988 questions total · 14pages · All types, answers revealed
A user wants to upgrade their desktop's storage from a traditional hard drive to a faster drive that connects directly to the motherboard without cables. Which storage interface should they choose?
NVMe M.2 is cableless and fast.
Why this answer
NVMe M.2 drives connect directly to the motherboard via M.2 slot, offering faster speeds than SATA SSDs.
A developer is debugging a program that unexpectedly crashes. Which TWO tools or techniques are commonly used to identify the cause of the crash? (Select the two correct answers.)
Breakpoints pause execution at specific lines to inspect variables and flow.
Why this answer
Breakpoints allow pausing execution to inspect state, and logging records events to trace execution flow.
Which of the following are phases in the software development lifecycle (SDLC)?
Design involves planning the system architecture and components based on requirements.
Why this answer
The SDLC includes several phases: requirements gathering, design, testing, and deployment are all recognized phases. Compilation is a technical activity within the implementation phase, not a distinct phase.
Exam trap
CompTIA often tests the distinction between SDLC phases and technical activities. Candidates may mistakenly select compilation, thinking it is a phase, or incorrectly omit deployment or requirements gathering.
A small office has five computers that need to share files and a printer. Which type of network should be set up?
LAN is ideal for connecting computers in a small area.
Why this answer
A LAN connects computers within a limited area like an office.
A system administrator configures a server to run multiple virtual machines for testing. Which type of software enables this?
Hypervisors like VMware create virtual machines.
Why this answer
Virtualization software, such as VMware vSphere, Microsoft Hyper-V, or Oracle VirtualBox, creates a hypervisor layer that abstracts physical hardware resources (CPU, memory, storage) and allocates them to multiple isolated virtual machines. This allows a single physical server to run several operating systems concurrently for testing or production workloads, which is exactly what the system administrator needs.
Exam trap
The trap here is that candidates may confuse virtualization software with remote desktop software because both involve accessing multiple systems, but remote desktop only provides a connection to an already-running OS, not the ability to create and run multiple OS instances on one server.
How to eliminate wrong answers
Option A is wrong because backup software (e.g., Veeam, Acronis) is designed to create copies of data for recovery purposes, not to partition hardware resources for running multiple operating systems. Option C is wrong because remote desktop software (e.g., RDP, VNC) provides graphical or command-line access to a remote computer's desktop, but it does not create or manage virtual machines. Option D is wrong because antivirus software (e.g., Norton, Windows Defender) detects and removes malicious software, but it has no capability to virtualize hardware or run multiple OS instances.
Refer to the exhibit. A security auditor reviews this application configuration. What is the most significant security concern?
Plaintext passwords can be easily read by anyone with file access, leading to unauthorized database access.
Why this answer
Storing a database password in plaintext within an application configuration file is a critical security vulnerability. If an attacker gains access to the file, they can immediately read the credentials and connect to the database, potentially compromising all stored data. This violates fundamental security principles such as least privilege and defense in depth, and it is explicitly warned against in secure coding guidelines like OWASP's Top 10 (A07:2021 – Identification and Authentication Failures).
Exam trap
The trap here is that candidates may focus on the 'Debug' log level (Option B) as a security risk due to verbosity, but the plaintext password (Option C) represents a direct, high-impact credential exposure that is far more critical.
How to eliminate wrong answers
Option A is wrong because hardcoding the server name is a configuration management concern (e.g., lack of portability), not a security vulnerability; it does not expose sensitive data or allow unauthorized access. Option B is wrong because setting the log level to Debug increases log verbosity and may cause performance or information leakage issues, but it is not as severe as exposing a plaintext password; debug logs typically contain operational details, not authentication secrets. Option D is wrong because the database name 'SalesDB' is a logical identifier with no inherent security risk; exposing it does not grant access to the database without valid credentials.
Which TWO of the following are key characteristics of a NoSQL database compared to a traditional relational database?
NoSQL databases allow varied data structures within the same collection.
Why this answer
NoSQL databases often use flexible schemas (allowing varied data structures) and can scale horizontally across many servers.
Which TWO of the following are examples of multi-factor authentication?
Smart card (something you have) and PIN (something you know) are different factors.
Why this answer
Multi-factor authentication requires two or more different types of authentication factors.
A small business office has a network where each device is connected to a central switch. If the switch fails, all devices lose connectivity. Which network topology does this describe?
A star topology uses a central switch; if the switch fails, all connected devices lose connectivity.
Why this answer
In a star topology, all devices connect to a central device (e.g., switch or hub). If the central device fails, the entire network goes down.
A programmer is writing an if-else statement to check if a user is an admin. The code should set a variable 'accessLevel' to 'full' if admin, else 'restricted'. Which code snippet accomplishes this?
Correctly assigns full if admin, restricted otherwise.
Why this answer
Ly uses the equality operator (==) to compare isAdmin to the boolean value true. If the condition evaluates to true, accessLevel is set to 'full'; otherwise, it is set to 'restricted'. This matches the requirement exactly.
Exam trap
CompTIA often tests the confusion between the assignment operator (=) and the equality operator (==), as well as the tendency to misread the logic and swap the true/false branches.
How to eliminate wrong answers
Option B is wrong because it checks if isAdmin is false, which would set accessLevel to 'full' for non-admin users and 'restricted' for admins, the opposite of the requirement. Option C is wrong because it uses a single equals sign (=), which is the assignment operator, not the comparison operator; this would assign true to isAdmin and always evaluate as truthy, causing the if block to always execute regardless of the original value of isAdmin. Option D is wrong because it swaps the assignment values: it sets accessLevel to 'restricted' when isAdmin is true, and 'full' when false, which is the inverse of the intended logic.
