CompTIA A+ Core 1 (220-1101) & Core 2 (220-1102) — Questions and Answers

Question 1: A graphic designer has created a company logo that includes a transparent background. They need to save the file in a format that supports transparency and is suitable for use on a website. Which of the following file formats should they use?

.TXT
.PNG (Correct answer)
.MP3
.JPG

Correct answer: .PNG

The PNG (Portable Network Graphics) format is a raster graphics format that supports lossless data compression and, crucially, transparency, making it ideal for web graphics like logos. JPG does not support transparency. TXT is for plain text, and MP3 is an audio file format.

Question 2: A company wants to use a cloud deployment model that combines on-premises infrastructure with public cloud resources and allows data and applications to move between them. Which model best describes this?

Hybrid cloud (Correct answer)
Private cloud
Community cloud
Public cloud

Correct answer: Hybrid cloud

A hybrid cloud integrates on-premises (private) infrastructure with public cloud services, enabling workloads and data to move between environments.

Question 3: A technician detected malware on a user's computer after investigating symptoms that appeared on the computer. What is the technician's next course of action?

Run updates on the computer.
Educate the user.
Remediate the infected system.
Quarantine the infected system. (Correct answer)

Correct answer: Quarantine the infected system.

After detecting malware, the immediate next step in the remediation process is to quarantine the infected system. Quarantining isolates the compromised system from the rest of the network, preventing the malware from spreading to other devices and minimizing further damage while preparing for its removal.

Question 4: Which authentication factor is classified as "something you are"?

Smart card
Password
Security token
Biometric data (Correct answer)

Correct answer: Biometric data

Biometric data such as fingerprints, facial recognition, or retinal scans represents the "something you are" authentication factor.

Question 5: A technician needs to use a bootable USB drive to start a computer. They want to do so by changing the computer's boot sequence. To modify the boot order, where can this technician go?

Task Manager
Registry
Services
BIOS (Correct answer)

Correct answer: BIOS

The BIOS (Basic Input/Output System) or UEFI (Unified Extensible Firmware Interface) is firmware that initializes hardware during the booting process and provides runtime services for the operating system. To change the boot sequence, a technician must access the BIOS/UEFI setup utility, typically by pressing a specific key (like F2, Del, F10) during startup. Within this utility, they can prioritize booting from a USB drive, CD/DVD, or hard drive.

Question 6: A programmer is writing a script to automate a simple task. The script will be executed directly by a program that reads and carries out the instructions one line at a time. Which category of programming language is being used?

Compiled language
Interpreted language (Correct answer)
Markup language
Query language

Correct answer: Interpreted language

An interpreted language is executed directly by an interpreter, which reads and executes the source code line by line without requiring it to be compiled into a machine-language program beforehand. Compiled languages are translated into machine code before runtime. Markup languages are for annotating documents, and query languages are for accessing databases.

Question 7: Which command-line tool can be used on a Windows system to test connectivity and measure round-trip time to a remote host?

netstat
ping (Correct answer)
tracert
ipconfig

Correct answer: ping

The ping command sends ICMP echo requests to a target host and reports round-trip time and packet loss.

Question 8: Which of the following is replacing the MBR in 64-bit versions of the Windows operating system?

EXFAT
MBR
GPT (Correct answer)
DOS

Correct answer: GPT

GPT (GUID Partition Table) is a newer standard for the layout of the partition table on a physical hard disk, replacing the older MBR (Master Boot Record) scheme. GPT offers several advantages, including support for larger disk sizes (over 2 TB), more partitions, and improved data integrity through redundancy. It is the standard partitioning scheme for 64-bit versions of Windows operating systems, especially when using UEFI firmware.

Question 9: What is the fundamental principle behind operating systems in the CompTIA domain?

Balancing performance, reliability, and efficiency (Correct answer)
Following a single vendor solution
Cost minimization at all costs
Using the newest technology exclusively

Correct answer: Balancing performance, reliability, and efficiency

Effective technical design requires balancing performance requirements with reliability needs and operational efficiency.

Question 10: What is the primary difference between a Type 1 (bare-metal) hypervisor and a Type 2 (hosted) hypervisor?

Type 1 runs on top of a host OS; Type 2 runs directly on hardware
Type 1 runs directly on hardware; Type 2 runs on top of a host OS (Correct answer)
Type 1 is software-based; Type 2 is hardware-based
Type 1 supports only Windows VMs; Type 2 supports all OS types

Correct answer: Type 1 runs directly on hardware; Type 2 runs on top of a host OS

A Type 1 hypervisor runs directly on physical hardware for better performance and efficiency, while a Type 2 hypervisor runs on top of an existing operating system.

Question 11: Which protocol operates at Layer 4 and provides connection-oriented, reliable data delivery?

ICMP
TCP (Correct answer)
ARP
UDP

Correct answer: TCP

TCP (Transmission Control Protocol) establishes a connection via a three-way handshake and guarantees reliable, ordered delivery.

Question 12: The file extensions listed below are organized into categories. Which category solely applies to mobile technology files?

Aapt, exe, .DIF, docx. Bat
gif, MAC, MDB, RTF, prc
apk, exe, iPA, prc, adb (Correct answer)
pdf, jad, bak, xls, dab

Correct answer: apk, exe, iPA, prc, adb

This option lists file extensions primarily associated with mobile application packages and development. `.apk` is for Android apps, `.iPA` for iOS apps, and `.prc` for Palm OS applications. While `.exe` is typically Windows, some mobile platforms (like Windows Mobile) used it, and `.adb` relates to Android Debug Bridge, making this the most mobile-centric list.

Question 13: Which of the following is an example of a high-level programming language?

Binary
Machine code
Assembly
Python (Correct answer)

Correct answer: Python

Python is a high-level programming language that abstracts hardware details, making it easier for humans to read and write.

Question 14: Which of the following is a packet-oriented mobile data standard on the worldwide system for mobile communications of the 2G and 3G cellular communication networks that offers moderate-speed data transfer?

GPS
TDMA
GPRS (Correct answer)
GSM

Correct answer: GPRS

GPRS (General Packet Radio Service) is a packet-oriented mobile data standard that evolved from 2G GSM networks, bridging the gap towards 3G. It enabled continuous data transfer over cellular networks, offering moderate speeds suitable for services like MMS and basic internet browsing. GPRS was a key technology for introducing always-on data connectivity to mobile devices.

Question 15: A developer needs to write a SQL statement to retrieve the names and email addresses of all customers from a 'Customers' table. Which of the following commands should be used to begin this query?

UPDATE
CREATE
SELECT (Correct answer)
INSERT

Correct answer: SELECT

The `SELECT` command is the fundamental SQL statement used to retrieve, or read, data from a database. [14, 24] `INSERT` is used to create new records, `UPDATE` modifies existing records, and `CREATE` is used to create new database objects like tables, not retrieve data from them. These operations are part of the CRUD (Create, Read, Update, Delete) model. [15]

Question 16: Linux command/utilities used to see and edit files?

netstat
nslookup
ifconfig (Correct answer)
sudo

Correct answer: ifconfig

The `ifconfig` command in Linux is primarily used to configure, view, and manage network interfaces. While it doesn't directly edit general text files, it allows users to "see" detailed information about network interfaces, including IP addresses, MAC addresses, and network statistics. This information is often derived from or related to network configuration files, making `ifconfig` a utility for inspecting system-level network data.

Question 17: A mobile device mostly used to measure how many steps you have taken during the day?

Any mobile phone
Gym Watch
Fitness Monitor (Correct answer)
My Fitness Pal

Correct answer: Fitness Monitor

A fitness monitor, also known as a fitness tracker, is a wearable device specifically designed to track various physical activities and health metrics. Its primary function includes counting steps taken, measuring distance traveled, estimating calories burned, and often monitoring heart rate. These devices are optimized for activity tracking and provide detailed insights into a user's daily movement.

Question 18: Which of the following is an example of the 'something you are' authentication factor?

A Personal Identification Number (PIN)
A fingerprint scan (Correct answer)
A password
A security token

Correct answer: A fingerprint scan

Authentication factors are categorized as something you know (e.g., password), something you have (e.g., token), and something you are. 'Something you are' refers to biometric data, which includes unique physical characteristics like fingerprints, retinal patterns, or facial features.

Question 19: An attacker sends a fraudulent email that appears to be from a legitimate online retailer, complete with official logos and a link to a fake login page. The email asks the recipient to confirm their account details due to a supposed security breach. What type of attack is this?

Denial-of-Service
Phishing (Correct answer)
Brute-force
Spyware

Correct answer: Phishing

Phishing is a type of social engineering attack where an attacker masquerades as a trusted entity to trick a victim into opening an email, clicking a malicious link, and revealing sensitive information like login credentials.

Question 20: A power supply unit's fan is not operating. What do you think you should do?

Change the Fan
Attempt to fix the Fan
Change the heat sink
Change the power supply unit (Correct answer)

Correct answer: Change the power supply unit

If a power supply unit's (PSU) fan is not operating, the PSU will quickly overheat, leading to potential failure and damage to other computer components. Attempting to fix or replace the fan within a PSU is dangerous due to residual electrical charge and often impractical. The safest and most recommended course of action is to replace the entire power supply unit.

Question 21: What is the first step in successful incident response after an event report has been filed?

Make sure you have the right documentation.
Create a chain of custody.
Confirm that a failure occurred. (Correct answer)
Take photos of the situation.

Correct answer: Confirm that a failure occurred.

After an event report is filed, the very first step in incident response is to confirm that a failure or incident actually occurred and is not a false alarm. This validation ensures that resources are not wasted on non-existent problems and that the incident response process is initiated only when necessary. Subsequent steps like documentation and chain of custody follow this confirmation.

Question 22: A company stores customer credit card numbers in plain text in a database. Which security control is MOST needed?

Encryption (Correct answer)
Firewall
Antivirus
Physical lock

Correct answer: Encryption

Encryption converts sensitive data into an unreadable format, protecting it even if the database is compromised.

Question 23: Which wireless security attack exploits the TKIP implementation in WPA to recover keystream bytes?

