CompTIA Tech+ (FC0-U71) FC0-U71 Questions 376–450 | Page 6/14

376

Multi-Selectmedium

A development team is building a web application and wants to adopt a version control system to manage code changes across multiple contributors. Which TWO of the following are primary benefits of using a version control system in this scenario? (Choose two.)

Select 2 answers

A.It enforces coding style rules and rejects non-compliant code automatically.

B.It allows multiple developers to work on different features simultaneously without overwriting each other's work.

C.It provides a runtime environment for executing the application code.

D.It automatically compiles and deploys the application to production.

E.It maintains a history of changes so developers can revert to previous versions.

AnswersB, E

Version control enables branching, so each developer can work on a separate feature branch and later merge changes. This isolates work and prevents one person's edits from overwriting another's, which is critical for parallel development. In a team setting, this collaborative capability is a primary reason to adopt version control.

Why this answer

Version control systems track file changes over time and support branching, so teams can revert to earlier states and let multiple developers work in parallel without conflicts. These capabilities directly address the need to manage code changes across contributors. Compilation, deployment, style enforcement, and code execution are handled by other tools, not by the version control system itself.

Exam trap

The trap here is attributing build, deployment, or linting capabilities to version control, when it only manages file history and branching.

Full explanation →

377

Multi-Selectmedium

Which TWO of the following are characteristics of a relational database? (Select TWO.)

Select 2 answers

A.It does not support SQL queries.

B.Data is stored in tables with rows and columns.

C.It is optimized for storing unstructured data like videos.

D.It uses a flexible schema that can change dynamically.

E.Relationships between tables are defined using keys.

AnswersB, E

Relational databases enforce structure through tables, where each row represents a record and each column a defined attribute, with relationships established via keys between tables. This tabular row-and-column model satisfies the stem's requirement for a defining relational characteristic, distinguishing it from non-relational stores such as key-value or document databases.

Why this answer

Option B is correct because a relational database stores data in structured tables composed of rows (records) and columns (attributes), which is the fundamental organizing principle of the relational model. Option E is correct because relational databases establish relationships between tables through keys — typically primary keys that uniquely identify rows and foreign keys that reference primary keys in other tables — enabling joins and referential integrity. Option A is incorrect because relational databases are precisely the systems queried with SQL (Structured Query Language), so they do support SQL queries.

Option C is incorrect because relational databases are optimized for structured, tabular data; unstructured content like videos is typically handled by object storage or NoSQL/document stores. Option D is incorrect because relational databases generally use a fixed, predefined schema (with controlled migrations via DDL), whereas flexible, dynamically changing schemas are characteristic of NoSQL databases.

Exam trap

The trap here is confusing relational databases with NoSQL databases, leading candidates to select options about flexible schemas or unstructured data, which are actually characteristics of non-relational systems.

Full explanation →

378

MCQmedium

A company is deciding between two software delivery models. Model X requires a formal sign-off after each phase before the next begins, while Model Y delivers working software in short iterations with continuous customer feedback. Which model is Model Y?

A.Waterfall

B.Spiral

C.V-Model

D.Agile

AnswerD

Agile is an iterative approach that delivers working software in short cycles called iterations or sprints, with frequent customer feedback and adaptation to change. This aligns exactly with Model Y's description of short iterations and continuous feedback, making Agile the correct identification in this comparison.

Why this answer

Model Y delivers working software in short iterations with continuous customer feedback, which is the defining characteristic of Agile. Waterfall and the V-Model are sequential with formal phase sign-offs, matching Model X. The Spiral model is iterative but risk-driven, not primarily feedback-driven in short cycles, so Agile is the correct identification.

Exam trap

The trap here is confusing any iterative model with Agile, but Spiral is risk-driven while Agile specifically emphasizes short cycles and continuous customer feedback.

Full explanation →

379

Multi-Selecthard

A help desk technician is reviewing security practices with a new employee who works remotely. Which TWO of the following actions BEST reduce the risk of a malware infection on the employee's workstation? (Choose two.)

Select 2 answers

A.Use the same strong password across all work accounts for easier memorization.

B.Turn off the firewall to improve network performance while working remotely.

C.Keep the operating system and installed applications updated with security patches.

D.Install and regularly update reputable antivirus or endpoint protection software.

E.Disable automatic updates so the employee controls when changes are applied.

AnswersC, D

Patches close known vulnerabilities that malware exploits to gain a foothold, so timely updates directly reduce infection risk. Operating system and application updates are a foundational preventive control recommended in every security baseline. For a remote worker without corporate network protections nearby, keeping the endpoint patched is especially important because the device is the last line of defense against exploits delivered through email, downloads, or malicious websites.

Why this answer

Keeping the operating system and applications patched closes vulnerabilities that malware exploits, while updated endpoint protection detects and blocks malicious code. Together they form a layered preventive defense for a remote workstation. Disabling updates, reusing passwords, and turning off the firewall all weaken security and do nothing to reduce malware risk, so only the patching and endpoint protection practices qualify.

Exam trap

The trap here is choosing convenience-oriented actions like disabling updates or the firewall, which feel like performance or simplicity wins but actually remove defenses against malware.

Full explanation →

380

Drag & Dropmedium

Drag and drop the steps to check for Windows Updates in Windows 10 into the correct order.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

The correct sequence for checking Windows Updates in Windows 10 is: Open the Start menu, then select Settings (gear icon), then select Update & Security, and finally click Check for updates. This ensures you navigate through the proper system settings to initiate a manual update check, keeping your system secure and up to date.

Full explanation →

381

MCQeasy

A database designer wants to ensure that no two employees have the same email address. Which constraint should be applied to the Email column?

A.UNIQUE

B.PRIMARY KEY

C.CHECK

D.FOREIGN KEY

AnswerA

A UNIQUE constraint enforces distinct values in the Email column, rejecting any duplicate insert or update at the database engine level. This directly prevents two employee rows sharing an email address, satisfying the designer's requirement without relying on application-side validation.

Why this answer

The UNIQUE constraint ensures that all values in the Email column are distinct, preventing any two employees from having the same email address. Unlike PRIMARY KEY, UNIQUE allows NULL values (though typically email columns are set to NOT NULL), and it can be applied to non-key columns. This directly enforces the business rule of unique email addresses without requiring the column to be the table's primary identifier.

Exam trap

The trap here is that candidates often confuse UNIQUE with PRIMARY KEY, assuming uniqueness can only be enforced by a primary key, but PRIMARY KEY imposes additional non-null and single-per-table restrictions that are not required for simply ensuring unique email addresses.

How to eliminate wrong answers

Option B (PRIMARY KEY) is wrong because while it also enforces uniqueness, it additionally requires the column to be non-null and uniquely identify each row, which is not necessary for just ensuring unique emails; the Email column may not be the natural primary key. Option C (CHECK) is wrong because CHECK constraints validate data against a Boolean expression (e.g., ensuring email format contains '@'), but they cannot enforce uniqueness across rows. Option D (FOREIGN KEY) is wrong because it enforces referential integrity between tables by requiring values in the Email column to match values in another table's primary key or unique column, which does not prevent duplicate emails within the same table.

Full explanation →

382

MCQmedium

A company wants to deploy a custom internal application to all employees' Windows computers. The application requires administrative privileges to install and must be updated frequently. Which deployment method should the IT team use to ensure consistent installation and easy updates?

A.Portable application on a USB drive

B.Web-based application accessed via browser

C.Group Policy software installation

D.Manual installation by each user

AnswerC

Group Policy software installation allows administrators to deploy applications to domain-joined computers automatically, with elevated privileges, and can be configured to update or remove software as needed. This ensures consistent installation and simplifies updates, making it ideal for this scenario.

Why this answer

Group Policy software installation is a feature of Active Directory that enables centralized deployment of applications to domain computers. It runs with system privileges, ensuring installation succeeds even without user admin rights, and supports automatic updates through Group Policy refresh. This method provides consistency and reduces administrative overhead, unlike manual or portable alternatives.

Exam trap

The trap here is assuming that web-based or portable applications can replace managed installations for all internal software, especially when administrative privileges and frequent updates are required.

Full explanation →

383

MCQeasy

Which principle ensures that data is not modified by unauthorized users?

A.Authentication

B.Confidentiality

C.Availability

D.Integrity

AnswerD

Integrity guarantees data remains unaltered unless changed by authorised parties, directly satisfying the stem's requirement that unauthorised users cannot modify it. Confidentiality would instead prevent disclosure, and availability would ensure access, so integrity is the precise principle addressing unauthorised modification.

Why this answer

Integrity ensures that data has not been altered or tampered with by unauthorized users. This is typically enforced through mechanisms like hashing (e.g., SHA-256) or digital signatures, which detect any modification to the original data. Without integrity controls, an attacker could change financial records or system files without detection.

Exam trap

CompTIA often tests the distinction between confidentiality and integrity, where candidates mistakenly choose confidentiality because they associate 'protection' with encryption, but encryption only prevents reading, not modification.

How to eliminate wrong answers

Option A is wrong because authentication verifies the identity of a user or system (e.g., via passwords or certificates), but does not prevent data modification after access is granted. Option B is wrong because confidentiality protects data from unauthorized disclosure (e.g., via encryption), not from unauthorized modification. Option C is wrong because availability ensures that data and systems are accessible when needed (e.g., through redundancy or load balancing), but does not address data tampering.

Full explanation →

384

MCQmedium

In a relational database, which type of relationship is typically implemented by creating a third table (junction table) that contains foreign keys from both related tables?

A.Many-to-many

B.Self-referencing

C.One-to-one

D.One-to-many

AnswerA

A many-to-many relationship cannot be stored in two tables, so a junction table holds foreign keys referencing both related tables, with each row representing one association. This resolves the cardinality that one-to-many and one-to-one schemas cannot represent directly.

Why this answer

A many-to-many relationship occurs when multiple records in one table relate to multiple records in another. Relational databases cannot directly implement this with a single foreign key, so a junction table (also called an associative or bridge table) is created. This third table contains foreign keys referencing the primary keys of both related tables, and each row represents a unique association between the two entities.

Exam trap

The trap here is confusing many-to-many with one-to-many: candidates often think a third table is needed for one-to-many, but it is only required for many-to-many. FC0-U71 often tests the implementation differences between relationship types.

How to eliminate wrong answers

Option B is wrong because a self-referencing relationship involves a table relating to itself (e.g., an employee table with a manager_id foreign key pointing to the same table), not a third table. Option C is wrong because a one-to-one relationship is implemented by adding a foreign key with a unique constraint to one of the two tables, or by sharing the primary key, not by creating a junction table. Option D is wrong because a one-to-many relationship is implemented by placing a foreign key in the table on the 'many' side, referencing the 'one' side; no third table is needed.

Full explanation →

385

MCQeasy

A technician is asked to dispose of several old hard drives that contain sensitive company data. The technician wants to ensure that the data cannot be recovered by anyone who obtains the drives. Which of the following methods is the MOST secure?

A.Physically destroy the drives

B.Quick format each drive

C.Degauss the drives

D.Delete all files and empty the recycle bin

AnswerA

Physically destroying the drives, such as by shredding, drilling, or incinerating, makes the data unrecoverable because the storage media is destroyed. This is the most secure method for disposing of drives containing sensitive data, as it eliminates any possibility of data recovery. It directly fulfills the technician's goal of preventing anyone who obtains the drives from accessing the data.

Why this answer

The most secure way to ensure data cannot be recovered from old hard drives is to physically destroy them. Formatting or deleting files leaves data recoverable, and degaussing is not effective for all drive types. Physical destruction guarantees that the storage media and any data on it are irreversibly damaged, meeting the requirement to prevent unauthorized access.

Exam trap

The trap here is assuming that formatting or deleting files securely erases data, when in fact those methods leave the data recoverable with common tools.

