988 questions total · 14pages · All types, answers revealed
Which programming concept allows a program to make decisions based on conditions, such as checking if a user is logged in?
Conditional logic uses statements like if/else to make decisions.
Why this answer
Conditional logic (e.g., if/else) enables a program to execute different code based on conditions.
Which type of software provides an interface for users to interact with the computer's hardware?
The OS acts as an intermediary between hardware and software, providing a user interface.
Why this answer
The operating system (OS) is the core software that manages hardware resources and provides a user interface (such as a GUI or CLI) for users to interact with the computer's hardware. It abstracts the underlying hardware details, allowing applications to communicate with devices through standardized system calls and drivers. Without an OS, users would have to write low-level machine code to perform basic tasks like reading from a disk or displaying output.
Exam trap
The trap here is that candidates often confuse firmware (which controls hardware at boot) with the operating system, thinking that firmware provides the main user interface, but firmware only initializes hardware and hands control to the OS, which then manages ongoing user interaction.
How to eliminate wrong answers
Option B (Firmware) is wrong because firmware is low-level software stored in non-volatile memory (e.g., ROM, flash) that initializes hardware during boot, but it does not provide a persistent user interface for ongoing interaction with hardware. Option C (Application software) is wrong because application software (e.g., word processors, browsers) runs on top of the OS and uses its services to access hardware indirectly, not providing a direct interface to the hardware itself. Option D (Utility software) is wrong because utility software (e.g., disk defragmenters, antivirus) performs specific maintenance or optimization tasks but does not serve as the primary interface for user-hardware interaction.
A user is trying to access a website but receives a 'DNS server not responding' error. Which of the following is the MOST likely cause?
The error explicitly mentions DNS server.
Why this answer
The 'DNS server not responding' error indicates that the client cannot reach the DNS server to resolve the domain name into an IP address. This is most commonly caused by the DNS server being unreachable due to network connectivity issues, server downtime, or incorrect DNS server configuration. Without DNS resolution, the browser cannot translate the website's URL into an IP address, even if the network and web server are functional.
How to eliminate wrong answers
Option A is wrong because a DHCP server being down would prevent the client from obtaining an IP address, subnet mask, or default gateway, but the error message specifically mentions DNS, not IP configuration failure. Option C is wrong because a firewall blocking the website would typically result in a 'connection timed out' or 'access denied' error, not a 'DNS server not responding' error, as DNS resolution occurs before the HTTP request. Option D is wrong because a disconnected modem would cause a complete loss of network connectivity, resulting in a 'no internet access' or 'network cable unplugged' error, not a DNS-specific error.
A company implements a policy requiring employees to use a password and a one-time code sent to their mobile phone when logging into the corporate network. Which security concept is being employed?
Password and phone code are two different factors.
Why this answer
Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).
Refer to the exhibit. The database administrator sees this error in the log. Which action should the administrator take to resolve the deadlock?
Most DBMSs detect deadlocks and automatically choose a victim transaction to roll back.
Why this answer
When a deadlock occurs in a database, the database management system (DBMS) automatically detects the circular dependency and selects one of the transactions as a victim, rolling it back to break the deadlock. This is a built-in mechanism in most relational databases, such as SQL Server, Oracle, or MySQL, and does not require manual intervention. Therefore, no immediate action is needed from the administrator, as the database will resolve the deadlock itself.
Exam trap
The trap here is that candidates may think manual intervention (killing a process) is required, but the exam tests the understanding that modern databases have automatic deadlock resolution built in, making option D the correct answer.
How to eliminate wrong answers
Option A is wrong because increasing the transaction isolation level to Serializable increases locking and contention, which actually makes deadlocks more likely, not less. Option B is wrong because removing indexes increases the likelihood of table scans and lock escalation, which can worsen lock contention and deadlock frequency. Option C is wrong because manually killing one of the processes is unnecessary and disruptive; the database's deadlock detection mechanism automatically selects and rolls back a victim transaction without administrator intervention.
Which TWO of the following are common file formats for images?
PNG is a common image format.
Why this answer
PNG (Portable Network Graphics) is a common image file format that uses lossless compression, making it ideal for images requiring high detail and transparency. It supports up to 48-bit true color and an alpha channel for transparency, which distinguishes it from other formats like JPEG.
Exam trap
CompTIA often tests the distinction between file formats by including common non-image formats like PDF or TXT, leading candidates to confuse document or text formats with image formats.
Which TWO of the following are examples of physical security measures? (Select TWO)
Correct. This is a physical security practice.
Why this answer
Locking screens when away (lock screen) and shredding sensitive documents are physical security measures. Firewalls and encryption are logical/technical controls; passwords are authentication.
A small business uses a single external IP address from their ISP and has a network of 10 computers. They want to host a web server that must be accessible from the internet, but they also need to protect their internal network. They have a firewall/router that supports port forwarding. Which configuration should they implement?
This allows external access only to the specified ports while protecting the internal network.
Why this answer
Port forwarding allows the firewall/router to accept incoming HTTP (port 80) and HTTPS (port 443) traffic on the single public IP address and forward it to the web server's internal private IP address. This exposes only the necessary ports to the internet while keeping the web server behind the firewall, protecting the internal network from direct external access.
Exam trap
The trap here is that candidates often confuse the DMZ option (B) as a secure solution, not realizing that a typical SOHO DMZ exposes the host to all inbound traffic, which is far less secure than targeted port forwarding.
How to eliminate wrong answers
Option A is wrong because connecting the web server directly to the ISP modem bypasses the firewall entirely, leaving the server and potentially the internal network unprotected from internet threats. Option B is wrong because placing the web server in the DMZ and allowing all inbound traffic to its IP exposes the server to every port and protocol, defeating the purpose of selective access and increasing the attack surface unnecessarily. Option C is wrong because assigning a public IP address to the web server on the same switch as the other computers would require multiple public IPs (which the business does not have) and would expose the server directly to the internet without firewall protection, compromising the internal network.
