet
Why these pairings
Ethernet cables are for networks, HDMI for A/V, USB for peripherals, coaxial for cable TV/internet. Common confusions involve swapping these uses.
A hospital uses a legacy application that runs on a Windows 7 workstation. The application stores patient data in a local database. The IT department is migrating all workstations to Windows 10. The legacy application is not compatible with Windows 10. The hospital needs to continue using the application and ensure patient data is accessible from the new workstations. The application requires a dedicated workstation due to licensing. Which solution should the IT department implement?
Virtualization allows running the legacy OS and application on new hardware.
Why this answer
Running a virtual machine (VM) with Windows 7 on a Windows 10 workstation allows the legacy application to operate in its native OS environment without hardware compatibility issues. The VM isolates the application and its local database, ensuring patient data remains accessible from the new workstation while satisfying the dedicated workstation licensing requirement by using a single physical host.
Exam trap
The trap here is that candidates may choose dual-booting (Option D) thinking it preserves the old OS, but they overlook the need for simultaneous access and the licensing constraint that requires a dedicated workstation, which virtualization satisfies by isolating the application on a single host.
How to eliminate wrong answers
Option A is wrong because keeping the old Windows 7 workstation on the network exposes the hospital to security risks (no patches) and violates the migration goal of moving all workstations to Windows 10. Option B is wrong because upgrading the legacy application to a Windows 10-compatible version may not be possible (the application is legacy and no newer version exists) and would not address the dedicated workstation licensing constraint. Option D is wrong because dual-booting requires rebooting to switch OSes, which disrupts workflow and does not allow simultaneous access to patient data from the Windows 10 environment; it also fails to meet the dedicated workstation requirement as the same hardware is shared.
A user can access the internet and other computers on the network but cannot print to a network printer that is on the same subnet. The printer's IP is 192.168.1.100. What is the most likely cause?
A powered-off printer is unreachable, while other network functions work.
Why this answer
If the printer is powered off, it cannot respond to print jobs, yet the user can still access the internet and other computers on the network since those services are independent of the printer. The printer's IP address (192.168.1.100) being on the same subnet means that connectivity to it relies solely on the printer being powered on and operational at Layer 2 (Ethernet) and Layer 3 (IP). A powered-off printer will not respond to ARP requests or TCP connections, causing print jobs to fail while other network functions remain unaffected.
Exam trap
The trap here is that candidates often assume a network configuration issue (like DNS or subnet mask) is the cause, overlooking the simplest physical-layer problem—a powered-off device—which is a common CompTIA troubleshooting focus.
How to eliminate wrong answers
Option A is wrong because the router is not involved in forwarding print jobs within the same subnet; print traffic between devices on the same subnet is switched at Layer 2, not routed. Option B is wrong because a wrong subnet mask would prevent the user from accessing other computers on the same subnet and likely the internet, as it would cause incorrect routing decisions for local vs. remote destinations. Option C is wrong because DNS is used for name resolution, not for direct IP-based printing; since the printer's IP is known (192.168.1.100), DNS misconfiguration would not prevent a direct TCP/IP print connection.
A company uses a proprietary application that requires a license per user. They have 100 employees but only 80 need access. Which licensing model would be most cost-effective?
Concurrent licenses allow up to 80 simultaneous users, which fits the need without paying for unused licenses.
Why this answer
Concurrent user licensing allows a set number of simultaneous users, which is cost-effective when not all employees need access at once. Per-seat licenses would require 100 licenses. Site licenses cover unlimited users but may cost more.
Volume licenses with a minimum of 100 would still require 100.
A developer writes a Python script that processes user input. During execution, the script prompts for an age and stores it in a variable. Which data type is most appropriate for the variable that stores the age?
Correct. Age is a whole number; integer is the best choice.
Why this answer
Age is typically a whole number, so an integer (int) is the most appropriate data type. Python's int can store whole numbers without decimals.
REST APIs use HTTP and JSON, with API keys for auth.
Why this answer
This web service is a REST API because it uses HTTP requests to access and manipulate resources, returns data in JSON format, and requires an API key in the request header for authentication. REST APIs are stateless and rely on standard HTTP methods (GET, POST, etc.), making them ideal for integrating external data like weather information into mobile apps.
How to eliminate wrong answers
Option A is wrong because GraphQL API is a query language that allows clients to request specific data fields, but it does not inherently require an API key in the header for authentication; authentication is an additional layer, not a defining characteristic. Option B is wrong because WebSocket is a full-duplex communication protocol over a single TCP connection, used for real-time bidirectional data streams, not for standard HTTP request-response interactions like fetching weather data. Option D is wrong because SOAP API uses XML-based messaging and often relies on WS-Security or other complex protocols for authentication, not simple API keys in HTTP headers, and it is not typically associated with lightweight JSON responses.
Match each security concept to its definition.
Drag a concept onto its matching description — or click a concept then click the description.
Data accessible only to authorized users
Data not altered improperly
Data accessible when needed
Verifying user identity
Why these pairings
The CIA triad includes Confidentiality, Integrity, and Availability. Authentication verifies identity. Common mistakes include swapping the definitions of Confidentiality and Integrity.
What is the primary purpose of a network firewall?
Correct. Firewalls filter traffic to block unauthorized access.
Why this answer
A network firewall filters incoming and outgoing traffic based on a set of rules, typically by port and protocol, to block unauthorized access while allowing legitimate communication.
Which of the following software categories includes applications like Microsoft Teams and Slack?
Correct. Collaboration tools facilitate team communication and cooperation.
Why this answer
Microsoft Teams and Slack are collaboration tools that allow teams to communicate, share files, and work together.
Based on the exhibit, which of the following is the purpose of the DNS server address?
DNS resolves hostnames to IP addresses for network communication.
Why this answer
How to eliminate wrong answers
Option B is wrong because encryption of network traffic is handled by protocols like TLS/SSL or IPsec, not by a DNS server. Option C is wrong because routing packets to the internet is the function of a default gateway or router, not a DNS server. Option D is wrong because assigning IP addresses to clients is the role of a DHCP server, not a DNS server.
Practice FC0-U71 by domain
Target a specific domain to shore up weak areas.