Full explanation →

386

MCQeasy

A company wants to ensure that data is not lost if a hard drive fails. Which of the following best practices should be implemented?

A.Using strong passwords

B.Regularly updating antivirus software

C.Using a surge protector

D.Performing regular backups

AnswerD

Regular backups copy data to separate media, so a failed hard drive can be replaced and its contents restored. This directly addresses the loss scenario, whereas RAID tolerates a single disk failure but does not protect against deletion, corruption, or site-wide events.

Why this answer

Regular backups create copies of data that can be restored if the original is lost due to hard drive failure. This directly addresses data loss by providing a recovery point, unlike other options that focus on security or power protection.

Exam trap

The trap here is that candidates confuse fault tolerance (like RAID) with backups, but RAID only protects against drive failure, not data loss from corruption or deletion, whereas backups ensure data can be restored regardless of the cause.

How to eliminate wrong answers

Option A is wrong because strong passwords prevent unauthorized access but do not protect against hardware failure or data loss. Option B is wrong because antivirus software protects against malware, not physical drive failure or data recovery. Option C is wrong because a surge protector guards against power spikes damaging hardware, but does not preserve data if the drive fails.

Full explanation →

387

MCQmedium

A user receives a file with the extension .exe from an unknown sender. Before running it, the user wants to verify whether the file is safe. Which action best helps the user evaluate the risk?

A.Scan the file with updated antivirus software and check its reputation before running it.

B.Forward the file to coworkers so they can test it first.

C.Rename the file to .txt and then run it.

D.Open the file immediately to see what it does.

AnswerA

Scanning with current antivirus signatures and checking the file's reputation can detect known malware and flag suspicious or unsigned executables. This lets the user make an informed decision before execution. It is not a guarantee of safety, but it is the appropriate risk-evaluation step for an unexpected executable from an unknown source.

Why this answer

The safest way to evaluate an unexpected executable is to scan it with updated antivirus protection and review its reputation or digital signature before running it. Opening, renaming, or forwarding the file either executes it, fails to neutralize it, or spreads the danger. Scanning and reputation checks provide evidence the user can act on.

Exam trap

The trap here is thinking that changing a file extension or opening it carefully makes an unknown executable safe to inspect.

Full explanation →

388

MCQhard

A small real estate office with 12 employees has been using the same network setup for five years. Employees use both company-issued laptops and personal smartphones to access email and client listings. Last week, an employee clicked a link in a phishing email, which led to a ransomware infection on the company file server. The server was encrypted, and the attackers demanded a ransom. The office had no backups; all client data and contracts were lost. The office manager wants to prevent such incidents in the future. Which of the following should be the FIRST security measure implemented, considering the root cause of the breach?

A.Install antivirus software on all company laptops and personal devices

B.Deploy a next-generation firewall with intrusion prevention

C.Enable full-disk encryption on all company laptops

D.Mandate security awareness training for all employees, focusing on phishing identification

AnswerD

The phishing click was the root cause, so mandating security awareness training addresses how the ransomware entered. Teaching employees to recognise and report phishing emails prevents recurrence, satisfying the requirement to fix the underlying human vulnerability first.

Why this answer

The root cause was a phishing email that tricked an employee. While technical controls like antivirus (A), next-generation firewall (B), and full-disk encryption (C) are valuable, they do not address the human factor. Security awareness training (D) educates users to recognize phishing attempts, reducing the likelihood of similar incidents.

Without training, other controls can be bypassed. Option D is the most direct and effective first step.

Full explanation →

389

Multi-Selecthard

Which THREE are common steps in troubleshooting software issues?

Select 3 answers

A.Test the solution

B.Identify the problem

C.Reinstall the operating system

D.Replace hardware

E.Document findings

AnswersA, B, E

Testing the solution verifies whether the implemented fix actually resolves the reported software fault and restores normal operation. It is a standard step in the troubleshooting methodology, confirming the repair before closing the incident and documenting the outcome.

Why this answer

The three correct steps are A, B, and E because they map to the standard troubleshooting methodology: B (Identify the problem) is the essential first phase where you gather information from the user, reproduce the issue, and determine what changed; A (Test the solution) is the verification phase where you confirm the fix actually resolves the issue and check for side effects before closing the ticket; and E (Document findings) is the final phase where you record the problem, cause, and resolution in the knowledge base or ticketing system so future incidents can be resolved faster. C (Reinstall the operating system) is not a routine troubleshooting step — it is a drastic last-resort remediation that destroys data and configuration, not a diagnostic or verification step. D (Replace hardware) is also not a common software-troubleshooting step; it addresses physical faults and would only be considered after diagnostics point to a hardware failure, not as part of the general software troubleshooting process.

Exam trap

The trap here is that candidates may confuse 'reinstall the operating system' (a common but extreme step) with a standard troubleshooting step, or they may overlook 'document findings' as a non-technical but required step in the formal troubleshooting process.

Full explanation →

390

MCQmedium

A company wants to use a cloud service where they can deploy their own applications on virtual machines without managing the underlying hardware. Which cloud service model best fits this requirement?

A.Infrastructure as a Service (IaaS)

B.Software as a Service (SaaS)

C.Function as a Service (FaaS)

D.Platform as a Service (PaaS)

AnswerA

IaaS provides virtual machines, storage and networking while the provider manages only the physical hardware and hypervisor. The customer controls the operating system and deployed applications, matching the requirement to run own applications without managing underlying hardware.

Why this answer

IaaS provides virtualized compute, storage, and networking resources where the customer manages the OS, middleware, and applications while the provider manages the physical hardware and hypervisor. Deploying your own applications on VMs without managing hardware is the textbook definition of IaaS (e.g., Amazon EC2).

Exam trap

FC0-U71 often tests the boundary between IaaS and PaaS — candidates confuse 'deploying applications' with PaaS, but the key differentiator is whether the customer manages the VM/OS, which makes it IaaS.

How to eliminate wrong answers

Option B is wrong because SaaS delivers fully managed applications (e.g., Salesforce, Gmail) where the customer does not deploy or manage applications at all. Option C is wrong because FaaS (e.g., AWS Lambda) runs event-driven code without any server or VM management — the customer only supplies functions, not full applications on VMs. Option D is wrong because PaaS (e.g., Elastic Beanstalk, Heroku) abstracts the OS and runtime, providing a platform where you deploy code but do not manage the underlying VMs.

Full explanation →

391

MCQhard

A hospital stores patient records in a relational database. Administrators need to record that a patient can have multiple allergies, and each allergy may affect multiple patients. Which type of relationship exists between patients and allergies, and how is it implemented?

A.One-to-many, implemented by adding a foreign key to the allergies table.

B.Many-to-many, implemented by storing a comma-separated list of allergy names in the patients table.

C.One-to-one, implemented by adding a foreign key to the patients table.

D.Many-to-many, implemented with a junction table containing foreign keys to both patients and allergies.

AnswerD

A many-to-many relationship correctly describes patients who can have multiple allergies and allergies that can affect multiple patients. It is implemented by creating a junction table with foreign keys referencing the primary keys of both the patients and allergies tables, allowing any combination of patient and allergy to be recorded.

Why this answer

Because a patient can have several allergies and an allergy can affect several patients, the relationship is many-to-many. The standard relational solution is a junction table that holds foreign keys to both the patients and allergies tables, enabling flexible associations and preserving referential integrity without duplicating data in either primary table.

Exam trap

The trap here is assuming that adding a foreign key to one of the two tables can represent a many-to-many relationship, when only a junction table correctly models both directions of the association.

Full explanation →

392

Multi-Selecteasy

Which TWO of the following are advantages of using a relational database over a NoSQL database? (Choose two.)

Select 2 answers

A.Schema flexibility

B.Low latency for large volumes

C.ACID compliance

D.Standard query language (SQL)

E.Horizontal scalability

AnswersC, D

ACID compliance guarantees that transactions complete fully or not at all, preserving consistency across concurrent operations. Relational engines enforce this natively, giving the stem's requested advantage over most NoSQL databases, which typically relax such guarantees for scale.

Why this answer

Option C (ACID compliance) is correct because relational databases are designed around ACID transactions—atomicity, consistency, isolation, and durability—which guarantee reliable, predictable behavior for multi-row operations, something most NoSQL databases only partially support. Option D (Standard query language (SQL)) is correct because relational databases use SQL, a standardized, widely known language that provides portable, declarative querying and broad tool/ecosystem support across vendors. Option A (Schema flexibility) is not an advantage of relational databases; it is a hallmark of NoSQL systems like document or key-value stores, since relational databases enforce a predefined schema.

Option B (Low latency for large volumes) is not a general relational advantage; NoSQL databases are often chosen specifically for high-throughput, low-latency access to massive datasets. Option E (Horizontal scalability) is also typically a NoSQL strength, since relational databases traditionally scale vertically and require sharding or clustering add-ons to scale horizontally.

Full explanation →

393

MCQhard

A small business uses a legacy desktop application for inventory management. The application was designed for Windows 7 and has not been updated. The company recently upgraded its workstations to Windows 10. Now, when employees try to run the inventory application, it either crashes immediately or displays errors about missing components. The company relies on this application daily and cannot afford downtime. The IT administrator has tried running the application in compatibility mode for Windows 7, but the crashes persist. There is no alternative application available, and the vendor is out of business. Which of the following is the BEST course of action to allow the business to continue using this application?

A.Contact the vendor for an updated version of the software.

B.Hire a developer to rewrite the application for Windows 10.

C.Set up a virtual machine running Windows 7 and install the application there.

D.Uninstall the application and reinstall it using the original installation media.

AnswerC

A Windows 7 virtual machine provides the legacy runtime and components the application requires, isolating it from Windows 10 incompatibilities. Compatibility mode cannot supply missing dependencies, and virtualisation keeps daily access without vendor support or application changes.

Why this answer

A Type 2 hypervisor VM running Windows 7 provides a fully compatible OS environment where the legacy application's missing components (old .NET runtimes, VB6 libraries, registry entries) exist natively, bypassing the incompatibilities that compatibility mode cannot fix. Compatibility mode only shims a limited set of API calls and does not restore removed OS subsystems, so crashes persist. Virtualization isolates the legacy stack while keeping the Windows 10 host productive.

Exam trap

The trap here is assuming compatibility mode is a universal fix for legacy software — candidates pick it or reinstallation because they sound like reasonable troubleshooting steps, but the question states compatibility mode already failed, forcing the virtualization answer.

How to eliminate wrong answers

Option A is wrong because the vendor is explicitly stated to be out of business, so no updated version can be obtained. Option B is wrong because rewriting a legacy application is prohibitively expensive, time-consuming, and unnecessary when a VM solves the problem immediately. Option D is wrong because reinstalling the same incompatible binary on Windows 10 will reproduce the identical missing-component errors — the OS, not the installation, is the root cause.

Full explanation →

394

MCQeasy

A technician needs to verify that a twisted-pair Ethernet cable is wired correctly and has no breaks. Which tool should be used?

A.Multimeter

B.Loopback plug

C.Cable tester

D.Toner probe

AnswerC

A cable tester injects signals through each twisted pair and checks pin-to-pin continuity against the T568A or T568B wiring standard, immediately revealing opens, shorts, or crossed pairs. This directly satisfies the technician's requirement to confirm correct wiring and detect breaks, which a toner probe or multimeter cannot verify per-pin.

Why this answer

A cable tester sends signals through each conductor in the twisted-pair cable and checks for continuity, correct pin-to-pin wiring (e.g., T568A or T568B), and shorts or opens. This makes it the correct tool to verify proper wiring and detect breaks in an Ethernet cable.

Exam trap

The trap here is that candidates confuse a multimeter's ability to check continuity with the cable tester's ability to verify correct pairing and wiring standards, leading them to choose the multimeter when only a cable tester can confirm proper Ethernet wiring.