Which TWO of the following are valid data types in most programming languages?
Boolean represents true/false values.
Why this answer
Boolean is a valid data type in most programming languages, representing true/false values. It is fundamental for conditional logic and control flow, typically stored as a single bit but often aligned to a byte for memory access efficiency.
Exam trap
CompTIA ITF+ tests the distinction between primitive data types and composite data structures, trapping candidates who think arrays or strings are primitive types when they are actually reference or aggregate types.
A program needs to display a message based on a user's age. If age is 18 or over, it displays 'Adult'; otherwise, it displays 'Minor'. Which control structure should be used?
If-else evaluates a condition and executes one of two blocks.
Why this answer
The if-else statement is the correct control structure because it evaluates a single condition (age >= 18) and executes one block of code if true ('Adult') and another block if false ('Minor'). This is the standard branching mechanism in most programming languages for binary decisions based on a comparison.
Exam trap
CompTIA often tests the distinction between selection (if-else) and iteration (loops), so the trap here is that candidates might confuse the 'condition' in a while loop with the conditional logic needed for a binary decision, leading them to incorrectly choose a loop structure.
How to eliminate wrong answers
Option B (For loop) is wrong because loops are designed for repetition, not conditional branching; using a loop here would repeatedly execute the display logic without a proper decision. Option C (Switch-case statement) is wrong because switch-case is intended for discrete, constant values (like integers or characters), not for range-based comparisons like 'age >= 18'. Option D (While loop) is wrong because it also repeats code based on a condition, but the requirement is a one-time decision, not iteration.
A company wants to ensure that data transmitted between its web server and clients is encrypted. Which protocol should be used?
TLS provides encryption for secure communication.
Why this answer
How to eliminate wrong answers
Option B (FTP) is wrong because File Transfer Protocol transmits data in plaintext, including credentials, and does not provide encryption; it would require FTPS or SFTP for secure transfers. Option C (SMTP) is wrong because Simple Mail Transfer Protocol is designed for email transmission and lacks native encryption; it relies on STARTTLS or SMTPS for security. Option D (HTTP) is wrong because Hypertext Transfer Protocol sends data as plaintext, making it vulnerable to interception; it requires TLS to become HTTPS for encryption.
A small business runs a legacy inventory management application that was developed in-house. The application uses a local database stored on a single server running Windows Server 2016. Recently, the application has become slow during peak hours, and multiple users have reported timeouts. The server has 8GB of RAM and a quad-core processor. The application's database grows by about 500MB per month. The company's IT budget is limited, and they cannot rewrite the application. As an IT consultant, which recommendation would best improve performance without requiring application changes?
Archiving old data reduces the working set, improving performance without altering the application.
Why this answer
Scheduling database archiving reduces the active data size, directly addressing the performance degradation caused by database growth without requiring any changes to the application. Option A is incorrect because adding RAM does not reduce the data volume and may only provide marginal benefit if the bottleneck is I/O or data size. Option C is incorrect because migrating to a cloud-based SQL service could improve scalability but often involves application modifications and higher costs, which the business cannot afford.
Option D is incorrect because implementing database indexing and query optimization typically requires changes to the application or database schema, which is not feasible since the application cannot be rewritten.
A memory address is displayed as 0x1A3F. What is the correct base of this representation?
Correct: 0x denotes hexadecimal.
Why this answer
The prefix 0x indicates hexadecimal (base 16).
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?
The email is personalized and appears to come from the user's bank, making it a targeted attack.
Why this answer
Spear phishing targets specific individuals or organizations, often using personalized information to appear legitimate.
A software testing team is planning to verify a new e-commerce application. Which THREE testing types should be performed to ensure comprehensive quality? (Select the three correct answers.)
Integration testing checks how components work together.
Why this answer
Comprehensive testing includes unit (component level), integration (interactions), and system (end-to-end) testing. UAT is also important but not in the list; regression is also important but here three are needed.
Which of the following is the strongest password?
12 characters, mix of uppercase, lowercase, numbers, symbol.
Why this answer
A strong password is long and includes a mix of character types.
A software team is adopting agile practices. They want to ensure they incorporate feedback early and often. Which TWO of the following are key events in the Scrum framework that provide opportunities for feedback and inspection?
Sprint retrospective is for inspecting the team's process and making improvements.
Why this answer
Sprint review is where the team demonstrates work to stakeholders and gathers feedback. Sprint retrospective is where the team inspects its own process and plans improvements. Both are Scrum events.
An organization requires employees to use a password and a one-time code sent to their mobile phone when logging into the network. Which security principle is being implemented?
Correct. MFA uses multiple authentication factors.
Why this answer
Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).
Which coding best practice improves code readability and maintainability?
Meaningful names clarify the purpose of variables, improving readability and maintainability.
Why this answer
Using meaningful variable names (option B) is a core coding best practice because it makes the code self-documenting, allowing other developers (or the original author after time) to quickly understand the purpose of each variable without needing extensive comments. This directly improves both readability and maintainability, as changes can be made with lower risk of misinterpretation. In contrast, practices like using global variables or hard-coding values obscure logic and create dependencies that are difficult to manage.
Exam trap
A common misconception is that using global variables simplifies data sharing or that hard-coding values makes code faster. In reality, these practices severely degrade maintainability and are universally discouraged in professional software development.
How to eliminate wrong answers
Option A is wrong because using global variables for all data creates tight coupling and side effects, making the code unpredictable and extremely difficult to debug or maintain; it violates the principle of encapsulation. Option C is wrong because hard-coding values whenever possible reduces flexibility and forces code changes for every environment or requirement shift, violating the DRY (Don't Repeat Yourself) principle and making maintenance error-prone. Option D is wrong because writing long, single functions violates the Single Responsibility Principle, making the code hard to read, test, and reuse; it also increases the risk of unintended side effects.
