CompTIA A+ Practice Test.
303 free practice questions with answers and explanations.
No signup required. Choose a topic and review each answer.
Start practicing →About these practice questions
These are original study questions written from published exam objectives—not recalled, copied, or confidential live-exam items. Always confirm current coverage with the official sources linked on this page.
Exam format and study resources
The CompTIA A+ is administered by CompTIA, with 90 scored questions, a 1 hour 30 minutes time limit and a Core 1 (220-1201): 675 on a scale of 900; Core 2 (220-1202): 700 on a scale of 900 result.
This free CompTIA A+ practice test has 303 original questions written to CompTIA's official content outline, last checked against it on August 6, 2026, 200 of them listed on this page and the rest loaded by the drill. Every question shows a worked explanation, and nothing here requires a signup.
Browse all questions & answers
Loading the remaining 103 questions…
1. A technician needs to install RAM into a modern desktop that uses dual-channel memory. To enable dual-channel operation with two identical modules, how should the modules be installed?
- A. Both modules placed in adjacent slots regardless of color
- B. In the matched (usually same-colored) slots specified by the motherboard manual
- C. One module per channel is impossible; dual-channel requires four modules
- D. Both modules in the two slots farthest from the CPU socket
Show answer & explanation
Answer: B
Dual-channel requires a matched pair populated in the correct paired slots, which motherboards typically color-code and document in the manual, so B is correct. Adjacent slots (A) are often the SAME channel and give only single-channel. Dual-channel works with two modules, not four (C). A fixed 'farthest from CPU' rule (D) is not universal and ignores the board's specific pairing.2. A user reports that their laptop runs fine on AC power but the battery drains within minutes and the reported charge percentage jumps erratically. Which component is the most likely cause?
- A. A failing/degraded battery that can no longer hold an accurate charge
- B. A corrupted GPU driver
- C. A failing Wi-Fi antenna
- D. An overheating CPU
Show answer & explanation
Answer: A
Rapid drain plus erratic percentage readings are classic symptoms of a worn lithium-ion battery whose cells and fuel-gauge calibration have degraded, so A is correct. A GPU driver (B) affects display, not charge behavior. A Wi-Fi antenna (C) affects connectivity. An overheating CPU (D) causes throttling/shutdowns, not erratic charge reporting.3. A workstation on a /24 subnet has IP 192.168.1.50 with mask 255.255.255.0. Which of the following addresses is on the SAME local subnet and reachable without a router?
- A. 192.168.2.50
- B. 192.168.1.200
- C. 10.0.1.50
- D. 192.168.0.50
Show answer & explanation
Answer: B
With mask 255.255.255.0 the network is 192.168.1.0/24, so only hosts whose first three octets are 192.168.1.x share the subnet — 192.168.1.200 (B) qualifies. 192.168.2.50 (A) and 192.168.0.50 (D) differ in the third octet, and 10.0.1.50 (C) is an entirely different network; all three require a router.4. A remote user cannot reach an internal web server by its hostname, but pinging the server's IP address succeeds. Which service should the technician troubleshoot first?
- A. DHCP
- B. DNS
- C. NAT
- D. SMTP
Show answer & explanation
Answer: B
The IP works but the name does not, so name-to-address resolution is failing — that is DNS (B). DHCP (A) assigns addresses and here the host already has connectivity. NAT (C) translates addresses for internet traffic, not name resolution. SMTP (D) is for email delivery and is unrelated.5. Which port and protocol pairing is correct for secure, encrypted remote command-line administration of a Linux server?
- A. Telnet over TCP 23
- B. SSH over TCP 22
- C. RDP over TCP 3389
- D. HTTPS over TCP 443
Show answer & explanation
Answer: B
SSH (Secure Shell) on TCP 22 provides encrypted command-line access, so B is correct. Telnet on 23 (A) is command-line but unencrypted. RDP on 3389 (C) is a graphical remote desktop protocol, typically for Windows. HTTPS on 443 (D) secures web traffic, not shell sessions.6. A small office wants wireless clients to authenticate against a central RADIUS server rather than sharing a single passphrase. Which Wi-Fi security mode should be configured?
- A. WPA2-Personal (PSK)
- B. WPA2/WPA3-Enterprise
- C. WEP
- D. Open with MAC filtering
Show answer & explanation
Answer: B
Enterprise mode uses 802.1X with a RADIUS server so each user authenticates with individual credentials, making B correct. Personal/PSK (A) uses one shared passphrase. WEP (C) is obsolete and easily cracked. Open with MAC filtering (D) provides no real authentication and MACs are easily spoofed.7. A company wants to run several isolated server operating systems directly on a single bare-metal host with no underlying host OS, for maximum performance and density. Which technology fits best?
- A. A Type 2 (hosted) hypervisor
- B. A Type 1 (bare-metal) hypervisor
- C. Application containers on a desktop OS
- D. A dual-boot configuration
Show answer & explanation
Answer: B
A Type 1 hypervisor runs directly on hardware without a host OS, offering the best performance for multiple production VMs, so B is correct. A Type 2 hypervisor (A) runs atop an existing OS, adding overhead. Containers (C) share one kernel and are not full isolated OSes. Dual-boot (D) runs only one OS at a time.8. A customer wants a cloud model where they can rapidly scale storage and compute up during busy periods and pay only for what they consume. Which cloud characteristic does this describe?
- A. Resource pooling
- B. Rapid elasticity with measured (metered) service
- C. High availability
- D. Data sovereignty
Show answer & explanation
Answer: B
Scaling on demand and paying per use combine rapid elasticity and measured service, so B is correct. Resource pooling (A) describes shared multi-tenant infrastructure, not the pay-per-use scaling itself. High availability (C) is about uptime/redundancy. Data sovereignty (D) concerns where data is legally stored.9. A desktop powers on, fans spin, but there is no video output and the system emits a repeating beep code. What is the most appropriate FIRST step consistent with the CompTIA troubleshooting methodology?
- A. Immediately replace the motherboard
- B. Identify the problem by consulting the beep-code reference and checking recent changes
- C. Reinstall the operating system
- D. Document the outcome and close the ticket
Show answer & explanation
Answer: B
The methodology begins with identifying the problem, which here means interpreting the beep code and asking what changed, so B is correct. Replacing the board (A) skips theory/testing and may be wrong. Reinstalling the OS (C) is pointless with no POST/video. Documenting and closing (D) is the final step, not the first.10. Several users on one floor intermittently lose network connectivity while users on other floors are unaffected. All affected users connect through the same switch. Following the methodology, what is the best next action after identifying the pattern?
- A. Replace every user's network cable simultaneously
- B. Establish a theory of probable cause, such as a failing switch or its uplink
- C. Rebuild all affected computers from a backup image
- D. Escalate to the vendor before doing any analysis
Show answer & explanation
Answer: B
After identifying that the common factor is one switch, the next methodology step is establishing a theory of probable cause (B). Mass cable replacement (A) is scattershot and ignores the shared-switch clue. Rebuilding PCs (C) is unrelated to a shared network device. Escalating first (D) skips your own analysis.11. A newly built PC displays 'No bootable device' after passing POST. The technician confirms the SATA SSD spins up and is detected in firmware. Which is the MOST likely cause?
- A. The boot order lists a device without an OS ahead of the SSD, or the SSD has no OS installed
- B. The power supply wattage is too low
- C. The RAM is running in single-channel mode
- D. The CPU is not compatible with the chipset
Show answer & explanation
Answer: A
POST passing and the drive being detected point to a boot-configuration issue: either an empty/incorrect boot order or a drive without an OS, so A is correct. Low PSU wattage (B) or CPU incompatibility (D) would prevent POST. Single-channel RAM (C) affects performance, not boot device detection.12. A laser printer produces pages with a repeating faint ghost image of previous content appearing at regular intervals down the page. Which component is the most likely cause?
