Microsoft Technology Associate (MTA) — Questions and Answers

Question 1: Which HTML5 input type is used to collect email addresses with built-in validation?

<input type='url'>
<input type='text'>
<input type='string'>
<input type='email'> (Correct answer)

Correct answer: <input type='email'>

The email input type provides browser-level validation ensuring the entered value matches an email format, and shows a suitable keyboard on mobile devices.

Question 2: Which Windows troubleshooting tool logs system errors, warnings, and informational events?

Event Viewer (Correct answer)
Reliability Monitor
Performance Monitor
Resource Monitor

Correct answer: Event Viewer

Event Viewer records system, application, and security events, providing detailed logs that help diagnose errors and troubleshoot Windows issues.

Question 3: True or False? Tools like Microsoft Security Compliance Manager and Microsoft Baseline Security Analyzer can assist with server hardening

False
True (Correct answer)

Correct answer: True

Server hardening involves configuring a server to enhance its security and reduce vulnerabilities. Tools like Microsoft Security Compliance Manager (now part of the Security Compliance Toolkit) and the deprecated Microsoft Baseline Security Analyzer (MBSA) were specifically designed to help administrators identify security misconfigurations, apply security baselines, and manage updates. These functions are integral to the process of hardening servers against potential threats.

Question 4: You have been tasked with making sure that a client's network includes a server that converts NetBIOS names to IP addresses. Which of the following actions should you take?

You should consider adding a Web server to the client's network.
You should consider adding a DHCP server to the client's network.
You should consider adding a WINS server to the client's network. (Correct answer)
You should consider adding a DNS server to the client's network.

Correct answer: You should consider adding a WINS server to the client's network.

A WINS (Windows Internet Name Service) server is specifically designed to resolve NetBIOS names to IP addresses. In older Windows-based networks, NetBIOS names were used for identifying network resources. While DNS has largely superseded WINS for modern IP networks, a WINS server would be essential if the client's network still relies on NetBIOS names for resource identification and requires their conversion to IP addresses.

Question 5: Which Azure tool allows administrators to manage all Azure services through a web browser?

Azure PowerShell
Azure CLI
Azure Resource Manager
Azure Portal (Correct answer)

Correct answer: Azure Portal

The Azure Portal is a web-based graphical interface that provides a unified view to manage all Azure services, resources, and subscriptions.

Question 6: You have recently designed a home office network for a client that includes a switch. Which of the following are TRUE with regards to network switches?

It operates at the Data-Link layer of the OSI model.
It operates at the Physical layer of the OSI model.
It keeps track of the MAC addresses attached to each of its ports and directs traffic intended for a particular address only to the port to which is attached. (Correct answer)
It keeps track of the IP addresses attached to each of its ports and directs traffic intended for a particular address only to the port to which it is attached.

Correct answer: It keeps track of the MAC addresses attached to each of its ports and directs traffic intended for a particular address only to the port to which is attached.

A network switch operates at the Data Link layer (Layer 2) of the OSI model. Its primary function is to learn the MAC addresses of devices connected to each of its ports and store this information in a MAC address table. When a data frame arrives, the switch examines the destination MAC address and intelligently forwards the frame only to the specific port where the destination device is attached, significantly reducing unnecessary network traffic and improving efficiency.

Question 7: What is the primary key in a database table?

A field that contains duplicate values
A field that refers to data in another table
A field that uniquely identifies each record in a table (Correct answer)
A field that can be left empty

Correct answer: A field that uniquely identifies each record in a table

A primary key in a database table is a special field or a combination of fields that uniquely identifies each individual record (row) within that table. It must contain unique values for every record and cannot be null. The primary key is crucial for maintaining data integrity and for establishing relationships between different tables in a relational database.

Question 8: Which cloud service model provides virtualized computing resources like VMs, storage, and networking over the internet?

PaaS
FaaS
SaaS
IaaS (Correct answer)

Correct answer: IaaS

IaaS (Infrastructure as a Service) provides virtualized hardware resources including compute, storage, and networking, giving users control over the OS and applications.