KRACK
Deauthentication flood
TKIP MIC exploit (Beck-Tews) (Correct answer)
Evil twin attack

Correct answer: TKIP MIC exploit (Beck-Tews)

The Beck-Tews attack exploits weaknesses in WPA's TKIP MIC (Michael) algorithm to inject short packets and recover keystream.

Question 24: Which of the following file attributes are available to files on a FAT32 partition?

system tray
disk degragmenter
hidden read only, archive, system (Correct answer)
active partition

Correct answer: hidden read only, archive, system

FAT32 (File Allocation Table 32-bit) is an older file system that supports a basic set of file attributes. These attributes include "Hidden" (makes the file invisible in normal directory listings), "Read-only" (prevents modification or deletion), "Archive" (indicates the file has been modified since the last backup), and "System" (marks the file as a critical system file). These attributes help manage file visibility and protection.

Question 25: Which layer of the OSI model converts data into a format suitable for transmission, including encryption and compression?

Transport layer
Session layer
Application layer
Presentation layer (Correct answer)

Correct answer: Presentation layer

The Presentation layer (Layer 6) handles data translation, encryption, and compression to ensure data is in a usable format.

Question 26: Which of the following solutions adds redundancy to places where single points of failure have been identified? (Choose all of the options that apply.)

RAID (Correct answer)
Virtualization
Backup generator (Correct answer)
Uninterruptible Power Supply (UPS) (Correct answer)

Correct answer: RAID

RAID (Redundant Array of Independent Disks) provides data redundancy for storage, protecting against single disk failures. A backup generator provides redundant power in case of a utility outage, ensuring continuous operation. An Uninterruptible Power Supply (UPS) provides immediate, short-term redundant power to bridge outages or allow for graceful shutdowns, all of which eliminate single points of failure.

Question 27: Which documentation is essential when working with operating systems in CompTIA?

Detailed technical specifications and as-built diagrams (Correct answer)
General descriptions without specifics
Marketing materials
Only verbal notes

Correct answer: Detailed technical specifications and as-built diagrams

Detailed technical specifications and as-built diagrams provide the accurate reference information needed for maintenance and troubleshooting.

Question 28: A company wants to detect port scans and brute-force login attempts on its network. Which system should be deployed?

SNMP trap receiver
IDS/IPS (Correct answer)
NetFlow analyzer
Syslog server

Correct answer: IDS/IPS

An Intrusion Detection/Prevention System (IDS/IPS) identifies and can block malicious activities like port scans and brute-force attacks.

Question 29: Which of the following electronic devices may act as a gate for an electrical signal and enhance the flow of electricity?

Resistor
Capacitor
Fuse
Transistor (Correct answer)

Correct answer: Transistor

A transistor is a semiconductor device that serves as a fundamental building block in modern electronics. It can act as an electronic switch, controlling the flow of electrical current, effectively 'gating' signals on or off. Additionally, transistors can amplify weak electrical signals, enhancing their strength within a circuit.

Question 30: Switches that are designed to participate in routing choices are commonly known as what?

Layer 3 switch (Correct answer)
Routing switch
Layer 2 router
Managed switch

Correct answer: Layer 3 switch

A Layer 3 switch is a network device that combines the functions of a traditional Layer 2 switch with the routing capabilities of a router. It operates at the network layer (Layer 3) of the OSI model, enabling it to perform routing decisions, such as forwarding packets between different VLANs or subnets, in addition to its basic switching functions.

Question 31: When installing a CPU cooler with a backplate mounting system on an ATX motherboard, why should the motherboard be removed from the case?

To access the back of the motherboard for backplate installation (Correct answer)
To prevent static discharge from the case
To reset the BIOS by removing the CMOS battery simultaneously
Backplate coolers cannot be installed with the board in the case

Correct answer: To access the back of the motherboard for backplate installation

Backplate mounting requires access to the rear of the motherboard, which is typically obstructed by the case unless the board is removed.

Question 32: What is the purpose of a digital certificate in public key infrastructure (PKI)?

To compress data during transmission
To store private keys securely
To generate symmetric encryption keys
To bind a public key to an identity verified by a trusted CA (Correct answer)

Correct answer: To bind a public key to an identity verified by a trusted CA

A digital certificate binds a public key to an entity's identity and is signed by a trusted Certificate Authority (CA) to verify authenticity.

Question 33: A user's Windows PC is running very slowly. After opening Task Manager, the technician sees 95% CPU usage by a process called 'svchost.exe.' What is the best next step?

Use Task Manager or Process Explorer to identify which service svchost.exe is hosting (Correct answer)
Disable all Windows services to reduce CPU usage
Reinstall Windows without further investigation
Immediately delete svchost.exe as it is malware

Correct answer: Use Task Manager or Process Explorer to identify which service svchost.exe is hosting

svchost.exe is a legitimate Windows host process for services, but high CPU usage can indicate malware or a problematic Windows service. The best next step is to right-click the process in Task Manager and select 'Go to Services' or use Process Explorer to identify which specific service is causing high CPU usage before taking action.

Question 34: Which protocol data unit (PDU) is associated with the Data Link layer?

Packet
Segment
Frame (Correct answer)
Bit

Correct answer: Frame

The Data Link layer encapsulates packets into frames, adding source and destination MAC addresses along with error-checking fields.

Question 35: In Windows, which of the following is the file system of choice for CD media?

CDFS (Correct answer)
CHOWN
NTFS
EXFAT

Correct answer: CDFS

CDFS (Compact Disc File System) is the standard file system specifically designed for CD-ROMs and other optical media. It defines how data is structured and stored on a compact disc, allowing operating systems to read and access files from these media. While other file systems might be used for data DVDs or Blu-rays, CDFS is the foundational choice for traditional CD media.

Question 36: A technician uses the divide-and-conquer troubleshooting method. On which OSI layer does this approach typically begin?

Layer 2 – Data Link
Layer 1 – Physical
Layer 3 – Network (Correct answer)
Layer 7 – Application

Correct answer: Layer 3 – Network

Divide and conquer typically starts at Layer 3 (Network) by testing IP connectivity, then moves up or down based on results.

Question 37: Which is an online site, requiring Windows 8 or higher, where you can download apps, games, software, and more?

Windows Store (Correct answer)
Boot Camp
Task Manager
Google App Store

Correct answer: Windows Store

The Windows Store is Microsoft's official digital distribution platform for apps, games, and other software for Windows devices. It was introduced with Windows 8 and continues to be the primary marketplace for downloading applications on Windows 8 and higher operating systems.

Question 38: Before working inside a computer, a technician should FIRST:

Run a full virus scan on the system
Disconnect power and use an anti-static wrist strap to prevent ESD damage (Correct answer)
Update all drivers and firmware
Back up all data on the hard drive

Correct answer: Disconnect power and use an anti-static wrist strap to prevent ESD damage

Electrostatic discharge (ESD) can permanently damage computer components with as little as 10 volts — far below what humans can feel. Before touching internal components, always disconnect the power cable and use an anti-static wrist strap or touch a grounded metal surface to discharge static buildup.

Question 39: A network administrator is investigating a widespread connectivity issue. They are unsure if the problem is at the physical layer (cabling), the data link layer (switching), or a higher-level application issue. They decide to start by checking the link lights on the switches and examining patch panels. Which troubleshooting approach are they using?

Follow-the-path
Divide and conquer
Bottom-up (Correct answer)
Top-down

Correct answer: Bottom-up

The bottom-up approach to troubleshooting involves starting at the physical layer (Layer 1) of the OSI model and working up. Checking physical components like cables, patch panels, and link lights is a classic example of starting at the bottom. The top-down approach would start with applications, and divide and conquer would start at a middle layer like the Network layer.

Question 40: What is the correct term for the Data Link layer PDU when it is specifically being transmitted over the physical medium?

Packet
Frame (Correct answer)
Segment
Cell

Correct answer: Frame

The Data Link layer PDU is called a frame, which contains the payload, MAC addresses, and FCS for error detection.

Question 41: A technician replaces a CMOS battery on a motherboard. What setting will most likely need to be reconfigured after the replacement?

RAM frequency and timings
System date and time (Correct answer)
CPU core count
GPU driver version

Correct answer: System date and time

The CMOS battery maintains the real-time clock; replacing it resets the date and time to a default value.

Question 42: A network technician needs to configure a device that operates at Layer 3 and makes forwarding decisions based on logical addressing. Which device should they configure?

Hub
Router (Correct answer)
Bridge
Switch

Correct answer: Router

Routers operate at Layer 3 (Network layer) and use logical IP addresses to make packet forwarding decisions.

Question 43: Which of the following is a security control that acts as a barrier between a trusted internal network and an untrusted external network, such as the internet, by filtering traffic based on a set of rules?

Firewall (Correct answer)
Proxy Server
Biometric Scanner
Antivirus Software

Correct answer: Firewall

A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. Its primary purpose is to create a barrier between a secure internal network and untrusted external networks.

Question 44: A database has a 'Students' table with a primary key 'StudentID' and an 'Enrollments' table to track which courses students are taking. To link an enrollment record to a specific student, what should be added to the 'Enrollments' table?

A foreign key that references the 'StudentID' from the 'Students' table (Correct answer)
A secondary user account
A database schema
A new primary key named 'EnrollmentID'

Correct answer: A foreign key that references the 'StudentID' from the 'Students' table

A foreign key is a column in one table that refers to the primary key of another table. [7, 1] By placing the 'StudentID' in the 'Enrollments' table as a foreign key, a direct link is created between a specific student and their enrollment records, enforcing referential integrity. [13]

Question 45: What distinguishes a CompTIA Computing Technology Industry Association certified professional from a non-certified practitioner?

There is no meaningful difference in competency
Certification validates competency through standardized assessment against established benchmarks (Correct answer)
Certified professionals exclusively work in larger organizations
Certified professionals always have more years of experience

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 46: Which characteristic differentiates DDR5 RAM from DDR4 RAM in terms of physical installation?

DDR5 requires a separate power connector
DDR5 uses a 240-pin interface while DDR4 uses a 288-pin interface
DDR5 has a different notch position making it physically incompatible with DDR4 slots (Correct answer)
DDR5 operates at lower voltages only compatible with newer CPUs

Correct answer: DDR5 has a different notch position making it physically incompatible with DDR4 slots

DDR5 DIMMs have a keying notch in a different position than DDR4, preventing accidental installation in incompatible motherboards.