An administrator is configuring access to a cloud storage bucket. The policy is applied to a user. Which of the following actions will the user be allowed to perform?
The policy grants GetObject and PutObject, which allow reading and writing objects.
Why this answer
The access policy applied to the user explicitly grants 'Read' and 'Write' actions on the 'my-company-bucket' resource, which correspond to reading and writing objects. This is the only action set permitted by the policy, so the user can read and write objects in the bucket.
Exam trap
The trap here is that candidates often assume an access policy applied to a user grants all actions on the bucket by default, but cloud storage follows a least-privilege model where only explicitly allowed actions are permitted.
How to eliminate wrong answers
Option A is wrong because listing objects requires the 's3:ListBucket' permission, which is not granted in the policy. Option C is wrong because deleting objects requires the 's3:DeleteObject' permission, which is not granted. Option D is wrong because changing the bucket policy requires the 's3:PutBucketPolicy' permission, which is not granted and is typically reserved for bucket owners or administrators.
A developer sees the above output. After a recent commit, the application crashed due to a null pointer. Which commit likely introduced the null pointer issue?
The null pointer bug likely originated in the new feature commit def456.
Why this answer
The commit def456 is the most recent commit before the crash, and since the null pointer exception occurred after this commit, it is the most likely source of the bug. In version control systems like Git, a null pointer error typically indicates that a recent code change introduced a reference to an object that was not properly initialized. The developer should inspect the changes in def456 for uninitialized variables or missing null checks.
Exam trap
CompTIA often tests the concept of causality in version control by presenting a chronological list of commits and asking which one introduced a bug, and the trap here is that candidates might assume the bug was introduced by the most recent commit overall (012jkl) rather than the commit immediately preceding the crash.
How to eliminate wrong answers
Option B (abc123) is wrong because it is an earlier commit that was already in the codebase before the crash, and the application was presumably working after it. Option C (012jkl) is wrong because it is listed after def456 in the output, meaning it is a later commit that could not have caused the crash that occurred after def456. Option D (789ghi) is wrong because it is also a later commit, and the crash happened immediately after def456, so the null pointer was likely introduced by def456, not by a subsequent commit.
A company is setting up a home office for a remote employee. The employee will use a desktop computer, a VoIP phone, and a printer. The office has only one Ethernet wall jack. Which of the following devices would allow all three devices to connect to the network? (Select TWO).
A wireless router provides multiple Ethernet ports and Wi-Fi, allowing connection of all devices.
Why this answer
A network switch provides additional Ethernet ports, and a wireless router can connect devices wirelessly and provide additional ports.
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the email address is slightly misspelled (e.g., 'support@bankk.com' instead of 'support@bank.com'). Which type of attack is this?
This is a classic example of a phishing email attempting to trick the recipient.
Why this answer
Phishing is a social engineering attack where attackers send fraudulent emails pretending to be from legitimate sources to steal sensitive information.
In a relational database, a foreign key in the 'Enrollments' table references the primary key of the 'Students' table. What does this relationship primarily enforce?
Foreign keys maintain referential integrity between tables.
Why this answer
Foreign keys enforce referential integrity, ensuring that values in the foreign key column match a primary key value in the referenced table.
A help desk technician receives an alert from the security monitoring system showing multiple events like the one in the exhibit. The technician is investigating a possible brute-force attack. Based on the exhibit, which of the following is the primary attack vector being used?
Logon Type 10 indicates a remote interactive logon, commonly used by RDP.
Why this answer
The exhibit shows repeated failed authentication attempts targeting TCP port 3389, which is the default port for Remote Desktop Protocol (RDP). A brute-force attack on RDP involves systematically trying many username/password combinations to gain unauthorized remote access to a Windows system. This matches the definition of an RDP brute-force attack.
How to eliminate wrong answers
Option A is wrong because VPN brute-force attacks target VPN protocols like IPsec or SSL/TLS on ports such as UDP 500 or TCP 443, not TCP 3389. Option C is wrong because SSH brute-force attacks target TCP port 22, not port 3389. Option D is wrong because web application attacks target HTTP/HTTPS ports (80/443) and exploit application-layer vulnerabilities like SQL injection or XSS, not repeated authentication attempts on a remote access protocol.
A support technician is explaining file compression to a user. Which THREE of the following are examples of lossless compression formats? (Select THREE).
Correct.
Why this answer
Lossless compression preserves all original data. ZIP and PNG are lossless. FLAC is a lossless audio format.
JPEG and MP3 are lossy.
A network technician is troubleshooting a connectivity issue and needs to identify the destination MAC address of a frame. Which TWO of the following are true about MAC addresses? (Select TWO.)
MAC addresses are 48 bits (6 bytes).
Why this answer
MAC addresses are 48-bit (6 bytes) and commonly represented in hexadecimal. They are assigned by manufacturers and are used at the data link layer.
A developer is writing a program in C++. The source code needs to be translated into machine code before execution. Which process is required?
C++ is a compiled language.
Why this answer
Compilation translates source code into machine code that the CPU can execute directly.
A user has a desktop computer with a SATA SSD and wants to upgrade to an NVMe M.2 SSD. The motherboard has an M.2 slot. What must the user verify before purchasing the NVMe drive?
Some M.2 slots only support SATA; NVMe requires PCIe support.
Why this answer
NVMe M.2 drives use the PCIe interface and require a motherboard that supports NVMe via M.2 slot with PCIe lanes.
Which of the following file extensions indicates a document created with Microsoft Word?
Correct. .docx is the default Word document format.