- A. The imaging drum failing to fully discharge/clean between rotations
- B. A clogged inkjet nozzle
- C. A misaligned print head
- D. Low toner only
Show answer & explanation
Answer: A
Repeating ghost images at a fixed interval correspond to the drum's circumference; a worn or improperly cleaned imaging drum retains residual charge/toner, so A is correct. Inkjet nozzles (B) and print heads (C) belong to inkjet printers, not laser. Simply low toner (D) causes faded, not ghosted, output.13. A technician suspects a failing hard drive causing slow reads and occasional read errors on a Windows PC. Which built-in tool most directly checks and repairs file-system and bad-sector issues on the volume?
- A. sfc /scannow
- B. chkdsk /r
- C. ipconfig /all
- D. diskpart clean
Show answer & explanation
Answer: B
chkdsk /r scans for and attempts to recover data from bad sectors and fixes file-system errors, making B correct. sfc /scannow (A) repairs protected OS files, not disk sectors. ipconfig (C) is a networking tool. diskpart clean (D) erases the disk's partition data — destructive, not diagnostic.14. A monitor connected by HDMI shows an image that flickers and occasionally drops to a black screen, but a second known-good cable resolves it. Which troubleshooting step did this action represent?
- A. Establishing a plan of action
- B. Testing the theory to determine the cause
- C. Documenting findings
- D. Verifying full system functionality
Show answer & explanation
Answer: B
Swapping in a known-good cable to confirm the suspected faulty cable is testing the theory (B). Establishing a plan of action (A) comes after the theory is confirmed. Documentation (C) is the final step. Verifying full functionality (D) happens after the fix is applied and confirmed working.15. A technician wants to power a device such as a wireless access point using the same cable that carries its network data, avoiding a separate electrical outlet. Which technology enables this?
- A. USB-C Power Delivery
- B. Power over Ethernet (PoE)
- C. Wake-on-LAN
- D. Uninterruptible power supply (UPS)
Show answer & explanation
Answer: B
PoE delivers electrical power and data over a single Ethernet cable, ideal for APs and IP cameras, so B is correct. USB-C PD (A) powers over USB, not Ethernet. Wake-on-LAN (C) remotely powers on a PC but does not supply operating power. A UPS (D) provides battery backup, not power over the network cable.16. A user's smartphone gets very hot, drains quickly, and uses far more data than usual, even when idle. Which is the most likely explanation a technician should investigate first?
- A. A rogue or malicious app running in the background
- B. The screen brightness set too high
- C. A cracked screen protector
- D. Bluetooth being enabled
Show answer & explanation
Answer: A
Simultaneous overheating, fast battery drain, and unexpected background data are hallmark signs of a malicious or misbehaving app, so A is correct. High brightness (B) drains battery but does not spike data usage. A screen protector (C) is cosmetic. Bluetooth alone (D) uses minimal power and no cellular data.17. A technician is asked to connect a laptop to an external 4K display and also charge the laptop through a single cable on a modern ultrabook. Which port supports video output, data, and power delivery simultaneously?
- A. USB-C with DisplayPort Alt Mode and Power Delivery
- B. RJ45
- C. Legacy VGA
- D. 3.5mm TRS
Show answer & explanation
Answer: A
USB-C supporting DisplayPort Alt Mode plus Power Delivery carries video, data, and charging over one connector, so A is correct. RJ45 (B) is Ethernet only. VGA (C) is analog video only and cannot carry power or data. A 3.5mm TRS jack (D) is for audio.18. When configuring corporate email on employee mobile devices, the IT team wants the ability to remotely wipe only company data if a device is lost. Which approach best meets this requirement?
- A. Enrolling devices in a Mobile Device Management (MDM) solution with containerization
- B. Emailing each user the company password policy
- C. Disabling Wi-Fi on all devices
- D. Requiring users to back up to a personal cloud account
Show answer & explanation
Answer: A
MDM with a managed container lets IT enforce policy and selectively wipe corporate data without touching personal data, so A is correct. Emailing a policy (B) enforces nothing technically. Disabling Wi-Fi (C) harms usability and doesn't protect lost-device data. Personal cloud backups (D) increase, not reduce, corporate-data exposure.19. A technician must choose a Windows file system for a 64 GB USB flash drive that will be used to transfer large 8 GB video files between Windows and macOS computers. Which file system is the best fit?
- A. FAT32
- B. exFAT
- C. NTFS
- D. ext4
Show answer & explanation
Answer: B
exFAT supports files larger than 4 GB and is read/write compatible with both Windows and macOS, so B is correct. FAT32 (A) caps single files at 4 GB, blocking the 8 GB videos. NTFS (C) is natively read-only on macOS. ext4 (D) is a Linux file system not natively supported by Windows or macOS.20. A Windows administrator needs to apply a security setting to every computer in a domain automatically, without visiting each machine. Which tool is designed for this?
- A. Group Policy (via Active Directory)
- B. Task Manager
- C. Device Manager
- D. Disk Management
Show answer & explanation
Answer: A
Group Policy centrally pushes configuration and security settings to domain-joined computers and users, so A is correct. Task Manager (B) monitors and ends local processes. Device Manager (C) manages hardware drivers on one machine. Disk Management (D) handles local partitions and volumes.21. A technician needs to view real-time CPU, memory, disk, and network utilization and identify which process is consuming the most memory on a Windows 11 PC. Which utility is the most direct choice?
- A. Task Manager
- B. Registry Editor
- C. System Restore
- D. msconfig Boot tab
Show answer & explanation
Answer: A
Task Manager shows live resource utilization per process, letting you spot the top memory consumer, so A is correct. Registry Editor (B) edits configuration keys, not live performance. System Restore (C) rolls back system state. The msconfig Boot tab (D) controls startup options, not real-time monitoring.22. A user with a standard (non-administrator) account needs to install a printer driver that requires elevated privileges. What is the correct, secure way to complete this task?
- A. Permanently add the user to the local Administrators group
- B. Use 'Run as administrator' and supply valid administrator credentials via UAC
- C. Disable User Account Control (UAC) entirely
- D. Boot into Safe Mode to bypass permissions
Show answer & explanation
Answer: B
Elevating just the install task with admin credentials through UAC follows least privilege, so B is correct. Permanently granting admin rights (A) over-privileges the user. Disabling UAC (C) removes a key security control. Safe Mode (D) does not grant a standard user administrative rights and is not the intended mechanism.23. A technician needs to remotely connect to a Windows workstation's full graphical desktop to assist a user. Which built-in Windows feature is intended for this?
- A. Remote Desktop Protocol (RDP)
- B. SSH
- C. FTP
- D. SNMP
Show answer & explanation
Answer: A
RDP provides a full graphical remote-desktop session to Windows, so A is correct. SSH (B) gives an encrypted command line, not a Windows GUI by default. FTP (C) transfers files. SNMP (D) monitors and manages network device metrics, not interactive desktops.24. A macOS user needs a utility to schedule automatic backups to an external drive so they can restore previous file versions. Which native tool should they use?
- A. Time Machine
- B. Disk Utility
- C. Keychain Access
- D. Spotlight
Show answer & explanation
Answer: A
Time Machine is the built-in macOS backup tool for automatic, versioned backups to an external drive, so A is correct. Disk Utility (B) formats and repairs disks. Keychain Access (C) stores credentials. Spotlight (D) is the search feature, not a backup tool.25. A user calls saying a pop-up claims their PC is 'infected' and instructs them to call a phone number for paid support. The user has not run any scan. What should the technician suspect and advise?
- A. It is a legitimate antivirus alert; the user should call the number
- B. It is likely a social-engineering/scareware scam; do not call, close the browser and scan
- C. The hard drive is failing and must be replaced
- D. The pop-up means Windows Update is running
Show answer & explanation
Answer: B
Unsolicited 'infected — call this number' pop-ups are classic scareware/tech-support scams, so B is correct: don't call, close the browser, and run a legitimate scan. It is not a real AV alert (A). It has nothing to do with drive failure (C) or Windows Update (D), which never demand a phone call.26. A company wants to require a fingerprint plus a one-time code from an authenticator app before granting access to a sensitive system. Which security concept does this implement?