A company stores customer data in a flat file. Which of the following is a disadvantage of using a flat file compared to a relational database?
Correct; flat files lack concurrency control.
Why this answer
Flat files lack built-in support for concurrent access, leading to data corruption or conflicts when multiple users try to update the file simultaneously.
An IT professional is explaining to a client the difference between an HDD and an SSD. Which statement best describes a key advantage of an SSD over an HDD?
SSDs are solid-state and withstand shock better.
Why this answer
SSDs use flash memory and have no moving parts, making them faster, more durable, and quieter than HDDs, which use spinning platters and mechanical arms.
A technician is upgrading a desktop computer's memory. Which component would the technician most likely replace to improve system performance using dual-channel architecture?
RAM modules are installed in pairs for dual-channel operation.
Why this answer
Dual-channel memory requires two identical RAM sticks installed in matching slots to increase memory bandwidth. The upgrade involves replacing or adding RAM modules.
A user's home wireless network is experiencing interference. Which frequency band is more prone to interference from devices like microwaves and cordless phones?
2.4 GHz is more prone to interference from many devices.
Why this answer
The 2.4 GHz band is more crowded and prone to interference from common household devices, while 5 GHz offers less interference.
Based on the exhibit, which device is the default gateway?
This is the default gateway IP.
Why this answer
The default gateway is the IP address of the router that connects the local network to other networks. In the exhibit, the computer's IP configuration shows a default gateway of 192.168.1.1, which is the router's interface on the same subnet. This address is used by the computer to send traffic destined for IP addresses outside its own subnet (e.g., the internet).
Exam trap
The trap here is confusing the subnet mask (255.255.255.0) or another host IP (192.168.1.10) with the default gateway, as candidates often misidentify the gateway as any IP in the same subnet rather than the specific router interface.
How to eliminate wrong answers
Option A is wrong because the computer itself cannot be its own default gateway; a default gateway must be a separate network device (typically a router) that forwards traffic to other networks. Option C is wrong because 255.255.255.0 is the subnet mask, which defines the network portion of the IP address, not the gateway address. Option D is wrong because 192.168.1.10 is likely another host on the same local network (e.g., another computer or printer), not the router's interface that provides internet access.
A network administrator is setting up a small office network. Which THREE devices are typically used to connect multiple computers and share resources? (Select exactly three.)
A modem converts digital signals to analog for transmission over telephone or cable lines.
Why this answer
A modem (modulator-demodulator) is correct because it converts digital signals from a local network into analog signals for transmission over telephone or cable lines, and vice versa, enabling internet connectivity. In a small office, a modem is typically the first device that connects to the ISP, allowing multiple computers to share a single internet connection. Without a modem, the network would lack the necessary interface to communicate with external wide-area networks (WANs).
Exam trap
The trap here is that candidates often confuse a hub with a switch, assuming both are equally suitable for connecting multiple computers, but the exam expects you to recognize that a hub is obsolete for modern resource sharing due to its lack of traffic management and collision handling.
A database administrator needs to perform CRUD operations on a table. Which TWO SQL statements are used for the 'Create' and 'Read' operations? (Select TWO.)
INSERT INTO adds new records (Create).
Why this answer
INSERT INTO creates new records, SELECT reads data.
A user is trying to print but receives the error shown in the exhibit. Which of the following is the MOST likely cause?
An offline status indicates the printer is not reachable.
Why this answer
The error shown in the exhibit (e.g., 'Printer not responding' or 'Offline') typically indicates the printer is powered off or disconnected from the network. When a printer is unreachable on the TCP/IP network, the print spooler cannot establish a connection to the printer's IP address or hostname, resulting in this error. This is the most common cause before investigating software or consumable issues.
Exam trap
The trap here is that candidates often jump to software or consumable issues (driver, jam, toner) first, but the most basic and frequent cause of a 'not responding' error is the printer being physically off or disconnected from the network.
How to eliminate wrong answers
Option A is wrong because a corrupt printer driver would typically cause print job failures, garbled output, or driver-specific error messages, not a generic 'printer not responding' error that indicates a connectivity issue. Option C is wrong because a paper jam is a hardware error that usually triggers a specific on-printer message or a 'Paper Jam' error in the print queue, not a network connectivity error. Option D is wrong because low toner level would produce a warning about print quality or a 'Low Toner' alert, but the printer would still be online and responsive to network requests.
A developer needs to store a list of employee names. Which data structure is most appropriate?
An array can hold multiple values of the same type, like a list of names.
Why this answer
An array is the most appropriate data structure for storing a list of employee names because it allows multiple values (strings) to be stored in a single, ordered collection. Unlike a single string, which holds only one value, an array can hold many strings and provides indexed access to each element, making it ideal for lists of items.
Exam trap
The trap here is that candidates may confuse a single string with a collection, thinking a string can hold multiple names by concatenation, but the question specifically asks for a 'list' structure, which requires an array or similar collection type.
How to eliminate wrong answers
Option A is wrong because a string is a single sequence of characters, not a collection; storing multiple names would require concatenation or a single long string, which is inefficient and loses individual name access. Option C is wrong because a Boolean can only represent true or false, not a list of names. Option D is wrong because an integer stores only numeric values, not text-based employee names.
Which of the following Wi-Fi standards operates on the 5 GHz band and provides the fastest theoretical speeds?
802.11ax (Wi-Fi 6) offers the fastest speeds and operates on 5 GHz.