How to eliminate wrong answers

Option A is wrong because a multimeter can only test basic continuity or resistance on individual wires, but it cannot verify correct pairing, split pairs, or the full wiring scheme of an Ethernet cable. Option B is wrong because a loopback plug is used to test the transmit/receive capability of a network interface port, not to check the wiring or integrity of a cable itself. Option D is wrong because a toner probe is used to trace and identify a specific cable within a bundle or patch panel, not to verify wiring correctness or detect breaks.

Full explanation →

395

MCQmedium

A user reports that the company's customer relationship management (CRM) application is slow after a recent network upgrade. What could be the cause?

A.The network firewall is blocking certain CRM traffic.

B.The application has too many users.

C.The user's password has expired.

D.The user is entering data too quickly.

AnswerA

Firewall rules can block or throttle the specific ports and protocols the CRM application relies on, adding latency or dropping sessions. If the network upgrade introduced stricter filtering, legitimate CRM traffic may be delayed or retried, producing the slowness the user reports.

Why this answer

A network firewall can introduce latency or block traffic if its rules are misconfigured after an upgrade. If the CRM application relies on specific ports or protocols (e.g., HTTPS on TCP 443, or a proprietary port like TCP 8080), the firewall might be inspecting, throttling, or dropping packets, causing perceived slowness. This is a common post-upgrade issue when ACLs or stateful inspection rules change.

Exam trap

CompTIA often tests the misconception that slowness after a network change must be caused by bandwidth or user load, rather than a firewall or ACL misconfiguration that introduces latency or packet loss.

How to eliminate wrong answers

Option B is wrong because too many users would cause slow performance due to resource contention on the server, not specifically after a network upgrade; the issue is network-related, not capacity-related. Option C is wrong because an expired password prevents login entirely (HTTP 401 or access denied), not causing slowness after authentication. Option D is wrong because data entry speed is a client-side input rate that does not affect network throughput or application response time; the application processes keystrokes asynchronously.

Full explanation →

396

MCQmedium

A software developer is building an application that needs to store user profiles with varying attributes, such as some users having multiple phone numbers and others having none. The developer wants a flexible schema that allows different users to have different sets of fields without altering the database structure. Which type of database is best suited for this requirement?

A.NoSQL document database

B.Hierarchical database

C.Flat file database

D.Relational database

AnswerA

NoSQL document databases store data in flexible, JSON-like documents, allowing each user profile to have different fields without a fixed schema. This is ideal for varying attributes, such as some users having multiple phone numbers while others have none. The developer can easily add or remove fields per document, meeting the requirement for schema flexibility.

Why this answer

The requirement is for a flexible schema that allows different users to have different fields without structural changes. NoSQL document databases store data as self-describing documents, so each user profile can have its own set of attributes. This eliminates the need for schema migrations and supports varying numbers of phone numbers or other fields, making it the best fit.

Exam trap

The trap here is assuming that a relational database can easily handle varying attributes; while possible with additional tables, it requires complex joins and schema changes, which is not the flexible approach described.

Full explanation →

397

MCQeasy

A user is shopping for a laptop and wants to know how much data the machine can hold for documents, photos, and applications. Which specification should the user check to determine the total storage capacity of the system?

A.The size of the display in inches

B.The capacity of the solid-state drive or hard disk drive

C.The amount of RAM installed

D.The clock speed of the processor

AnswerB

Persistent storage capacity is reported as the size of the installed SSD or HDD, measured in gigabytes or terabytes. This is the space that holds the operating system, applications, and user files after the machine is powered off. Checking this specification directly answers how much data the laptop can retain, which is exactly what the shopper wants to compare between models.

Why this answer

Persistent storage capacity is determined by the size of the installed drive, whether that is a solid-state drive or a hard disk drive, and is reported in gigabytes or terabytes. RAM, processor clock speed, and screen size influence performance or usability but do not define how much user data can be retained when the system is powered off.

Exam trap

The trap here is assuming that a larger RAM figure means more room for files, when RAM is volatile working memory and only the drive capacity defines persistent storage.

Full explanation →

398

MCQmedium

A user wants to upgrade their desktop computer's RAM for better performance. The motherboard supports dual-channel memory. Which configuration will provide the best performance?

A.Two 8 GB DDR4 modules in paired slots

B.Three 4 GB DDR4 modules

C.One 16 GB DDR4 module

D.Two 8 GB DDR4 modules in the same channel

AnswerA

Installing two matched 8 GB DDR4 modules in the paired slots activates dual-channel mode, letting the memory controller access both modules simultaneously and doubling the effective data path width. This satisfies the motherboard's dual-channel constraint, unlike a single module or mismatched pairing.

Why this answer

Dual-channel memory requires matched pairs of identical modules installed in the correct paired slots (often color-coded, e.g., slots 1 and 3 or 2 and 4). Two 8 GB DDR4 modules in paired slots gives 16 GB total with both memory channels active, effectively doubling memory bandwidth compared to single-channel operation. This is the optimal configuration for performance.

Exam trap

FC0-U71 often tests whether candidates equate total capacity with performance — a single 16 GB stick and two 8 GB sticks both give 16 GB, but only the paired configuration activates dual-channel bandwidth, which is the actual performance differentiator.

How to eliminate wrong answers

Option B is wrong because three 4 GB modules cannot operate in dual-channel mode symmetrically — most consumer boards support either single or dual channel, and three DIMMs typically force single-channel or flex mode with reduced benefit. Option C is wrong because a single 16 GB module runs in single-channel mode, halving memory bandwidth even though capacity is the same. Option D is wrong because two modules in the same channel (e.g., both in slots 1 and 2 of the same channel) still operate in single-channel mode — the whole point of dual-channel is populating both channels with matched modules.

Full explanation →

399

MCQeasy

A user asks a technician why their spreadsheet file opens much faster after being saved in a different format. The technician explains that the new format stores data in a structured, compressed way. Which of the following best describes the primary purpose of a file format?

A.It determines the maximum size of the storage drive that can hold the file.

B.It guarantees that the file can be opened by any application on any operating system.

C.It encrypts the file contents to prevent unauthorized access by other users.

D.It defines how data is encoded, stored, and interpreted by an application.

AnswerD

A file format specifies the structure, encoding, and rules used to store data so that software can read and interpret it consistently. In this scenario, the structured format allows the spreadsheet application to parse and load data more efficiently. This is the core definition of a file format in computing.

Why this answer

A file format defines the encoding and structure that applications use to store and retrieve data. In the scenario, the new format organizes spreadsheet data more efficiently, which explains the faster load time. The other choices describe storage capacity, universal compatibility, or encryption, none of which define what a file format fundamentally does.

Exam trap

The trap here is assuming that a file format's main job is to protect or universally share a file, when its actual role is to define how data is encoded and interpreted.

Full explanation →

400

MCQmedium

A user needs to run a Windows application on a Mac. Which approach uses a hypervisor to create a separate environment?

A.Virtual machine

B.Boot Camp

C.Driver update

D.Compatibility mode

AnswerA

A virtual machine runs a guest OS under a hypervisor, which virtualises CPU, memory and devices so Windows executes in an isolated environment on the Mac host. This directly satisfies the requirement for a hypervisor-based separate environment.

Why this answer

A virtual machine uses a hypervisor (Type 1 or Type 2) to create a separate, isolated environment that emulates hardware, allowing a Windows guest OS to run on a Mac host. This is the only option that explicitly involves a hypervisor, as stated in the question. Boot Camp, by contrast, is a dual-boot solution that does not use a hypervisor.

Exam trap

The trap is that Boot Camp also lets you run Windows on a Mac, but it does not use a hypervisor — candidates who overlook the 'hypervisor' keyword may pick Boot Camp incorrectly.

How to eliminate wrong answers

Option B is wrong because Boot Camp repartitions the Mac's drive and allows native booting into Windows, but it does not use a hypervisor — it runs Windows directly on the hardware. Option C is wrong because a driver update merely updates software that controls hardware and does not create a separate environment for running applications. Option D is wrong because compatibility mode is a Windows feature that adjusts settings for older applications, not a hypervisor-based environment.

Full explanation →

401

MCQhard

A software developer writes code that stores sensitive user data. To comply with data protection regulations, which application-level security measure should be implemented?

A.Install a firewall on the server.

B.Run regular antivirus scans.

C.Use encryption for data storage and transmission.

D.Require multi-factor authentication for login.

AnswerC

Encryption renders stored and transmitted sensitive data unreadable without the correct keys, satisfying data protection regulations that mandate protecting personal data at rest and in transit. It is an application-level control that prevents disclosure if storage or network traffic is compromised.

Why this answer

Encryption (e.g., AES-256 for data at rest and TLS 1.3 for data in transit) renders sensitive user data unreadable to unauthorized parties, directly addressing data protection regulations such as GDPR or HIPAA that mandate confidentiality. This is an application-level security measure implemented within the software code or database layer, not a network or perimeter control.

Exam trap

The trap here is that candidates often confuse access control measures (like MFA) with data protection measures (like encryption), assuming that restricting who can log in is sufficient to protect stored data, but regulations require data to be encrypted regardless of access controls.

How to eliminate wrong answers

Option A is wrong because a firewall is a network-level security measure that controls traffic based on IP addresses and ports; it does not protect data stored or transmitted by the application itself. Option B is wrong because antivirus scans detect and remove malware on the host system but do not protect the confidentiality or integrity of application data at rest or in transit. Option D is wrong because multi-factor authentication (MFA) controls access to the application but does not secure the stored data itself; once authenticated, the data remains exposed without encryption.

Full explanation →

402

Multi-Selectmedium

A company wants to implement the principle of least privilege for its employees. Which TWO of the following actions align with this principle? (Choose TWO.)

Select 2 answers

A.Providing access only to the applications needed for each employee's role

B.Allowing employees to share passwords for convenience

C.Granting all employees administrative rights by default

D.Revoking access to systems when an employee changes roles

E.Giving all employees full access to the company's financial data

AnswersA, D

Least privilege grants each user only the access required for their duties. Restricting applications to those needed for a specific role directly enforces that minimum-access principle, satisfying the stem's requirement for actions that align with least privilege.

Why this answer

Option A is correct because least privilege means granting each user only the minimum access required to perform their job, so providing access only to the applications needed for each employee's role directly enforces that restriction. Option D is correct because least privilege requires continuously right-sizing permissions; revoking access when an employee changes roles prevents privilege accumulation and removes rights no longer needed for the new position. Option B is not correct because sharing passwords destroys individual accountability and grants access beyond what any single user should have.

Option C is not correct because granting administrative rights by default massively exceeds the minimum necessary privileges. Option E is not correct because giving everyone full access to financial data violates least privilege by exposing sensitive data to users who do not need it.

Full explanation →

403

MCQhard

A university database includes a table named 'Students' and a table named 'Enrollments'. The 'Enrollments' table has a foreign key column 'StudentID' that references the 'StudentID' primary key in the 'Students' table. The university policy requires that when a student withdraws (i.e., their record is deleted from the 'Students' table), all of their associated enrollment records must be automatically removed to maintain data consistency. The database administrator wants to enforce this rule at the database level. Which referential action should be applied when creating the foreign key constraint on the 'Enrollments' table?

A.ON DELETE CASCADE

B.ON DELETE SET NULL

C.ON DELETE NO ACTION

D.ON DELETE RESTRICT

AnswerA

ON DELETE CASCADE automatically deletes matching child rows in 'Enrollments' whenever the referenced parent row in 'Students' is removed, enforcing the university's withdrawal rule directly within the foreign key constraint. This satisfies the requirement for database-level enforcement, guaranteeing referential integrity without relying on application code or manual cleanup.