Question 9: A clients network is made up of two network segments, named Subnet A and Subnet B. DHCP clients are located on Subnet A. A DHCP server on Subnet B. You need to make sure that DHCP clients are able to connect to the server. Which of the following actions should you take?

You should make sure that the DNS service is configured.
You should make sure that the DHCP relay agent service is configured. (Correct answer)
You should make sure that the RRAS service is configured.
You should make sure that WEb service is configured.

Correct answer: You should make sure that the DHCP relay agent service is configured.

DHCP (Dynamic Host Configuration Protocol) clients typically use broadcast messages to discover a DHCP server. If the DHCP server is located on a different network segment (subnet) than the clients, these broadcast messages will not traverse routers by default. Therefore, a DHCP relay agent service must be configured on the client's subnet to receive these broadcast requests and forward them as unicast messages to the DHCP server, enabling clients to obtain IP addresses across subnets.

Question 10: What defends targets staff within an organization, explaining what to do, when, why, and by whom

Policies, Procedures,& Awareness (Correct answer)
Answer : A
Click run and choose administrator
Full Control

Correct answer: Policies, Procedures,& Awareness

Policies establish the rules and guidelines for an organization's security posture. Procedures provide the detailed, step-by-step instructions on how to implement those policies, clearly defining what actions to take, when, why, and by whom. Awareness training is crucial for educating staff on these policies and procedures, ensuring they understand their roles and responsibilities in maintaining organizational security.

Question 11: What is the hybrid cloud model?

A cloud environment shared by multiple organizations
A cloud model with both free and paid tiers
Combining on-premises infrastructure with public cloud services (Correct answer)
Using two different public cloud providers

Correct answer: Combining on-premises infrastructure with public cloud services

Hybrid cloud integrates on-premises (private) infrastructure with public cloud resources, allowing data and applications to move between the two environments.

Question 12: What is smoke testing?

Testing software for memory leaks under continuous use
A quick preliminary test to verify that critical basic functions work before deeper testing begins (Correct answer)
Security vulnerability scanning
Testing software in adverse environmental conditions

Correct answer: A quick preliminary test to verify that critical basic functions work before deeper testing begins

Smoke testing (also called build verification testing) checks that the most critical functions work so that more detailed testing is worthwhile.

Question 13: Which of the following is a characteristic of a relational database?

Data is organized into tables with rows and columns (Correct answer)
Data stored in flat files
Tables that store unstructured data
Hierarchical relationships between data elements

Correct answer: Data is organized into tables with rows and columns

A relational database is characterized by its structured organization, where data is arranged into two-dimensional tables consisting of rows and columns. Each row represents a unique record, and each column represents an attribute or field. Relationships between these tables are established through common fields, known as foreign keys, adhering to the principles of the relational model for efficient data management.

Question 14: A client has requested a network setup for his home. The network has to be cost-effective, and easy to extend and implement. Further more, the client wants his workstations connected by a single cable. Which of the following network topologies should you use?

A star network topology.
A ring network topology.
A bus network topology. (Correct answer)
A mesh network topology.

Correct answer: A bus network topology.

A bus network topology connects all devices to a single central cable, or 'bus.' This setup is cost-effective and straightforward to implement for small networks, as it requires minimal cabling. It also offers ease of extension by simply adding more devices to the shared cable, making it a suitable choice for a home network requiring simplicity and expandability.

Question 15: Which HTML5 API allows web applications to work offline by caching resources?

Web Storage API
localStorage API
IndexedDB API
Service Worker API (Correct answer)

Correct answer: Service Worker API

Service Workers are JavaScript files that run in the background, intercepting network requests and caching resources to enable offline functionality and faster load times.

Question 16: Which Windows Server feature provides network load balancing for web servers?

Failover Clustering
DHCP Failover
DNS Round Robin
Network Load Balancing (NLB) (Correct answer)

Correct answer: Network Load Balancing (NLB)

NLB distributes incoming network traffic across multiple servers, improving availability and scalability of services like web applications.