Why this answer
802.11ax (Wi-Fi 6) supports both 2.4 and 5 GHz and offers higher throughput than earlier standards.
Which of the following storage interfaces provides the fastest data transfer speeds?
NVMe M.2 uses PCIe for speeds up to several GB/s.
Why this answer
NVMe M.2 uses the PCIe bus, offering much higher speeds than SATA.
A developer is designing a website and needs to choose a client-side scripting language. Which of the following are scripting languages? (Choose two.)
JavaScript is a client-side scripting language used in web development.
Why this answer
JavaScript is a client-side scripting language that runs in the browser to create dynamic web content. It is interpreted by the browser's JavaScript engine, making it ideal for client-side interactivity without server round-trips.
Exam trap
CompTIA ITF+ often tests the distinction between scripting languages and compiled or markup languages, trapping candidates who confuse Java (a compiled language) with JavaScript (a scripting language) or who mistake HTML for a scripting language due to its role in web development.
A user wants to store 100 high-resolution photos. Which unit of measurement is MOST appropriate for the total file size?
100 high-res photos can easily total several gigabytes.
Why this answer
High-resolution photos typically range from 5 to 25 megabytes each, so 100 such photos would total hundreds of megabytes to several gigabytes. Gigabytes (GB) is the most appropriate unit because it matches the expected order of magnitude for this data volume, whereas smaller units like kilobytes or bytes would require unwieldy large numbers. This aligns with common storage measurements in IT, where GB is standard for large file collections.
Exam trap
The trap here is that candidates often confuse bits with bytes or underestimate the size of high-resolution photos, leading them to pick smaller units like kilobytes or bytes, but the correct unit must match the practical scale of the data.
How to eliminate wrong answers
Option A is wrong because kilobytes (KB) are too small—a single high-resolution photo is often several megabytes (MB), so 100 photos would be tens of thousands of KB, making KB impractical for expressing the total size. Option B is wrong because bytes (B) are the smallest unit of digital storage; using bytes for 100 high-resolution photos would result in a number in the billions, which is not a standard or convenient measurement. Option C is wrong because bits (b) are even smaller than bytes (8 bits = 1 byte) and are typically used for data transfer rates, not storage sizes; expressing file sizes in bits would be extremely non-standard and confusing.
A user wants to securely access company resources from a remote location over the internet. Which technology should be used?
VPN encrypts all traffic between the remote user and the corporate network.
Why this answer
A VPN (Virtual Private Network) creates an encrypted tunnel between the user's device and the company's network over the internet, ensuring confidentiality and integrity of data. This allows remote users to securely access internal resources as if they were directly connected to the corporate LAN. Technologies like IPsec or TLS are commonly used to establish this secure connection.
Exam trap
The trap here is that candidates often confuse SSH with a general remote access solution because it provides encryption, but SSH only secures a single terminal session, not full network-layer access to all company resources.
How to eliminate wrong answers
Option A is wrong because HTTP is an unencrypted application-layer protocol used for web browsing, not for secure remote access to company resources. Option B is wrong because SSH provides encrypted remote shell access to individual servers, but it does not create a network-layer tunnel to access multiple company resources across the entire internal network. Option C is wrong because FTP is an unencrypted file transfer protocol that transmits credentials and data in plaintext, lacking the security and network access capabilities required for remote resource access.
Which of the following correctly declares a variable to store a person's age in Python?
This correctly assigns the value 25 to the variable age.
Why this answer
In Python, variables are created by assignment with the `=` operator, and no explicit type declaration is needed. Option D correctly assigns the integer value 25 to the variable `age` using `age = 25`, which is the proper syntax for declaring and initializing a variable in Python.
Exam trap
The trap here is that candidates familiar with statically-typed languages (like Java or C++) may choose Option B, mistakenly applying type declaration syntax to Python, which does not use it.
How to eliminate wrong answers
Option A is wrong because `var age = 25` uses JavaScript-style syntax; Python does not use the `var` keyword for variable declaration. Option B is wrong because `int age = 25` follows statically-typed language syntax (like Java or C++), but Python is dynamically typed and does not require or allow type declarations before variable names. Option C is wrong because `age == 25` is a comparison operator that checks equality, not an assignment; it would evaluate to a Boolean value (True or False) rather than storing a value in a variable.
A software development team is adopting an Agile methodology. Which of the following are characteristics of Agile? (Choose three.)
Customer collaboration is a core Agile principle.
Why this answer
Customer collaboration is a core value of the Agile Manifesto, which prioritizes direct, ongoing communication with the customer over rigid contract negotiation. This ensures the development team can adapt to evolving requirements and deliver software that truly meets the customer's needs, rather than just following a predefined specification.
Exam trap
In the CompTIA ITF+ exam, you may encounter questions that test the difference between Agile and Waterfall methodologies. The trap is to select options like 'Emphasis on documentation' or 'Strict adherence to a fixed plan' which are characteristics of Waterfall, not Agile.
A small business uses a MySQL database to manage inventory and sales. The database has two tables: Products (ProductID, ProductName, QuantityInStock) and Sales (SaleID, ProductID, QuantitySold, SaleDate). The business runs a nightly script that updates QuantityInStock by subtracting QuantitySold from the Products table based on the day's sales. Recently, the inventory levels have become inaccurate. For example, a product shows negative stock even though no sales occurred that day. The database administrator suspects the issue is related to how transactions are handled. The nightly script runs multiple UPDATE statements in a loop. If the script fails partway through, some products' stock is updated while others are not, leaving inconsistent data. The administrator wants to ensure that either all updates succeed or none do, and that the script does not interfere with daytime operations. Which action should the administrator take?
This ensures atomicity (all or nothing) and prevents interference from other transactions.