Why this answer

(ON DELETE CASCADE) is correct because it automatically deletes all child rows in the 'Enrollments' table when the corresponding parent row in the 'Students' table is deleted. This enforces the university policy of removing associated enrollment records upon student withdrawal, maintaining referential integrity at the database level without manual intervention.

Exam trap

The trap here is that candidates often confuse ON DELETE CASCADE with ON DELETE SET NULL or ON DELETE RESTRICT, mistakenly thinking that preventing deletion or setting NULL satisfies the automatic removal requirement, when only CASCADE actually deletes the child records automatically.

How to eliminate wrong answers

Option B (ON DELETE SET NULL) is wrong because it would set the 'StudentID' foreign key column in 'Enrollments' to NULL when the parent student record is deleted, which does not remove the enrollment records and may violate NOT NULL constraints. Option C (ON DELETE NO ACTION) is wrong because it prevents the deletion of a student record if any referencing enrollment rows exist, requiring manual deletion of enrollments first, which contradicts the automatic removal policy. Option D (ON DELETE RESTRICT) is wrong because it also blocks the deletion of a student record if referencing enrollments exist, similar to NO ACTION, and does not automatically remove associated records.

Full explanation →

404

MCQeasy

What is the decimal equivalent of the binary number 1101?

A.15

B.13

C.10

D.12

AnswerB

Binary 1101 converts by summing positional powers of two: 1×8 + 1×4 + 0×2 + 1×1, giving 8 + 4 + 0 + 1 = 13. This satisfies the stem's requirement for the decimal equivalent, since each bit's place value is added only where a 1 appears.

Why this answer

The binary number 1101 has four bits: the leftmost bit is the 8's place (2^3), then 4's (2^2), 2's (2^1), and 1's (2^0). Adding the values where bits are 1: 8 + 4 + 0 + 1 = 13. Therefore, the decimal equivalent is 13.

Exam trap

The trap is misaligning the bit positions or forgetting that the leftmost bit in a 4-bit number is 8, not 16; candidates may incorrectly add 8+4+2+1=15 if they misread the bits.

How to eliminate wrong answers

Option A (15) is wrong because 15 is the decimal value of 1111 (8+4+2+1), not 1101. Option C (10) is wrong because 10 is the decimal value of 1010 (8+2), not 1101. Option D (12) is wrong because 12 is the decimal value of 1100 (8+4), not 1101.

Full explanation →

405

MCQhard

A technician is comparing two internal storage devices for a workstation that must boot quickly and survive being dropped during transport. One candidate uses flash memory with no moving parts, while the other uses spinning magnetic platters. Which statement correctly describes the trade-off the technician should consider?

A.The flash-based device stores data magnetically and requires periodic defragmentation to maintain speed

B.The magnetic device provides lower latency than the flash-based device because platters spin continuously

C.The magnetic device has no moving parts and therefore uses less power under load

D.The flash-based device has faster access times and better shock resistance but generally costs more per gigabyte

AnswerD

Solid-state drives store data in flash memory, so they have no moving parts to seek or spin up, giving near-instant access times, faster boots, and much greater tolerance for drops and vibration. The trade-off is that flash memory historically costs more per gigabyte than magnetic media, so the technician must weigh speed and durability against budget when selecting the workstation drive.

Why this answer

Flash-based solid-state drives deliver faster access times and greater resistance to shock because they have no moving parts, while magnetic hard disk drives rely on spinning platters and a moving actuator arm. The trade-off is cost per gigabyte, since flash storage generally remains more expensive, so the technician must balance performance and durability against budget.

Exam trap

The trap here is assuming that continuously spinning platters reduce latency, when mechanical seek and rotational delays actually make magnetic drives slower than flash storage.

Full explanation →

406

MCQmedium

A user is troubleshooting an issue with a web application that is only accessible through a browser. The user notes that the application runs slowly. Which component is most likely responsible for processing the application's server-side logic?

A.Web browser

B.Local firewall

C.Web server

D.Operating system

AnswerC

The web server executes server-side logic such as PHP, Python or Java, generating dynamic responses before sending them to the browser. Since the application is browser-accessible and slow, this component handles the processing that determines response time.

Why this answer

In a three-tier web application, the web server (e.g., Apache, Nginx, IIS) is the component that executes server-side logic — processing requests, running application code, and querying back-end resources before returning HTML/JSON to the browser. The browser only renders the response and runs client-side JavaScript; it does not execute server-side code. Therefore the web server is the component most likely responsible for the slow server-side processing.

Exam trap

FC0-U71 often tests tier responsibility — candidates confuse the browser (client-side rendering) with the web server (server-side logic) because both 'run' the application in some sense.

How to eliminate wrong answers

Option A is wrong because the web browser is the client — it renders HTML/CSS/JS and sends requests, but it does not process server-side application logic. Option B is wrong because a local firewall filters network traffic on the user's machine; it does not execute application logic and would cause connectivity failures, not slow server-side processing. Option D is wrong because the operating system provides the runtime and network stack but does not itself implement the application's server-side business logic.

Full explanation →

407

Multi-Selecthard

A small business is expanding and needs to ensure their network infrastructure supports growth. Which THREE practices should they implement?

Select 3 answers

A.Deploy redundant power supplies for critical devices

B.Implement network segmentation using VLANs

C.Use a single subnet for simplicity

D.Regularly update firmware on networking equipment

E.Use static IP addressing for all devices

AnswersA, B, D

Redundant power supplies increase uptime and reliability.

Why this answer

Redundant power supplies ensure that critical network devices like switches and routers remain operational even if one power supply fails, minimizing downtime during business expansion. This practice directly supports network availability and growth by providing fault tolerance for essential infrastructure components.

Exam trap

The trap here is that candidates may choose 'Use a single subnet for simplicity' thinking it reduces complexity, but it actually hinders scalability and introduces broadcast domain issues that degrade performance in a growing network.

Full explanation →

408

MCQmedium

A spreadsheet user needs to display the text from cell A2 in all uppercase letters in cell B2, without altering the original value in A2. Which function should be entered in B2?

A.=LOWER(A2)

B.=UPPER(A2)

C.=CONCATENATE(A2)

D.=PROPER(A2)

AnswerB

The UPPER function converts a text string to uppercase and returns the result in the cell where it is entered. Because it returns a new value rather than editing the source, A2 remains unchanged. This is precisely the behavior required to display an uppercase version of A2 in B2.

Why this answer

The UPPER function is the correct tool because it returns an uppercase copy of the referenced text without modifying the source cell. Functions like LOWER and PROPER change case in different ways, and CONCATENATE only joins strings. Only UPPER converts every character in A2 to uppercase while leaving the original data intact.

Exam trap

The trap here is selecting a text function that changes case in some way without checking whether it produces all uppercase letters.

Full explanation →

409

MCQhard

A technician is troubleshooting a computer that does not start. They suspect the BIOS may be corrupted. Which type of software is the BIOS?

A.Operating system

B.Application software

C.Firmware

D.Device driver

AnswerC

BIOS is firmware: low-level code stored in non-volatile ROM on the motherboard, executed before any operating system loads. This distinguishes it from application or system software, and explains why corruption prevents the machine from completing POST and starting.

Why this answer

The BIOS (Basic Input/Output System) is firmware — low-level software stored on a chip on the motherboard that initializes hardware during boot and provides runtime services for the operating system. It is not an operating system, application, or device driver, though it is often confused with them due to its role in starting the system.

Exam trap

The trap is that candidates may think BIOS is an operating system because it manages boot, but the exam expects you to recognize it as firmware due to its storage on a chip and low-level hardware control.

How to eliminate wrong answers

Option A is wrong because an operating system (e.g., Windows, Linux) is a large software suite stored on disk that manages applications and hardware, not a chip-based low-level program. Option B is wrong because application software (e.g., a web browser) runs on top of the OS and is not involved in booting the hardware. Option D is wrong because a device driver is OS-level software that controls a specific hardware component, not the firmware that starts the system.

Full explanation →

410

MCQeasy

A user needs to retrieve only the 'ProductName' and 'Price' columns from a table named 'Products' where the 'Category' is 'Electronics'. Which SQL statement should the user execute?

A.SELECT ProductName, Price FROM Products HAVING Category = 'Electronics';

B.SELECT * FROM Products WHERE Category = 'Electronics';

C.SELECT ProductName, Price FROM Products ORDER BY Category = 'Electronics';

D.SELECT ProductName, Price FROM Products WHERE Category = 'Electronics';

AnswerD

This statement correctly selects the two desired columns, specifies the table, and applies a filter on the Category column. It returns only the product names and prices for electronics, matching the user's requirement. The syntax is standard SQL and will work in any relational DBMS, making it the precise solution.

Why this answer

The SQL SELECT statement retrieves data from a table. To get specific columns, you list them after SELECT. To filter rows, you use the WHERE clause.

The correct statement selects ProductName and Price from Products and filters where Category equals 'Electronics'. This precisely meets the user's need to view only electronics products with their names and prices.

Exam trap

The trap here is mixing up WHERE and HAVING; WHERE filters individual rows before grouping, while HAVING filters groups after aggregation.

Full explanation →

411

MCQhard

A software application is experiencing performance degradation. The team suspects a memory leak. Which development practice should be used to identify the source of the leak?

A.Unit testing

B.Debugging

C.Profiling

D.Code review

AnswerC

Profiling instruments running code to capture per-function memory allocation over time, exposing exactly where unreleased objects accumulate. This directly satisfies the stem's requirement to identify the leak's source, since it pinpoints the specific routines retaining memory rather than merely confirming that degradation exists.

Why this answer

Profiling is the correct practice because it involves monitoring the application's runtime behavior, including memory allocation and garbage collection. A memory profiler can track object creation and retention, pinpointing which objects are not being released and causing the leak. This is the standard approach for diagnosing memory leaks in languages like Java or C#.

Exam trap

The trap here is that candidates confuse debugging (step-by-step logic inspection) with profiling (runtime performance and memory analysis), assuming any performance issue can be solved by stepping through code, but memory leaks require heap analysis tools.

How to eliminate wrong answers

Option A is wrong because unit testing validates individual code units for correctness, not runtime memory usage patterns; it cannot detect a memory leak that manifests over time. Option B is wrong because debugging is used to step through code logic and inspect variables at a specific point, but it does not provide continuous memory allocation statistics or identify unreleased objects. Option D is wrong because code review involves manually examining source code for logical errors or style issues, but it cannot reveal runtime memory behavior such as objects that are inadvertently held in memory.

Full explanation →

412

MCQhard

A database analyst is designing a schema for a library system. Each book can have multiple authors, and each author can write multiple books. Which relationship type should be used?

A.Many-to-one

B.One-to-many

C.Many-to-many

D.One-to-one

AnswerC

A book can have many authors and an author many books, so neither side holds a single foreign key. A junction table resolves this many-to-many relationship into two one-to-many links, which a one-to-many or one-to-one design cannot represent.

Why this answer

The correct relationship is many-to-many because a book can have multiple authors and an author can write multiple books. In database schema design, this requires a junction table (also known as a linking or associative table) to resolve the many-to-many relationship into two one-to-many relationships, ensuring referential integrity and avoiding data redundancy.

Exam trap

The trap here is that candidates often confuse one-to-many with many-to-many when the problem statement mentions 'multiple' on one side only, but the key is that both entities can have multiple related records, which requires a junction table.

How to eliminate wrong answers

Option A is wrong because many-to-one is the inverse of one-to-many and implies that many books could be associated with a single author, but it fails to capture the scenario where a book has multiple authors. Option B is wrong because one-to-many would mean one book can have many authors, but it does not allow an author to write many books, which violates the bidirectional requirement. Option D is wrong because one-to-one would mean each book has exactly one author and each author writes exactly one book, which directly contradicts the given requirement that both sides can have multiple instances.

Full explanation →

413

MCQmedium

Which of the following is an example of lossy compression?