Question 47: What does the term 'baseline' refer to in the context of network monitoring?

The lowest measured traffic value
Normal network performance metrics used for comparison (Correct answer)
The minimum acceptable bandwidth for SLAs
The default SNMP community string

Correct answer: Normal network performance metrics used for comparison

A baseline captures normal network performance metrics so that deviations indicating problems or attacks can be identified.

Question 48: During data encapsulation, what term describes the data unit at the Transport layer?

Packet
Segment (Correct answer)
Bit
Frame

Correct answer: Segment

At the Transport layer (Layer 4), the data unit is called a segment (for TCP) or datagram (for UDP).

Question 49: What is the primary purpose of a default route (0.0.0.0/0) in a routing table?

To create redundant paths for critical traffic
To route traffic exclusively to the internet
To block all traffic from unknown networks
To forward packets when no more specific route exists (Correct answer)

Correct answer: To forward packets when no more specific route exists

A default route (0.0.0.0/0) forwards packets when no more specific matching route exists in the routing table, acting as a catch-all gateway of last resort.

Question 50: A technician is replacing a storage drive in a desktop computer. The user requires the fastest possible read and write speeds for large video files and the operating system. Which of the following storage types would be the BEST choice?

Solid State Hybrid Drive (SSHD)
Solid State Drive (SSD) (Correct answer)
Hard Disk Drive (HDD)
Optical Drive

Correct answer: Solid State Drive (SSD)

A Solid State Drive (SSD) uses flash memory to store data, which allows for significantly faster data access speeds compared to traditional Hard Disk Drives (HDDs) that use spinning magnetic platters. An SSHD is a combination of both but is not as fast as a pure SSD. An optical drive is used for reading/writing CDs, DVDs, or Blu-ray discs and is not suitable for primary storage.

Question 51: What is the function of a MAC address?

To automatically assign IP addresses
To identify a device globally on the internet
To uniquely identify a network interface on a local network (Correct answer)
To encrypt network communications

Correct answer: To uniquely identify a network interface on a local network

A MAC (Media Access Control) address is a hardware identifier burned into a network interface card that uniquely identifies it on a local network.

Question 52: An attacker sends millions of requests to a web server to make it unavailable. This is called a:

Denial of Service (DoS) attack (Correct answer)
Buffer overflow attack
Replay attack
Brute force attack

Correct answer: Denial of Service (DoS) attack

A DoS attack overwhelms a target system with traffic or requests, making it unavailable to legitimate users.

Question 53: What does the acronym 'URL' stand for in the context of internet resources?

Uniform Resource Locator (Correct answer)
Universal Retrieval Location
Universal Resource Locator
Unified Remote Link

Correct answer: Uniform Resource Locator

URL stands for Uniform Resource Locator and specifies the address of a resource on the internet.

Question 54: What is the best practice for maintaining operating systems performance over time?

Implement scheduled preventive maintenance (Correct answer)
Outsource all maintenance
Wait for failures before acting
Upgrade all equipment annually

Correct answer: Implement scheduled preventive maintenance

Scheduled preventive maintenance catches potential issues before they cause failures, maintaining reliability and extending equipment life.

Question 55: A hospital's IT department implements a robust disaster recovery plan with redundant servers and frequent data backups to ensure that patient records and critical systems are always accessible to doctors and nurses, especially during an emergency. This plan primarily supports which principle of the CIA triad?

Integrity
Authentication
Confidentiality
Availability (Correct answer)

Correct answer: Availability

Availability is the principle focused on ensuring that systems and data are accessible to authorized users when needed. Implementing disaster recovery, redundant systems, and backups are all key strategies to maintain high availability.

Question 56: Which of the following is a characteristic of a 'compiled' language compared to an 'interpreted' language?

Compiled languages cannot use variables
Compiled languages are always easier to read
Compiled languages typically execute faster because they are pre-translated to machine code (Correct answer)
Compiled languages do not require a programming language

Correct answer: Compiled languages typically execute faster because they are pre-translated to machine code

Compiled languages translate code to machine code ahead of time, which generally results in faster execution compared to interpreted languages that translate at runtime.

Question 57: What is the valid host range for the subnet 192.168.10.64/26?

192.168.10.65 – 192.168.10.128
192.168.10.65 – 192.168.10.126 (Correct answer)
192.168.10.66 – 192.168.10.127
192.168.10.64 – 192.168.10.127

Correct answer: 192.168.10.65 – 192.168.10.126

A /26 subnet has 64 addresses; the network address is .64 and broadcast is .127, leaving .65–.126 as valid hosts.

Question 58: A customer complains that he is continuously receiving e-mail responses to things he never sent. What happened to his computer system?

He is a victim of shoulder surfing.
He is experiencing a zero-day attack.
His firewall has been misconfigured.
He is a victim of malware. (Correct answer)

Correct answer: He is a victim of malware.

Receiving email responses to messages you didn't send is a strong indicator that your email account or computer has been compromised by malware. This malware, often a bot or virus, can send spam or malicious emails from your account without your knowledge, leading to bounce-back messages or replies from recipients. This is a common symptom of a compromised system.

Question 59: Which of the following options supports Hardware-Assisted Virtualization (HAV)?

geForce-V
HAL
VT-x (Correct answer)
Hyper-V

Correct answer: VT-x

VT-x (Virtualization Technology Extended) is Intel's hardware-assisted virtualization technology, while AMD's equivalent is AMD-V. These technologies provide CPU extensions that allow a hypervisor to run virtual machines more efficiently and securely. They enable direct access to hardware resources, significantly improving the performance of virtualized environments compared to software-only virtualization.

Question 60: For a customer, you're analyzing cryptographic algorithms. The customer has a specific requirement for shared secret encryption. To meet the requirement, you must offer an encryption algorithm. Which algorithm do you think is the best?

Asymmetric key algorithm
Elliptic curve algorithm
Hashing algorithm
Symmetric key algorithm (Correct answer)

Correct answer: Symmetric key algorithm

Symmetric key algorithms are precisely what the customer requires for 'shared secret encryption.' These algorithms use a single, identical key for both encrypting and decrypting data. This shared secret must be securely exchanged between the communicating parties. Examples include AES and DES, which are highly efficient for encrypting large volumes of data once the key is established.

Question 61: What does the '-t' flag do when appended to the Windows 'ping' command?

Timestamps each reply
Sends pings continuously until stopped with Ctrl+C (Correct answer)
Enables TCP mode instead of ICMP
Sets the TTL value

Correct answer: Sends pings continuously until stopped with Ctrl+C

The -t flag makes ping send ICMP echo requests indefinitely, useful for monitoring link stability over time.

Question 62: Which foundational principle is MOST important for success in the CompTIA Computing Technology Industry Association profession?

Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)
Maximizing financial returns on every engagement
Maintaining the minimum requirements for certification
Specializing in only one narrow area of practice

Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes

Success in any professional field requires a commitment to continuous learning to stay current, ethical practice to maintain trust and integrity, and a focus on quality outcomes that serve stakeholders and the public interest.

Question 63: Company A has recently developed a custom airline ticketing system. When a freelance coding specialist examines it for security flaws, what do you call it?

Regression testing (Correct answer)
Dynamic code review
Code review
Static code review

Correct answer: Regression testing

Correct answer: Regression testing<br><br> If a freelance coding specialist tests it for security flaws, it is called regression testing.</br>

Question 64: A technician needs to install additional RAM in a laptop that only has one SODIMM slot occupied. The existing module is DDR4-3200 8GB. Which action should the technician take to maximize compatibility?

Replace the existing module with a single 32GB DDR5 module
Install a DDR3 module since it fits the same slot
Install any DDR4 module regardless of speed
Install an identical DDR4-3200 8GB module in the second slot (Correct answer)

Correct answer: Install an identical DDR4-3200 8GB module in the second slot

Installing an identical module ensures dual-channel operation and full compatibility without risking speed mismatches.

Question 65: A user wants to add an external device to their laptop that provides input by converting physical documents into digital files. Which of the following peripherals should they install?

Scanner (Correct answer)
Webcam
Printer
External hard drive

Correct answer: Scanner

A scanner is an input device specifically designed to capture images from physical items like photographs and documents and convert them into a digital format that a computer can store and display.

Question 66: Which troubleshooting approach starts at the application layer and works toward the physical layer?

Top-down approach (Correct answer)
Divide and conquer approach
Bottom-up approach
Follow-the-path approach

Correct answer: Top-down approach

The top-down approach begins at Layer 7 (Application) and descends through the OSI model layers toward Layer 1 (Physical).

Question 67: A user wants to add a second storage drive to their laptop but it only has one M.2 slot currently occupied. What expansion option should the technician check for?

Add storage via a PCIe x16 card
Check if the laptop has a secondary M.2 slot or a 2.5-inch SATA bay (Correct answer)
Replace the existing M.2 drive with a larger capacity model
Install a 3.5-inch drive using an external dock

Correct answer: Check if the laptop has a secondary M.2 slot or a 2.5-inch SATA bay

Many laptops include a secondary M.2 slot or a 2.5-inch SATA bay that can accommodate an additional drive.

Question 68: When setting up a new online account, a user is required to provide a password. Which of the following represents the MOST secure password?

Password123
johndoe
MyP@ssw0rd!2024 (Correct answer)
12345678

Correct answer: MyP@ssw0rd!2024

A strong password uses a combination of uppercase letters, lowercase letters, numbers, and special characters (complexity). It is also sufficiently long, which makes it resistant to brute-force and dictionary attacks.

Question 69: A client requests access to the system registry file in order to read, search, or even alter it. What suggestions do you have?

sysedit
msedit
sysconfig
regedit (Correct answer)

Correct answer: regedit

`regedit` (Registry Editor) is the standard Windows utility that allows users to access, view, search, and modify the system registry. The Windows Registry is a hierarchical database that stores configuration settings and options for the operating system and installed applications. While powerful, extreme caution is advised when using `regedit`, as incorrect modifications can lead to system instability.