Question 17: What is the difference between sessionStorage and localStorage in HTML5?

sessionStorage is server-side; localStorage is client-side
sessionStorage holds more data than localStorage
sessionStorage is cleared when the browser tab is closed; localStorage persists indefinitely (Correct answer)
localStorage requires user authentication; sessionStorage does not

Correct answer: sessionStorage is cleared when the browser tab is closed; localStorage persists indefinitely

sessionStorage stores data only for the duration of a browser session (cleared when the tab closes), while localStorage persists data with no expiration until explicitly cleared.

Question 18: What is the purpose of Azure Active Directory (Azure AD)?

Providing cloud-based identity and access management (Correct answer)
Hosting virtual machines
Managing on-premises file servers
Managing network security groups

Correct answer: Providing cloud-based identity and access management

Azure Active Directory is Microsoft's cloud-based identity and access management service, enabling users to sign in and access Microsoft 365, Azure, and thousands of SaaS applications.

Question 19: Which testing phase typically occurs after unit testing and before system testing?

Performance testing
Acceptance testing
Exploratory testing
Integration testing (Correct answer)

Correct answer: Integration testing

Integration testing follows unit testing and verifies that individual modules interact and work correctly together.

Question 20: Which JavaScript method is used to make asynchronous HTTP requests to a server?

fetch() (Correct answer)
setTimeout()
addEventListener()
querySelector()

Correct answer: fetch()

The fetch() API provides a modern, promise-based way to make asynchronous HTTP requests to servers and APIs, replacing the older XMLHttpRequest (XHR) approach.

Question 21: Which HTML5 element is used to draw graphics and animations using JavaScript?

<svg>
<figure>
<graphic>
<canvas> (Correct answer)

Correct answer: <canvas>

The <canvas> element provides a bitmap drawing surface that JavaScript can use to render 2D graphics, animations, games, and data visualizations.

Question 22: What is the primary security risk of using public Wi-Fi networks on mobile devices?

Automatic app updates being triggered
Exposure to man-in-the-middle attacks and data interception (Correct answer)
Faster battery drain
Reduced storage capacity

Correct answer: Exposure to man-in-the-middle attacks and data interception

Public Wi-Fi networks are often unsecured, making them vulnerable to man-in-the-middle attacks where attackers can intercept and read unencrypted network traffic.

Question 23: Which of the following best describes object-oriented programming (OOP)?

Programming with data structures like arrays and lists
Programming that uses classes and objects to represent real-world entities (Correct answer)
Programming based on functions and procedures
Writing code that can be executed by the computer

Correct answer: Programming that uses classes and objects to represent real-world entities

Object-Oriented Programming (OOP) is a programming paradigm that organizes software design around data, or objects, rather than functions and logic. It uses classes as blueprints to create objects, which encapsulate both data (attributes) and behavior (methods) to model real-world entities. This approach promotes modularity, reusability, and maintainability through concepts like encapsulation, inheritance, and polymorphism.

Question 24: What does 'high availability' mean in cloud computing?

Data is always backed up to tape
A system remains operational and accessible with minimal downtime (Correct answer)
Resources are always provisioned at maximum capacity
All data is encrypted at rest

Correct answer: A system remains operational and accessible with minimal downtime

High availability ensures that a system or service remains accessible and operational with minimal interruption, typically measured as a percentage of uptime.

Question 25: What security feature requires a user to provide two forms of verification before accessing a device or service?

Device encryption
Biometric login
Single Sign-On (SSO)
Multi-Factor Authentication (MFA) (Correct answer)

Correct answer: Multi-Factor Authentication (MFA)

MFA requires users to verify their identity using two or more factors (something you know, have, or are), significantly reducing the risk of unauthorized access.

Question 26: What is the purpose of the HTML5 localStorage API?

Managing user sessions on the server
Storing key-value data persistently in the browser with no expiration (Correct answer)
Storing data on the server
Caching network requests

Correct answer: Storing key-value data persistently in the browser with no expiration

localStorage allows web applications to store key-value pairs in the browser persistently with no expiration date, surviving browser sessions and restarts.

