Operational Procedure Flashcards

If an engineer is looking for a Python script in a computer's documents folder, what file extension should he or she look for?

Answer: .py

Python scripts are universally identified by the `.py` file extension. This convention allows operating systems and development environments to recognize and execute the code using the appropriate Python interpreter. Other options like `.bat`, `.sh`, and `.js` are for Windows batch files, Unix shell scripts, and JavaScript files, respectively.

The following is a description of a device used to safeguard electrical devices from large voltage fluctuations:

Answer: Surge suppressor

A surge suppressor (or surge protector) is specifically designed to protect electronic devices from voltage spikes or surges by diverting excess voltage away from the connected equipment. While a UPS provides battery backup and some surge protection, its primary role is power continuity. A PSU converts AC to DC power, and a VRM regulates voltage for specific components within a system.

When Eddie overhears his IT manager arguing with a network administrator about how to properly dispose of computer equipment as he prepares to leave work for the day, what should you tell him? You explain how the administrator may easily refer to the safety data page (SDS) when the IT manager summons you to examine disposal instructions. The IT manager then inquires as to who is in charge of the SDS.

Answer: OSHA

The Occupational Safety and Health Administration (OSHA) mandates the use of Safety Data Sheets (SDS) in the workplace to communicate information about hazardous chemicals and materials, including proper handling and disposal. Employers are required to maintain SDS for all hazardous substances, ensuring employees have access to critical safety information. The EPA deals with environmental protection, and the FCC with communications.

To clean the inside of a printer, which of the following tools would be used? (Choose all of the options that apply.)

Answer: Toner vacuum

A toner vacuum is specifically designed to safely collect toner particles without scattering them or damaging components, as regular vacuums can create static electricity and lack the necessary filtration. Compressed air is used to blow dust and debris out of hard-to-reach areas within the printer. A cleaning brush can help dislodge stubborn debris, but a regular vacuum is generally not recommended due to static discharge risk and fine particle dispersal.

In the event that Ivan is cleaning out one of the old printers with a shop vacuum in the back room at work, what kind of vacuum should he use? You tell Ivan to stop using the shop vacuum as soon as you walk in, warning him that he could damage the printer components.

Answer: specialized anti-static vacuum

When cleaning electronic equipment like printers, especially those using toner, a specialized anti-static vacuum (often called a toner vacuum) is crucial. Regular shop vacuums can generate static electricity, which can damage sensitive electronic components. They also lack the fine filtration needed to contain toner particles, which can be harmful if inhaled.

The elements of the first response in circumstances , where users are identified in violation of policies pertaining to forbidden content or conduct should include: (Choose all of the options that apply.)

Answer: Preservation of data and devices

In incident response for policy violations, the initial steps involve identifying the issue to understand the scope and nature of the violation. Crucially, data and devices must be preserved to maintain evidence for investigation and prevent further compromise. Finally, reporting the incident through established channels ensures proper escalation and adherence to organizational policies.

The executives have been contemplating how to avoid a repetition of a recent power outage that knocked the company offline for 30 minutes. During the planning and design stages, they enlist your help as an IT expert. According to one CEO, how can you tell how much a surge suppressor can withstand? So, what are your options for responding to him?

Answer: joule rating

The capacity of a surge suppressor to withstand and absorb a power surge is measured in joules. A higher joule rating indicates that the surge suppressor can absorb more energy from a voltage spike before it fails or allows the surge to reach connected devices. This rating is a key indicator of its protective capability.

A chronological record outlining persons in possession of an evidence is referred to as ___________ in forensic processes.

Answer: Chain of custody

In forensic processes, the 'chain of custody' is a chronological documentation of who has had possession of evidence, when, and for what purpose. This record is critical to ensure the integrity and admissibility of evidence in legal proceedings, proving that the evidence has not been tampered with or compromised.

What is the first step in successful incident response after an event report has been filed?

Answer: Confirm that a failure occurred.

After an event report is filed, the very first step in incident response is to confirm that a failure or incident actually occurred and is not a false alarm. This validation ensures that resources are not wasted on non-existent problems and that the incident response process is initiated only when necessary. Subsequent steps like documentation and chain of custody follow this confirmation.