- A. Single sign-on (SSO)
- B. Multifactor authentication (MFA)
- C. Least privilege
- D. Data-at-rest encryption
Show answer & explanation
Answer: B
Combining something you are (fingerprint) with something you have (authenticator code) is multifactor authentication, so B is correct. SSO (A) lets one login access many systems but is not inherently multifactor. Least privilege (C) limits access rights. Data-at-rest encryption (D) protects stored data, not the login method.27. An organization is disposing of old hard drives that stored confidential data and must guarantee the data cannot be recovered, but the drives will be donated for reuse. Which method is most appropriate?
- A. Deleting the files and emptying the Recycle Bin
- B. A standard quick format
- C. A secure multi-pass wipe/overwrite (drive sanitization)
- D. Physically shredding the drives
Show answer & explanation
Answer: C
A secure overwrite/sanitization renders data unrecoverable while keeping the drive usable for donation, so C is correct. Deleting files (A) and quick format (B) leave data recoverable. Physical shredding (D) does destroy the data but also destroys the drive, contradicting the reuse requirement.28. To protect against unauthorized access to data if a company laptop is stolen, the technician wants the entire system drive encrypted so it cannot be read without the correct key or credentials. Which Windows feature provides this?
- A. BitLocker
- B. Windows Defender Firewall
- C. User Account Control
- D. Windows Update
Show answer & explanation
Answer: A
BitLocker provides full-disk encryption, protecting data at rest on a stolen laptop, so A is correct. Windows Defender Firewall (B) filters network traffic. UAC (C) controls privilege elevation. Windows Update (D) patches software; none of these encrypt the drive.29. Users report that after clicking a link in an email, their browser homepage changed, ads appear constantly, and searches redirect to unfamiliar sites. Which malware category best describes this behavior?
- A. Ransomware
- B. Rootkit
- C. Browser hijacker / adware (PUP)
- D. Logic bomb
Show answer & explanation
Answer: C
Changed homepage, constant ads, and search redirection are signature behaviors of a browser hijacker/adware, so C is correct. Ransomware (A) encrypts files and demands payment. A rootkit (B) hides itself for stealthy access. A logic bomb (D) triggers a payload on a condition, not persistent ad redirection.30. A Windows PC is confirmed infected with malware. Per the CompTIA best-practice malware-removal steps, what should be done BEFORE running remediation tools?
- A. Immediately reinstall Windows from scratch
- B. Quarantine the infected system and disable System Restore before remediation
- C. Enable System Restore to create more restore points
- D. Connect the machine to the corporate network to update it
Show answer & explanation
Answer: B
The best-practice sequence quarantines the system (to stop spread) and disables System Restore (so malware isn't preserved in restore points) before remediating, so B is correct. Reinstalling immediately (A) is a last resort, not the required prior step. Enabling more restore points (C) can preserve the infection. Reconnecting to the network (D) risks spreading it.31. An Android user reports that a specific app repeatedly crashes on launch after a recent update, while other apps work fine. What is the most appropriate first troubleshooting step?
- A. Factory reset the entire device
- B. Clear the app's cache/data, then update or reinstall the app
- C. Replace the device battery
- D. Flash a custom ROM
Show answer & explanation
Answer: B
For a single misbehaving app, clearing its cache/data and reinstalling addresses corrupt app files with the least disruption, so B is correct. A factory reset (A) is drastic for one app. A battery swap (C) is unrelated to app crashes. Flashing a custom ROM (D) is risky, voids warranties, and is not a support step.32. When a technician arrives at a customer's desk to work on their computer, which behavior best reflects CompTIA's professionalism and communication expectations?
- A. Use technical jargon to demonstrate expertise
- B. Set and meet expectations, communicate in clear terms the user understands, and avoid distractions
- C. Take a personal phone call while working to stay reachable
- D. Access the user's personal files out of curiosity
Show answer & explanation
Answer: B
Professional conduct means communicating clearly, setting/meeting expectations, and avoiding distractions, so B is correct. Using jargon (A) confuses the customer. Taking personal calls (C) is a distraction and unprofessional. Browsing personal files (D) violates privacy and confidentiality.33. A data center technician must handle sensitive circuit boards and memory modules during an upgrade. Which precaution most directly prevents electrostatic discharge (ESD) damage to components?
- A. Wearing an anti-static wrist strap connected to a proper ground
- B. Wearing rubber-soled shoes on carpet
- C. Increasing the room's heating to keep components warm
- D. Holding boards firmly by their gold edge connectors
Show answer & explanation
Answer: A
A grounded anti-static wrist strap safely equalizes charge between the technician and equipment, preventing ESD, so A is correct. Rubber soles on carpet (B) can build static charge. Higher heat (C) does not prevent ESD (low humidity actually worsens it). Touching gold edge connectors (D) can contaminate/damage contacts and does not prevent ESD.34. An organization wants a documented process so that all proposed modifications to production systems are reviewed, approved, and can be rolled back if they cause problems. Which operational practice does this describe?
- A. Change management
- B. Incident response
- C. Asset tagging
- D. End-user acceptance testing only
Show answer & explanation
Answer: A
A formal review/approval/rollback process for system changes is change management, so A is correct. Incident response (B) handles security events after they occur. Asset tagging (C) tracks inventory. Acceptance testing alone (D) is one activity, not the governing approval-and-rollback process.35. Earning the CompTIA A+ certification requires which of the following?
- A. Passing a single 90-minute exam
- B. Passing two separate exams, Core 1 (220-1201) and Core 2 (220-1202), which may be taken in any order
- C. Passing Core 1 before Core 2 in a required order
- D. Completing an unproctored online course only
Show answer & explanation
Answer: B
A+ requires passing both Core 1 and Core 2, and candidates may take them in any order, so B is correct. It is not a single exam (A). The order is not fixed — Core 1 need not precede Core 2 (C). It is not earned by a course alone (D); exams are required.36. Regarding the A+ Core 1 (220-1201) exam format, which statement about the number of questions and time limit is correct?
- A. A maximum of 90 questions with 90 minutes to complete the exam
- B. A maximum of 60 questions with 120 minutes
- C. Exactly 100 questions with 60 minutes
- D. A maximum of 90 questions with 45 minutes
Show answer & explanation
Answer: A
Core 1 contains a maximum of 90 questions and candidates are given 90 minutes, so A is correct. The other options misstate either the question count or the time limit and contradict the published exam objectives.37. On the A+ Core 1 exam, which content domain carries the greatest weight, and approximately what percentage is it?
- A. Hardware, at 25%
- B. Networking, at 23%
- C. Hardware and network troubleshooting, at 28%
- D. Virtualization and cloud computing, at 11%
Show answer & explanation
Answer: C
Hardware and network troubleshooting is the highest-weighted Core 1 domain at 28%, so C is correct. Hardware is 25% (A), Networking is 23% (B), and Virtualization and cloud computing is only 11% (D) — all lower than troubleshooting.38. Toner has spilled inside a laser printer. How should it be cleaned?
- A. With a standard office vacuum cleaner
- B. With a vacuum rated for toner, using cold water if it contacts skin or clothing, since heat fuses the particles
- C. With hot water and detergent
- D. By blowing it out with compressed air indoors
Show answer & explanation
Answer: B
Toner particles are fine enough to pass through a standard vacuum's filter and can damage the motor, so a toner-rated vacuum is required. Toner is designed to fuse with heat, which is why hot water sets it permanently into fabric, and compressed air disperses it into the air and across the room.39. A technician is about to work inside a desktop computer. Which practice addresses electrostatic discharge?
- A. Using an anti-static wrist strap connected to a proper ground, and handling boards by their edges
- B. Working on a carpeted floor to insulate the components
- C. Wearing rubber gloves to prevent any conduction
- D. Increasing the room temperature to reduce humidity
Show answer & explanation
Answer: A
A wrist strap equalizes potential between the technician and the equipment so no discharge occurs, which insulation does not achieve since the charge simply accumulates instead. Carpet generates static and low humidity increases it, so both listed alternatives worsen the exact risk they claim to address.40. A technician is called to a workstation that will not power on. Following the standard troubleshooting methodology, what comes after identifying the problem?