Question 27: True or False? IPSec requires network applications to be a IPSec aware

True
False (Correct answer)

Correct answer: False

IPSec (Internet Protocol Security) operates at the network layer (Layer 3) of the OSI model, providing security services like authentication and encryption transparently. This means that applications running on top of the network layer do not need to be specifically designed or 'IPSec aware' to benefit from the security provided by an IPSec-enabled connection. IPSec secures the communication channel itself, not the application data directly.

Question 28: Which CSS property is used to control the layout of child elements in a flex container?

display: flex (Correct answer)
position: absolute
display: grid
float: left

Correct answer: display: flex

Setting display: flex on a container element activates CSS Flexbox, enabling flexible one-dimensional layouts and alignment control over child elements.

Question 29: What does the HTML5 doctype declaration <!DOCTYPE html> do?

Tells the browser to render the page in HTML5 standards mode (Correct answer)
Declares the page encoding as UTF-8
Links an external stylesheet
Imports JavaScript libraries

Correct answer: Tells the browser to render the page in HTML5 standards mode

The <!DOCTYPE html> declaration instructs the browser to use the HTML5 specification and render the page in standards mode rather than quirks mode.

Question 30: True or False? UAC reduces your permissions to that of a standard user unless higher permissions are necessary

True (Correct answer)
False

Correct answer: True

User Account Control (UAC) is a security feature in Windows designed to prevent unauthorized changes to the operating system. It operates by running most applications with standard user permissions by default, even for administrator accounts. When an action requires higher privileges, UAC prompts the user for consent, effectively reducing the attack surface and protecting against malicious software or accidental system alterations.

Question 31: Which of the following SQL keywords is used to add a new row to a table?

UPDATE
ALTER
INSERT (Correct answer)
SELECT

Correct answer: INSERT

The `INSERT` SQL keyword is specifically used to add new rows, also known as records, into an existing table within a database. This command allows you to specify the table name and provide the values for the columns of the new row. Other keywords like `UPDATE` modify existing rows, `SELECT` retrieves data, and `ALTER` modifies the table's structure.

Question 32: What is the primary purpose of regression testing?

Measuring system performance under load
Testing brand-new features only
Evaluating the user interface design
Verifying that existing functionality still works after code changes (Correct answer)

Correct answer: Verifying that existing functionality still works after code changes

Regression testing re-runs existing tests to confirm that recent changes have not broken previously working functionality.

Question 33: What is the Shared Responsibility Model in cloud security?

The cloud provider handles all security
Security is only the responsibility of third-party vendors
Customers are responsible for all security
Security responsibilities are divided between the provider and the customer based on service model (Correct answer)

Correct answer: Security responsibilities are divided between the provider and the customer based on service model

The Shared Responsibility Model divides security duties: the provider secures the infrastructure, while the customer is responsible for data, access management, and application security.

Question 34: What is the default file system used by modern Windows installations?

NTFS (Correct answer)
ReFS
exFAT
FAT32

Correct answer: NTFS

NTFS (New Technology File System) is the default file system for Windows, supporting large files, permissions, encryption, and journaling.

Question 35: What Azure feature allows you to estimate monthly costs before deploying resources?

Azure Advisor
Azure Cost Management
Azure Monitor
Azure Pricing Calculator (Correct answer)

Correct answer: Azure Pricing Calculator

The Azure Pricing Calculator lets you estimate monthly costs by selecting services, regions, and configurations before you commit to deploying resources.

Question 36: What does boundary value analysis focus on?

Testing values at and just beyond the edges of valid input ranges (Correct answer)
Testing the limits of database storage capacity
Testing only the most typical or average input values
Analyzing network bandwidth boundaries

Correct answer: Testing values at and just beyond the edges of valid input ranges

Boundary value analysis targets values at the exact boundaries of input ranges, where software defects are most likely to occur.

Question 37: What is a cloud SLA (Service Level Agreement)?