Question 70: Which spanning tree port state actively forwards frames and learns MAC addresses?

Forwarding (Correct answer)
Blocking
Learning
Listening

Correct answer: Forwarding

The Forwarding state is the only STP state where a port both learns MAC addresses and forwards data frames.

Question 71: A technician suspects a duplicate IP address on the network. Which tool would most quickly confirm this?

route print
nslookup
arp -a (Correct answer)
netstat

Correct answer: arp -a

Checking the ARP cache with 'arp -a' can reveal if two different MAC addresses are mapped to the same IP, indicating a duplicate.

Question 72: Which approach is recommended for troubleshooting operating systems issues?

Wait for the problem to resolve itself
Use systematic isolation and testing methods (Correct answer)
Replace all components simultaneously
Rely solely on past experience

Correct answer: Use systematic isolation and testing methods

Systematic isolation and testing methodically narrows down the root cause, making troubleshooting efficient and accurate.

Question 73: Which cloud service model provides virtualized computing resources over the internet, such as virtual machines and storage, without managing the underlying hardware?

Infrastructure as a Service (IaaS) (Correct answer)
Platform as a Service (PaaS)
Function as a Service (FaaS)
Software as a Service (SaaS)

Correct answer: Infrastructure as a Service (IaaS)

IaaS provides virtualized hardware resources (VMs, storage, networking) over the internet, letting users manage OS and applications while the provider handles physical infrastructure.

Question 74: What is the purpose of the Spanning Tree Protocol PortFast feature?

Enables a port to participate in rapid STP elections
Forces a port to become the root port immediately
Allows a port to skip the listening and learning states and go directly to forwarding (Correct answer)
Increases the speed of STP convergence across the entire network

Correct answer: Allows a port to skip the listening and learning states and go directly to forwarding

PortFast skips the STP listening and learning states so end-device ports reach the forwarding state immediately upon link-up.

Question 75: Which of the following is a primary characteristic of a compiled programming language?

It is primarily used for structuring and formatting web documents.
It runs more slowly than an interpreted language because of the translation step.
The source code is executed line-by-line by a virtual machine.
The entire source code is translated into machine code by a compiler before execution. (Correct answer)

Correct answer: The entire source code is translated into machine code by a compiler before execution.

A compiled language is one where the source code is converted into executable machine code by a compiler before the program is run. This results in a standalone executable file that can be run directly by the operating system, which is typically faster than interpreted languages that translate code on-the-fly.

Question 76: A network administrator is designing a wireless network for a high-density environment with many simultaneous users, such as a lecture hall. To improve efficiency and reduce latency, the administrator wants to use a technology that allows an access point to communicate with multiple devices at the same time by dividing a Wi-Fi channel into smaller sub-channels. Which 802.11ax feature enables this capability?

OFDMA (Correct answer)
Beamforming
MU-MIMO
Channel Bonding

Correct answer: OFDMA

Orthogonal Frequency-Division Multiple Access (OFDMA) is a key feature of the 802.11ax (Wi-Fi 6) standard. It enhances efficiency in dense environments by subdividing a wireless channel into smaller resource units (RUs), allowing an access point to transmit data to and from multiple clients simultaneously within the same transmission window. [1, 2, 4, 8, 9] This reduces contention and latency, which is ideal for scenarios with many users and small data packets. [1, 4]

Question 77: Although a user has successfully set up dual displays on his computer, the mouse does not track correctly from one screen to the next. Describe the procedure for resolving this problem.

A dual screen capable mouse must be installed.
Screen personalization must be reset.
The monitors must be realigned in Display Settings. (Correct answer)
In Device Manager, the monitor must be set to dual screen setting.

Correct answer: The monitors must be realigned in Display Settings.

When using multiple monitors, the operating system needs to know their physical arrangement to correctly track mouse movement between screens. If the mouse doesn't transition smoothly, it indicates that the virtual alignment in the display settings (e.g., Windows Display Settings) does not match the actual physical setup of the monitors. Adjusting the monitor positions within these settings will resolve the issue, allowing for seamless mouse navigation.

Question 78: A technician is troubleshooting a network issue. After gathering information from the user and identifying the symptoms, the technician believes a recent OS update on the user's computer is the most likely culprit. According to the CompTIA troubleshooting methodology, what is the very next step?

Immediately implement the solution by rolling back the update.
Document the findings and the theory.
Establish a plan of action to roll back the update.
Test the theory to determine the cause. (Correct answer)

Correct answer: Test the theory to determine the cause.

The CompTIA troubleshooting methodology follows a specific order. After identifying the problem (Step 1) and establishing a theory of probable cause (Step 2), the next logical step is to test that theory to confirm if it is correct (Step 3). Only after the theory is confirmed should a plan of action be created and implemented. Documenting is the final step.

Question 79: A business is evaluating cloud providers and wants to ensure workloads can be moved between providers without significant rework. What term describes this ability?

Vendor lock-in avoidance / portability (Correct answer)
Elasticity
Cloud bursting
High availability

Correct answer: Vendor lock-in avoidance / portability

Cloud portability refers to the ability to move applications and data between different cloud providers with minimal effort, reducing dependency on a single vendor.

Question 80: Which of the following is utilized as a place holder in a RIMM-based system?

None of the above
C-RIMM (Correct answer)
RIMME
DDR SDRAMM

Correct answer: C-RIMM

In RIMM (Rambus In-line Memory Module) based systems, all memory slots must be populated for the system to function correctly and maintain signal integrity. A C-RIMM (Continuity RIMM) is a special module that does not contain actual memory chips but acts as a placeholder. It completes the electrical circuit in any unused RIMM slots, ensuring proper system operation.

Question 81: Which log analysis technique looks for deviations from the established baseline to identify potential security incidents?

Anomaly-based detection (Correct answer)
Signature-based detection
Heuristic scanning
Policy-based filtering

Correct answer: Anomaly-based detection

Anomaly-based detection compares current behavior against a baseline and flags statistically significant deviations as potential threats.

Question 82: A network of devices utilized in your car, such as connecting your cell phone to the car through Bluetooth, is known as what kind of network?

LAN
WAN
PAN (Correct answer)
MAN

Correct answer: PAN

A Personal Area Network (PAN) is a computer network used for data transmission among devices located close to a single person. Connecting a cell phone to a car's infotainment system via Bluetooth is a classic example of a PAN, as it involves short-range communication between personal devices within a small, localized area.

Question 83: This type of wireless encryption is usually seen in larger businesses, and each user must log in with their own credentials. What does this technology's name stand for?

WPA2-Enterprise (Correct answer)
AES
WPA
WEP

Correct answer: WPA2-Enterprise

WPA2-Enterprise is a robust wireless security standard designed for corporate environments. Unlike WPA2-Personal, it uses 802.1X authentication, requiring users to authenticate with individual credentials against a central authentication server (like RADIUS). This provides stronger security, centralized management, and individual accountability, making it suitable for larger businesses with many users.

Question 84: Which cloud service model delivers applications over the internet on a subscription basis, where the provider manages all underlying infrastructure, platforms, and software?

IaaS
SaaS (Correct answer)
PaaS
DaaS

Correct answer: SaaS

SaaS delivers complete applications over the internet; the provider manages everything from infrastructure to the application itself, and users simply access the software.

Question 85: An organization needs logs retained for compliance purposes for three years. Which feature of a SIEM system addresses this requirement?

Real-time alerting
Vulnerability scanning
Long-term log archiving and retention (Correct answer)
Packet capture and replay

Correct answer: Long-term log archiving and retention

SIEM platforms include log archiving and configurable retention policies to meet regulatory and compliance requirements.

Question 86: Which cooling mechanism keeps internal PC components at the lowest temperatures possible?

Thermal Paste
Fans
Heat Sinks
Liquid Cooling (Correct answer)

Correct answer: Liquid Cooling

Liquid cooling systems are generally the most effective cooling mechanism for keeping internal PC components at the lowest possible temperatures. Unlike air cooling, which relies on fans and heatsinks to dissipate heat into the surrounding air, liquid cooling uses a coolant that absorbs heat more efficiently and transfers it away from critical components like the CPU and GPU.

Question 87: A packet is received with a TTL value of 0. Which OSI layer processes TTL and causes the packet to be discarded?

Network layer (Correct answer)
Session layer
Data Link layer
Transport layer

Correct answer: Network layer

The Network layer (Layer 3) processes TTL; when it reaches 0, the router discards the packet and sends an ICMP Time Exceeded message.

Question 88: A network is designed using the IP address space 10.10.0.0/22. How many usable IP addresses are available for hosts on this network?

1022 (Correct answer)
2046
254
510

Correct answer: 1022

A /22 CIDR notation means that 22 bits are used for the network portion of the address. In a 32-bit IPv4 address, this leaves 10 bits for the host portion (32 - 22 = 10). The total number of host addresses is 2^10 = 1024. Since the network address and the broadcast address are reserved, the number of usable addresses is 1024 - 2 = 1022.

Question 89: Which loop type in programming always executes its body at least once?

foreach loop
for loop
while loop
do-while loop (Correct answer)

Correct answer: do-while loop

A do-while loop executes its body first and then checks the condition, guaranteeing at least one execution.

Question 90: In CompTIA certification, what does redundancy in system design primarily provide?

Simplified maintenance
Lower initial cost
Increased complexity
Fault tolerance and high availability (Correct answer)

Correct answer: Fault tolerance and high availability

Redundancy provides fault tolerance by ensuring that if one component fails, backup components maintain system availability.

Question 91: What is the example of a teletypewriter terminal?

Storage devices
Input devices
Input/output devices (Correct answer)
Output devices

Correct answer: Input/output devices

A teletypewriter terminal, often abbreviated as TTY, is a device equipped with a keyboard for entering text and a printer or screen for displaying output. This dual functionality means it can both receive input from a user and provide output back to the user. Therefore, it is classified as an input/output (I/O) device.

Question 92: A desktop system is randomly shutting down under load. Temperatures appear normal. What component should the technician suspect?

Power supply unit failing under load (Correct answer)
Monitor refresh rate setting
RAM speed mismatch
CPU cooler

Correct answer: Power supply unit failing under load

A failing PSU may deliver insufficient or unstable power under load, causing abrupt shutdowns even when temperatures are acceptable.