- A. Establish a theory of probable cause, questioning the obvious first
- B. Implement the solution immediately
- C. Document the findings and outcome
- D. Verify full system functionality
Show answer & explanation
Answer: A
The methodology runs identify the problem, establish a theory, test the theory, establish a plan of action, implement, verify full functionality with preventive measures, then document. Skipping to implementation is the most common departure, and it produces fixes that address a symptom while the actual cause remains.41. A desktop powers on briefly then shuts down repeatedly. Which cause should be investigated first?
- A. Overheating from a failed cooling fan or degraded thermal paste triggering thermal shutdown protection
- B. A corrupted user profile in the operating system
- C. An expired software licence
- D. An incorrect display resolution setting
Show answer & explanation
Answer: A
A shutdown occurring seconds after power-on and before the operating system loads points at firmware-level protection, most often thermal or a power supply unable to sustain load. Anything residing in the operating system cannot be the cause when the failure occurs before the operating system has begun to run.42. A workstation displays a blinking cursor with no operating system found message. Which check is most productive first?
- A. The boot order and whether the boot drive is detected in firmware setup
- B. The monitor's brightness setting
- C. Whether the network cable is connected
- D. The installed amount of system memory
Show answer & explanation
Answer: A
The message means firmware completed its self-test and found no bootable device, so the question is whether the drive is present and whether firmware is looking at it. A drive absent from firmware setup indicates a cable, power or drive failure, while a present drive points instead at boot order or a damaged boot record.43. A user reports their laptop battery drains quickly and the chassis is unusually warm. What should be checked before replacing the battery?
- A. Whether a runaway process is consuming CPU continuously, since sustained load explains both symptoms
- B. The screen resolution setting
- C. The number of files on the desktop
- D. Whether the keyboard backlight is enabled
Show answer & explanation
Answer: A
Heat and battery drain together point at sustained power draw rather than at battery degradation, which produces reduced runtime without extra heat. Checking resource usage costs nothing and frequently identifies malware, a stuck update process or a misbehaving application as the actual cause.44. A technician must install RAM in a dual-channel motherboard with four slots. What placement is generally required to enable dual-channel operation?
- A. Matched modules in the slot pairs the board designates for each channel, typically alternating slots rather than adjacent ones
- B. Both modules in the two slots nearest the CPU regardless of colour coding
- C. Any two slots, since the board configures channels automatically
- D. All four slots populated, since dual-channel requires four modules
Show answer & explanation
Answer: A
Dual-channel requires one module per channel, and boards indicate the correct pairs through colour coding or silkscreen labels, commonly meaning slots one and three rather than one and two. Populating the wrong pair leaves the system working in single-channel mode with reduced memory bandwidth and no error message to indicate it.45. A technician replaces a mechanical hard drive with a solid-state drive. Which practice should be avoided on the new drive?
- A. Running a traditional defragmentation routine, which adds write wear without improving performance on flash storage
- B. Enabling TRIM support
- C. Keeping the firmware updated
- D. Leaving some free space unallocated for over-provisioning
Show answer & explanation
Answer: A
Flash storage has no seek penalty, so rearranging data provides no benefit while consuming a finite write endurance budget. TRIM tells the drive which blocks are no longer in use so garbage collection can operate efficiently, which is the maintenance mechanism that actually matters for solid-state drives.46. A printer produces pages with a repeating smudge at consistent intervals down the page. What does this indicate on a laser printer?
- A. A defect on a rotating component such as the drum or a roller, with the interval corresponding to its circumference
- B. An incorrect paper size setting in the driver
- C. A network connectivity problem
- D. An outdated printer driver
Show answer & explanation
Answer: A
Regularly spaced defects map to a rotating part, and measuring the interval identifies which component since each has a distinct circumference. Driver and network issues produce garbled output, incorrect formatting or failed jobs rather than a physical mark repeating at a fixed pitch.47. A workstation must be disposed of and contains a lithium-ion battery and a CRT monitor. What governs disposal?
- A. Local regulations and the manufacturer's safety data sheet, since both items are regulated waste that cannot go to general refuse
- B. Standard office waste procedures, since the equipment is obsolete
- C. The organization's internal preference alone
- D. No requirements apply once data has been erased
Show answer & explanation
Answer: A
Batteries and CRT monitors contain hazardous materials subject to disposal regulation independent of any data on the device. The safety data sheet documents handling, storage and disposal requirements for the specific material, and data sanitization is a separate obligation addressing a different risk entirely.48. A user calls about an issue while the technician is finishing another task. What is the appropriate professional conduct?
- A. Acknowledge the user, set a realistic expectation for when the issue will be addressed, and follow through
- B. Promise immediate attention regardless of current commitments
- C. Avoid responding until the current task is complete
- D. Redirect the user to solve the issue themselves
Show answer & explanation
Answer: A
Communication expectations centre on setting and meeting realistic timelines rather than on promising speed that cannot be delivered. An unmet promise damages credibility more than an honest wait time, and silence leaves the user unable to plan around the outage.49. A technician discovers apparently illegal content while servicing a user's computer. What is the correct action?
- A. Preserve the device state, report through the organization's defined chain of custody process, and avoid further examination
- B. Delete the content and continue the repair
- C. Investigate further to confirm what was found
- D. Discuss the finding with colleagues before deciding
Show answer & explanation
Answer: A
Prohibited content triggers a defined escalation with documented custody, and further examination by an unqualified technician can compromise both the evidence and the technician's position. Deleting it destroys evidence and discussing it informally breaches confidentiality around what may become a legal matter.50. A Windows workstation must have a specific service stopped and prevented from restarting after reboot. Which approach accomplishes this?
- A. Stopping the service and setting its startup type to disabled in the services management console
- B. Ending the process in task manager only
- C. Deleting the service's program files
- D. Removing the user's permission to view the service
Show answer & explanation
Answer: A
Stopping addresses the current session while the startup type governs behaviour at the next boot, so both are needed for a persistent change. Ending the process leaves the startup configuration intact, and deleting program files breaks the service in a way that generates errors rather than cleanly disabling it.51. A technician needs to compare NTFS and FAT32 for a drive that will store files larger than 8 GB on a Windows system. Which applies?
- A. NTFS, because FAT32 imposes a maximum individual file size of 4 GB
- B. FAT32, because NTFS cannot store files above 4 GB
- C. Either, since neither imposes a file size limit
- D. FAT32, because it supports file-level permissions
Show answer & explanation
Answer: A
The 4 GB per-file ceiling is FAT32's defining practical limitation, alongside its lack of journaling, file-level permissions, compression and encryption. FAT32 retains value only for cross-platform removable media where broad device compatibility outweighs those capabilities.52. A user's files must be preserved while the operating system is reinstalled on the same drive. What distinguishes an in-place upgrade from a clean install here?
- A. An in-place upgrade retains applications, settings and files, while a clean install removes them and requires restoring from backup
- B. A clean install retains user files automatically
- C. An in-place upgrade requires reformatting the drive
- D. Neither approach affects user data
Show answer & explanation
Answer: A
In-place upgrades preserve the existing environment but can also carry forward the corruption or misconfiguration that prompted the reinstall, which is why a clean install is preferred when the cause is unclear. Either way a verified backup is taken first, since an interrupted upgrade can leave the system in a state where neither the old nor the new installation boots.53. A macOS user needs to force-quit an unresponsive application. Which utility is appropriate?
- A. The Force Quit dialog or Activity Monitor, which lists running processes and their resource use
- B. Disk Utility, which manages storage volumes
- C. Time Machine, which manages backups
- D. Keychain Access, which manages stored credentials
Show answer & explanation
Answer: A
Activity Monitor is the macOS equivalent of task manager for inspecting and terminating processes. Disk Utility handles volume formatting and repair, Time Machine handles backup and restore, and Keychain Access stores credentials and certificates, each addressing a distinct maintenance area.54. A Linux administrator must change a file's permissions so the owner can read, write and execute while the group and others can only read. Which numeric mode applies?