Why this answer
Microsoft Word documents traditionally use the .docx extension (since Office 2007) or .doc for older versions. .docx is the modern standard.
Refer to the exhibit. What does this event log entry indicate?
Event ID 41 specifically logs an unclean shutdown.
Why this answer
The event log entry indicates a system shutdown that was not expected or planned, as shown by the 'unexpected' keyword and the event ID 41 in the System log, which corresponds to the Kernel-Power source. This typically occurs when the system loses power or crashes without a clean shutdown process, such as during a power outage or hardware failure.
Exam trap
CompTIA often tests the distinction between 'unexpected' and 'planned' shutdowns by using event ID 41 versus event ID 1074, where candidates may confuse a scheduled restart (which logs a clean shutdown) with an unexpected power loss.
How to eliminate wrong answers
Option A is wrong because event ID 41 does not indicate a virus infection; malware infections are typically logged under different event IDs (e.g., Windows Defender events) or show unusual process behavior, not a kernel power loss. Option B is wrong because software updates are logged under event IDs like 43 (Windows Update) or 19 (Installation) in the System or Setup logs, not as a Kernel-Power event ID 41. Option D is wrong because a scheduled restart would show event ID 1074 with a reason code like 'Application: Maintenance' or 'Planned,' not the 'unexpected' classification seen here.
A product manager creates a list of user stories for a new feature. The development team estimates effort for each story and selects a set to complete in a two-week iteration. Daily standup meetings are held to discuss progress. At the end of the iteration, the team demonstrates working software to stakeholders. Which development framework is being used?
Scrum includes sprints, user stories, daily standups, and sprint reviews.
Why this answer
Scrum is an agile framework that uses fixed-length sprints (iterations), user stories, daily standups, and sprint reviews.
A user notices that a file saved as a JPEG is smaller than the original BMP file. Which type of compression does JPEG typically use?
Correct: JPEG uses lossy compression.
Why this answer
JPEG uses lossy compression, which discards some data to reduce file size.
A user wants to upgrade a desktop computer for better gaming performance. Which TWO components should the user consider upgrading to improve graphics processing? (Select TWO).
Correct.
Why this answer
GPU (graphics card) and RAM (system memory) both impact gaming performance. CPU also matters but the question specifically says graphics processing.
A graphic designer needs to save an image with high quality and no data loss. Which THREE file formats should the designer consider for lossless compression? (Select THREE.)
TIFF supports lossless compression options.
Why this answer
Lossless compression preserves all original data. PNG uses lossless compression for images, ZIP compresses files without loss, and TIFF can be stored uncompressed or with lossless compression.
A company's IT department is deploying a new payroll system. Before the system goes live, a group of employees from the accounting department test the system to ensure it meets their requirements and is usable. This type of testing is known as:
UAT involves users verifying the system meets requirements.
Why this answer
User acceptance testing (UAT) is performed by end users to validate that the system meets their needs and is ready for production.
Which TWO of the following are types of malware?
A virus is a type of malware that replicates by attaching to programs.
Why this answer
A virus is a type of malware that attaches itself to a legitimate program or file and replicates when the host is executed, often causing damage or stealing data. It requires user interaction (e.g., opening an infected attachment) to spread, distinguishing it from other malware types.
Exam trap
The trap here is that candidates confuse security tools (patches, encryption, firewalls) with malware types, or mistakenly think encryption itself is malicious, whereas encryption is a neutral technique used by both security software and some malware (e.g., ransomware) to lock data.
Which TWO of the following are primitive data types commonly used in programming?
Integer is a primitive numeric data type.
Why this answer
Integer and Boolean are primitive data types because they represent single, indivisible values directly supported by the hardware and language runtime. An Integer stores whole numbers (e.g., 42), while a Boolean stores true/false values. These are fundamental building blocks that are not composed of other data types.
Exam trap
A common pitfall is thinking String is a primitive because it looks simple, but in most languages it is a reference type with methods and internal state.
An employee receives an email from 'IT Support' asking for his password due to 'system maintenance'. This is an example of:
The email impersonates IT support and requests sensitive information, typical of phishing.
Why this answer
Phishing is a social engineering attack where an attacker masquerades as a trusted entity (here, 'IT Support') to trick the victim into revealing sensitive information, such as a password. The email requesting credentials under the pretext of 'system maintenance' is a classic phishing technique, often executed via email (spear phishing if targeted). This directly matches the definition of phishing as an attempt to acquire sensitive data through deceptive electronic communication.
Exam trap
The trap here is that candidates confuse pretexting with phishing because both involve a fabricated story, but the exam specifically tests that phishing is the correct term when the attack is carried out via email, instant message, or other electronic communication, whereas pretexting is broader and often involves direct voice or in-person interaction.
How to eliminate wrong answers
Option A is wrong because baiting involves offering something enticing (e.g., a free USB drive or download) to lure the victim into executing malware or revealing information, not sending a deceptive email requesting credentials. Option C is wrong because tailgating is a physical security breach where an unauthorized person follows an authorized individual into a restricted area, not an email-based attack. Option D is wrong because pretexting is a social engineering tactic where the attacker fabricates a scenario (pretext) to obtain information, but it typically involves impersonation over the phone or in person, not specifically via email; while the email does create a pretext, the question explicitly describes an email request for a password, which is the hallmark of phishing, not pretexting alone.
A user needs to create a presentation for a sales meeting. Which type of software should they use?
Presentation software (e.g., PowerPoint) is used for slide-based presentations.
Why this answer
Presentation software, such as Microsoft PowerPoint or Google Slides, is specifically designed to create slide-based presentations for meetings, lectures, or sales pitches. It provides tools for adding text, images, charts, animations, and transitions to effectively communicate information to an audience.