A contract defining the guaranteed performance and uptime of a cloud service (Correct answer)
A user license for cloud software
A security policy for cloud data
A list of available cloud regions

Correct answer: A contract defining the guaranteed performance and uptime of a cloud service

An SLA is a formal commitment from a cloud provider specifying minimum performance standards such as uptime percentage, with penalties if the provider fails to meet them.

Question 38: What is the purpose of an Azure Resource Group?

A virtual network boundary
A logical container for grouping related Azure resources (Correct answer)
A billing unit for individual users
A security zone for VMs

Correct answer: A logical container for grouping related Azure resources

An Azure Resource Group is a logical container that holds related Azure resources for a solution, enabling unified management, monitoring, and billing.

Question 39: What is the purpose of CSS media queries in responsive web design?

Embedding media files in web pages
Loading external fonts
Controlling video playback
Applying different styles based on device characteristics like screen width (Correct answer)

Correct answer: Applying different styles based on device characteristics like screen width

CSS media queries apply different style rules based on device characteristics such as screen width, height, or orientation, enabling responsive designs that adapt to different devices.

Question 40: As part of a training exercise, you have been asked to identify the layer that allows applications and a number of useful functions access to the network. Which of the following options represents your response?

The application layer. (Correct answer)
The system layer.
The Data-link layer.
The document layer.

Correct answer: The application layer.

The application layer is the highest layer (Layer 7) in the OSI model, providing network services directly to end-user applications. It enables applications to access network resources and perform various functions such as file transfer, email, and web browsing. This layer interacts with software applications that implement a communicating component, allowing users to interact with the network.

Question 41: Which type of testing evaluates how a system behaves under expected and peak load conditions?

Static testing
Performance testing (Correct answer)
Unit testing
Acceptance testing

Correct answer: Performance testing

Performance testing measures system responsiveness, stability, and scalability under various load levels to ensure acceptable behavior.

Question 42: What is the purpose of the HTML5 <semantic> elements like <header>, <nav>, <article>, and <footer>?

Executing JavaScript code
Providing meaningful structure that improves accessibility and SEO (Correct answer)
Adding visual styling to the page
Loading external content

Correct answer: Providing meaningful structure that improves accessibility and SEO

HTML5 semantic elements convey meaning about the content they contain, helping browsers, screen readers, and search engines understand the document structure.

Question 43: What does NFC stand for and what is its primary use on mobile devices?

Network File Connection; for transferring large files
Network Function Configuration; for mobile network settings
Near Field Communication; for contactless payments and data exchange at very close range (Correct answer)
Narrow Frequency Channel; for improving Wi-Fi signal

Correct answer: Near Field Communication; for contactless payments and data exchange at very close range

NFC (Near Field Communication) enables devices to exchange data wirelessly over very short distances (a few centimeters), commonly used for contactless payments like Apple Pay and Google Pay.

Question 44: True or False? Because senior executives have rights to access sensitive data, they should use administrator accounts

False (Correct answer)
True

Correct answer: False

The principle of least privilege dictates that users, including senior executives, should only have the minimum necessary permissions to perform their job functions. Using an administrator account for daily tasks, even with rights to sensitive data, creates an unnecessary security risk. It exposes the system to potential malware or accidental changes that could compromise data integrity and system security.

Question 45: In the .NET Framework, which method is used to read a line of input from the console?

Console.Write()
Console.WriteLine()
Console.ReadLine() (Correct answer)
Console.Read()

Correct answer: Console.ReadLine()

In C# and the .NET Framework, the `Console.ReadLine()` method is specifically used to read an entire line of text input from the standard input stream, which is typically the console. It waits for the user to type text and press Enter, then returns the entered text as a string. Other `Console` methods like `Write()` and `WriteLine()` are for output, while `Read()` reads only a single character.

Microsoft Technology Associate (MTA)

The MTA is an entry-level Microsoft certification suite validating foundational technology knowledge across IT infrastructure, software development, and database tracks. Individual MTA exams cover networking, security, cloud, HTML5 development, and software testing fundamentals.

Questions

45 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

learn.microsoft.com — Eligibility, renewal, retake policy, score validity · verified Oct 2026
certiport.pearsonvue.com — Test delivery · verified Oct 2026