A.JPEG

B.GIF

C.PNG

D.ZIP

AnswerA

JPEG applies lossy compression, discarding perceptually less significant colour and frequency detail to shrink image files substantially. This irreversible data removal is what makes it lossy, unlike lossless formats such as PNG or GIF that reconstruct the original data exactly.

Why this answer

JPEG is a lossy compression format that discards some image data to achieve smaller file sizes, making it the correct example. It uses DCT and quantization to reduce detail, especially in high-frequency areas, which is acceptable for photographs but not for text or line art.

Exam trap

The trap is that candidates may think GIF or PNG are lossy because they compress files, but both are lossless; only JPEG among the options is lossy, and ZIP is a lossless archive format.

How to eliminate wrong answers

Option B is wrong because GIF uses lossless compression (LZW) and is limited to 256 colors, but it does not discard data to reduce size. Option C is wrong because PNG is a lossless format that preserves all image data, often used for graphics with transparency. Option D is wrong because ZIP is a lossless archive compression format used for files, not a lossy image compression method.

Full explanation →

414

MCQhard

A company wants to deploy a custom application to 500 employees. The IT team needs to ensure each workstation has the same version and configuration. Which deployment method should be used?

A.Use Group Policy to publish the application to all workstations.

B.Place the installer on a network share and instruct users to run it.

C.Distribute USB drives with the installer to each employee.

D.Email the installer to all employees.

AnswerA

Group Policy publishing deploys the application from a network location to every targeted workstation, enforcing identical version and configuration centrally. This satisfies the consistency constraint across 500 machines, since administrators define the package once and domain policy applies it uniformly.

Why this answer

Group Policy (GPO) allows centralized deployment of software via Active Directory, ensuring all workstations receive the same version and configuration automatically during startup or user logon. This method uses the Windows Installer service (MSI) and can assign or publish applications, enforcing consistency without user intervention. It is the only option that guarantees uniform deployment across 500 machines with minimal administrative overhead.

Exam trap

The trap here is that candidates may think a network share (Option B) is centralized enough, but they overlook that without Group Policy enforcement, users must manually run the installer, breaking the requirement for consistent version and configuration across all workstations.

How to eliminate wrong answers

Option B is wrong because placing the installer on a network share and instructing users to run it relies on manual user action, which risks inconsistent versions, configuration drift, and non-compliance if users skip or delay installation. Option C is wrong because distributing USB drives to each employee is impractical for 500 workstations, introduces version control issues (e.g., outdated media), and lacks centralized management or enforcement. Option D is wrong because emailing the installer is insecure (potential for attachment blocking, malware risks), unreliable (large files may be rejected), and again depends on users manually executing the installer, leading to version and configuration inconsistencies.

Full explanation →

415

MCQeasy

Which of the following is an example of application software?

A.Windows 10

B.BIOS

C.Linux kernel

D.Microsoft Word

AnswerD

Microsoft Word is application software because it performs a user-facing productivity task rather than managing hardware or system resources. Unlike operating systems or utilities, it runs on top of the platform to create and edit documents, directly satisfying the stem's requirement for an application software example.

Why this answer

Microsoft Word is application software because it is a user-facing program designed to perform a specific productivity task (word processing) on top of the operating system. Application software sits above system software and relies on the OS for hardware access, file management, and process scheduling. Windows 10, BIOS, and the Linux kernel are all system-level components, not end-user applications.

Exam trap

The trap here is conflating anything 'installed on a computer' with application software — candidates often pick Windows 10 or the Linux kernel because they are familiar names, forgetting that operating systems and firmware are classified as system software.

How to eliminate wrong answers

Option A is wrong because Windows 10 is an operating system, which is system software that manages hardware and provides a platform for applications. Option B is wrong because BIOS is firmware embedded on the motherboard that performs POST and initializes hardware before the OS loads — it is system firmware, not application software. Option C is wrong because the Linux kernel is the core of an operating system that handles process, memory, and device management, making it system software rather than an application.

Full explanation →

416

MCQhard

Two developers have edited the same file and created different versions. To integrate their changes, which Git operation should they perform?

A.git pull

B.git merge

C.git rebase

D.git commit

AnswerB

git merge integrates divergent branches by combining the two developers' commits into a unified history, resolving changes to the same file. It reconciles their separate versions, whereas operations like clone or commit alone cannot join parallel lines of work.

Why this answer

The git merge command is used to integrate changes from one branch into another, combining the histories of both branches. When two developers have edited the same file in different branches, merging brings their changes together into a single branch, resolving any conflicts. This is the standard operation for integrating divergent work.

Exam trap

FC0-U71 often tests the distinction between merge and rebase, with candidates incorrectly choosing rebase for integration when merge is the standard operation for combining divergent branches.

How to eliminate wrong answers

Option A is wrong because git pull fetches from a remote and merges, but it does not directly integrate two local divergent branches; it is used to update a local branch from a remote. Option C is wrong because git rebase rewrites history by moving commits, which can be used for integration but is not the primary operation for merging two divergent branches; it's often used to linearize history before a merge. Option D is wrong because git commit records changes to the local repository but does not integrate changes from another branch.

Full explanation →

417

MCQhard

A company is implementing a backup strategy. Which of the following best adheres to the 3-2-1 backup rule?

A.Two backups on tape drives, both stored in the server room

B.Original data on a server, a backup on a NAS in the same building, and a backup in the cloud

C.Original data on a laptop, a backup on a USB drive, and a backup on a second USB drive stored in a safe

D.One backup on an external drive stored in the same room as the server

AnswerB

Keeping the original on a server, one copy on a same-building NAS, and another in the cloud satisfies 3-2-1: three total copies, two distinct storage media or systems, and one held off-site. The cloud copy provides the geographic separation that the NAS alone cannot, protecting against localised loss.

Why this answer

The 3-2-1 rule means 3 copies of data, on 2 different media types, with 1 offsite. Option B meets this: 3 copies (original + 2 backups), 2 media (NAS + cloud), 1 offsite (cloud).

Full explanation →

418

MCQhard

A team of developers is working on a large project with multiple features. They use a version control system. One developer creates a new branch to develop a feature, while other developers continue working on the main branch. After completing the feature, the developer wants to combine the changes from the feature branch back into the main branch. What version control operation should be performed?

A.Pull request

B.Fork

C.Commit

D.Merge

AnswerD

Merge integrates the feature branch's commits into the main branch, combining divergent histories while preserving both lines of development. This is the operation that reunites the completed feature work with the mainline, satisfying the stem's requirement to combine changes.

Why this answer

The correct operation is 'Merge' (D), which combines the changes from the feature branch into the main branch. In Git, merging integrates the commit history of two branches, preserving the feature's work while incorporating it into the target branch. This is the standard workflow for bringing a completed feature back into the main line of development.

Exam trap

The CompTIA ITF+ exam often tests the distinction between a 'pull request' (a request to merge) and the actual 'merge' operation, leading candidates to confuse the collaborative workflow step with the underlying version control command.

How to eliminate wrong answers

Option A is wrong because a 'Pull request' is a code review and collaboration mechanism, not the actual operation that combines branches; it typically triggers a merge but is not the merge itself. Option B is wrong because a 'Fork' creates a personal copy of a repository on a server (e.g., GitHub), used for independent development or contributions, not for combining branches within the same repository. Option C is wrong because a 'Commit' saves changes to the local repository but does not combine branches; it is a prerequisite step before merging, not the operation that integrates branches.

Full explanation →

419

MCQeasy

A student is learning to write programs and asks why a programming language uses variables. The instructor explains that a variable lets the program store a value under a name and refer to it later. Which statement best describes the role of a variable in a program?

A.A variable is a named location in memory that holds a value which can change during execution.

B.A variable is a type of loop that repeats instructions until a condition is met.

C.A variable is a fixed value that cannot be changed once the program starts.

D.A variable permanently stores data on disk so it survives after the program ends.

AnswerA

This accurately describes a variable: a name that references a memory location whose contents can be read and updated as the program runs. For example, a variable can hold a running total that increases with each loop iteration. This definition matches the instructor's explanation that a variable stores a value under a name for later use.

Why this answer

A variable is a named reference to a memory location that holds a value the program can read and modify during execution. This lets code store results, such as a running total, and reuse them later by name. Persistent disk storage, immutable constants, and loops are separate concepts, so they do not describe the role of a variable in the program.

Exam trap

The trap here is mixing up a variable with a constant or with persistent storage, when a variable is specifically a changeable in-memory value.

Full explanation →

420

MCQeasy

Based on the exhibit, what will be the last value output?

A.6

B.5

C.10

D.1

AnswerB

The loop increments the counter until the condition fails, so the final printed value reflects the last iteration before exit. Because the counter reaches 5 and the loop terminates at that point, 5 is the last value output, satisfying the exhibit's termination constraint.

Why this answer

The loop runs while count <= 5. It outputs 1,2,3,4,5. The last output is 5.

Then count becomes 6 and loop exits. 1 is first, 6 is not output because loop ends.

Full explanation →

421

MCQmedium

A developer is designing a program to calculate an employee's weekly pay. The program must store the hourly rate, the number of hours worked, and the computed gross pay so these values can be used and updated as the calculation proceeds. Which programming concept describes these named storage locations?

A.Constants

B.Data types

C.Operators

D.Variables

AnswerD

A variable is a named storage location whose value can change during program execution. The hourly rate, hours worked, and gross pay can each be stored in a variable, and the gross pay variable can be updated after the multiplication. This directly matches the need for named locations that hold and update values during the calculation.

Why this answer

Named storage locations whose contents can change during execution are variables. The hourly rate, hours worked, and gross pay each need a place to hold a value, and gross pay must be updated after the calculation. Variables provide exactly this capability, while constants cannot change, operators perform actions rather than store data, and data types classify values rather than hold them.

Exam trap

The trap here is selecting data types because they sound related to storing values, when the question asks specifically for named locations that hold and update values during execution.

Full explanation →

422

MCQhard

Which cloud service model provides the customer with the ability to run and manage applications on a cloud infrastructure but does NOT give control over the underlying operating system?

A.SaaS

B.PaaS

C.DaaS

D.IaaS

AnswerB

PaaS delivers managed runtime, middleware and OS patching, so the customer deploys code without controlling the underlying operating system — exactly the constraint the stem requires. Unlike IaaS, which grants OS-level administrative access, PaaS abstracts that layer entirely, leaving only application and configuration management to the customer.

Why this answer

PaaS (Platform as a Service) provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the underlying infrastructure. The customer controls the deployed applications and possibly configuration settings for the application-hosting environment, but does not manage the operating system, servers, or virtualization. This matches the question's requirement exactly.

Exam trap

FC0-U71 often tests the boundary between PaaS and IaaS by emphasizing 'does not control the operating system'; candidates who focus only on 'run and manage applications' may incorrectly choose IaaS, forgetting that IaaS does give OS control.

How to eliminate wrong answers

Option A is wrong because SaaS delivers fully functional applications managed entirely by the provider; the customer has no control over the application beyond user-specific settings, and certainly no ability to run and manage their own applications on the infrastructure. Option C is wrong because DaaS (Desktop as a Service) provides virtual desktops, not an application runtime environment, and the customer does not manage applications on a platform. Option D is wrong because IaaS provides virtualized computing resources (VMs, storage, networks) where the customer does manage the operating system and runtime, which contradicts the 'does NOT give control over the underlying operating system' clause.

Full explanation →

423

Multi-Selectmedium

A user receives a text message claiming to be from a package delivery service, saying a package could not be delivered and asking the user to click a link to reschedule. The user is unsure if the message is legitimate. Which TWO of the following actions should the user take to verify the message and avoid becoming a victim? (Choose two.)

Select 2 answers

A.Contact the delivery service using a phone number from its official website to confirm whether the message is real.

B.Reply to the text message asking for more details about the package.