Question 93: A network administrator needs to review logs from firewalls, switches, and servers in a single interface. Which solution best meets this requirement?

SNMP NMS
Packet analyzer
SIEM platform (Correct answer)
Dedicated syslog server

Correct answer: SIEM platform

A SIEM (Security Information and Event Management) aggregates and correlates logs from multiple sources into a unified interface.

Question 94: What special operating system setup is required when running Windows 10 as a virtual machine?

There is no need for any specific configuration (Correct answer)
Windows 10 does not handle installation as a virtual machine
Set up Windows 10 in HyperHost mode
Download and install the Microsoft Generic Processor (MGP) driver

Correct answer: There is no need for any specific configuration

Windows 10, like most modern operating systems, is designed to run on various hardware configurations, including virtualized environments. When installing Windows 10 as a guest OS in a virtual machine, it typically installs without requiring special setup steps beyond what would be done on physical hardware. The hypervisor handles the necessary hardware abstraction, making the virtual environment appear as standard hardware to the guest OS.

Question 95: After connecting 100 ethernet cables for your new workplace, you discover that one of the PCs to which you connected them appears to be unconnected. You need to locate the other end of the cable in the data closet, but you forgot to name the cables. What tools could you use to locate the cable's other end?

toner probe (Correct answer)
punchdown tool
PoE injector
cable tester

Correct answer: toner probe

A toner probe (or tone generator and probe kit) is the ideal tool for tracing and identifying specific cables within a bundle. The tone generator sends an audible signal down one end of the cable, and the probe is used at the other end to detect that unique tone. This allows a technician to quickly locate the corresponding cable in a crowded data closet without needing labels.

Question 96: A user claims that his hard drive is running very slowly and is affecting the system's performance. The hard drive is less than half full, according to him. What recommendations do you have for speeding up his hard drive?

Run fdisk.
Defragment the hard drive. (Correct answer)
Defragment the solid-state drive.
Move some of his very large files to a network drive.

Correct answer: Defragment the hard drive.

When a traditional hard disk drive (HDD) runs slowly, it's often due to file fragmentation, where parts of files are scattered across different locations on the disk. Defragmenting the hard drive reorganizes these fragments into contiguous blocks, which reduces the time the read/write head needs to travel, thereby improving disk access speed and overall system performance. This process is not applicable or beneficial for solid-state drives (SSDs).

Question 97: Which wireless security protocol is considered deprecated and highly vulnerable due to its use of the RC4 stream cipher with a small, static 24-bit initialization vector (IV), making it susceptible to key recovery attacks?

WPA2
WEP (Correct answer)
WPA
WPA3

Correct answer: WEP

Wired Equivalent Privacy (WEP) is an outdated security protocol that has significant vulnerabilities. Its use of the RC4 stream cipher combined with a short, 24-bit IV that is sent in plaintext leads to IV collision and allows attackers to easily recover the secret key.

Question 98: Which Windows feature allows you to revert the OS to a previous working state without affecting personal files?

System Restore (Correct answer)
Reset This PC (Remove Everything)
Startup Repair
Windows RE (Recovery Environment)

Correct answer: System Restore

System Restore reverts Windows system files, registry settings, and installed programs to a previous restore point without deleting personal files (documents, photos, etc.). It does NOT protect against malware that infected personal files. System Restore points are created automatically before major updates and can be created manually.

Question 99: A workstation needs to run four 4K monitors simultaneously. Which hardware consideration is most critical?

CPU cache size
Number of USB ports on the motherboard
GPU with sufficient video outputs and VRAM (Correct answer)
Total system RAM capacity

Correct answer: GPU with sufficient video outputs and VRAM

Driving four 4K displays requires a GPU with enough video outputs and VRAM to buffer and render all four high-resolution framebuffers.

Question 100: A port configured as an access port receives a frame with an 802.1Q tag. What should a properly configured switch do?

Drop the frame (Correct answer)
Strip the tag and forward
Send the frame to the native VLAN
Forward it normally

Correct answer: Drop the frame

Access ports expect untagged frames; a tagged frame arriving on an access port is typically dropped as it indicates a misconfiguration or security issue.

Question 101: What does LAN stand for in networking?

Linked Area Network
Large Access Node
Local Access Number
Local Area Network (Correct answer)

Correct answer: Local Area Network

LAN stands for Local Area Network, which connects devices within a limited geographic area such as a home or office building.

Question 102: What does the principle of 'defense in depth' mean in cybersecurity?

Using the deepest available encryption algorithm
Storing data in deeply nested directories
Layering multiple security controls so that if one fails, others still protect the system (Correct answer)
Performing deep packet inspection on all traffic

Correct answer: Layering multiple security controls so that if one fails, others still protect the system

Defense in depth uses multiple overlapping security layers so an attacker must bypass each one to compromise the system.

Question 103: How does the CompTIA body of knowledge relate to daily professional practice?

It only applies during certification exams
It is theoretical and has limited practical application
It is relevant only for academic research
It provides the foundational framework that guides decision-making and standard practices (Correct answer)

Correct answer: It provides the foundational framework that guides decision-making and standard practices

The body of knowledge provides the foundational framework of principles, standards, and best practices that professionals use to guide their daily decision-making, ensure consistent quality, and maintain alignment with industry standards.

Question 104: A user calls the hotline to ask where he might see his Linux system's error logs. On a Linux system, what is the most common location for these files?

/root/usr/error
/var/log (Correct answer)
/usr/error
/home/log

Correct answer: /var/log

On Linux and Unix-like systems, the `/var/log` directory is the standard location for system log files. This directory contains various logs, including system messages, kernel logs, application logs, and error logs, which are crucial for troubleshooting and monitoring system health. Administrators frequently check these files to diagnose issues and understand system events.

Question 105: A technician notices that CPU utilization on a core router spikes to 95% every day at 2:00 AM. What is the most likely cause?

Scheduled backup or routing table update (Correct answer)
DDoS attack
SNMP trap storm
Syslog server misconfiguration

Correct answer: Scheduled backup or routing table update

Scheduled tasks like backups, software updates, or routing protocol reconvergence commonly cause predictable CPU spikes at specific times.

Question 106: What is the primary consideration when implementing changes to operating systems?

Vendor preference
Impact assessment and change management (Correct answer)
Speed of implementation
Personal convenience

Correct answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

Question 107: How many failed login attempts on Apple iOS mobile phones will cause the device to erase everything internally if enabled?

15
$20
5
$10 (Correct answer)

Correct answer: $10

Apple iOS devices have a security feature that, if enabled, will automatically erase all data on the device after a certain number of failed passcode attempts. This feature is designed to protect sensitive information from unauthorized access in case the device is lost or stolen. By default, this option is set to erase the device after 10 incorrect passcode entries.

Question 108: What is the purpose of multi-factor authentication (MFA)?

To require verification from two or more different categories of credentials (Correct answer)
To allow users to log in without a password
To encrypt data during transmission
To store passwords in multiple locations for redundancy

Correct answer: To require verification from two or more different categories of credentials

MFA requires proof from at least two categories: something you know, have, or are — making unauthorized access much harder.

Question 109: Which protocol should replace Telnet for remote router management to ensure confidentiality?

RDP
HTTP
SNMP v2c
SSH (Correct answer)

Correct answer: SSH

SSH encrypts the management session, whereas Telnet transmits all data including passwords in plaintext.

Question 110: Which type of attack intercepts communication between two parties without their knowledge to steal or alter data?

Phishing
Man-in-the-middle (MitM) (Correct answer)
Denial of Service
SQL injection

Correct answer: Man-in-the-middle (MitM)

A man-in-the-middle attack positions the attacker between two communicating parties to eavesdrop or alter the exchanged data.

Question 111: Which mobile device management deployment model makes use of corporate-owned devices and prescribes software installation and maintenance actions?

BYOD
COBO (Correct answer)
COPE
CYOD

Correct answer: COBO

COBO stands for Corporate-Owned, Business Only. In this mobile device management model, the company owns the devices, and their use is strictly limited to business purposes. The organization has full control over software installation, maintenance, and security policies.

Question 112: What is 'cloud bursting' in a hybrid cloud architecture?

Moving all workloads permanently from on-premises to the cloud
Encrypting data before transmitting to a cloud provider
Automatically scaling overflow workloads from private to public cloud during peak demand (Correct answer)
Distributing workloads across multiple cloud regions for redundancy

Correct answer: Automatically scaling overflow workloads from private to public cloud during peak demand

Cloud bursting allows an application running in a private cloud to automatically scale into public cloud resources when on-premises capacity is insufficient to handle peak demand.

Question 113: A network administrator wants to prevent a rogue DHCP server from responding to client requests on an access port. Which switch feature should be enabled?

DHCP snooping (Correct answer)
802.1X authentication
Dynamic ARP inspection
Port security

Correct answer: DHCP snooping

DHCP snooping filters DHCP messages on untrusted ports, blocking rogue DHCP servers from responding to clients.

Question 114: A user is attempting to access a secure website using HTTPS. The web server sends back data that needs to be decrypted and formatted so the user's browser can render it correctly. Which layer of the OSI model is PRIMARILY responsible for this data translation, including encryption and decryption?

Session Layer (Layer 5)
Transport Layer (Layer 4)
Presentation Layer (Layer 6) (Correct answer)
Application Layer (Layer 7)

Correct answer: Presentation Layer (Layer 6)

The Presentation Layer (Layer 6) is responsible for translating data between the application layer and the network format. Its key functions include data formatting, character encoding, compression, and encryption/decryption, such as handling SSL/TLS.

Question 115: Which of the following internal computer components is responsible for connecting all other components and allowing them to communicate with each other?

RAM
CPU
Motherboard (Correct answer)
Power Supply

Correct answer: Motherboard

The motherboard, also known as the system board, is the main circuit board in a computer. It holds and allows communication between many of the crucial electronic components of a system, such as the CPU, RAM, and connectors for other peripherals.

Question 116: In CompTIA practice, what is the purpose of vulnerability scanning?

