Scenario practice questions

A technician is recommending a device to protect a server from data loss during a power outage. Which device should the technician recommend?

Trap 1: Generator

Generators are for extended outages but not typically a standard recommendation for basic data loss prevention.

Trap 2: Power strip

Power strips provide no protection or backup.

Trap 3: Surge protector

Surge protectors guard against voltage spikes, not power loss.

A
Uninterruptible Power Supply (UPS)
A UPS provides battery backup, allowing safe shutdown during an outage.
B
Generator
Why wrong: Generators are for extended outages but not typically a standard recommendation for basic data loss prevention.
C
Power strip
Why wrong: Power strips provide no protection or backup.
D
Surge protector
Why wrong: Surge protectors guard against voltage spikes, not power loss.

Question 2mediummultiple choice

Which data structure is best for storing a collection of key-value pairs?

Trap 1: Queue

Queues are for first-in-first-out processing.

Trap 2: Array

Arrays use numeric indices, not keys.

Trap 3: List

Lists store ordered values without keys.

A
Queue
Why wrong: Queues are for first-in-first-out processing.
B
Array
Why wrong: Arrays use numeric indices, not keys.
C
Dictionary
Dictionaries store key-value pairs.
D
List
Why wrong: Lists store ordered values without keys.

Question 3easymultiple choice

A security guard notices an individual following closely behind an employee through a secured door without swiping a badge. This scenario is an example of which type of security threat?

Trap 1: Shoulder surfing

Shoulder surfing is observing someone's screen.

Trap 2: Phishing

Phishing involves fraudulent communications.

Trap 3: Malware

Malware is malicious software.

A
Shoulder surfing
Why wrong: Shoulder surfing is observing someone's screen.
B
Phishing
Why wrong: Phishing involves fraudulent communications.
C
Tailgating
Tailgating is unauthorized physical access by following someone.
D
Malware
Why wrong: Malware is malicious software.

Question 4hardmultiple choice

An employee calls the help desk claiming to be a manager from another department and requests a password reset. This is an example of which social engineering technique?

Trap 1: Baiting

Baiting uses a physical lure, like a USB drive.

Trap 2: Tailgating

Tailgating is physically following someone into a secure area.

Trap 3: Phishing

Phishing uses email, not phone calls.

A
Baiting
Why wrong: Baiting uses a physical lure, like a USB drive.
B
Pretexting
Correct. The attacker creates a false identity to gain information.
C
Tailgating
Why wrong: Tailgating is physically following someone into a secure area.
D
Phishing
Why wrong: Phishing uses email, not phone calls.

Read the full wireless explanation →

Question 5mediummultiple choice

A technician needs to install a wireless network in a large warehouse. The goal is to minimize interference and support many devices. Which frequency band is best for this scenario?

Trap 1: 60 GHz

60 GHz is for very short range, high-speed links, not typical for warehouse Wi-Fi.

Trap 2: 900 MHz

900 MHz is used for some IoT devices but not standard Wi-Fi.

Trap 3: 2.4 GHz

2.4 GHz has longer range but more interference from household devices.

A
5 GHz
5 GHz provides faster speeds and less interference, better for high-density deployments.
B
60 GHz
Why wrong: 60 GHz is for very short range, high-speed links, not typical for warehouse Wi-Fi.
C
900 MHz
Why wrong: 900 MHz is used for some IoT devices but not standard Wi-Fi.
D
2.4 GHz
Why wrong: 2.4 GHz has longer range but more interference from household devices.

Question 6mediummulti select

A junior developer is learning about data structures. The developer needs to choose a data structure for the following scenarios: - Storing a list of items where order matters and items can be accessed by index. - Storing key-value pairs for fast lookups. Which TWO data structures should the developer consider?

Trap 1: Tree

Trees are hierarchical and not primarily for indexed access or key-value pairs.

Trap 2: Stack

Stacks are LIFO and not typically accessed by index.

Trap 3: Queue

Queues are FIFO and not typically accessed by index.