Why this answer
Wrapping all UPDATE statements in a single transaction with READ COMMITTED isolation level ensures atomicity: either all updates commit or none do, preventing partial updates. Adding error handling with a rollback on failure guarantees that if the script fails partway through, the entire transaction is undone, leaving the database consistent. READ COMMITTED isolation prevents dirty reads and minimizes locking, reducing interference with daytime operations.
Exam trap
The trap here is that candidates may think error logging (Option C) or batching (Option B) is sufficient to maintain consistency, but they overlook that without a transaction with rollback, partial updates are still committed and cannot be undone.
How to eliminate wrong answers
Option A is wrong because a stored procedure that updates all products in one statement without error handling does not provide atomicity or rollback capability; if the single statement fails partway (e.g., due to a constraint violation), some rows may still be updated depending on the statement type, and without error handling, partial updates can occur. Option B is wrong because increasing the frequency of the script to run every hour with smaller batches does not solve the atomicity problem; each batch would still be vulnerable to partial failure, and more frequent runs increase contention with daytime operations. Option C is wrong because removing the transaction and using individual UPDATE statements with error logging does not provide atomicity; even with error logging, if the script fails after some updates, those updates persist, leaving inconsistent data, and error logging alone cannot roll back already committed changes.
A company is considering moving its email system to the cloud and wants to avoid managing the underlying servers and software. Which cloud service model would best suit this need?
SaaS delivers software applications over the internet.
A network engineer is configuring a device and needs to enter a MAC address. Which notational system is typically used for MAC addresses?
MAC addresses are represented in hexadecimal.
Why this answer
MAC addresses are usually represented in hexadecimal (base-16) notation, e.g., 00:1A:2B:3C:4D:5E.
A user receives a notification that their software subscription will expire in seven days. The user wants to continue using the software without interruption. Which of the following should the user do to ensure continued access?
Renewing the subscription extends the license and prevents interruption.
Why this answer
The software subscription is tied to a licensing server that validates the user's right to use the software. Renewing the subscription online updates the license key or extends the activation period on the server, ensuring the software remains functional beyond the expiration date without interruption.
Exam trap
The trap here is that candidates may confuse subscription renewal with general software maintenance tasks like reinstalling or cleaning files, but only the renewal action directly modifies the licensing state on the vendor's server.
How to eliminate wrong answers
Option A is wrong because uninstalling and reinstalling the software does not change the expiration status of the subscription; the same license key or account credentials would still be tied to the expired subscription. Option B is wrong because disabling automatic updates does not address the subscription expiration; it only prevents patch downloads, which could actually leave the software vulnerable or incompatible. Option D is wrong because deleting temporary files frees up disk space but has no effect on the software's licensing or subscription status.
A user receives an error message 'Insufficient memory' when trying to open a large file. Which of the following is the MOST likely cause?
Insufficient RAM prevents large files from being loaded into memory.
Why this answer
The 'Insufficient memory' error specifically indicates that the system's RAM (Random Access Memory) is unable to allocate enough space to load the large file into active memory. When a file is opened, it is read from the hard drive into RAM for processing; if the file size exceeds available RAM, the operating system cannot complete the operation, triggering this error.
Exam trap
The trap here is that candidates confuse 'memory' with 'storage', assuming a full hard drive causes the error, when in fact 'memory' in this context always refers to RAM, not disk space.
How to eliminate wrong answers
Option A is wrong because CPU overheating causes system instability, throttling, or shutdowns, not a memory-specific error message. Option B is wrong because a full hard drive would produce 'disk full' or 'out of disk space' errors, not 'insufficient memory', which refers to volatile RAM, not storage capacity. Option C is wrong because an outdated graphics card affects video rendering and display performance, not the ability to load a file into system memory; graphics memory (VRAM) is separate from system RAM.
Which of the following best describes the purpose of a REST API?
REST APIs enable communication between software systems.
Why this answer
A REST API (Representational State Transfer Application Programming Interface) is a set of architectural constraints that enables software applications to communicate over HTTP using standard methods like GET, POST, PUT, and DELETE. It allows different systems, often written in different languages, to exchange data in formats such as JSON or XML, making it the correct choice for enabling inter-application communication.
Exam trap
CompTIA often tests the misconception that REST APIs are used for building user interfaces or managing databases, when in fact they are purely a communication protocol between software systems.
How to eliminate wrong answers
Option A is wrong because compiling source code into executable programs is the function of a compiler (e.g., GCC, javac), not an API. Option C is wrong because creating a graphical user interface is the role of UI frameworks (e.g., JavaFX, React) or GUI builders, not a REST API which is a server-side interface. Option D is wrong because defining a database schema is the responsibility of a Data Definition Language (DDL) in SQL or an ORM mapping, not a REST API which focuses on resource manipulation via HTTP.
A developer writes an UPDATE statement to change the price of a product but accidentally omits the WHERE clause. What is the most likely outcome?
Without a condition, the update applies to every row.
Why this answer
In SQL, an UPDATE statement without a WHERE clause applies the change to every row in the specified table. The database engine processes the statement as a set operation, iterating over all rows and setting the specified column(s) to the new value. This is not an error; it is a valid SQL command that results in a mass update.
Exam trap
CompTIA often tests the misconception that an UPDATE without a WHERE clause will cause an error or only affect the first row, but the correct understanding is that it updates all rows in the table.
How to eliminate wrong answers
Option B is wrong because SQL does not limit UPDATE to only the first row; without a WHERE clause, the operation targets all rows, not a single row. Option C is wrong because omitting the WHERE clause does not produce a syntax error; the UPDATE statement is syntactically complete and valid. Option D is wrong because the statement is not invalid; it executes successfully and updates every row in the table.