To replace firewalls
To exploit systems
To slow down network traffic
To identify weaknesses before attackers do (Correct answer)

Correct answer: To identify weaknesses before attackers do

Vulnerability scanning proactively identifies security weaknesses in systems and applications so they can be remediated before exploitation.

Question 117: A technician needs to deploy Wi-Fi in a high-density stadium environment. Which 802.11ax (Wi-Fi 6) feature most directly addresses this need?

OFDM
OFDMA (Correct answer)
DSSS
FHSS

Correct answer: OFDMA

OFDMA (Orthogonal Frequency Division Multiple Access) in Wi-Fi 6 divides channels into sub-channels called Resource Units, allowing many clients to transmit simultaneously.

Question 118: Which device is primarily used to connect different network segments and manage traffic based on IP addresses?

Access Point
Switch
Router (Correct answer)
Hub

Correct answer: Router

A router operates at Layer 3 (the Network Layer) of the OSI model and is primarily used to connect different network segments or even entirely separate networks, such as a local area network to the internet. It uses IP addresses to determine the most efficient path for data packets to travel between these networks. In contrast, a switch primarily connects devices within the same network segment.

Question 119: What does the term 'debugging' refer to in software development?

Removing unused libraries
Writing new code features
Finding and fixing errors in code (Correct answer)
Compiling source code

Correct answer: Finding and fixing errors in code

Debugging is the process of identifying, analyzing, and removing errors (bugs) from software code.

Question 120: Disappearing files may indicate ____ .

network connectivity issues
faulty hardware
hijacked email
malware (Correct answer)

Correct answer: malware

Disappearing files are a strong indicator of malware activity. Certain types of malware, such as ransomware, wipers, or even some viruses, can encrypt, delete, or hide files on a system as part of their malicious payload, leading to the user perceiving them as 'disappearing'.

Question 121: In cloud networking, what is a Virtual Private Cloud (VPC)?

An isolated virtual network within a public cloud provider's infrastructure (Correct answer)
A dedicated physical server reserved for a single customer
A VPN appliance deployed in a cloud environment
A private cloud deployed at a colocation facility

Correct answer: An isolated virtual network within a public cloud provider's infrastructure

A VPC is a logically isolated virtual network within a public cloud provider that allows customers to define their own IP address ranges, subnets, and routing rules.

Question 122: On a Windows 7 PC with a user named Ricky, what is the correct path to find the documents folder? Assume that C: is the default partition.

C:/Windows/Richard/Documents
C:/Windows/Documents
C:/Windows/Allusers/Richard/Documents
C:/Users/Richard/Documents (Correct answer)

Correct answer: C:/Users/Richard/Documents

In Windows 7 and subsequent versions, user-specific folders like 'Documents,' 'Downloads,' and 'Pictures' are stored within the user's profile directory. This directory is located under the `C:\Users\` path by default. Therefore, for a user named Ricky, the correct path to their Documents folder would be `C:\Users\Ricky\Documents`.

Question 123: An example of a remote server running a virtualized user OS is

VPN
VDU
VDI (Correct answer)
VTC

Correct answer: VDI

Virtual Desktop Infrastructure (VDI) is a technology that hosts desktop operating systems and applications on a centralized server in a data center. Users access these virtual desktops remotely from various client devices, such as thin clients or personal computers. This provides a consistent, managed, and secure user experience while centralizing data and administration.

Question 124: A technician uses Wireshark and notices a host is sending ARP requests for every IP on the subnet in rapid succession. What does this most likely indicate?

A misconfigured default gateway
ARP poisoning or network scanning activity (Correct answer)
Normal DHCP renewal
DNS cache corruption

Correct answer: ARP poisoning or network scanning activity

Rapid ARP requests across an entire subnet are a hallmark of ARP scanning or ARP poisoning attacks.

Question 125: In WPA3-Enterprise mode, what is the minimum encryption strength required?

64-bit DES
128-bit AES
256-bit RSA
192-bit security suite (Correct answer)

Correct answer: 192-bit security suite

WPA3-Enterprise requires a 192-bit security suite aligned with Suite B cryptography for high-security environments.

Question 126: What type of encryption uses the same key for both encrypting and decrypting data?

Asymmetric encryption
Symmetric encryption (Correct answer)
Public key encryption
Hashing

Correct answer: Symmetric encryption

Symmetric encryption uses a single shared key for both encryption and decryption, making key distribution a critical challenge.

Question 127: You recently installed a new printer driver, and now the printer is not working properly. Which method does Microsoft suggest for uninstalling an upgraded printer driver?

Remove the newest driver manually from the user file c:/Windows/driver.
Select a date before the last printer driver was installed using the last system restore point.
Reinstall the original hardware driver.
To roll back the driver for the physical device, use the device manager. (Correct answer)

Correct answer: To roll back the driver for the physical device, use the device manager.

When a newly installed driver causes issues, the safest and most recommended method by Microsoft is to use the 'Roll Back Driver' feature in Device Manager. This function reverts the device to its previously installed driver, often resolving compatibility or corruption problems without needing a full reinstallation or system restore. It's a quick way to undo a problematic driver update.

Question 128: A user receives an email appearing to be from their bank asking them to verify account details via a link. This is BEST described as:

Phishing (Correct answer)
Vishing
Pharming
Spear phishing

Correct answer: Phishing

Phishing uses deceptive emails that appear legitimate to trick users into revealing sensitive information.

Question 129: A user's laptop has a single, small, oval-shaped port that is used for charging, data transfer, and video output. The user can plug the cable in without worrying about its orientation. What type of port is this?

USB-C (Correct answer)
DisplayPort
USB-A
Ethernet

Correct answer: USB-C

USB-C is a modern, versatile, and reversible connector standard. It is known for its small, oval shape and its ability to handle power delivery, data transfer, and video output over a single cable.

Question 130: Which of the following protocols was created as a secure alternative to Telnet?

SNMP
FTP
SSH (Correct answer)
CHAP

Correct answer: SSH

SSH (Secure Shell) was specifically developed as a secure replacement for Telnet. While Telnet transmits data, including login credentials, in plain text, SSH encrypts all communications between the client and server, protecting against eavesdropping and unauthorized access. FTP is for file transfer, CHAP for authentication, and SNMP for network management.

Question 131: In cloud computing, the process of combining computer resources and making them available for shared access by numerous clients is known as:

Broad network access
Measured service
On-demand self-service
Resource pooling (Correct answer)

Correct answer: Resource pooling

Resource pooling is a fundamental characteristic of cloud computing, as defined by NIST. It refers to the provider's ability to combine computing resources, such as processing power, storage, and network bandwidth, to serve multiple consumers using a multi-tenant model. This allows for dynamic allocation and reallocation of resources based on demand, optimizing utilization and efficiency.

Question 132: This is known as ____. It occurs when a user believes they are downloading a legitimate antivirus program, but the antivirus program turns out to be malware.

ransomware
rogue antivirus (Correct answer)
adware
browser redirection

Correct answer: rogue antivirus

Rogue antivirus is a type of malware that masquerades as legitimate antivirus software. It typically displays fake security alerts, claims to detect numerous threats, and then pressures the user to purchase a 'full version' to remove these non-existent problems, often installing more malware in the process.

Question 133: A technician suspects a hard drive is failing. Which built-in drive technology provides real-time health monitoring data?

AHCI (Advanced Host Controller Interface)
S.M.A.R.T. (Self-Monitoring, Analysis and Reporting Technology) (Correct answer)
NCQ (Native Command Queuing)
TRIM

Correct answer: S.M.A.R.T. (Self-Monitoring, Analysis and Reporting Technology)

S.M.A.R.T. monitors drive health attributes such as reallocated sectors and spin-up time, providing early warning of potential failure.

Question 134: Which cloud storage type is best suited for storing large amounts of unstructured data such as images, videos, and backups in a flat namespace?

Block storage
Object storage (Correct answer)
File storage
Archive storage

Correct answer: Object storage

Object storage stores data as discrete objects with metadata and unique identifiers in a flat namespace, making it ideal for large-scale unstructured data like media files and backups.

Question 135: A switch receives a frame destined for a MAC address not in its CAM table. What does it do?

Forwards the frame to the default gateway
Sends an ARP request
Floods the frame out all ports except the receiving port (Correct answer)
Drops the frame

Correct answer: Floods the frame out all ports except the receiving port

When a switch cannot find a destination MAC in its CAM table, it floods the frame out all ports except the one it arrived on — this is called unknown unicast flooding.

Question 136: A packet is traveling from a source host to a destination host. At which OSI layer does the packet's source and destination MAC address get added?

Transport layer
Data Link layer (Correct answer)
Network layer
Physical layer

Correct answer: Data Link layer

The Data Link layer (Layer 2) encapsulates packets into frames and adds source and destination MAC addresses.

Question 137: To mitigate the risk of a rogue device on the network impersonating a legitimate DHCP server, which security feature should a network administrator implement on the switches?

Dynamic ARP Inspection (DAI)
Control Plane Policing (CoPP)
802.1X Port-Based Authentication
DHCP Snooping (Correct answer)

Correct answer: DHCP Snooping

DHCP snooping is a Layer 2 security feature that validates DHCP messages. It distinguishes between trusted ports (connected to legitimate DHCP servers) and untrusted ports. It drops DHCP server messages (like DHCPOFFER) received on untrusted ports, effectively preventing rogue DHCP servers from assigning malicious IP configurations to clients. [4, 5, 6]

Question 138: A user logs into their corporate portal by first entering a password. They are then required to approve a push notification sent to their company-issued smartphone. This process is an example of which security concept?

Biometrics
Single sign-on (SSO)
Multi-factor authentication (MFA) (Correct answer)
Role-based access control (RBAC)

Correct answer: Multi-factor authentication (MFA)

Multi-factor authentication (MFA) enhances security by requiring two or more distinct verification methods. This scenario uses 'something you know' (the password) and 'something you have' (the smartphone), which is a classic implementation of MFA.

Question 139: Which virtualization component acts as the software layer that creates and manages virtual machines by abstracting physical hardware resources?

Orchestrator
Virtual NIC
Hypervisor (Correct answer)
Container runtime

Correct answer: Hypervisor

A hypervisor (VMM) sits between physical hardware and virtual machines, abstracting and allocating hardware resources to multiple VMs running simultaneously.