A
Dictionary
Dictionaries store key-value pairs for fast lookups.
B
Tree
Why wrong: Trees are hierarchical and not primarily for indexed access or key-value pairs.
C
Array
Arrays store items in order and allow index-based access.
D
Stack
Why wrong: Stacks are LIFO and not typically accessed by index.
E
Queue
Why wrong: Queues are FIFO and not typically accessed by index.

Question 7mediummulti select

Which TWO of the following are examples of social engineering attacks? (Select TWO.)

Trap 1: Rootkit

A rootkit is malware that hides its presence, not social engineering.

Trap 2: Worm

A worm is self-replicating malware, not a social engineering technique.

Trap 3: Ransomware

Ransomware is a type of malware, not social engineering.

A
Rootkit
Why wrong: A rootkit is malware that hides its presence, not social engineering.
B
Pretexting
Pretexting is a social engineering attack where the attacker invents a scenario to trick the victim.
C
Worm
Why wrong: A worm is self-replicating malware, not a social engineering technique.
D
Tailgating
Tailgating is a physical social engineering attack.
E
Ransomware
Why wrong: Ransomware is a type of malware, not social engineering.

Question 8hardmultiple choice

A security analyst is explaining the CIA triad to new employees. Which scenario best illustrates a breach of integrity?

Trap 1: An employee accidentally deletes a critical file

This affects availability, but not necessarily integrity as the data is lost, not altered.

Trap 2: An attacker steals customer credit card numbers from a database

This breaches confidentiality.

Trap 3: A denial-of-service attack makes a website unavailable

This breaches availability, not integrity.

A
An employee accidentally deletes a critical file
Why wrong: This affects availability, but not necessarily integrity as the data is lost, not altered.
B
An attacker modifies financial records in a database without authorization
Correct: unauthorized modification is a breach of integrity.
C
An attacker steals customer credit card numbers from a database
Why wrong: This breaches confidentiality.
D
A denial-of-service attack makes a website unavailable
Why wrong: This breaches availability, not integrity.

Study the full virtualization explanation →

Question 9easymultiple choice

A company wants to use a cloud service where they provide their own operating system and applications, but the provider manages the physical hardware and virtualization layer. Which cloud service model does this describe?

Trap 1: Platform as a Service (PaaS)

PaaS abstracts the OS, customers only deploy apps.

Trap 2: Desktop as a Service (DaaS)

DaaS delivers virtual desktops, not full control over the OS.

Trap 3: Software as a Service (SaaS)

SaaS provides ready-to-use software, not control over OS.

A
Platform as a Service (PaaS)
Why wrong: PaaS abstracts the OS, customers only deploy apps.
B
Infrastructure as a Service (IaaS)
IaaS gives virtual machines where customers manage OS and applications.
C
Desktop as a Service (DaaS)
Why wrong: DaaS delivers virtual desktops, not full control over the OS.
D
Software as a Service (SaaS)
Why wrong: SaaS provides ready-to-use software, not control over OS.

Question 10easymultiple choice

A user is unable to insert a new record into a database table because a required field is missing. Which database concept enforces that a field must have a value?

Trap 1: Primary key

A primary key enforces uniqueness and non-null only on that specific column, not all fields.

Trap 2: Index

An index speeds up queries but does not enforce data integrity constraints like required fields.

Trap 3: Foreign key

A foreign key links tables and ensures referential integrity, not a general NOT NULL requirement.

A
NOT NULL constraint
A NOT NULL constraint prevents NULL values in a column, making it required.
B
Primary key
Why wrong: A primary key enforces uniqueness and non-null only on that specific column, not all fields.
C
Index
Why wrong: An index speeds up queries but does not enforce data integrity constraints like required fields.
D
Foreign key
Why wrong: A foreign key links tables and ensures referential integrity, not a general NOT NULL requirement.

Question 11hardmultiple choice

An e-commerce application experiences a data anomaly where an order is partially recorded: the order header is saved but some order line items are missing due to a system crash. Which property of database transactions is violated?