C.Forward the message to a friend to ask if they received a similar one.

D.Click the link to see if the website looks official before entering any information.

E.Report the message as spam or phishing using the phone's built-in reporting feature.

AnswersA, E

Verifying through an independent, trusted channel such as the official website ensures the user is not interacting with the attacker. This confirms whether the message is legitimate without risking exposure to malicious links or providing information to a fraudster. It is a recommended practice for suspected phishing attempts.

Why this answer

The safest actions are to verify the message through an official channel and to report it as phishing. Clicking links, replying, or asking friends do not confirm legitimacy and may expose the user to risk. Reporting helps prevent others from falling victim.

Exam trap

The trap here is thinking that clicking a link just to look is harmless, when it can lead to malware or credential theft.

Full explanation →

424

Multi-Selecthard

Which THREE of the following are common methods for securing a wireless network?

Select 3 answers

A.Implementing MAC address filtering

B.Disabling SSID broadcast

C.Enabling WEP encryption

D.Using WPA2 encryption

E.Changing the default IP address range

AnswersA, B, D

MAC address filtering configures an access point to accept only listed hardware addresses, restricting which devices associate. It satisfies the wireless-hardening requirement by adding a device-level allow-list, though addresses can be spoofed so it complements rather than replaces encryption.

Why this answer

MAC address filtering (A) is a common wireless security method because the access point maintains an allow-list of client hardware addresses and drops frames from any NIC whose MAC is not listed, adding a layer of access control. Disabling SSID broadcast (B) is also commonly used, since the AP omits the SSID in its beacon frames, making the network less visible to casual scanners and requiring clients to know the network name. WPA2 encryption (D) is the strongest of the listed options and is a standard method for securing wireless traffic, using AES-CCMP under the 802.11i standard to provide confidentiality and integrity.

WEP (C) is not a valid answer because it is a deprecated, easily cracked encryption scheme, and changing the default IP address range (E) is a general network-hardening step that does not secure the wireless medium itself.

Exam trap

The trap here is that candidates often think WEP is still acceptable for security because it was once a standard, but the exam expects you to know it is deprecated and easily broken, while changing the IP range is a common misconception that offers no real security benefit.

Full explanation →

425

MCQmedium

Given the following pseudocode that calculates the average of a list of numbers, which error will occur? SET total = 0 SET count = 0 FOR EACH number IN list total = total + number count = count + 1 ENDFOR SET average = total / count OUTPUT average

A.Compile-time error

B.Logic error

C.Syntax error

D.Runtime error

AnswerD

Division by zero occurs when the list is empty: count stays at zero, so total/count fails during execution rather than at compile time. This makes it a runtime error, since the pseudocode is syntactically valid and the fault only manifests when the loop body never runs.

Why this answer

The pseudocode computes an average by dividing `total` by `count`. If the list is empty, `count` remains 0, and division by zero is a runtime error. This error occurs during execution, not during compilation or syntax checking, and is not a logic error because the code is logically correct for non-empty lists.

Exam trap

The key distinction is that this code runs correctly for non-empty lists but fails at runtime when the list is empty. This tests the difference between syntax/logic errors and runtime errors that occur under specific conditions.

How to eliminate wrong answers

Option A is wrong because compile-time errors are detected before execution by a compiler, but pseudocode is not compiled; the division by zero only manifests at runtime. Option B is wrong because a logic error would produce an incorrect result without crashing, but division by zero causes a crash or exception, not a wrong output. Option C is wrong because syntax errors involve violations of language grammar (e.g., missing keywords), and the pseudocode has no syntax issues.

Full explanation →

426

MCQmedium

A programmer needs to store a collection of key-value pairs where each key is unique and maps to a value. Which data structure is best suited for this purpose?

A.Dictionary

B.Array

C.Stack

D.List

AnswerA

A dictionary stores data as unique keys mapped to values, giving direct lookup by key rather than by numeric index. This satisfies the stem's requirement for unique key-value pairs, unlike lists or arrays, which hold ordered elements accessed positionally and permit duplicate entries.

Why this answer

A dictionary is specifically designed to store key-value pairs with unique keys, providing efficient lookup, insertion, and deletion operations. It ensures that each key is unique and maps directly to a value, making it the ideal choice for this requirement. Other data structures like arrays, stacks, and lists do not inherently support key-based access or enforce key uniqueness.

Exam trap

The trap here is confusing key-value mapping with simple ordered collections, leading candidates to choose lists or arrays because they can store multiple items, but they lack the key-based access and uniqueness enforcement that dictionaries provide.

How to eliminate wrong answers

Option B is wrong because an array stores elements in contiguous memory locations accessed by numerical indices, not by arbitrary keys, and does not enforce key uniqueness. Option C is wrong because a stack is a last-in-first-out (LIFO) data structure that only allows access to the most recently added element, with no concept of key-value mapping. Option D is wrong because a list is an ordered collection of elements accessed by position, and while it can store pairs, it does not provide efficient key-based lookup or guarantee unique keys.

Full explanation →

427

MCQeasy

Which of the following is an example of an input device?

A.Printer

B.Monitor

C.Keyboard

D.Speaker

AnswerC

A keyboard is a peripheral that converts user keystrokes into electrical signals sent to the computer, making it an input device. It satisfies the stem's requirement by feeding data into the system, unlike output devices such as monitors or printers that present processed data.

Why this answer

A keyboard is an input device because it allows users to send data and commands to a computer by pressing keys, which are converted into electrical signals that the system processes. Input devices are defined as hardware components that provide data and control signals to a computer, and the keyboard is a classic example of this category.

Exam trap

The trap here is that candidates often confuse input and output devices by focusing on the device's function in a general sense (e.g., a printer 'inputs' paper) rather than the direction of data flow relative to the computer, leading them to select output devices like monitors or printers as input devices.

How to eliminate wrong answers

Option A is wrong because a printer is an output device that receives data from a computer to produce a physical copy, not an input device that sends data to the computer. Option B is wrong because a monitor is an output device that displays visual information from the computer, not an input device that provides data to the system. Option D is wrong because a speaker is an output device that converts electrical audio signals into sound waves, not an input device that captures or sends data to the computer.

Full explanation →

428

MCQmedium

A technician needs to install a new graphics card in a desktop computer. Through which type of slot is the graphics card typically connected to the motherboard?

A.DIMM slot

B.SATA port

C.M.2 slot

D.PCIe slot

AnswerD

A PCIe (Peripheral Component Interconnect Express) slot provides the high-bandwidth serial lanes modern graphics cards require, satisfying the stem's constraint that the card connects through its typical motherboard interface. PCIe x16 slots are the standard for discrete GPUs, unlike older PCI or AGP slots, making this the correct connection type.

Why this answer

Graphics cards are typically connected to the motherboard via a PCIe (Peripheral Component Interconnect Express) slot, which provides high-bandwidth communication between the GPU and the CPU. Modern graphics cards use PCIe x16 slots for maximum performance. Other slot types serve different purposes and cannot accommodate a graphics card.

Exam trap

FC0-U71 often tests basic hardware component matching; candidates may confuse M.2 or DIMM slots with expansion slots, especially if they associate 'card' with any slot, but only PCIe is designed for graphics cards.

How to eliminate wrong answers

Option A is wrong because DIMM slots are used for memory (RAM) modules, not expansion cards like graphics cards. Option B is wrong because SATA ports are used to connect storage devices such as hard drives and SSDs, not graphics cards. Option C is wrong because M.2 slots are used for compact storage devices (NVMe SSDs) and sometimes wireless cards, not full-size graphics cards.

Full explanation →

429

Multi-Selectmedium

A developer is debugging a program that crashes with an error. Which THREE of the following are common debugging techniques?

Select 3 answers

A.Stepping through code line by line

B.Ignoring the error and continuing

C.Recompiling the entire program without changes

D.Setting breakpoints to pause execution

E.Inspecting variable values during execution

AnswersA, D, E

Stepping executes code one statement at a time, letting the developer follow the precise path taken toward the crash. This is a standard debugging technique because it exposes branching decisions and loops that static reading of the source cannot reliably reveal.

Why this answer

Option A (Stepping through code line by line) is correct because executing code one statement at a time in a debugger lets the developer observe the exact instruction where the crash occurs and trace the control flow leading up to it. Option D (Setting breakpoints to pause execution) is correct because breakpoints halt the program at a chosen line or condition, allowing the developer to examine the program state at the critical moment before the error manifests. Option E (Inspecting variable values during execution) is correct because examining variables, registers, and memory at runtime reveals incorrect values, null references, or out-of-range data that explain the crash.

Option B (Ignoring the error and continuing) is not a debugging technique since it provides no diagnostic information and typically lets the fault propagate or recur. Option C (Recompiling the entire program without changes) is not a debugging technique because rebuilding identical source produces the same binary behavior and yields no new insight into the defect.

Exam trap

The trap is including plausible-sounding but non-diagnostic actions like 'recompile without changes' or 'ignore the error'; the exam expects you to distinguish genuine debugging techniques from ineffective or harmful behaviors.

Full explanation →

430

MCQmedium

A SELECT statement combines rows from two tables based on a related column. Which SQL clause is used to accomplish this?

A.GROUP BY

B.ORDER BY

C.JOIN

D.WHERE

AnswerC

JOIN is the clause that merges rows from two tables by matching values in a related column, directly satisfying the stem's requirement to combine rows. WHERE filters rows and UNION stacks result sets vertically, so neither correlates columns across tables.

Why this answer

The JOIN clause combines rows from two or more tables based on a related column, such as a primary key to foreign key relationship. INNER JOIN returns matching rows, while LEFT/RIGHT/FULL OUTER JOINs include unmatched rows. This is the standard SQL mechanism for relational row combination.

Exam trap

FC0-U71 often tests confusion between filtering (WHERE), grouping (GROUP BY), and combining (JOIN); candidates may pick WHERE because it references related columns.

How to eliminate wrong answers

Option A is wrong because GROUP BY aggregates rows into summary groups for aggregate functions, not combining rows across tables. Option B is wrong because ORDER BY sorts the result set and does not merge tables. Option D is wrong because WHERE filters rows based on conditions but does not itself join tables.

Full explanation →

431

MCQeasy

A user wants to install a software package on a Linux system using a package that ends in .deb. Which Linux distribution family is most likely being used?

A.openSUSE

B.Arch Linux

C.Debian-based (e.g., Ubuntu)

D.Red Hat Enterprise Linux

AnswerC

The .deb extension is the native package format for Debian-based distributions, including Ubuntu, which use dpkg and APT for installation. This directly satisfies the stem's constraint of a package ending in .deb, unlike RPM-based families such as Red Hat or SUSE, which cannot natively install .deb files.

Why this answer

The .deb package format is native to Debian and its derivatives, including Ubuntu, Linux Mint, and Kali Linux. These distributions use the dpkg low-level package manager and APT (Advanced Package Tool) as the high-level front end for dependency resolution and repository management. Installing a .deb file is typically done with 'dpkg -i' or 'apt install ./package.deb'.

Exam trap

FC0-U71 often tests the mapping between package extensions and distro families — candidates confuse .deb (Debian/Ubuntu) with .rpm (RHEL/SUSE) or forget that Arch uses pacman with its own format.

How to eliminate wrong answers

Option A is wrong because openSUSE uses the RPM package format managed by Zypper and RPM, not .deb. Option B is wrong because Arch Linux uses its own .pkg.tar.zst format managed by pacman, and does not natively support .deb packages. Option D is wrong because Red Hat Enterprise Linux (and its derivatives like CentOS, Fedora, Rocky, AlmaLinux) uses RPM packages managed by yum/dnf, not .deb.

Full explanation →

432

MCQeasy

A user wants to connect a modern monitor to their laptop using a single cable that can carry both video and audio signals. Which port on the laptop should they use?