Exam trap
CompTIA often tests the distinction between application categories by presenting a common business task and expecting candidates to recognize that presentation software is the only tool designed for slide-based visual storytelling, not for data analysis, storage, or document creation.
How to eliminate wrong answers
Option A is wrong because spreadsheet software (e.g., Microsoft Excel) is used for organizing, calculating, and analyzing numerical data, not for creating visual slide decks. Option C is wrong because database software (e.g., Microsoft Access) is used for storing, querying, and managing structured data, not for designing presentations. Option D is wrong because a word processor (e.g., Microsoft Word) is used for creating text-based documents like letters or reports, which lack the slide-by-slide layout and multimedia features required for a presentation.
A small business purchases a cable modem from the ISP. They need to obtain a public IP address to access the internet. Which method does the cable modem typically use?
Cable modems use DHCP to obtain an IP address from the ISP automatically.
Why this answer
Cable modems typically use DHCP to obtain a public IP address from the ISP. When the modem powers on, it sends a DHCPDISCOVER broadcast, and the ISP's DHCP server responds with an IP address, subnet mask, default gateway, and DNS server information. This is the standard method for dynamically assigning public IP addresses to customer premises equipment (CPE) in cable networks.
How to eliminate wrong answers
Option A is wrong because NAT (Network Address Translation) is a technique used by routers to map private IP addresses to a public IP address, not a method for a cable modem to obtain a public IP address from the ISP. Option C is wrong because static assignment requires manual configuration of the IP address on the modem, which is not the typical method used by ISPs for cable modems; static IPs are usually an additional service. Option D is wrong because APIPA (Automatic Private IP Addressing) assigns a link-local address in the 169.254.0.0/16 range when a DHCP server is unavailable, and it is not used to obtain a public IP address from an ISP.
A user is trying to install a new application but receives an error that the system does not meet the minimum requirements. Which TWO hardware components should the user check first to ensure compatibility?
Available storage space is a common minimum requirement for application installation.
Why this answer
(Available storage space) is correct because applications require a minimum amount of free disk space to install and run. Option D (Amount of RAM) is correct because insufficient memory can prevent installation or cause poor performance. Option E (Monitor refresh rate) is irrelevant to application installation.
Option B (CPU clock speed) is important but not as commonly checked as RAM and storage for typical applications; however, the question asks for TWO components, and storage and RAM are the most fundamental. Option C (Number of USB ports) is unrelated.
Which of the following is an example of a relative file path?
This is a relative path, assuming the current directory is the parent of Documents.
Why this answer
A relative path is defined relative to the current working directory, without a leading slash or drive letter. 'Documents\Report.docx' is relative. 'C:\Users\Report.docx' is absolute. '/home/user/Report.docx' is absolute on Linux, and '\\Server\Share\Report.docx' is a UNC path.
Which THREE of the following are characteristics of object-oriented programming (OOP)? (Select THREE).
Polymorphism allows objects to be treated as instances of their parent class.
Why this answer
Polymorphism is a core OOP concept that allows objects of different classes to be treated as objects of a common superclass, with method calls resolved at runtime based on the actual object type. This enables one interface to be used for a general class of actions, with specific behavior determined by the specific object instance.
Exam trap
CompTIA often tests the distinction between OOP principles (encapsulation, inheritance, polymorphism) and procedural or structured programming concepts (top-down design, sequential execution), so candidates mistakenly select familiar-sounding terms like 'top-down design' without recognizing they belong to a different paradigm.
A user has just installed a new word-processing application on their laptop. When the user tries to open the application for the first time, a window appears asking for a product key. The user purchased the software online and received an email with the product key. Where should the user enter the product key to activate the software?
The activation prompt is specifically for entering the product key.
Why this answer
The activation window that appears when launching the application is the standard interface for entering a product key. This window is generated by the application itself, not the operating system, and is the intended mechanism to validate the license before full functionality is granted.
Exam trap
The trap here is that candidates may confuse application activation with operating system activation, leading them to choose Option C, or they may think the product key can be entered through a menu like 'File' (Option B), which is not the standard workflow for first-time activation.
How to eliminate wrong answers
Option B is wrong because the 'File' menu typically contains options like 'Save', 'Open', and 'Print', but not a product key entry field; product key entry is handled by a dedicated activation dialog, not a menu item. Option C is wrong because the operating system's 'Activation' settings (e.g., Windows Activation) are used to activate the OS itself, not individual applications like a word processor. Option D is wrong because closing the activation window will either prevent the application from launching or limit it to a trial mode, and the software cannot be used without activation as the product key is required to unlock full features.
A user wants to upgrade their workstation's storage without losing existing data. Which of the following is the BEST method?
Cloning preserves all data.
Why this answer
Cloning the existing drive to the new one creates an exact bit-for-bit copy of the original drive, including the operating system, applications, settings, and all data. This allows the user to simply swap the drives and boot normally without any data loss or reinstallation. It is the most direct method that preserves the existing environment intact.
Exam trap
The trap here is that candidates may confuse 'backup and restore' (Option C) as equivalent to cloning, but backup/restore often requires reinstalling the OS and may not preserve boot configuration, whereas cloning directly transfers the entire working system.
How to eliminate wrong answers
Option B is wrong because a clean installation erases all data on the new drive and requires reinstalling the OS and applications, which does not preserve existing data from the original drive. Option C is wrong because while it preserves data, it requires manual reinstallation of the OS and applications, making it more time-consuming and less seamless than cloning. Option D is wrong because setting up a RAID 1 array requires two drives and mirrors data in real time, but it does not migrate existing data from the old drive to the new one without additional steps.
A developer writes a set of instructions to sort an array of numbers in ascending order. The instructions include steps like 'compare first two numbers, swap if out of order, move to next pair, repeat until no swaps are needed.' This step-by-step procedure is known as a(n):
An algorithm is a set of steps to solve a problem.