Question 140: Which power supply specification describes its efficiency at converting AC input to DC output?

Wattage rating
80 Plus certification (Correct answer)
Rail amperage
Form factor

Correct answer: 80 Plus certification

80 Plus certification levels (Bronze, Silver, Gold, Platinum, Titanium) indicate the PSU's AC-to-DC conversion efficiency at various load levels.

Question 141: What is the function of the EPS 12V connector on a motherboard?

Powers SATA devices on the board
Supplies dedicated 12V power to the CPU voltage regulator (Correct answer)
Provides power to PCIe slots
Connects the front panel power button

Correct answer: Supplies dedicated 12V power to the CPU voltage regulator

The EPS 12V (8-pin) connector delivers dedicated 12-volt power directly to the motherboard's CPU voltage regulator module.

Question 142: Which of the following uses parallel communications?

External Storage Device (Correct answer)
Mouse
Keyboard
USB printer

Correct answer: External Storage Device

Parallel communication involves transmitting multiple bits of data simultaneously over several wires. Historically, many external storage devices, such as those using SCSI or older PATA (Parallel ATA) interfaces, relied on parallel communication for data transfer. While modern external storage predominantly uses serial interfaces, this category has a history of utilizing parallel communication.

Question 143: Which cloud computing concept ensures that cloud resources are shared among multiple customers while keeping each customer's data logically separated?

Elasticity
High availability
Geo-redundancy
Multi-tenancy (Correct answer)

Correct answer: Multi-tenancy

Multi-tenancy allows multiple customers (tenants) to share the same physical infrastructure while their data and applications remain logically isolated from one another.

Question 144: Which concept refers to the ability of a system to continue operating even if one component fails?

Interoperability
Fault tolerance (Correct answer)
Scalability
Bandwidth

Correct answer: Fault tolerance

Fault tolerance is the capability of a system to keep functioning when one or more of its components fail.

Question 145: Which IPv6 address type is equivalent to IPv4 private addresses and is routable only within a site?

Unique local (Correct answer)
Link-local
Global unicast
Anycast

Correct answer: Unique local

Unique local addresses (FC00::/7) are the IPv6 equivalent of RFC 1918 private addresses and are not routed on the global internet.

Question 146: In your new home, you've just set up a wifi access point upstairs. When you go down into the basement, though, you lose your signal and are unable to access the Internet. What kind of equipment could you get if you didn't want to buy another access point but still wanted a wireless connection?

switch
repeater (Correct answer)
router
hub

Correct answer: repeater

A wireless repeater, also known as a range extender, is a networking device that captures an existing wireless signal from a router or access point and then rebroadcasts it. This effectively extends the coverage area of the wireless network, allowing devices in previously unreachable locations, like a basement, to connect to the internet without needing a new access point.

Question 147: What is the loopback address in IPv4 and what is it used for?

192.168.0.1 — the default gateway for local networks
127.0.0.1 — used to test the local TCP/IP stack without sending traffic on the network (Correct answer)
0.0.0.0 — used to indicate an unknown source address
10.0.0.1 — the first usable address in a Class A private range

Correct answer: 127.0.0.1 — used to test the local TCP/IP stack without sending traffic on the network

127.0.0.1 (loopback) allows a host to test its own TCP/IP stack; packets sent to this address never leave the device.

Question 148: Which of the following is NOT an advantage of utilizing cloud infrastructure?

Cloud providers provide easy-to-use versions of complex technology that normally need the services of expert technicians
Cloud Infrastructure provides elasticity and rapid scalability based on demand
The pay-as-you-go model necessitates a lower upfront investment for huge volumes of infrastructure
The Cloud Provider will handle security on your behalf (Correct answer)

Correct answer: The Cloud Provider will handle security on your behalf

While cloud providers offer robust security *of* the cloud infrastructure, security *in* the cloud remains a shared responsibility. Customers are typically responsible for securing their data, applications, operating systems, and network configurations within the cloud environment. Relying solely on the provider for all security aspects is a common misconception and a significant security risk.

Question 149: Which Windows tool allows a technician to view and manage all running processes and system resource usage?

Task Manager (taskmgr.exe) (Correct answer)
Device Manager (devmgmt.msc)
Registry Editor (regedit.exe)
System Configuration (msconfig.exe)

Correct answer: Task Manager (taskmgr.exe)

Task Manager (taskmgr.exe) allows viewing and managing running processes, CPU/memory/disk/network usage, startup programs, and services. It can be opened with Ctrl+Shift+Esc, Ctrl+Alt+Delete, or by right-clicking the taskbar. For more detail, Resource Monitor (resmon.exe) provides deeper analysis.

Question 150: Which display technology produces pictures by passing light via liquid crystals?

Plasma
LCD (Correct answer)
LED
Pixels

Correct answer: LCD

Liquid Crystal Display (LCD) technology produces images by manipulating liquid crystals to block or allow light to pass through. These crystals are arranged in pixels, and when an electric current is applied, they change their orientation, controlling the amount of light that reaches the viewer. This process forms the images seen on LCD screens, which are common in monitors, televisions, and mobile devices.

Question 151: Which repair option keeps personal files and settings along with the default apps and those that you installed from the Windows Store?

upgrade
system
reset
refresh (Correct answer)

Correct answer: refresh

In Windows 8 and 10, the "Refresh your PC" option is a repair feature that reinstalls Windows while keeping your personal files, settings, and any apps installed from the Windows Store. It removes desktop applications that were not pre-installed or downloaded from the store, making it a less destructive option than a full reset or clean installation, ideal for troubleshooting system instability without losing personal data.

Question 152: To create a new directory, which command prompt command is used?

MD (Correct answer)
MakeDir
CD
MakeD

Correct answer: MD

The `MD` command, which stands for 'Make Directory,' is the standard command-line utility used to create new folders or directories. For example, typing `MD MyNewFolder` in the command prompt will create a new directory named 'MyNewFolder' in the current working directory. While `MakeDir` is also a valid command, `MD` is the more commonly used abbreviation.

Question 153: Which cloud characteristic allows resources to be provisioned and released automatically based on demand without human intervention?

Measured service
Resource pooling
Rapid elasticity (Correct answer)
Broad network access

Correct answer: Rapid elasticity

Rapid elasticity allows cloud resources to scale up or down automatically and quickly in response to demand, often appearing unlimited to the consumer.

Question 154: What is the primary purpose of a DMZ (demilitarized zone) in network security?

To block all external traffic
To host public-facing services while isolating the internal network (Correct answer)
To store encrypted backups
To monitor internal user activity

Correct answer: To host public-facing services while isolating the internal network

A DMZ is a network segment that hosts public-facing servers (e.g., web, email) while keeping the internal corporate network protected.

Question 155: What is the correct order of steps when troubleshooting a PC problem, according to CompTIA A+ best practices?

Identify → Theory → Test → Plan → Implement → Verify/Document (Correct answer)
Fix → Test → Document → Report
Test → Identify → Implement → Document
Document → Fix → Test → Verify

Correct answer: Identify → Theory → Test → Plan → Implement → Verify/Document

CompTIA's 6-step troubleshooting methodology is: 1) Identify the problem, 2) Establish a theory of probable cause, 3) Test the theory, 4) Establish a plan of action, 5) Implement the solution, 6) Verify functionality and document. This systematic approach prevents skipping to solutions before understanding the problem.

Question 156: You work as an IT consultant for a company in a coastal area that is subject to storms and flooding on occasion. The continuation of business operations is important because of your company's location. Which of the following plans focuses on minimizing the impact of a disaster on workers, customers, and IT systems?

Business continuity (Correct answer)
Risk management
Fault tolerance
Disaster recovery

Correct answer: Business continuity

A Business Continuity Plan (BCP) focuses on maintaining essential business functions during and after a disaster, minimizing disruption to operations, employees, and customers. While disaster recovery (DR) specifically deals with restoring IT systems, business continuity encompasses the broader organizational response to ensure the company can continue to operate.

Question 157: A network technician needs to perform a deep inspection of network traffic to diagnose a complex application issue. The technician wants to capture and view the individual headers and payloads of packets being sent to and from a specific server. What type of tool is required for this task?

Port scanner
Log aggregator
Throughput tester
Protocol analyzer (Correct answer)

Correct answer: Protocol analyzer

A protocol analyzer, also known as a packet sniffer (e.g., Wireshark), is designed to capture, decode, and display the contents of network packets, including their headers and payloads. [7, 8, 9] This allows for in-depth analysis of network communications. A throughput tester measures bandwidth, a log aggregator collects Syslog data, and a port scanner checks for open ports.

Question 158: Which of the following is an example of application software?

BIOS
Google Chrome (Correct answer)
Microsoft Windows
MacOS

Correct answer: Google Chrome

Application software refers to programs designed to perform specific tasks for the user, such as web browsing, word processing, or gaming. Google Chrome is a web browser, which is a prime example of application software, whereas Microsoft Windows, BIOS, and MacOS are examples of system software (operating systems or firmware) that manage the computer itself.

Question 159: A user reports that their web browser redirects to unexpected websites and shows pop-up ads. What type of infection is most likely?

Logic bomb
Rootkit
Ransomware
Adware or browser hijacker (PUP/malware) (Correct answer)

Correct answer: Adware or browser hijacker (PUP/malware)

Browser redirects and unwanted pop-up ads are classic symptoms of adware or a browser hijacker — a type of potentially unwanted program (PUP) or malware that modifies browser settings, homepage, and search engine. Removal involves scanning with anti-malware tools, checking browser extensions, and resetting browser settings.

Question 160: What is the primary function of RAM (Random Access Memory) in a computer?

Provide temporary storage for data that is actively used (Correct answer)
Store data permanently
Process instructions from programs
Control the computer's power supply

Correct answer: Provide temporary storage for data that is actively used

RAM (Random Access Memory) serves as a computer's short-term memory, providing fast, temporary storage for data and programs that the CPU is actively using. When you open an application or file, it's loaded into RAM for quick access, allowing the computer to perform tasks efficiently without constantly accessing slower permanent storage. Unlike a hard drive, data in RAM is volatile and is lost when the computer is turned off.