A.HDMI

B.USB-A

C.VGA

D.DVI

AnswerA

HDMI carries digital video and audio over one cable, satisfying the single-cable requirement for a modern monitor. Unlike DisplayPort's packet-based transport or VGA's analogue video-only signalling, HDMI natively embeds audio alongside video, so no separate audio lead is needed.

Why this answer

HDMI (High-Definition Multimedia Interface) carries both digital video and audio over a single cable, making it the correct choice for connecting a modern monitor with integrated speakers or a TV. It supports high resolutions and is ubiquitous on laptops and monitors. This satisfies the requirement of a single cable for both signals.

Exam trap

FC0-U71 often tests whether candidates remember which legacy video interfaces (VGA, DVI) lack audio — candidates who assume all video ports carry audio will incorrectly pick DVI or VGA.

How to eliminate wrong answers

Option B is wrong because USB-A is a general-purpose data port that does not natively carry video or audio signals to a monitor (unless using DisplayLink adapters, which is not a direct port capability). Option C is wrong because VGA is an analog video-only interface — it carries no audio and is being phased out due to inferior quality. Option D is wrong because DVI is a digital video-only interface; while DVI-D carries digital video, it does not carry audio (except rare DVI-I variants with vendor-specific audio, not standard).

Full explanation →

433

MCQmedium

A company implements a policy where employees must lock their computer screen when leaving their desk. Which security principle does this practice support?

A.Confidentiality

B.Availability

C.Authentication

D.Integrity

AnswerA

Locking the screen prevents unauthorised individuals from viewing or accessing displayed data, directly supporting confidentiality by restricting information to authorised eyes only. It satisfies the stem's requirement to protect sensitive information from exposure when a workstation is left unattended, aligning with the confidentiality pillar of the CIA triad.

Why this answer

Locking the computer screen when leaving a desk supports the confidentiality principle by preventing unauthorized individuals from viewing or accessing sensitive information on the screen or through the unlocked session. It ensures that only authorized users can access the data, aligning with confidentiality's goal of protecting information from unauthorized disclosure. This is a physical and operational control that directly reduces the risk of data exposure.

Exam trap

FC0-U71 often tests the mapping of security practices to CIA triad principles, and candidates may confuse confidentiality with authentication or integrity, especially when the control involves user access.

How to eliminate wrong answers

Option B (Availability) is wrong because locking the screen does not ensure that systems and data are accessible when needed; it actually restricts access, which is unrelated to availability. Option C (Authentication) is wrong because authentication is the process of verifying identity, while screen locking is a preventive measure after authentication has occurred; it does not verify identity itself. Option D (Integrity) is wrong because integrity ensures data is not altered improperly, whereas screen locking primarily prevents unauthorized viewing, not modification.

Full explanation →

434

MCQeasy

Which SQL statement is used to retrieve all columns from a table named 'Customers' where the city is 'London'?

A.SELECT * FROM Customers WHERE city = 'London';

B.RETRIEVE * FROM Customers WHERE city = 'London';

C.SELECT * FROM Customers HAVING city = 'London';

D.GET * FROM Customers WHERE city = 'London';

AnswerA

SELECT * retrieves every column, FROM Customers names the source table, and the WHERE clause filters rows where city equals 'London'. The asterisk wildcard expands to all columns, satisfying the requirement to return complete rows matching the specified city condition.

Why this answer

SELECT * FROM Customers WHERE city = 'London'; is the correct SQL statement to retrieve all columns from the Customers table where the city is London. SELECT * specifies all columns, FROM identifies the table, and WHERE filters rows based on the city condition. The semicolon terminates the statement.

Exam trap

FC0-U71 often tests the difference between WHERE and HAVING, and candidates mistakenly choose HAVING for filtering on a regular column, forgetting that HAVING is for aggregate filters after GROUP BY.

How to eliminate wrong answers

Option B is wrong because RETRIEVE is not a valid SQL keyword; the correct command for querying data is SELECT. Option C is wrong because HAVING is used to filter groups after GROUP BY, not for row-level filtering on a non-aggregated column like city; WHERE is required here. Option D is wrong because GET is not a SQL keyword; it is used in HTTP or other contexts, not in SQL queries.

Full explanation →

435

MCQeasy

A small business wants to set up a wireless network. Which of the following is the BEST security method to use?

A.WEP

B.WPA2

C.MAC address filtering

D.Disable SSID broadcast

AnswerB

WPA2 uses AES-based CCMP encryption and per-session keys, resisting the weaknesses that broke WEP and the TKIP compromises. For a small business needing strong, widely compatible wireless security without enterprise infrastructure, WPA2 satisfies the requirement.

Why this answer

WPA2 (Wi-Fi Protected Access 2) is the best security method among the options because it uses AES (Advanced Encryption Standard) with CCMP (Counter Mode CBC-MAC Protocol), providing strong encryption and integrity protection. WEP is outdated and easily cracked, while MAC filtering and disabling SSID broadcast are not encryption methods and offer minimal security against determined attackers.

Exam trap

The trap here is that candidates often confuse security features like MAC filtering or hiding the SSID with actual encryption, thinking they provide strong protection, when in fact they are easily bypassed and do not secure the data in transit.

How to eliminate wrong answers

Option A is wrong because WEP (Wired Equivalent Privacy) uses the flawed RC4 cipher with a static 40- or 104-bit key, making it vulnerable to cracking in minutes with tools like aircrack-ng. Option C is wrong because MAC address filtering only checks the hardware address of the network interface, which can be easily spoofed by an attacker using tools like macchanger, and it does not encrypt traffic. Option D is wrong because disabling SSID broadcast only hides the network name from beacon frames, but the SSID is still transmitted in probe requests and responses, and can be discovered with passive sniffing tools like Kismet.

Full explanation →

436

Drag & Dropmedium

Drag and drop the steps to connect a laptop to a Wi-Fi network in Windows 10 into the correct order.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

Connecting to Wi-Fi involves selecting the network, entering the password, and optionally saving it.

Full explanation →

437

MCQmedium

In a Scrum team, who is responsible for prioritizing the product backlog and ensuring that the team works on the most valuable features first?

A.Product Owner

B.Scrum Master

C.Development Team

D.Stakeholder

AnswerA

The Product Owner owns the product backlog, ordering items by business value so the team always delivers the highest-priority features first. This directly satisfies the stem's requirement for backlog prioritisation and value sequencing, a duty the Scrum Guide assigns solely to that accountability.

Why this answer

The Product Owner is responsible for maximizing the value of the product resulting from the work of the Scrum Team. This includes owning the Product Backlog, ordering its items to best achieve goals and missions, and ensuring that the Development Team works on the most valuable features first. The Product Owner is the single point of contact for prioritization decisions, balancing stakeholder needs with business value.

Exam trap

CompTIA ITF+ often tests the misconception that the Scrum Master or Development Team shares responsibility for backlog prioritization, but the trap here is that only the Product Owner has the authority to order the Product Backlog, as defined in the Scrum Guide.

How to eliminate wrong answers

Option B is wrong because the Scrum Master is a servant-leader who facilitates Scrum events, removes impediments, and coaches the team, but does not have authority over backlog prioritization. Option C is wrong because the Development Team is self-organizing and decides how to deliver the work, but they do not own the Product Backlog or its ordering. Option D is wrong because Stakeholders provide input and feedback, but they do not have the final authority to prioritize the Product Backlog; that responsibility lies solely with the Product Owner.

Full explanation →

438

MCQmedium

A company needs to ensure that all employees can collaborate on documents in real time. Which type of software should the company choose?

A.Word processor with local file saving.

B.Cloud-based document editing suite.

C.Version control system like Git.

D.Email attachment sharing.

AnswerB

Cloud-based document editing suites store files centrally and synchronise edits instantly across users, satisfying the real-time collaboration requirement. Unlike locally installed productivity software, which relies on file sharing and version merging, they provide simultaneous multi-user editing with live presence indicators and automatic conflict resolution.

Why this answer

A cloud-based document editing suite (e.g., Microsoft 365, Google Workspace) enables real-time co-authoring, where multiple users can edit the same document simultaneously, see each other's changes live, and rely on automatic versioning and cloud storage. This directly satisfies the requirement for real-time collaboration.

Exam trap

FC0-U71 often tests the difference between real-time collaboration (cloud suites with co-authoring) and asynchronous sharing (email attachments, local files) — candidates pick version control or email because they associate them with 'sharing,' missing the real-time requirement.

How to eliminate wrong answers

Option A is wrong because a word processor with local file saving stores documents on individual machines, so collaboration requires manual file sharing and creates version conflicts — no real-time co-editing. Option C is wrong because Git is a version control system for source code, not a real-time document collaboration tool; it requires commits, merges, and does not support simultaneous live editing. Option D is wrong because email attachment sharing creates multiple divergent copies of a document and has no real-time synchronization or co-authoring capability.

Full explanation →

439

MCQhard

A network administrator is configuring a small office network with 20 computers. The network must be easy to troubleshoot and resilient to a single cable failure. Which topology should the administrator implement?

A.Star topology

B.Mesh topology

C.Bus topology

D.Ring topology

AnswerA

A star topology connects all devices to a central switch or hub. If one cable fails, only that device is affected, making it resilient to single cable failures. Troubleshooting is easy because each device has a dedicated connection to the central point. This meets the requirements for a small office network.

Why this answer

A star topology uses a central switch, so a single cable failure only affects one computer, and troubleshooting is straightforward by checking individual connections. It balances resilience and simplicity for a small office. Other topologies either lack resilience to single cable failures or are overly complex and costly.

Exam trap

The trap here is assuming that a mesh topology is always best for resilience, ignoring its complexity and cost for a small office.

Full explanation →

440

MCQhard

A developer is writing a script in Python that processes user input. The script needs to execute a block of code repeatedly while a condition is true. Which programming construct should the developer use?

A.for loop

B.while loop

C.function

D.if/else

AnswerB

A while loop repeats a block as long as its condition remains true, re-evaluating before each iteration. This directly satisfies the stated need to execute code repeatedly while a condition holds, unlike a for loop, which iterates over a sequence.

Why this answer

A while loop is the correct construct because it repeatedly executes a block of code as long as a specified condition remains true, re-evaluating the condition before each iteration. This matches the requirement of executing code 'while a condition is true.' The for loop is designed for iterating over a known sequence or range, not for condition-driven repetition.

Exam trap

The trap here is confusing iteration over a known sequence (for) with condition-driven repetition (while); candidates often pick for because it is the more familiar looping construct.

How to eliminate wrong answers

Option A is wrong because a for loop iterates over a finite sequence (list, range, string) and does not naturally express 'repeat while a condition holds' — it terminates when the iterable is exhausted, not when a boolean condition changes. Option C is wrong because a function is a reusable named block of code that encapsulates logic; it does not itself provide looping behavior, though it may contain a loop. Option D is wrong because if/else is a branching construct that executes a block once based on a condition, with no built-in repetition mechanism.

Full explanation →

441

MCQmedium

A developer writes a query: SELECT * FROM Employees WHERE Department = 'Sales'. Which statement about this query is true?

A.It sorts results by Department

B.It returns all columns for employees in Sales

C.It returns only the Department column

D.It returns all rows from the Employees table

AnswerB

The asterisk wildcard projects every column defined in the Employees table, while the WHERE clause filters rows to those whose Department value equals 'Sales'. Both operations combine: row filtering restricts which records qualify, and column projection determines what data each qualifying row returns. This satisfies the stem's requirement of retrieving complete employee records for that department.

Why this answer

The SELECT * clause retrieves all columns from the specified table, and the WHERE Department = 'Sales' filter restricts the result set to only those rows where the Department column has the value 'Sales'. Therefore, the query returns every column for employees in the Sales department, making option B correct.