Which TWO of the following are examples of security software? (Choose TWO.)
Antivirus software is designed to detect and remove malware.
Why this answer
Antivirus software protects against malware, and a VPN encrypts internet traffic for security. Web browser and media player are not primarily security tools.
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The email contains urgent language and threats of account closure. What type of attack is this?
Phishing exploits social engineering by masquerading as a trusted entity—here, the user’s bank—to trick the recipient into clicking a fraudulent link. The urgent language and threat of account closure create a false sense of crisis, bypassing rational scrutiny. This satisfies the constraint of unauthorised credential harvesting via deceptive communication, distinguishing it from technical exploits like malware injection.
Why this answer
Phishing is a social engineering attack where attackers impersonate a legitimate entity to steal sensitive information.
A development team is adopting Scrum. Which TWO roles are defined in the Scrum framework? (Select the two correct answers.)
The Scrum Master facilitates the Scrum process and removes impediments.
Why this answer
Scrum defines three roles: Product Owner, Scrum Master, and Development Team. The correct two are Product Owner and Scrum Master.
A user reports that their smartphone battery drains quickly and the device feels warm. The user recently installed several apps. Which built-in smartphone feature can help identify the cause?
This shows power consumption by app.
Why this answer
The battery usage monitor shows which apps consume the most power.
A user wants to synchronize contacts, calendars, and photos between their Android smartphone and tablet. Which of the following methods would best accomplish this?
Google sync keeps data consistent.
Why this answer
Google account sync automatically synchronizes data across Android devices using the same Google account.
Which TWO of the following are commonly considered business productivity software? (Select TWO.)
Word processors are standard productivity tools for creating documents.
Why this answer
Word processing software (A) and spreadsheet software (C) are core business productivity tools used for creating documents and analyzing data. Video editing (B) and graphic design (D) are creative or multimedia applications, not general productivity. Database management systems (E) are used for data storage and retrieval, but are not typically classified as business productivity software.
Which of the following port types is commonly used to connect a modern external hard drive to a computer and supports data transfer speeds up to 10 Gbps?
USB-C with 3.1 Gen 2 offers up to 10 Gbps.
Why this answer
USB 3.1 Gen 2 (USB-C) supports up to 10 Gbps, often used for external storage.
A database transaction that updates two accounts fails halfway due to a power outage. Which ACID property ensures that partial changes are undone?
Atomicity ensures all or nothing; partial changes are rolled back.
Why this answer
Atomicity ensures that a transaction is treated as a single, indivisible unit of work. If a power outage interrupts the transaction after updating one account but before updating the second, the database management system (DBMS) must roll back any partial changes to restore the original state. This 'all-or-nothing' property prevents incomplete transactions from leaving the database in an inconsistent state.
Exam trap
CompTIA often tests the distinction between atomicity (rollback of a failed transaction) and durability (persistence of committed data), so candidates mistakenly choose durability because they associate 'failure' with 'data loss' rather than 'partial update rollback'.
How to eliminate wrong answers
Option A is wrong because durability guarantees that committed transactions persist permanently, even after a system failure; it does not handle undoing uncommitted partial changes. Option B is wrong because isolation controls how concurrent transactions interact to prevent dirty reads or lost updates, but it does not address rollback of a single failed transaction. Option C is wrong because consistency ensures that a transaction transforms the database from one valid state to another, but it relies on atomicity to undo partial changes when a transaction fails; consistency itself does not perform the rollback.
A technician is asked to install a software package on a company laptop. The licensing type requires the software to be installed on a single device and cannot be transferred. Which licensing model is being described?
OEM licenses are tied to the device they are installed on and cannot be transferred.
Why this answer
An OEM (Original Equipment Manufacturer) license is tied to the specific device it was originally installed on and cannot be transferred to another computer. This matches the scenario where the software must be installed on a single device and cannot be moved, as OEM licenses are permanently bound to that hardware.
Exam trap
The trap here is that candidates often confuse 'perpetual' (indefinite duration) with 'non-transferable' (locked to hardware), but OEM licenses are a specific subset of perpetual licenses that are permanently bound to the original device.
How to eliminate wrong answers
Option A is wrong because a volume license allows installation on multiple devices (often through a key management service like KMS) and typically permits transfer between devices, not a single locked device. Option C is wrong because a subscription license grants usage rights for a recurring fee but is not inherently tied to a single device; it can often be transferred or used on multiple devices depending on the plan. Option D is wrong because a perpetual license grants indefinite use but is not inherently non-transferable; many perpetual licenses can be moved to new hardware as long as the old installation is removed.
A software company is using version control for a project. A developer has completed work on a new feature in a separate branch and wants to merge it into the main branch. What TWO steps should typically occur before the merge is accepted?
Syncing the feature branch with main reduces merge conflicts.
Why this answer
Common version control best practices include code review via pull requests and ensuring the feature branch is up to date with the main branch to minimize conflicts.
You are a system administrator for a small marketing firm. The firm uses a web-based project management application (Trello) for task tracking. One morning, users report that they cannot access Trello from any workstation. However, other websites (e.g., Google, YouTube) are accessible. The network uses a single router with default settings. No changes were made to the network or firewall overnight. You check the DNS settings on a workstation and it points to the ISP's DNS server. What is the most likely cause and the best course of action?
ISPs typically do not block Trello unless requested; DNS issue is more likely.
Why this answer
Since only Trello is inaccessible while other websites (including Google and YouTube) work, the issue is likely specific to Trello, not a general network or DNS problem. The workstations already use the ISP's DNS servers (8.8.8.8 and 8.8.4.4) as indicated, so changing the router's DNS to the same would not resolve the issue. The most plausible cause is that the ISP is blocking access to Trello, possibly due to a security policy or a temporary restriction.