- A. 744
- B. 777
- C. 644
- D. 755
Show answer & explanation
Answer: A
Read is 4, write is 2 and execute is 1, so read plus write plus execute is 7 for the owner and read alone is 4 for group and others, giving 744. Mode 755 would additionally grant execute to group and others, 644 omits execute for the owner, and 777 grants everything to everyone.55. A workstation on a corporate network cannot reach any internal or external resource, and shows an address beginning 169.254. What does this indicate?
- A. The client failed to obtain an address from DHCP and self-assigned a link-local address
- B. The client received a valid address from the corporate DHCP server
- C. The client is using a static address configured by the administrator
- D. The client's firewall is blocking outbound traffic only
Show answer & explanation
Answer: A
The 169.254 range is automatic private addressing assigned when no DHCP response arrives, so the fault lies between the client and the DHCP service rather than in the client's IP stack. Cable, switch port, VLAN assignment, DHCP scope exhaustion and a failed relay are the usual causes to check in that order.56. A technician sets up a virtual machine on a workstation. Which hardware feature must generally be enabled in firmware?
- A. CPU virtualization extensions, which the hypervisor requires to run guest instructions efficiently
- B. Secure boot, which validates the boot chain
- C. Wake-on-LAN, which permits remote power-on
- D. Fast startup, which shortens boot time
Show answer & explanation
Answer: A
Hardware virtualization support is commonly disabled by default and its absence produces hypervisor errors that appear unrelated to firmware settings. Secure boot, wake-on-LAN and fast startup address boot integrity, remote power management and startup time respectively, none of which affect a hypervisor's ability to run guests.57. An organization moves from on-premises servers to a cloud provider's infrastructure as a service offering. What remains the organization's responsibility?
- A. The guest operating system, applications, configuration and data, while the provider maintains the physical infrastructure and hypervisor
- B. Nothing, since the provider assumes full responsibility
- C. Only the physical security of the data centre
- D. Only the network cabling within the facility
Show answer & explanation
Answer: A
Infrastructure as a service places the boundary below the guest operating system, so patching, configuration and data protection above that line remain with the customer. The boundary moves upward through platform and software as a service, which is why assuming one model's division applies to another is a frequent source of unaddressed exposure.58. A mobile device user reports that the touchscreen responds in the wrong locations. What should be attempted before hardware replacement?
- A. Removing any screen protector or case interfering with the digitizer, and restarting the device to clear a software fault
- B. Reinstalling every application individually
- C. Replacing the battery
- D. Changing the device's language settings
Show answer & explanation
Answer: A
Digitizer misregistration is often caused by a poorly fitted protector, moisture or a transient software fault, all of which are quick to rule out before condemning the assembly. Working from least invasive and least expensive toward most is the general troubleshooting economy for mobile hardware, where the screen assembly is typically the costliest part.59. A company issues mobile devices and wants to enforce encryption, passcode policy and the ability to wipe a lost device. What technology provides this?
- A. Mobile device management, which enrolls devices and applies and enforces policy centrally
- B. A group policy object applied from the domain controller
- C. The device manufacturer's consumer find-my-device service
- D. An antivirus application installed on each device
Show answer & explanation
Answer: A
Mobile device management provides enrollment, policy enforcement and remote actions including selective wipe of corporate data on personally owned devices. Group policy targets domain-joined Windows systems rather than mobile platforms, and consumer location services offer no central policy enforcement or reporting.60. A user's applications launch slowly and the drive activity light is constantly lit on a system with a mechanical hard drive. What should be checked?
- A. Available free space, drive health indicators and whether excessive paging is occurring due to insufficient memory
- B. The monitor's refresh rate
- C. The keyboard layout setting
- D. The number of installed fonts
Show answer & explanation
Answer: A
Constant drive activity with slow response typically means the system is paging because physical memory is exhausted, or the drive is failing and retrying reads. Checking drive health attributes distinguishes the two, and a nearly full drive compounds both by leaving no room for the page file to expand.61. A workstation displays browser pop-ups and redirects even when no browser is open. What is the most likely cause and appropriate first step?
- A. Malware, which should be addressed by isolating the system from the network before beginning remediation
- B. An incorrect default browser setting, corrected in system preferences
- C. A failing hard drive, addressed by replacing the drive
- D. An outdated graphics driver, addressed by updating it
Show answer & explanation
Answer: A
Activity continuing with no browser running indicates resident malicious software rather than a browser configuration issue. Quarantining the system first prevents spread and stops the malware communicating outward while remediation proceeds, and the remediation sequence continues with scanning in a safe environment, cleaning, updating and educating the user.62. A technician must securely dispose of drives containing sensitive data before recycling the hardware. Which method provides the strongest assurance?
- A. Physical destruction such as shredding or degaussing for magnetic media, with a certificate of destruction retained
- B. Deleting the files and emptying the recycle bin
- C. Performing a quick format of the volume
- D. Renaming the files to obscure their contents
Show answer & explanation
Answer: A
Deletion and quick formatting remove file system references while leaving the data recoverable, so neither constitutes sanitization. Degaussing works on magnetic media but not on solid-state drives, which require cryptographic erase or physical destruction, and the certificate provides the evidence that disposal actually occurred.63. A user needs to run a single application that requires administrative rights, on an account that is a standard user. What is the appropriate approach?
- A. Elevate that specific application when needed, keeping the account a standard user for everyday work
- B. Add the user to the local administrators group permanently
- C. Disable user account control so no prompt appears
- D. Share the built-in administrator account credentials with the user
Show answer & explanation
Answer: A
Per-application elevation preserves least privilege while satisfying the requirement, whereas permanent administrator membership means every process the user runs, including malware, inherits those rights. Disabling the elevation prompt and sharing built-in credentials both remove accountability along with the control.64. A technician documents a completed repair. Why does this step matter beyond the individual ticket?
- A. Because it builds a knowledge base that shortens future diagnosis and reveals recurring patterns across the estate
- B. Because documentation is required to close the billing record only
- C. Because it transfers responsibility for the fault to the user
- D. Because it is required only for warranty claims
Show answer & explanation
Answer: A
Documented findings turn one technician's diagnosis into an organizational asset and surface patterns invisible in any single ticket, such as a batch of failing units or a recurring driver conflict. Without it, the same problem is rediagnosed from scratch each time it recurs.65. A change to a production system is proposed. What should a change request include before approval?
- A. The purpose and scope, a risk analysis, the implementation plan and a rollback plan if the change fails
- B. Only the name of the technician performing the change
- C. Only the scheduled date and time
- D. Only confirmation that a backup exists
Show answer & explanation
Answer: A
The rollback plan is the element most often omitted and the one that matters most when a change goes wrong at three in the morning. Scope and risk analysis let the approver judge whether the change is proportionate, and end-user acceptance criteria define what a successful outcome looks like.66. A technician is installing a new NVMe SSD into a laptop's M.2 slot and notices two keying notches align differently from the socket. Which factor determines compatibility between the M.2 module and the socket?
- A. The connector key type (e.g., M-key vs B-key) must match the socket wiring for the module to fit and function correctly.
- B. The color of the printed circuit board must match the motherboard chipset color scheme.
- C. The physical length of the module in millimeters is irrelevant as long as the connector is present.
- D. Any M.2 module works in any M.2 slot as long as the screw hole is present.
Show answer & explanation
Answer: A
The M-key/B-key notch configuration on an M.2 module indicates which bus (SATA vs PCIe/NVMe) and pin layout the module supports, so a mismatched key will not align with the socket's corresponding pins; length matters for the standoff screw position but does not by itself guarantee electrical compatibility, and PCB color has no functional bearing.67. A technician is upgrading a desktop's graphics card to a model that requires an 8-pin PCIe power connector, but the existing power supply only has 6-pin PCIe connectors available. What should the technician do?