Exam trap

The trap here is that candidates confuse the SELECT clause with the WHERE clause, mistakenly thinking SELECT * returns all rows (option D) or only a specific column (option C), when in fact SELECT * returns all columns and WHERE filters rows.

How to eliminate wrong answers

Option A is wrong because the query contains no ORDER BY clause, so results are not sorted by Department or any other column; sorting requires an explicit ORDER BY. Option C is wrong because SELECT * returns all columns, not just the Department column; to return only the Department column, the query would need to specify SELECT Department. Option D is wrong because the WHERE clause filters rows to only those where Department = 'Sales', so it does not return all rows from the Employees table.

Full explanation →

442

Multi-Selectmedium

A junior technician is documenting the internal components of a desktop workstation for an inventory audit. The supervisor asks the technician to identify components that are installed inside the system unit and connect directly to the motherboard or its expansion slots. Which TWO of the following are internal hardware components? (Choose two.)

Select 2 answers

A.Random access memory module

B.Network attached storage appliance

C.Graphics processing unit card

D.Bluetooth headset

E.External USB webcam

AnswersA, C

This is correct because RAM modules are circuit boards that seat into DIMM slots on the motherboard inside the system unit. They provide volatile working memory the CPU uses for active programs and data. During an inventory audit, RAM is a core internal component whose capacity and type must be recorded, making it exactly the kind of item the supervisor wants listed.

Why this answer

Internal components are housed within the system unit and connect to the motherboard directly or through expansion slots. RAM modules seat in DIMM slots, and a discrete GPU card occupies a PCIe slot, so both qualify. Peripherals such as webcams, headsets, and network appliances operate externally and therefore do not belong in an inventory of internal hardware.

Exam trap

The trap here is treating any physical hardware as internal, when peripherals and network appliances sit outside the chassis even though they are tangible devices.

Full explanation →

443

MCQmedium

A team is choosing a version control workflow. They want developers to work on features in isolation without affecting the stable main codebase, and then integrate changes after review. Which version control concept directly supports this isolation?

A.Branching

B.Tagging

C.Cloning

D.Committing

AnswerA

Branching creates a separate line of development from a point in the repository's history, allowing a developer to make changes without altering the main branch. This directly supports working on a feature in isolation and merging it back after review. It is the core version control mechanism for the isolation the team wants.

Why this answer

Branching lets a developer diverge from the main line of development, make changes in an isolated line, and later merge those changes back after review. This protects the stable codebase from unfinished or untested work. Committing records changes, cloning copies a repository, and tagging labels a commit, but none of those creates the separate line of development the team requires.

Exam trap

The trap here is thinking that any repository operation, such as cloning or committing, provides the same isolation as a dedicated feature branch.

Full explanation →

444

MCQeasy

Which of the following is the best practice for backing up data according to the 3-2-1 rule?

A.Three copies on two different media types, with one copy stored offsite

B.Three copies on three different external hard drives stored in the same building

C.Two copies on the same server, one on a different server

D.One copy on the same drive, one on an external drive, one in the cloud

AnswerA

The 3-2-1 rule demands three total copies, two distinct storage media, and one offsite. This option matches all three constraints exactly, ensuring resilience against local hardware failure, media-specific corruption, and site-wide disasters such as fire or flood.

Why this answer

The 3-2-1 rule means at least three copies of data, on two different types of storage media, with one copy stored offsite.

Full explanation →

445

MCQeasy

A student is comparing storage technologies for a project. The student needs a system that stores data as key-value pairs and is designed to scale horizontally across many servers for very high read and write throughput. Which category of database best fits this requirement?

A.A key-value NoSQL database.

B.A data warehouse optimized for complex analytical reporting queries.

C.A flat file such as a spreadsheet stored on a shared drive.

D.A relational database using tables with fixed schemas and joins.

AnswerA

This is correct because key-value stores model data as simple key-to-value pairs and are built for horizontal scaling, distributing keys across nodes to handle very high read and write volumes. They favor availability and partition tolerance over complex joins. This directly matches the student's need for a scalable, high-throughput store.

Why this answer

Key-value NoSQL databases store data as simple key-to-value pairs and are purpose-built to scale horizontally across many servers, delivering the high read and write throughput the student needs. Relational databases, flat files, and analytical warehouses each optimize for different workloads that do not match this requirement.

Exam trap

The trap here is equating high scalability with any modern database, when actually relational and analytical systems optimize for structure and reporting rather than simple high-throughput key lookups.

Full explanation →

446

MCQhard

Based on the exhibit, which type of attack is most likely occurring?

A.Denial-of-service attack

B.Phishing attack

C.Brute force attack

D.Man-in-the-middle attack

AnswerC

Repeated authentication attempts against one account, visible in the exhibit's log pattern, indicate automated credential guessing rather than a single failed login. Brute force attacks systematically try many passwords until one succeeds, matching the sustained volume of failures shown.

Why this answer

The exhibit shows repeated login attempts with different passwords (e.g., 'password1', 'password2', 'password3') against a single user account. This pattern of systematically trying many passwords to guess credentials is the hallmark of a brute force attack. Unlike a denial-of-service or phishing attack, the goal here is to gain unauthorized access by exhausting possible password combinations.

Exam trap

CompTIA often tests the distinction between a brute force attack and a dictionary attack; the trap here is that candidates may confuse the systematic password guessing shown in the exhibit with a phishing or man-in-the-middle attack because they see repeated login attempts but fail to recognize the direct, automated guessing pattern.

How to eliminate wrong answers

Option A is wrong because a denial-of-service attack aims to overwhelm a system with traffic to disrupt service, not to guess passwords through repeated login attempts. Option B is wrong because phishing involves tricking users into revealing credentials via deceptive messages or websites, not by directly submitting password guesses to a login form. Option D is wrong because a man-in-the-middle attack intercepts and potentially alters communications between two parties, whereas the exhibit shows direct, repeated authentication attempts against a single endpoint.

Full explanation →

447

MCQeasy

A software development team follows a methodology where work is divided into fixed sequential phases: requirements, design, implementation, testing, deployment, and maintenance. Changes to requirements are difficult once a phase is completed. Which development methodology is being used?

A.Spiral

B.Waterfall

C.Scrum

D.Agile

AnswerB

Waterfall matches the stem's fixed sequential phases, where each stage completes before the next begins and requirements freeze once design starts. Its linear, document-driven structure makes late requirement changes costly, satisfying the constraint that changes are difficult after a phase completes. Iterative and Agile approaches would instead accommodate evolving requirements.

Why this answer

The Waterfall model is a linear sequential software development methodology where each phase (requirements, design, implementation, testing, deployment, maintenance) must be completed before the next begins. This rigidity makes it difficult to accommodate changes to requirements once a phase is finished, exactly as described in the question.

Exam trap

CompTIA often tests the distinction between sequential (Waterfall) and iterative (Agile/Spiral) methodologies by emphasizing the inability to change requirements after a phase is completed, which directly points to Waterfall and not to the risk-driven cycles of Spiral or the adaptive nature of Agile frameworks.

How to eliminate wrong answers

Option A is wrong because the Spiral model is an iterative risk-driven methodology that combines prototyping with the waterfall phases, allowing for repeated cycles and requirement changes based on risk analysis. Option C is wrong because Scrum is an Agile framework that uses time-boxed sprints and welcomes changing requirements even late in development. Option D is wrong because Agile methodologies (including Scrum, Kanban, XP) are built on iterative development and continuous feedback, explicitly designed to handle evolving requirements.

Full explanation →

448

MCQmedium

A company is developing a mobile app and wants to ensure it works on both iOS and Android without writing separate codebases. Which approach should be used?

A.Cross-platform development

B.Native development

C.Web-based development

D.Cloud-based development

AnswerA

Cross-platform development compiles a single codebase into native binaries for both iOS and Android, satisfying the stem's constraint of avoiding separate codebases. Frameworks such as React Native or Flutter abstract platform-specific APIs, so one implementation deploys to both stores, unlike native development which requires distinct Swift and Kotlin codebases.

Why this answer

Cross-platform development allows a single codebase (e.g., using frameworks like React Native, Flutter, or Xamarin) to compile into native apps for both iOS and Android, eliminating the need to write separate codebases for each platform. This approach leverages shared logic and UI components while still producing platform-specific binaries that can access native device features.

Exam trap

The trap here is that candidates confuse 'cross-platform development' with 'web-based development,' thinking a responsive web app can replace a native mobile app, but the question specifically requires app store distribution and device hardware access, which only cross-platform or native development can provide.

How to eliminate wrong answers

Option B (Native development) is wrong because it requires writing separate codebases in platform-specific languages (Swift/Objective-C for iOS, Kotlin/Java for Android), which contradicts the requirement of a single codebase. Option C (Web-based development) is wrong because it produces a web app that runs in a browser, not a native mobile app that can be distributed through app stores and access device hardware directly. Option D (Cloud-based development) is wrong because it refers to developing applications that run on cloud infrastructure (e.g., SaaS), not to the method of building mobile apps for multiple platforms from one codebase.

Full explanation →

449

MCQmedium

A technician needs to install a wireless network in a large warehouse. The goal is to minimize interference and support many devices. Which frequency band is best for this scenario?

A.5 GHz

B.60 GHz

C.900 MHz

D.2.4 GHz

AnswerA

5 GHz offers far more non-overlapping channels and avoids congestion from microwaves, Bluetooth and legacy 2.4 GHz devices. In a warehouse with many clients, this wider spectrum minimises co-channel interference, satisfying the stem's interference and device-density constraints.

Why this answer

The 5 GHz frequency band is best for a large warehouse with many devices because it offers more non-overlapping channels, higher data rates, and less interference from common sources like microwaves and Bluetooth. While 5 GHz has shorter range than 2.4 GHz, in a warehouse, multiple access points can be deployed to provide coverage, and the reduced interference supports many devices simultaneously.

Exam trap

FC0-U71 often tests the trade-off between range and interference; candidates may choose 2.4 GHz for its longer range, but the question emphasizes minimizing interference and supporting many devices, which points to 5 GHz.

How to eliminate wrong answers

Option B is wrong because 60 GHz (WiGig) has extremely short range and poor penetration through walls and obstacles, making it unsuitable for a large warehouse. Option C is wrong because 900 MHz is used in some industrial and legacy systems but has limited bandwidth and is not standardized for high-density Wi-Fi networks; it also has a smaller channel set. Option D is wrong because 2.4 GHz, while having longer range, suffers from significant interference from other devices (microwaves, cordless phones, Bluetooth) and has only three non-overlapping channels, which limits capacity in high-density environments.

Full explanation →

450

MCQmedium

During the software development life cycle, which phase directly follows the coding phase?

A.Maintenance

B.Testing

C.Deployment

D.Requirements gathering

AnswerB

Testing follows coding because it validates the implemented code against the requirements defined earlier, satisfying the SDLC's sequential dependency. Unit, integration and system tests execute the compiled artefacts, exposing defects before deployment. This verification stage is distinct from design, which precedes coding, and from maintenance, which begins only after release.

Why this answer

In the software development life cycle (SDLC), the coding phase produces the actual source code. The testing phase directly follows coding to verify that the code functions correctly, meets requirements, and is free of defects before it can be deployed. This sequential order ensures that errors are caught early and do not propagate to later stages.

Exam trap

The trap here is that candidates often confuse the order of phases, mistakenly thinking deployment follows coding directly, but the SDLC mandates testing as a gate before any code can be released to users.

How to eliminate wrong answers

Option A is wrong because maintenance occurs after deployment, not immediately after coding; it involves ongoing updates and bug fixes. Option C is wrong because deployment happens after testing has validated the code, ensuring it is ready for production use. Option D is wrong because requirements gathering is the initial phase of the SDLC, occurring long before coding begins.

Full explanation →

CompTIA Tech+ (FC0-U71) (FC0-U71) — Questions 376–450