Question 161: A small business owner wants to set up a guest Wi-Fi network. They are using older access points that do not support WPA2 or WPA3. The only available security options are WEP and WPA with TKIP. Which of the following is the MOST secure option available in this scenario?

Open network with MAC filtering
WPA with TKIP (Correct answer)
WEP with a 128-bit key
WEP with a 64-bit key

Correct answer: WPA with TKIP

While both are now considered insecure, WPA with TKIP (Temporal Key Integrity Protocol) is significantly more secure than WEP. WPA was designed as an interim replacement for WEP and fixed several of its critical flaws, such as implementing a message integrity check and dynamically changing keys. WEP is fundamentally broken and easily cracked, regardless of key length.

Question 162: Which video cable is capable of transmitting both digital and analog signals?

Mini-HDMI
DVI-D
HDMI
DVI-I (Correct answer)

Correct answer: DVI-I

DVI-I (Digital Visual Interface - Integrated) is a versatile video connector capable of transmitting both digital and analog video signals. The 'I' in DVI-I signifies its integrated capability, meaning it can connect to both digital displays (like LCDs) and analog displays (like older CRT monitors) using the appropriate adapter. This makes it a highly flexible option for various display setups.

Question 163: Mark, a colleague at your company, approaches you and asks you to recommend a mobile device for reading books on the move. Which of the following devices would you recommend?

Smartphone
Tablet
Laptop
E-reader (Correct answer)

Correct answer: E-reader

An e-reader is a specialized mobile device designed primarily for reading digital books, magazines, and other text-based content. E-readers typically feature e-ink displays that mimic the appearance of printed paper, reducing eye strain and offering extended battery life compared to tablets or smartphones. This makes them the ideal recommendation for someone focused solely on reading on the go.

Question 164: A user wants to connect multiple peripherals to their laptop, including an external monitor, a keyboard, a mouse, and a wired network connection, using a single cable. Which of the following devices is designed for this purpose?

USB hub
Network switch
KVM switch
Docking station (Correct answer)

Correct answer: Docking station

A docking station is a device that allows a laptop to connect to multiple peripherals like monitors, keyboards, mice, and networks with a single connection. A USB hub only expands the number of USB ports. A KVM switch allows control of multiple computers with one set of keyboard, video, and mouse. A network switch is only for connecting devices to a network.

Question 165: Which 802.11 amendment introduced Multi-User MIMO (MU-MIMO) allowing simultaneous transmission to multiple clients?

802.11a
802.11g
802.11n
802.11ac Wave 2 (Correct answer)

Correct answer: 802.11ac Wave 2

802.11ac Wave 2 introduced MU-MIMO, enabling an AP to transmit to multiple clients simultaneously rather than one at a time.

Question 166: What is the purpose of pseudocode in software development?

To encrypt source code
To plan program logic in plain language before coding (Correct answer)
To execute a program faster
To test code in a sandbox environment

Correct answer: To plan program logic in plain language before coding

Pseudocode is an informal, plain-language description of an algorithm used to plan logic without worrying about syntax.

Question 167: What is the primary purpose of thermal paste applied between a CPU and its heatsink?

Permanently bond the heatsink to the CPU
Fill microscopic air gaps to improve thermal conductivity (Correct answer)
Prevent electrostatic discharge
Electrically insulate the CPU from the heatsink

Correct answer: Fill microscopic air gaps to improve thermal conductivity

Thermal paste fills microscopic surface imperfections between the CPU and heatsink to maximize heat transfer efficiency.

Question 168: Which concept describes the process of verifying that data has not been altered during transmission?

Authentication
Confidentiality
Integrity (Correct answer)
Availability

Correct answer: Integrity

Integrity ensures that data remains accurate and unmodified during storage or transmission, often verified using hashes.

Question 169: A network administrator needs to prevent hosts from the Guest network (192.168.100.0/24) from accessing the company's internal file server at 10.10.50.15. The Guest network must still be able to access the internet. Where is the MOST effective place to apply an Access Control List (ACL) to achieve this goal?

Inbound on the router interface connected to the Guest network (Correct answer)
Outbound on the file server's network interface
Inbound on the switch ports connected to the guest hosts
Outbound on the router interface connected to the internet

Correct answer: Inbound on the router interface connected to the Guest network

The most efficient place to apply an ACL is as close to the source of the traffic as possible. By placing an ACL inbound on the router interface that serves as the gateway for the Guest network, the router can drop the unwanted traffic immediately. This prevents the traffic from being processed and routed across the network, which saves resources.

Question 170: A technician is installing a CPU and notices one corner of the socket has a small triangle indicator. What does this indicate?

CPU pin 1 alignment for correct installation orientation (Correct answer)
The socket voltage regulator location
The socket locking mechanism release point
The integrated graphics output pin

Correct answer: CPU pin 1 alignment for correct installation orientation

The triangle on both the CPU and socket marks pin 1, ensuring the processor is inserted in the correct orientation to avoid damage.

Question 171: A programmer is writing a line of code to store a customer's full name, 'John Smith'. Which data type should be used for this purpose?

Integer
Boolean
String (Correct answer)
Char

Correct answer: String

A string is a data type used to represent a sequence of characters. Since a full name consists of multiple characters (letters and a space), a string is the appropriate choice. A 'char' typically holds only a single character, an 'integer' holds whole numbers, and a 'Boolean' holds true/false values.

Question 172: What program is used to move user data from an old computer to a new one?

USMT (Correct answer)
Msconfig
ERD
Sysprep

Correct answer: USMT

USMT (User State Migration Tool) is a command-line utility provided by Microsoft for IT professionals to migrate user files and settings during large-scale operating system deployments. It allows for the transfer of user profiles, data, and settings from an old computer to a new one, streamlining the migration process and ensuring user continuity.

Question 173: What is defense in depth in the context of CompTIA security?

Relying solely on encryption
Using one strong security control
Focusing only on perimeter security
Implementing multiple layers of security controls (Correct answer)

Correct answer: Implementing multiple layers of security controls

Defense in depth uses multiple layers of security controls so that if one layer fails, additional layers continue to provide protection.

Question 174: A network administrator is configuring a firewall to block access to a specific file-sharing application that uses a well-known protocol. This protocol provides the interface between the user's software and the network. At which OSI layer does this protocol operate?

Application Layer (Correct answer)
Transport Layer
Session Layer
Network Layer

Correct answer: Application Layer

The Application Layer (Layer 7) provides the interface for applications to access network services. Protocols for specific user-facing applications, such as FTP for file sharing, HTTP for web browsing, and SMTP for email, operate at this layer.

Question 175: What is the first step you should do to remove malware according to best practices?

disable system restore function
identify and research malware symptoms (Correct answer)
remediate infected systems
quarantine infection

Correct answer: identify and research malware symptoms

The first step in CompTIA A+'s 'Best Practice for Removing Malware' is to identify and research malware symptoms. This initial phase involves observing unusual system behavior, performance degradation, or suspicious pop-ups, and then researching these indicators to confirm a malware infection and understand its specific characteristics. This diagnostic step is essential for planning an effective removal strategy.

Question 176: Which of the following is considered the "brain" of the computer?

CPU (Correct answer)
Hard drive
Motherboard
RAM

Correct answer: CPU

The Central Processing Unit (CPU) is often referred to as the 'brain' of the computer because it performs most of the processing inside the computer. It executes instructions, performs calculations, and manages the flow of information, making it responsible for carrying out all the commands and operations that make a computer function. Without the CPU, a computer cannot run programs or process data, making it the core component.

Question 177: To view logs on an iOS device, which of these programs is needed?

Logcat
iOSLog
iOSView
Xcode (Correct answer)

Correct answer: Xcode

Xcode is Apple's integrated development environment (IDE) for macOS, used for developing software for Apple platforms including iOS. It includes various tools for debugging and monitoring iOS devices, allowing developers and technicians to view device logs for troubleshooting and analysis.

Question 178: An employee's computer suddenly becomes unusable. A message appears on the screen, stating that all of their files have been encrypted and will be deleted unless a payment is made to an anonymous digital wallet. Which of the following BEST describes this type of malware?

Ransomware (Correct answer)
Adware
Virus
Spyware

Correct answer: Ransomware

Ransomware is a type of malicious software that blocks access to a victim's files or system by encrypting them and demands a ransom payment to restore access.

Question 179: What does 'refactoring' mean in software development?

Adding new features to existing software
Restructuring existing code without changing its external behavior (Correct answer)
Removing all comments from code
Translating code to a different programming language

Correct answer: Restructuring existing code without changing its external behavior

Refactoring improves the internal structure of code—making it cleaner and more efficient—without altering how it behaves externally.

Question 180: What is the primary purpose of a Content Delivery Network (CDN) in cloud architecture?

To manage container orchestration across cloud providers
To replicate databases across multiple availability zones
To distribute content closer to end users via geographically dispersed edge servers (Correct answer)
To provide encrypted tunnels between cloud regions

Correct answer: To distribute content closer to end users via geographically dispersed edge servers

A CDN caches and serves content from edge servers located geographically close to users, reducing latency and improving load times for web content and media.

Question 181: In the event viewer, what symbol is used to signify a warning?

A red X inside a yellow box.
A blue circle with the letter I in the center.
A yellow triangle with an exclamation mark. (Correct answer)
A red circle with an exclamation mark.

Correct answer: A yellow triangle with an exclamation mark.

In the Windows Event Viewer, a yellow triangle with an exclamation mark is the standard icon used to denote a 'Warning' event. Warning events indicate potential problems that are not critical errors but could lead to issues, or they signify non-critical failures during an operation. This visual cue helps users quickly identify events that require attention but are not as severe as critical errors.

CompTIA A+ Core 1 (220-1101) & Core 2 (220-1102)

CompTIA A+ certification validates the foundational skills necessary for an entry-level IT professional across a variety of devices and operating systems.

Questions

90 min

Time Limit

67%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

comptia.org — Exam dates, passing score, retake fee, retake policy, eligibility, exam format, test dates, time limit, score validity, exam information · verified Oct 2026
pearsonvue.com — Test delivery, test dates · verified Oct 2026