- A. Force the 6-pin connector into the 8-pin socket since two of the pins are only for grounding.
- B. Replace the power supply with one that provides a native 8-pin PCIe connector rated for the card's power draw.
- C. Connect two 6-pin connectors together with electrical tape to create an 8-pin connector.
- D. Power the card from a SATA power connector using a generic splitter regardless of current rating.
Show answer & explanation
Answer: B
A GPU requiring an 8-pin PCIe connector needs the correct pin count and current-carrying capacity that a properly rated power supply provides natively; improvised adapters or forcing mismatched connectors risk insufficient power delivery, overheating connectors, or damaging the card and power supply, so replacing the supply with a compatible unit is the correct and safe approach.68. While replacing a cracked screen, a technician notices the smartphone's battery is visibly swollen and pushing against the case. What is the safest immediate action?
- A. Continue the repair as planned since a swollen battery still functions normally.
- B. Puncture the battery to release trapped gas before continuing the repair.
- C. Stop work, avoid puncturing or bending the battery, and replace it following safe lithium-ion handling procedures.
- D. Charge the device fully first to verify the battery still holds a charge.
Show answer & explanation
Answer: C
A swollen lithium-ion battery indicates internal cell breakdown and a risk of fire or chemical burns if punctured, bent, or short-circuited, so the safe practice is to stop work, handle it carefully without piercing the casing, and replace it per proper disposal and safety procedures rather than continuing normal repair steps or attempting to charge or vent it.69. A laptop has three individual keys that no longer register keystrokes, while the rest of the keyboard works normally. What is the most likely repair approach on most consumer laptops?
- A. Reflow the solder joints on the motherboard beneath the affected keys.
- B. Reinstall the operating system to restore the keyboard driver for those specific keys.
- C. Swap the laptop's RAM modules, since faulty memory commonly causes isolated key failures.
- D. Replace the entire keyboard or top case assembly, since individual keys are typically not sold as separate field-replaceable parts.
Show answer & explanation
Answer: D
Consumer laptop keyboards are usually built as a single membrane or scissor-switch assembly, often integrated into the top case, so a hardware fault affecting a few keys typically requires replacing the whole keyboard or top case rather than sourcing individual keycap parts; a driver reinstall would not explain a physical, localized failure, and RAM issues do not selectively disable specific keys.70. A tablet fails to charge when plugged into its charging cable, but the same cable successfully charges another identical tablet model. What should the technician check first?
- A. Inspect and clean the tablet's charging port for lint, debris, or corrosion that could block the connector.
- B. Replace the tablet's battery immediately, since a battery is the only possible cause.
- C. Reinstall the tablet's operating system to fix the charging circuit.
- D. Assume the wall outlet is faulty even though the same outlet charges other devices normally.
Show answer & explanation
Answer: A
Since the cable works fine on an identical device, the fault is isolated to the individual tablet rather than the cable or outlet; debris, lint, or corrosion inside the charging port is a common and easily checked cause of failed charging, making port inspection the logical first step before assuming a battery failure or reinstalling software, which would not affect physical charging contact.71. A workstation can communicate with other devices on its local subnet but cannot reach any external websites, even though DNS resolves names correctly. The IP configuration shows a subnet mask and IP address that appear correct. What should the technician check next?
- A. Verify that the DNS server address matches the subnet mask exactly.
- B. Verify that the default gateway address is correctly configured and reachable.
- C. Change the workstation's MAC address to resolve the routing conflict.
- D. Disable the local subnet's DHCP server to force a new IP lease.
Show answer & explanation
Answer: B
Local subnet communication working but external access failing despite correct DNS resolution points to a routing problem, and the default gateway is the address used to forward traffic outside the local subnet; an incorrect or unreachable gateway would produce exactly this symptom, whereas DNS is already confirmed working and MAC address or DHCP changes would not address a routing failure.72. A company needs to connect network switches in two buildings located 2 kilometers apart, beyond the maximum distance supported by copper Ethernet cabling. Which solution is most appropriate?
- A. Use a longer Cat 6 copper cable run between the buildings with a signal repeater every 50 meters.
- B. Use a standard RJ45 patch cable rated for outdoor use to span the distance.
- C. Use fiber optic cabling with SFP transceivers installed in each switch to bridge the connection.
- D. Use a wireless access point configured in ad hoc mode between the two switches.
Show answer & explanation
Answer: C
Copper Ethernet has a maximum practical segment distance of around 100 meters, far short of 2 kilometers, while fiber optic cabling paired with SFP transceivers supports distances of several kilometers with minimal signal loss, making it the appropriate choice; repeating copper that far is impractical, outdoor-rated copper doesn't change its distance limitation, and ad hoc Wi-Fi is not designed for reliable building-to-building switch interconnects.73. A software developer wants to run an isolated test operating system inside a window on their existing Windows desktop, without dedicating separate physical hardware. Which solution is most appropriate?
- A. Install a bare-metal hypervisor directly on the desktop's hardware in place of Windows.
- B. Configure the desktop to dual-boot into a second operating system at startup.
- C. Install the test operating system on a USB drive and boot from it using legacy BIOS.
- D. Install a type 2 hypervisor application within the existing Windows OS to host the virtual machine.
Show answer & explanation
Answer: D
A type 2 hypervisor runs as an application on top of an existing host operating system, letting a user launch an isolated virtual machine in a window without replacing or repartitioning the current OS; a bare-metal (type 1) hypervisor would require removing the host OS, dual-booting only runs one OS at a time rather than simultaneously, and a bootable USB does not provide the requested windowed, concurrent isolation.74. A company subscribes to a web-based email and productivity suite where the vendor manages the servers, operating systems, application code, and updates entirely, leaving the company responsible only for user accounts and data. Which cloud service model does this describe?
- A. Software as a Service (SaaS)
- B. Infrastructure as a Service (IaaS)
- C. Platform as a Service (PaaS)
- D. Desktop as a Service (DaaS) limited to virtual desktop delivery only
Show answer & explanation
Answer: A
Software as a Service delivers a complete, ready-to-use application, such as web-based email, where the provider manages the entire stack including servers, operating system, and application code, leaving the customer responsible only for their data and user accounts; IaaS would require the customer to manage the OS and application themselves, and PaaS would still require the customer to manage application code and deployment.75. A laptop repeatedly disconnects from Wi-Fi every few minutes while wired devices in the same room remain connected. After confirming the theory that the wireless adapter driver is outdated, the technician updates the driver but the problem persists. According to the standard troubleshooting methodology, what should happen next?
- A. Declare the issue resolved since a plausible cause was already addressed.
- B. Re-establish a new theory of probable cause and test again.
- C. Escalate immediately to the ISP without further local testing.
- D. Replace the laptop's motherboard as the next logical step.
Show answer & explanation
Answer: B
When a theory of probable cause is tested and does not resolve the symptom, the standard troubleshooting methodology calls for establishing a new theory rather than assuming success or jumping to a drastic hardware replacement; escalating to the ISP is premature since wired devices are unaffected, pointing to a local wireless-specific cause that still needs to be identified.76. Multiple users in an office report they cannot print to a shared network printer, though the print server itself responds to ping and is powered on. What should the technician check first on the print server?
- A. Whether the office's internet connection is functioning.
- B. Whether each user's monitor is displaying correctly.
- C. Whether the print spooler service is running on the print server.
- D. Whether the printer's toner cartridge is more than half full.
Show answer & explanation
Answer: C
When a print server is reachable on the network but jobs are not processing for multiple users, a stopped or hung print spooler service is a common and easily verified cause, since the spooler manages queued print jobs; internet connectivity is unrelated to local network printing, monitor display issues would not affect printing, and toner level would typically only affect a single printer's output quality, not a server-wide failure to print for all users.77. A desktop computer runs fine at idle but shuts down unexpectedly whenever the user runs a demanding application like video editing software. The technician opens the case and finds the CPU heatsink packed with dust. What is the most likely cause of the shutdowns?