Therefore, the best course of action is to contact the ISP and ask them to unblock Trello.
Exam trap
Candidates may mistakenly think that changing DNS settings on the router will fix the issue, but the workstations are already using the ISP's DNS directly. The real trap is recognizing that a specific site outage is likely due to an ISP-level block rather than a local DNS misconfiguration.
How to eliminate wrong answers
Option B is wrong because the ISP does not block Trello; the issue is DNS resolution, not a firewall or content block, and contacting the ISP would not address a local DNS misconfiguration. Option C is wrong because resetting the router to factory defaults would erase any custom settings (including potential DNS fixes) and is unnecessary when the problem is isolated to DNS resolution, not a hardware or configuration corruption. Option D is wrong because clearing the browser cache only affects locally stored web data and does not resolve DNS resolution failures; the problem is at the network layer, not the application cache.
A database administrator notices that queries on a large table are taking too long to execute. Which action would most likely improve performance?
Indexes allow faster data access by reducing full table scans.
Why this answer
Creating an index on frequently queried columns allows the database to locate rows using a B-tree or hash structure, reducing the need for full table scans. This directly addresses slow query performance on large tables by minimizing disk I/O and CPU overhead during SELECT operations.
Exam trap
The trap here is that candidates may confuse normalization with performance optimization, but normalization is designed to reduce redundancy and maintain data integrity, not to speed up queries on large tables.
How to eliminate wrong answers
Option A is wrong because adding more columns increases the row width, which can degrade I/O performance and does not speed up queries. Option B is wrong because denormalization introduces data redundancy and can improve read performance only in specific warehousing scenarios, but it is not the most direct or standard fix for slow queries on a large table; it often complicates writes and maintenance. Option C is wrong because further normalization typically increases the number of joins required, which can slow down queries rather than improve performance on a large table.
An organization issues smartphones to employees and needs to enforce security policies such as remote wipe and mandatory encryption. Which technology should be used to manage these devices centrally?
MDM is for managing mobile devices.
Why this answer
MDM (Mobile Device Management) allows IT to enforce policies, remotely wipe devices, and manage settings.
Which of the following is a characteristic of a NoSQL database compared to a relational database?
NoSQL databases allow different documents to have different fields.
Why this answer
NoSQL databases often have a flexible schema, allowing different structures in the same collection.
A software development team is adopting agile practices. Which TWO of the following are common characteristics of agile methodologies? (Select TWO.)
Agile uses iterative cycles (sprints) to deliver increments.
Why this answer
Agile methodologies are iterative and adaptive, welcoming changing requirements. Sequential phases and fixed scope are characteristics of waterfall.
Which THREE of the following are characteristics of a solid-state drive (SSD) compared to a traditional hard disk drive (HDD)?
SSDs have no moving parts, enabling faster data access.
Why this answer
SSDs use NAND flash memory with no moving parts, allowing near-instantaneous data access (typically 0.1 ms or less) compared to HDDs that require mechanical arm movement and platter rotation (5–15 ms). This eliminates rotational latency and seek time, making access times significantly faster.
Exam trap
CompTIA often tests the misconception that SSDs always have higher storage capacity than HDDs, when in fact HDDs still dominate in maximum capacity and cost per terabyte.
A technician is configuring a new workstation. The user requires access to a legacy application that only runs on Windows 7. However, the company standard is Windows 10. Which of the following is the BEST solution?
A VM isolates the legacy OS and app, providing compatibility while keeping the host secure.
Why this answer
A virtual machine (VM) running Windows 7 allows the legacy application to operate in its native environment while the host system runs the company-standard Windows 10. This isolates the legacy software from the modern OS, avoiding compatibility issues and maintaining security compliance. Virtualization is the preferred solution when an application has strict OS dependencies that cannot be resolved through compatibility features.
Exam trap
The trap here is that candidates often confuse compatibility mode with full virtualization, assuming that Windows 10's built-in compatibility settings can fully replicate the Windows 7 environment, when in fact they only modify a few API calls and registry settings, not the underlying OS kernel.
How to eliminate wrong answers
Option B is wrong because upgrading the legacy application to a Windows 10 version may not be possible if the vendor no longer supports it or if no upgrade path exists, and this option assumes an upgrade is available, which is not guaranteed. Option C is wrong because installing Windows 7 on a separate partition creates a dual-boot configuration, which requires rebooting to switch between OSes, reducing productivity and failing to provide simultaneous access to the legacy application and Windows 10 resources. Option D is wrong because Windows 10 compatibility mode only emulates older Windows environments for applications, but it does not provide a full Windows 7 kernel or system libraries, so many legacy applications with deep system dependencies will still fail to run correctly.
A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?
Correct. This is a typical phishing attempt.
Why this answer
Phishing is a social engineering attack where attackers send deceptive emails to steal credentials. The generic greeting and urgent language are common signs.
A developer is planning a new project that has very clear and fixed requirements. The project must be completed in a linear fashion with each phase finished before moving to the next. Which development methodology should be used?
Waterfall is linear and phase-based, suitable for fixed-scope projects.
Why this answer
The Waterfall methodology is correct because it follows a linear, sequential approach where each phase (e.g., requirements, design, implementation, testing) must be completed before the next begins. This aligns perfectly with the project's very clear and fixed requirements, as Waterfall assumes that all requirements are known upfront and changes are minimized.
Exam trap
The trap here is that candidates often confuse 'linear' with 'iterative' and pick Agile or Scrum because they are popular, but the question explicitly states 'fixed requirements' and 'each phase finished before moving to the next,' which directly points to Waterfall.