Trap 1: Consistency

Consistency means data follows all rules; the partial data might still be consistent if nulls are allowed.

Trap 2: Isolation

Isolation prevents interference between transactions; a crash is not about concurrency.

Trap 3: Durability

Durability ensures committed data survives failures; the issue is that the transaction was only partially committed.

A
Consistency
Why wrong: Consistency means data follows all rules; the partial data might still be consistent if nulls are allowed.
B
Isolation
Why wrong: Isolation prevents interference between transactions; a crash is not about concurrency.
C
Atomicity
Atomicity requires all operations in a transaction to complete or none; a partial commit breaks this.
D
Durability
Why wrong: Durability ensures committed data survives failures; the issue is that the transaction was only partially committed.

Review the full routing breakdown →

Question 12hardmultiple choice

You are the IT support technician for a small office with 5 computers, a shared printer, and a router providing internet access. Users report that the network has been slow and intermittent for the past two days. Additionally, print jobs from multiple users are frequently stuck or fail halfway. You have already verified that all network cables are securely connected, restarted the router and printer, and updated the printer drivers. The issue persists. One user mentions that their computer sometimes shows a 'Windows has detected an IP address conflict' notification. Based on this scenario, which course of action should you take next to resolve the most likely root cause?

Trap 1: Disable Windows Firewall on all computers

Firewall settings do not cause IP conflicts or printer failures; disabling it could expose the network to threats.

Trap 2: Reinstall the operating system on all computers

Reinstalling the OS is an extreme measure that does not address the network-level issue of IP conflicts.

Trap 3: Replace the network switch with a new one

The switch is unlikely the cause since cables and router restarts did not help; an IP conflict is not resolved by replacing the switch.

A
Check for IP address conflicts on the network and assign static IP addresses if necessary
An IP address conflict causes intermittent connectivity and can disrupt printer communication; resolving the conflict will restore stability.
B
Disable Windows Firewall on all computers
Why wrong: Firewall settings do not cause IP conflicts or printer failures; disabling it could expose the network to threats.
C
Reinstall the operating system on all computers
Why wrong: Reinstalling the OS is an extreme measure that does not address the network-level issue of IP conflicts.
D
Replace the network switch with a new one
Why wrong: The switch is unlikely the cause since cables and router restarts did not help; an IP conflict is not resolved by replacing the switch.

Question 13mediummultiple choice

A software tester writes tests to verify that individual functions in a module return correct results when given specific inputs. These tests are isolated from other parts of the system. Which type of testing is being performed?

Trap 1: Integration testing

Integration testing checks interactions between components.

Trap 2: User acceptance testing

UAT is performed by end users to validate requirements.

Trap 3: System testing

System tests the entire end-to-end system.

A
Integration testing
Why wrong: Integration testing checks interactions between components.
B
User acceptance testing
Why wrong: UAT is performed by end users to validate requirements.
C
Unit testing
Unit testing tests individual units/functions in isolation.
D
System testing
Why wrong: System tests the entire end-to-end system.

Question 14easymultiple choice

A user reports that a spreadsheet application crashes every time they try to open a specific file. The file was created in a newer version of the software. What is the most likely cause?

Trap 1: The computer does not have enough RAM.

Insufficient RAM would likely cause general slowdowns, not a crash with a single specific file.

Trap 2: The file is corrupted.

A corrupted file usually results in an error message or fails to open, not a consistent crash.

Trap 3: The user does not have permission to access the file.

Permission issues cause access denied errors, not application crashes.

A
The computer does not have enough RAM.
Why wrong: Insufficient RAM would likely cause general slowdowns, not a crash with a single specific file.
B
The file was saved in a format incompatible with the installed version.
Newer file formats may cause crashes in older versions due to unsupported features.
C
The file is corrupted.
Why wrong: A corrupted file usually results in an error message or fails to open, not a consistent crash.
D
The user does not have permission to access the file.
Why wrong: Permission issues cause access denied errors, not application crashes.