Which of the algorithms below is a symmetric-key algorithm?

Answer: DES

DES (Data Encryption Standard) is a classic example of a symmetric-key algorithm, meaning it uses the same key for both encryption and decryption. In contrast, RSA, DSA, and PGP/GPG (which uses a hybrid approach but relies on asymmetric keys for key exchange) are primarily associated with asymmetric (public-key) cryptography, where separate keys are used for encryption and decryption.

Which of the following protocols was created as a secure alternative to Telnet?

Answer: SSH

SSH (Secure Shell) was specifically developed as a secure replacement for Telnet. While Telnet transmits data, including login credentials, in plain text, SSH encrypts all communications between the client and server, protecting against eavesdropping and unauthorized access. FTP is for file transfer, CHAP for authentication, and SNMP for network management.

An employee in the research department was surfing the web when the host was infected with Malware. Which log, as a technician, is most likely to reveal the source of the infection?

Answer: DNS Logs

When an employee gets malware from web surfing, DNS logs are most likely to reveal the source of the infection. These logs record all DNS queries made by the host, showing which domain names were resolved to IP addresses, which can pinpoint malicious websites or command-and-control servers accessed by the malware. Web server logs would show activity on a specific web server, not necessarily the client's browsing history.

You work as an IT consultant for a company in a coastal area that is subject to storms and flooding on occasion. The continuation of business operations is important because of your company's location. Which of the following plans focuses on minimizing the impact of a disaster on workers, customers, and IT systems?

Answer: Business continuity

A Business Continuity Plan (BCP) focuses on maintaining essential business functions during and after a disaster, minimizing disruption to operations, employees, and customers. While disaster recovery (DR) specifically deals with restoring IT systems, business continuity encompasses the broader organizational response to ensure the company can continue to operate.

Which of the following is a criterion for reliability?

Answer: MTBF

MTBF (Mean Time Between Failures) is a key metric for measuring the reliability of hardware components or systems. It represents the predicted elapsed time between inherent failures of a system during operation, indicating how long a device is expected to function correctly before experiencing a failure. RPO, MTTR, and MTTF are related but have different specific meanings.

The file extensions listed below are organized into categories. Which category solely applies to mobile technology files?

Answer: apk, exe, iPA, prc, adb

This option lists file extensions primarily associated with mobile application packages and development. `.apk` is for Android apps, `.iPA` for iOS apps, and `.prc` for Palm OS applications. While `.exe` is typically Windows, some mobile platforms (like Windows Mobile) used it, and `.adb` relates to Android Debug Bridge, making this the most mobile-centric list.

Identify typical issues encountered by testers while performing mobile testing in Cloud Computing.

Answer: Issues with internet access, lock-in, and the subscription model

When performing mobile testing in a cloud environment, common challenges include reliance on stable internet access, as connectivity issues can disrupt testing. 'Lock-in' refers to being tied to a specific cloud provider's ecosystem, making it difficult to switch. The subscription model, while offering flexibility, can also lead to unpredictable costs if not managed carefully.

Many individuals currently receive a large number of photos and video files on their mobile devices. Where should they store/save the files, in your opinion?

Answer: Cloud File Storage services

Cloud File Storage services (like Google Drive, Dropbox, iCloud, OneDrive) are the most practical and scalable solution for storing large numbers of photos and video files from mobile devices. They offer easy access from multiple devices, automatic backups, and often provide ample storage space, freeing up local device storage. Email systems and virtual desktops are not designed for mass media storage, and on-premises disks lack the accessibility and backup features of cloud solutions.

Differentiate between a Simulator and an Emulator in terms of mobile network

Answer: An emulator is based on hardware and software

An emulator is a hardware or software system that duplicates the functionality of another system, allowing it to run software designed for the original system by mimicking its internal architecture. A simulator, on the other hand, only mimics the behavior of a system without replicating its internal hardware or software architecture, focusing on logical behavior rather than exact replication.