- A. The power supply is undersized for idle workloads only.
- B. The video editing software has a licensing conflict that forces a shutdown.
- C. The RAM is failing only when the CPU is under high load.
- D. The CPU is overheating under heavy load due to restricted airflow from the dust buildup, triggering thermal protection shutdown.
Show answer & explanation
Answer: D
Dust-clogged heatsinks restrict airflow and reduce cooling efficiency, and this problem only manifests under sustained heavy load, like video editing, when the CPU generates more heat than the impaired cooling can dissipate, triggering a thermal protection shutdown; the system runs fine at idle because heat output is low, ruling out software licensing, and RAM failures typically cause crashes or errors rather than clean shutdowns tied specifically to CPU load.78. A technician uses a cable tester on a newly made patch cable and sees that pins 3 and 6 show as open (no continuity) while the other pins test fine. What does this most likely indicate?
- A. The RJ45 connector was crimped with those two wires not properly seated or terminated.
- B. The cable is using the wrong category rating for the network speed required.
- C. The switch port the cable will connect to is faulty.
- D. The cable is too long and exceeds maximum distance specifications.
Show answer & explanation
Answer: A
An open reading on specific pins during a continuity test indicates a physical break in those wires at the connector, most commonly caused by a wire not being fully seated against the contact during crimping; this is a termination defect specific to the cable itself, not a category rating issue, distance limitation, or a switch port problem, which the tester would not detect independent of the cable.79. A Windows 11 PC has several system files reported as corrupted, causing intermittent application crashes. The technician wants to scan for and repair corrupted system files using a built-in command-line tool. Which command should be run?
- A. diskpart clean
- B. sfc /scannow
- C. ipconfig /flushdns
- D. chkdsk /x only
Show answer & explanation
Answer: B
The System File Checker command scans protected system files for corruption and automatically repairs them using a cached copy, directly addressing corrupted system files; diskpart clean would destructively erase a disk's partitions, ipconfig /flushdns only clears the DNS resolver cache, and chkdsk primarily checks the file system and disk surface for errors rather than repairing corrupted Windows system files specifically.80. An administrator wants a backup script to run automatically every night at 2 AM on a Windows Server without any manual intervention. Which built-in tool should be used to configure this?
- A. Task Scheduler
- B. Local Users and Groups
- C. Device Manager
- D. Disk Management
Show answer & explanation
Answer: A
Task Scheduler allows an administrator to configure a script or program to run automatically at specified times or triggers, such as nightly at 2 AM, without manual intervention; Device Manager manages hardware drivers, Disk Management handles partitions and volumes, and Local Users and Groups manages account permissions, none of which provide time-based automated task execution.81. An organization requires that every laptop's system drive be encrypted using Windows' native full-disk encryption feature. Which consideration determines whether a given Windows 11 laptop can use this feature natively?
- A. The laptop must have at least four USB ports available for encryption keys.
- B. The laptop must be disconnected from any domain or Microsoft account.
- C. The laptop must be running an edition of Windows that includes BitLocker, such as Pro or Enterprise, rather than Home.
- D. The laptop must have a mechanical hard drive rather than a solid-state drive.
Show answer & explanation
Answer: C
BitLocker, the native Windows full-disk encryption feature, is included only in Pro, Enterprise, and Education editions of Windows, not in the Home edition, so edition matters when planning a fleet-wide encryption rollout; drive type, domain membership, and USB port count are not requirements for enabling BitLocker on a supported edition.82. A Linux administrator needs to view a real-time, continuously updating list of running processes along with their CPU and memory usage from the command line. Which command is designed for this purpose?
- A. top
- B. ls -la
- C. mkdir
- D. chmod 755
Show answer & explanation
Answer: A
The top command displays a continuously updating, real-time view of running processes along with their CPU and memory consumption, making it suited for live system monitoring; ls -la lists files and directories, mkdir creates a directory, and chmod changes file permissions, none of which provide any process monitoring information.83. A Windows user wants to revert recent system changes and driver installations that caused instability, while keeping their personal files, installed applications, and settings intact. Which built-in recovery option best matches this goal?
- A. Reset this PC with the 'Remove everything' option
- B. System Restore to a restore point created before the changes
- C. A clean installation of Windows from bootable media
- D. Formatting the system drive and reinstalling all applications manually
Show answer & explanation
Answer: B
System Restore reverts system files, installed drivers, and registry settings to an earlier restore point while leaving personal files and most user data untouched, making it ideal for undoing recent driver or system changes without disturbing everything else; 'Remove everything' resets and deletes user data and apps, and a clean install or manual reformat would also erase applications and require full reconfiguration.84. An employee receives an urgent email appearing to be from the company's CEO, demanding an immediate wire transfer and instructing the employee not to discuss it with anyone else first. Which social engineering technique does this scenario best illustrate?
- A. A brute-force attack against the employee's email password.
- B. A denial-of-service attack against the company's mail server.
- C. Business email compromise using urgency and authority impersonation to pressure quick action.
- D. A man-in-the-middle attack intercepting the employee's network traffic.
Show answer & explanation
Answer: C
This scenario exhibits classic business email compromise tactics, impersonating an authority figure and creating false urgency plus secrecy to bypass normal verification and pressure the target into acting quickly without questioning the request; it involves no password cracking, server flooding, or traffic interception, which distinguishes it from brute-force, denial-of-service, or man-in-the-middle attacks.85. A network administrator configures a firewall to deny all inbound traffic by default and only explicitly allow the specific ports required for approved services. Which security principle does this configuration best demonstrate?
- A. Non-repudiation, by ensuring actions can be traced to a specific user.
- B. Redundancy, by providing a backup path if the primary firewall fails.
- C. Load balancing, by distributing traffic across multiple servers.
- D. Least privilege, by minimizing exposed attack surface to only what is necessary.
Show answer & explanation
Answer: D
Denying everything by default and allowing only explicitly required ports minimizes the number of open pathways an attacker could exploit, which is the essence of the least-privilege principle applied to network access; this configuration does not address user accountability, provide failover redundancy, or distribute traffic load, so those principles don't describe what is being demonstrated here.86. A business wants visiting guests to access the internet over Wi-Fi without being able to reach internal file servers or printers on the corporate network. Which approach best achieves this separation?
- A. Place guest Wi-Fi on a separate VLAN isolated from the internal corporate network segments.
- B. Give guests the same SSID and password as employees but a slower bandwidth cap.
- C. Disable DHCP on the guest network so devices cannot obtain an IP address.
- D. Require guests to install the corporate VPN client before connecting.
Show answer & explanation
Answer: A
Placing guest Wi-Fi on its own VLAN logically separates guest traffic from internal corporate resources at the network layer, allowing internet access while preventing guests from reaching internal servers and printers; sharing the same network with a bandwidth cap does not isolate traffic, disabling DHCP would prevent guests from connecting at all, and requiring a corporate VPN would actually grant guests access to internal resources, the opposite of the goal.87. A recently updated application fails to launch on a Windows 10 PC, showing an error that it requires a newer version of the operating system. Reinstalling the application does not resolve the issue. What is the most appropriate next troubleshooting step?
- A. Run the application in compatibility mode for an older Windows version.
- B. Check whether the application actually requires a Windows version or feature not present on this PC, and update Windows or use a supported application version.
- C. Disable the PC's antivirus software permanently to allow the application to run.
- D. Replace the PC's power supply to resolve the software error.
Show answer & explanation
Answer: B
An explicit error stating the application requires a newer OS version points directly to a compatibility requirement mismatch, so the appropriate step is verifying and addressing that requirement, either by updating Windows or using a version of the application compatible with the current OS; compatibility mode simulates older, not newer, OS behavior, so it would not help here, and antivirus or power supply changes are unrelated to an OS version requirement error.88. A user's web browser has become noticeably slow to load pages and occasionally freezes, despite a fast internet connection and no other applications running. What should the technician try first?