Why this answer
An algorithm is a step-by-step procedure to solve a problem. The description matches the bubble sort algorithm.
A database contains two tables: 'Authors' (AuthorID, Name) and 'Books' (BookID, Title, AuthorID). A query needs to return all authors and any books they have written, including authors with no books. Which type of JOIN should be used?
Correct; LEFT JOIN includes all authors.
Why this answer
A LEFT JOIN returns all rows from the left table (Authors) and matching rows from the right table (Books). If no match, NULLs are returned for the right table.
Which of the following is the best practice for creating a strong password?
Correct. Long and complex passwords are strong.
Why this answer
A strong password is at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols.
Which TWO of the following are examples of social engineering attacks? (Select TWO.)
Pretexting is a social engineering attack where the attacker invents a scenario to trick the victim.
Why this answer
Pretexting involves creating a fabricated scenario to gain information, and tailgating is following an authorized person into a restricted area. Both manipulate human behavior rather than technical systems.
Drag and drop the steps to uninstall a program in Windows 10 into the correct order.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Why this order
The correct sequence to uninstall a program in Windows 10 via Settings is: Open Settings, click Apps, click Apps & features, select the program, and click Uninstall. This ensures you access the proper list of installed programs. Other orders either mis-navigate within Settings or use the older Control Panel method, which is not the expected modern approach.
Refer to the exhibit. A system administrator notices that the computer occasionally freezes and data read errors occur. What should the administrator do?
Disk 0 is predicted to fail and has reallocated sectors, so replacement is necessary.
Why this answer
Disk 0 is the system disk (as indicated by the 'System' label in the exhibit), and the described symptoms—occasional freezing and data read errors—are classic indicators of a failing hard drive. Replacing Disk 0 addresses the root cause because a failing system disk can cause intermittent read failures and system hangs. Running CHKDSK or updating drivers would only mask the problem temporarily, and replacing Disk 1 (a non-system disk) would not resolve system-level freezes.
Exam trap
The trap here is that candidates assume CHKDSK (Option C) can fix any disk issue, but it only addresses logical corruption, not physical failures, and they may overlook that the 'System' label on Disk 0 indicates it is the boot drive, making its failure the primary cause of system freezes.
How to eliminate wrong answers
Option A is wrong because updating the storage controller driver would not fix physical read errors or freezes caused by a failing disk; driver updates address software compatibility issues, not hardware degradation. Option B is wrong because Disk 1 is labeled as a data disk, and replacing it would not resolve system freezes or read errors originating from the system disk (Disk 0). Option C is wrong because CHKDSK can only detect and repair logical file system errors, not physical media failures; running it on both disks would not fix the underlying hardware problem on Disk 0.
A network printer should always receive the same IP address to ensure reliable access. Which configuration method guarantees this?
A static IP address remains constant, ensuring the printer is always reachable.
Why this answer
A static IP address is manually configured on the printer itself, ensuring it never changes regardless of network conditions or DHCP server availability. This guarantees the printer always receives the same IP address because the assignment is hard-coded and not subject to lease expiration or server failures.
Exam trap
The trap here is that candidates often confuse DHCP reservation with static IP, thinking both guarantee the same address, but the exam tests the understanding that a static IP is configured on the device itself and does not depend on any server, whereas a reservation still relies on DHCP server availability and proper lease renewal.
How to eliminate wrong answers
Option B is wrong because a DHCP reservation assigns a fixed IP address from the DHCP server, but if the server is down or the printer is moved to a different subnet, it may not receive that address. Option C is wrong because a dynamic IP address is leased from a DHCP server and can change when the lease expires or the device reconnects. Option D is wrong because APIPA (Automatic Private IP Addressing) assigns a random link-local address in the 169.254.0.0/16 range when no DHCP server is available, which is not guaranteed to be consistent and cannot be relied upon for network printing.
A company has two departments on separate floors and wants to connect them into a single local area network (LAN). Which device should be used to interconnect the switches on each floor?
Switches connect devices within the same network, allowing multiple switches to extend a LAN.
Why this answer
A switch is the correct device because it operates at Layer 2 (Data Link layer) and can forward frames based on MAC addresses, allowing multiple switches to be interconnected to extend a single broadcast domain and form a larger LAN. Connecting switches on different floors via Ethernet cables or fiber uplinks creates a unified local area network without requiring routing or network-layer addressing.
Exam trap
The trap here is that candidates often confuse a router as necessary for connecting any two network segments, but when the goal is to extend the same LAN (same subnet and broadcast domain), a Layer 2 switch is the appropriate device, not a router.
How to eliminate wrong answers
Option A is wrong because a router operates at Layer 3 (Network layer) and is used to connect different networks or subnets, not to extend a single LAN; using a router would segment the network and require IP routing. Option B is wrong because a modem modulates/demodulates signals for WAN connections (e.g., DSL, cable) and is not designed to interconnect local switches within a building. Option D is wrong because a hub is a Layer 1 device that simply repeats electrical signals, lacks MAC address learning, and would create a single collision domain, leading to inefficiency and increased collisions when interconnecting switches.
A user connects to a website using its domain name. Which server translates that domain name into an IP address?
DNS servers translate domain names to IP addresses.
Why this answer
DNS (Domain Name System) servers resolve domain names to IP addresses, enabling browsers to locate web servers.
A developer is using Git and wants to integrate changes from a feature branch into the main branch. Which Git operation should be performed?
Merge integrates changes from one branch into another.
Why this answer
Merging combines changes from one branch into another. Committing saves changes locally, branching creates a new line of development, cloning copies a repository.
After a ransomware attack, which step should be taken FIRST in the incident response process?