How to eliminate wrong answers
Option A is wrong because the Spiral model is iterative and risk-driven, combining prototyping with waterfall-like phases, which is not purely linear and does not require each phase to finish before moving to the next. Option B is wrong because Scrum is an Agile framework that uses time-boxed sprints and iterative development, allowing for changing requirements and overlapping phases, which contradicts the fixed, linear requirement. Option C is wrong because Agile is an umbrella term for iterative and incremental methodologies (like Scrum and Kanban) that embrace changing requirements and continuous feedback, not a linear, phase-complete approach.
Which THREE operations can be performed using Data Manipulation Language (DML) statements?
UPDATE is DML.
Why this answer
UPDATE is a Data Manipulation Language (DML) statement because it modifies existing data within a table without altering the table's structure. DML focuses on managing data stored in database objects, and UPDATE directly changes row values.
Exam trap
CompTIA often tests the distinction between DML and DDL, trapping candidates who confuse structural commands (CREATE, DROP) with data manipulation commands (INSERT, UPDATE, SELECT).
A company is setting up a new office and needs to connect multiple computers within the same building to share files and printers. Which type of network should they implement?
A LAN is the correct choice for connecting computers within a single building.
Why this answer
A LAN (Local Area Network) is designed to connect devices within a limited area such as a single building, allowing resource sharing like files and printers.
Which element of the CIA triad is primarily concerned with ensuring that data is not accessed by unauthorized individuals?
Correct. Confidentiality prevents unauthorized access to data.
Why this answer
Confidentiality ensures that data is accessible only to authorized users, preventing unauthorized access.
Which of the following is a characteristic of a worm in the context of malware?
Correct: worms are self-propagating and do not need a host file.
Why this answer
A worm is a standalone malware that replicates itself to spread to other computers without needing to attach to a host file, often exploiting network vulnerabilities.
Which THREE of the following are common types of network topologies? (Choose three.)
Star topology has a central hub.
Why this answer
Star, bus, and ring are three of the most common physical network topologies defined in networking standards. In a star topology, all devices connect to a central switch or hub, which manages traffic and isolates failures to individual links. Bus topology uses a single backbone cable with terminators at both ends, while ring topology passes data sequentially from one node to the next using a token-passing mechanism (e.g., Token Ring per IEEE 802.5).
Exam trap
The trap here is that candidates confuse 'circle' with 'ring' topology, but 'circle' is a non-standard term, while 'ring' is the correct CompTIA-recognized topology name; similarly, 'square' is a distractor with no technical basis in networking.
A company is choosing a storage solution for archival data that is rarely accessed. Which TWO characteristics are typically true of HDDs compared to SSDs? (Choose two.)
HDDs have slower access times.
Why this answer
HDDs are generally cheaper per gigabyte and have slower access speeds due to mechanical parts.
Which of the following best describes a NoSQL database?
Correct. NoSQL databases allow dynamic schemas.
Why this answer
NoSQL databases are designed for flexible schema and can handle unstructured data, often used for big data and real-time web applications.
A user wants to upgrade their desktop computer's storage for faster boot times. Which of the following storage interfaces would provide the fastest performance?
NVMe is the fastest consumer storage interface.
Why this answer
NVMe M.2 uses the PCIe bus directly, offering significantly faster speeds compared to SATA SSDs or HDDs.
A technician is installing a new network in a home office. The devices are spaced far apart, and the technician needs to make long runs of cable. Which of the following cable types is BEST suited for this scenario to minimize signal loss?
Fiber supports much longer distances (kilometers) without signal degradation.
Why this answer
Fiber optic cable uses light pulses to transmit data, which is immune to electromagnetic interference and can carry signals over much longer distances (often kilometers) without significant attenuation. In a home office with long cable runs, fiber optic cable is the best choice to minimize signal loss compared to copper-based cables.
Exam trap
The trap here is that candidates often choose Cat6 UTP because it is a common, high-performance copper cable, overlooking the fact that all copper twisted-pair cables share the same 100-meter distance limitation and are not designed to minimize signal loss over very long runs.
How to eliminate wrong answers
Option A is wrong because Cat5e UTP is a copper twisted-pair cable that suffers from signal degradation (attenuation) over long runs, typically limited to 100 meters, and is more susceptible to EMI. Option B is wrong because Cat6 UTP, while offering higher bandwidth than Cat5e, still has the same 100-meter distance limitation for reliable signal integrity and is not designed for minimizing signal loss over extended distances. Option C is wrong because coaxial cable, though better shielded than UTP, still uses copper conductors and experiences signal loss over long runs, typically requiring amplifiers or repeaters beyond a few hundred feet, and is not optimized for modern high-speed data networks in a home office.
A network administrator is designing a new office network. Which THREE factors should be considered when choosing between 2.4 GHz and 5 GHz Wi-Fi bands?
5 GHz offers higher speeds.
Why this answer
2.4 GHz offers longer range and better penetration through walls but is more prone to interference. 5 GHz offers higher speeds but shorter range.
A developer writes code in Python and runs it without compiling. This is an example of which type of language?
Python is interpreted, also called scripting.
Why this answer
Interpreted languages are executed line-by-line without prior compilation.
An IT administrator is configuring a virtualized environment on a single server. The administrator needs to allocate resources to multiple virtual machines. Which THREE of the following are resources that can be allocated to a VM? (Select THREE.)
Virtual disks are allocated to VMs.
Why this answer
In virtualization, vCPU (virtual CPUs), vRAM (virtual RAM), and virtual storage are typical resources allocated to VMs.
Practice FC0-U71 by domain
Target a specific domain to shore up weak areas.