Disconnecting stops the spread and limits damage, a crucial first step.
Why this answer
The first step in incident response after a ransomware attack is to contain the threat by disconnecting affected systems from the network. This prevents the ransomware from encrypting additional files on other systems and stops lateral movement, which is critical because ransomware often uses network shares and SMB protocols to spread. Immediate isolation preserves forensic evidence and limits the scope of the incident before any other actions are taken.
Exam trap
CompTIA often tests the misconception that the first step should be to restore from backups or notify authorities, but the correct first step is always containment to stop the spread of the attack.
How to eliminate wrong answers
Option A is wrong because notifying law enforcement is a secondary step that should occur after containment and initial investigation; contacting authorities prematurely can delay critical containment actions and may not be required for all incidents. Option C is wrong because restoring from backup should only be performed after the ransomware has been fully removed and the root cause identified; restoring while the infection is active can re-encrypt the restored data. Option D is wrong because paying the ransom does not guarantee data recovery, encourages further attacks, and violates many organizational security policies and legal guidelines; it is never a recommended technical step in incident response.
Which of the following is a key difference between a web application and a desktop application?
This accurately describes the architectural difference.
Why this answer
Web applications run in a browser and rely on server-side processing, while desktop applications are installed locally and can directly access hardware resources.
A database designer wants to avoid duplicate data across tables and ensure each table stores information about a single entity. Which process should the designer apply?
Normalization minimizes duplication by splitting data into related tables.
Why this answer
Normalization is the process of organizing data in a database to reduce redundancy and dependency by dividing large tables into smaller, related tables and defining relationships between them. This ensures each table stores information about a single entity and avoids duplicate data across tables, aligning with the designer's goal.
Exam trap
The trap here is that candidates confuse normalization with indexing, assuming both reduce redundancy, but indexing only optimizes query speed without addressing data duplication or entity isolation.
How to eliminate wrong answers
Option A is wrong because indexing is used to speed up data retrieval by creating data structures (e.g., B-trees) that improve query performance, not to eliminate duplicate data or enforce entity-level table design. Option B is wrong because transaction isolation is a property of database transactions (defined by SQL standards like ACID) that controls concurrency and visibility of changes, not a method for structuring tables to avoid redundancy. Option D is wrong because backup and recovery involves creating copies of data and restoring it after failure (e.g., using full, differential, or transaction log backups), which does not address data duplication or table design.
A programmer is writing code that needs to repeat a block of instructions 10 times. Which programming construct is best suited for this task?
Correct. Loops are designed for repetition.
Why this answer
A loop (such as a for loop or while loop) is designed to execute a block of code repeatedly, either a specified number of times or until a condition is met.
A graphic designer needs a component to accelerate rendering of 3D models. Which of the following computer hardware components is specifically designed for this purpose?
GPU accelerates graphics rendering.
Why this answer
GPU (Graphics Processing Unit) is specialized for rendering graphics and is used for 3D modeling, AI, and ML. CPU, RAM, and SSD are general-purpose components.
A company is migrating its email and document collaboration from an on-premises server to a cloud-based solution. The IT manager wants to ensure that employees can access their files and emails from any device with a web browser. Which software category should the company implement?
Google Workspace is a cloud-based productivity suite designed for web access.
Why this answer
Google Workspace is a cloud-based productivity suite that provides email, document collaboration, and storage accessible via web browser.
An IT administrator needs to install software on multiple company computers without user interaction. Which installation method should the administrator use?
Silent installation runs without user interaction, perfect for automated deployment.
Why this answer
Silent installation runs the installer without displaying any prompts or requiring user input, ideal for automated deployments. App store installation typically requires user interaction, interactive installation requires clicks, and network installation may still involve prompts.
Which THREE of the following are types of data integrity enforced in relational databases?
Ensures foreign key values match a primary key or are null.
Why this answer
Entity integrity (via primary keys), referential integrity (via foreign keys), and domain integrity (via data types and constraints) are the three main types.
A database designer is modeling a system where each book can have multiple authors and each author can write multiple books. Which type of relationship should be used between the Book and Author entities?
Many-to-many allows a book to have multiple authors and an author to have multiple books, typically implemented via a junction table.
Why this answer
The scenario describes a many-to-many relationship because each book can have multiple authors and each author can write multiple books. In relational database design, this is modeled using a junction (or associative) table that contains foreign keys referencing both the Book and Author primary keys, enabling the bidirectional association without data redundancy.
Exam trap
The trap here is that candidates often confuse a one-to-many relationship with many-to-many, mistakenly thinking that adding multiple author fields to the Book table (violating first normal form) is acceptable, rather than recognizing the need for a junction table.
How to eliminate wrong answers
Option A is wrong because a one-to-one relationship would require each book to have exactly one author and each author to write exactly one book, which contradicts the given scenario. Option B is wrong because hierarchical is not a standard relational database relationship type; it typically refers to a data model (like in LDAP or XML) where records have parent-child relationships, not the associative many-to-many needed here. Option C is wrong because a one-to-many relationship would allow one book to have many authors but would force each author to write only one book (or vice versa), which does not satisfy the bidirectional multiplicity described.
A user wants to ensure data is not lost in the event of a drive failure. Which storage configuration provides redundancy?
RAID 1 mirrors data across two or more drives, so data remains intact if one drive fails.
Why this answer
RAID 1 (mirroring) writes identical data to two or more drives simultaneously, so if one drive fails, the data remains accessible from the other drive(s). This provides fault tolerance and ensures no data loss during a single drive failure, meeting the user's requirement for redundancy.
Exam trap
The trap here is that candidates often confuse RAID 0 (striping for performance) with providing redundancy, or they think JBOD offers some form of protection because it combines drives, but neither provides fault tolerance.
How to eliminate wrong answers
Option B (JBOD) is wrong because JBOD (Just a Bunch Of Disks) simply concatenates disks into a single logical volume without any parity, mirroring, or striping, offering no redundancy—if one drive fails, data on that drive is lost. Option C (RAID 0) is wrong because RAID 0 uses striping to improve performance but provides no redundancy; a single drive failure destroys all data in the array. Option D (Single drive) is wrong because a single drive has no built-in redundancy; any drive failure results in complete data loss.
Which of the following is an example of something you are in multi-factor authentication?
Correct. Fingerprint is a biometric, something you are.
Why this answer
Biometrics (fingerprint, face) are physical characteristics, i.e., something you are.
Which of the following is a valid reason to use a database instead of a spreadsheet?
Correct; databases offer query languages and integrity constraints.
Why this answer
Databases support complex queries using SQL and provide data integrity features like constraints.
Which of the following best describes the principle of confidentiality in the CIA triad?
Confidentiality is about preventing unauthorized access.
Why this answer
Confidentiality ensures that information is not disclosed to unauthorized individuals, systems, or processes.
A user's laptop battery no longer holds a charge and the laptop only works when plugged in. Which component should be replaced?
The battery is the component that holds charge and needs replacement when it fails.
Why this answer
The battery is the component that stores electrical charge to power the laptop when unplugged. If it no longer holds a charge, the laptop will only operate when connected to the power adapter, indicating the battery has reached the end of its rechargeable life cycle and must be replaced.
Exam trap
The trap here is that candidates may confuse a failing power adapter with a dead battery, but the key clue is that the laptop works when plugged in, which rules out the adapter and points directly to the battery as the failed component.
How to eliminate wrong answers
Option B is wrong because RAM (Random Access Memory) is volatile memory used for temporary data storage during active tasks; it does not affect the laptop's ability to run on battery power. Option C is wrong because the hard drive is a non-volatile storage device for persistent data; a failing hard drive may cause data loss or boot issues but does not impact battery charging or power delivery. Option D is wrong because the power adapter converts AC mains power to DC power for the laptop; if the laptop works when plugged in, the adapter is functioning correctly and is not the source of the battery not holding a charge.
Which of the following license types allows users to view, modify, and distribute the source code, as long as they include the original copyright notice and any modifications are also open source?
GPL is a copyleft license that requires derivative works to remain open source.
Why this answer
The GNU General Public License (GPL) is a copyleft open source license that requires derivative works to be distributed under the same license, ensuring source code remains open. MIT and Apache are permissive licenses with fewer restrictions, and shareware is not open source.
A company wants to implement a solution that allows employees to access internal applications from home without installing software on their personal devices. Which technology should be used?
VDI provides a full desktop experience accessible via a web browser without installing software.
Why this answer
VDI provides hosted virtual desktops that users can access from any device, including personal ones, without installing software locally. The applications run on the server, and only screen updates are sent to the client, meeting the requirement of no software installation on personal devices.
Exam trap
The trap here is confusing VPN with VDI: candidates often think a VPN alone provides application access, but VPN only grants network-level connectivity and still requires local software or RDP clients to run the actual applications.
How to eliminate wrong answers
Option A is wrong because Remote Desktop Services (RDS) typically requires a Remote Desktop Protocol (RDP) client to be installed on the user's device, which violates the 'no software installation' requirement. Option B is wrong because a thin client is a hardware device that requires a dedicated operating system and often local configuration, not a solution for accessing applications from personal devices without installation. Option C is wrong because a Virtual Private Network (VPN) creates an encrypted tunnel to the corporate network but still requires the user to install VPN client software on their personal device and does not inherently provide application access without local installation.
You are an IT support specialist for a mid-sized company. A user in the accounting department, Jane, reports that her accounting software (QuickBooks 2021) crashes every time she tries to export a report to PDF. The crash occurs immediately after clicking 'Export to PDF' and displays the error: 'The application has stopped working.' Jane's workstation runs Windows 10 Pro with 8GB RAM and an SSD. She has sufficient disk space. Other users in the same department using the same software version do not experience this issue. Jane recently installed a free PDF printer driver for personal use. What is the most likely cause and the best course of action?
The new PDF printer driver likely interferes with QuickBooks' PDF export; removing it should resolve the crash.
Why this answer
The most likely cause is the recently installed free PDF printer driver, which conflicts with QuickBooks' PDF export functionality. QuickBooks relies on its own PDF generation engine or system PDF printers, and a third-party PDF driver can intercept or corrupt the export process, causing the crash. Removing the driver and testing is the best first step because it isolates the change without affecting other software or system files.
Exam trap
The trap here is that candidates may assume the crash is due to QuickBooks corruption or a system-wide issue, rather than recognizing that a recent user-installed driver is the most probable cause given the isolated nature of the problem.
How to eliminate wrong answers
Option B is wrong because reinstalling QuickBooks would not resolve a conflict caused by a third-party driver; the software itself is not corrupted since other users with the same version work fine. Option C is wrong because reinstalling Windows 10 is an extreme and unnecessary step; the issue is isolated to a single application and a recent driver installation, not OS corruption. Option D is wrong because updating all printer drivers is too broad and may not address the specific conflict; the problem is likely the new PDF driver, not outdated drivers, and updating could even introduce further incompatibilities.
A developer writes the following pseudocode: for i = 1 to 5, sum = sum + i. What does this code do?
The loop iterates through 1 to 5 and accumulates the sum.
Why this answer
The pseudocode initializes a loop that iterates with i taking values 1, 2, 3, 4, and 5. In each iteration, the current value of i is added to the variable sum. After the loop completes, sum holds the total of 1+2+3+4+5, which is 15.
This is a standard accumulator pattern used in programming to compute a running total.
Exam trap
The trap here is that candidates may confuse the loop's iteration with a single addition of the final value (5) or mistakenly think the code prints output, when in fact the pseudocode only performs a cumulative addition without any display operation.
How to eliminate wrong answers
Option B is wrong because the loop adds each integer from 1 to 5 individually, not just the single value 5; the final sum includes all five numbers. Option C is wrong because the operator used is addition (+), not multiplication (*), so the code performs summation, not multiplication. Option D is wrong because the pseudocode does not include any output or print statement; it only performs arithmetic and stores the result in the variable sum.
A database administrator needs to ensure that a transaction either fully completes or is fully rolled back. Which database property guarantees this?
Atomicity ensures that each transaction is 'all or nothing'.
Why this answer
Atomicity ensures that a transaction is treated as a single, indivisible unit of work: either all of its operations are committed successfully, or none are applied, and the database is rolled back to its previous state. This property directly guarantees the 'all or nothing' behavior required by the database administrator. In SQL databases, atomicity is typically enforced through transaction control statements like BEGIN TRANSACTION, COMMIT, and ROLLBACK, with the database engine managing undo logs to reverse partial changes if a failure occurs.
Exam trap
The trap here is that candidates often confuse atomicity with consistency, mistakenly thinking that 'all or nothing' is about maintaining data rules, when in fact atomicity is the specific property that guarantees transactional indivisibility.
How to eliminate wrong answers
Option A is wrong because isolation controls how concurrent transactions interact with each other (e.g., preventing dirty reads via locking or MVCC), not whether a single transaction completes fully or rolls back. Option B is wrong because durability guarantees that once a transaction is committed, its changes persist even after a system crash (typically via write-ahead logging), but it does not address the 'all or nothing' completion of the transaction itself. Option D is wrong because consistency ensures that a transaction brings the database from one valid state to another, preserving defined rules (e.g., constraints, cascades), but it does not enforce the atomic 'all or nothing' execution; atomicity is a prerequisite for consistency.
Which of the following best describes the principle of confidentiality in the CIA triad?
Confidentiality is about keeping data secret from unauthorized parties.
Why this answer
Confidentiality ensures that data is not disclosed to unauthorized individuals or systems.
A company wants to manage and secure employee smartphones used for work. Which technology should they implement?
MDM manages device policies, security, and apps.
Why this answer
MDM (Mobile Device Management) allows centralized management of mobile devices.
Which of the following best describes the function of an operating system?
Correct definition.
Why this answer
An operating system manages hardware resources and provides a platform for applications to run.
Which THREE of the following are productivity software suites?
Google Workspace provides productivity apps like Docs and Sheets.
Why this answer
Productivity software includes office suites and collaboration tools.
Refer to the exhibit. What is the output of the SELECT statement?
Correct: The HAVING clause retains only the Widget group with count 2.
Why this answer
The SELECT statement uses COUNT(*) with GROUP BY Category and a HAVING clause that filters out groups with a count less than 2. The table has two rows with 'Widget' and one row with 'Gadget'. After grouping, the Widget group has a count of 2, and the Gadget group has a count of 1.
The HAVING clause excludes the Gadget group because its count is less than 2. Therefore, the query returns only one row: Widget with count 2. Option A correctly displays 'Widget, 2'.
Option B displays 'Gadget, 2' which is incorrect because the Gadget group is filtered out. Options C and D include extra rows that are not in the result.
Exam trap
The trap is that candidates may overlook the HAVING clause and assume GROUP BY alone determines the output. They might incorrectly include the Gadget group or think the query returns all categories regardless of count.
How to eliminate wrong answers
Option A is wrong because it only shows one row (Widget, 2), omitting the Gadget row entirely, which would only happen if a WHERE clause filtered out Gadget or if the query used DISTINCT on Category without COUNT. Option C is wrong because it lists 'Widget, 2; Gadget, 1; Widget, 1', which incorrectly includes a third row with Widget count 1, likely confusing COUNT(*) with a row count per individual occurrence or misapplying a HAVING clause. Option D is wrong because it lists 'Widget, 2; Gadget, 1; Widget, 1' (same as C), which duplicates Widget with an incorrect count and adds an extra row not produced by the GROUP BY.
Which of the following is a characteristic of a strong password?
Long and complex passwords are strong.
Why this answer
A strong password should be at least 12 characters, include uppercase, lowercase, numbers, and symbols, and should not be reused or shared.
Which of the following best describes the function of a CPU cache?
Cache holds frequently used data for fast access.
Why this answer
CPU cache is a small, fast memory that stores frequently accessed data to speed up processing.
A company is developing a mobile app and wants to release a minimal set of features quickly, then add more features based on user feedback. Which methodology best supports this approach?
Agile supports iterative releases and adapting to feedback.
Why this answer
Agile methodology uses iterative development and adapts to changing requirements based on feedback.
A testing team is verifying a new version of an e-commerce website. They run a set of pre-existing test cases to ensure that recent changes have not broken any previously working functionality. What type of testing is this?
Regression testing ensures that new changes haven't broken existing functionality.
Why this answer
Regression testing checks that new code changes do not adversely affect existing features.
A technician is choosing expansion cards for a new workstation. The workstation will be used for high-end gaming and video editing. Which TWO cards are most essential for these tasks?
Required for rendering graphics in games and video editing.
Why this answer
A dedicated GPU is essential for gaming and video editing, and a sound card provides high-quality audio.
A programmer declares a variable 'price' and assigns it the value 19.99. In most programming languages, what is the data type of this variable?
Float is used for numbers with decimal points.
Why this answer
19.99 is a number with a decimal point, so it is a floating-point number (float). Integer is a whole number, string is text, and boolean is true/false.
Practice FC0-U71 by domain
Target a specific domain to shore up weak areas.