- A. Reinstall the entire operating system to fix the browser's performance.
- B. Replace the computer's network interface card.
- C. Clear the browser's cache and disable or remove unnecessary extensions and add-ons.
- D. Increase the monitor's refresh rate setting.
Show answer & explanation
Answer: C
A slow, freezing browser despite good connectivity and no competing applications commonly results from an overloaded cache or resource-heavy extensions running in the background, so clearing cached data and disabling unnecessary add-ons is a quick, low-risk first step; reinstalling the OS is excessive for a browser-specific issue, and neither the network card nor monitor refresh rate affects browser rendering performance in this scenario.89. A technician resolves a recurring hardware issue using a novel workaround not found in existing documentation. Beyond closing the ticket, what should the technician do to benefit future support staff facing the same issue?
- A. Keep the solution informal and share it verbally only if asked.
- B. Delete the ticket once resolved to keep the system uncluttered.
- C. Wait for a supervisor to independently discover and document the same solution.
- D. Document the issue and resolution in the knowledge base so other technicians can reference it for similar future problems.
Show answer & explanation
Answer: D
Recording a novel resolution in a shared knowledge base ensures the organization retains institutional knowledge and allows other technicians to resolve similar issues faster in the future, which is a core best practice in IT support documentation; relying on verbal sharing, deleting records, or waiting for someone else to rediscover the fix all fail to preserve or propagate the solution effectively.90. A technician needs to move a heavy tower server from a lower rack position to a higher one by hand. Which practice best reduces the risk of personal injury during this task?
- A. Bend at the knees, keep the load close to the body, and get help or use a lift for heavy items.
- B. Lift quickly using the back to minimize the time spent in a bent position.
- C. Twist at the waist while lifting to place the server directly into position in one motion.
- D. Lift the server using one hand while holding cables with the other for balance.
Show answer & explanation
Answer: A
Proper lifting technique for heavy equipment involves bending at the knees rather than the back, keeping the load close to the body's center of gravity, and requesting assistance or mechanical aid for items too heavy to lift safely alone, which reduces strain and injury risk; lifting with the back, twisting while loaded, or using only one hand are all recognized unsafe practices that increase the risk of back injury or dropping the equipment.91. A technician needs to know the specific first-aid response and safe handling precautions for a chemical cleaning solvent used in the shop before using it on a repair. Where should the technician look for this information?
- A. The device manufacturer's warranty terms.
- B. The Safety Data Sheet (SDS) for that specific chemical product.
- C. The operating system's event viewer logs.
- D. The company's general employee handbook table of contents.
Show answer & explanation
Answer: B
A Safety Data Sheet provides detailed information specific to a chemical product, including composition, handling precautions, and first-aid measures, making it the authoritative source for this need; a warranty document addresses product coverage, the event viewer records system or software events unrelated to chemical safety, and a general employee handbook typically lacks the detailed chemical-specific safety data provided by an SDS.92. While repairing a customer's computer, a technician discovers files that appear to be evidence of illegal activity. After reporting it through proper channels, what is essential regarding how the device is subsequently handled?
- A. Immediately delete the suspicious files to protect the customer's privacy.
- B. Return the device to the customer right away so they are not without their computer.
- C. Continue using the device normally for further repair work since the report has already been filed.
- D. Maintain a documented chain of custody, limiting access to the device until authorities have addressed the matter.
Show answer & explanation
Answer: D
Once evidence of illegal activity is identified and reported, maintaining a documented chain of custody with restricted access is essential to preserve the integrity of that evidence for any investigation; continuing normal use could alter or destroy evidence, deleting files would constitute tampering and potentially obstruction, and returning the device before authorities address the matter could result in loss of evidence and legal complications for the shop.93. A server room's temperature and humidity monitoring system alerts that humidity has dropped significantly below the recommended range during winter. What risk does excessively low humidity primarily introduce to the equipment?
- A. Increased risk of corrosion from condensation forming on circuit boards.
- B. Increased risk of mold growth on cabling and connectors.
- C. Increased risk of the equipment's fans running too loudly.
- D. Increased risk of electrostatic discharge damaging sensitive components.
Show answer & explanation
Answer: D
Low humidity dries out the air, which increases the buildup and discharge of static electricity, raising the risk of electrostatic discharge damaging sensitive electronic components; condensation and mold risks are associated with high, not low, humidity, and humidity level does not directly affect fan noise, making ESD the primary concern in an overly dry server room environment.94. A MacBook user wants automatic, ongoing backups of the whole system to an external drive using software already included with macOS. What should the technician set up?
- A. Boot Camp
- B. Disk Utility's First Aid
- C. Mission Control
- D. Time Machine
Show answer & explanation
Answer: D
Time Machine is the built-in macOS backup service that keeps hourly, daily, and weekly snapshots on a designated external or network drive and restores files or whole systems. Boot Camp partitions the Mac to install Windows, First Aid checks and repairs disk structures without copying data anywhere, and Mission Control is a window and desktop management feature unrelated to backups.95. A user wants more memory installed in a thin laptop that has one user-accessible memory slot. Which module form factor should the technician order for this upgrade?
- A. SODIMM
- B. Full-size desktop DIMM
- C. Registered ECC server DIMM
- D. SIMM
Show answer & explanation
Answer: A
Laptops use the small outline DIMM form factor because it is roughly half the length of a desktop module and fits the compact slot layout of portable boards. A full-size DIMM is physically too large, registered ECC modules are built for servers and are both the wrong size and electrically incompatible, and SIMM is an obsolete standard from decades-old systems.96. A technician is upgrading storage in a laptop whose M.2 slot supports PCIe. Which drive type will deliver the fastest performance in that slot?
- A. An M.2 SATA SSD
- B. An NVMe SSD that communicates over PCIe lanes
- C. An mSATA SSD with an adapter
- D. A 7200 rpm 2.5-inch hard drive
Show answer & explanation
Answer: B
NVMe drives talk directly over PCIe lanes and dramatically outrun the SATA interface ceiling of roughly 600 MB per second. An M.2 SATA drive fits the same slot but is still bound by SATA speeds, an mSATA drive on an adapter has the same limitation with added compatibility risk, and a spinning hard drive is the slowest of all and does not fit an M.2 slot anyway.97. A new branch office firewall blocks all outbound traffic by default. Users report they can reach websites by typing IP addresses but every hostname fails to load. Which port should be opened to restore name resolution?
- A. TCP 80
- B. UDP 69
- C. TCP 445
- D. UDP 53
Show answer & explanation
Answer: D
Working access by IP with failing hostnames is the signature of blocked DNS, which performs standard lookups over UDP port 53. TCP 80 is plain web traffic and is clearly already flowing since IP browsing works, UDP 69 belongs to TFTP used for device config transfers, and TCP 445 carries Windows file sharing rather than name resolution.98. An e-commerce administrator wants the public web storefront reachable only over encrypted connections. Which default port should remain open to the internet on the web server?
- A. 443
- B. 8080
- C. 80
- D. 21
Show answer & explanation
Answer: A
HTTPS encrypts web sessions with TLS and listens on TCP 443 by default, so that is the port a secure-only storefront needs exposed. Port 80 serves unencrypted HTTP, which the administrator explicitly wants closed or redirected, 8080 is a common alternate or proxy port rather than the encrypted default, and 21 is FTP control traffic unrelated to serving web pages.99. Employees can receive email in their desktop mail client, but sending through the company server with authentication times out from a hotel network. Which outbound port is the hotel most likely blocking?
- A. 143
- B. 110
- C. 53
- D. 587
Show answer & explanation
Answer: D
Authenticated mail submission from clients uses TCP 587, so blocking it breaks sending while leaving retrieval untouched. Port 110 is POP3 and 143 is IMAP, both of which handle downloading or synchronizing mail and are evidently working since messages arrive, and port 53 is DNS, which must be functioning because the server's name is resolving at all.100. A technician configures a mail client to keep folders synchronized with the server over an encrypted connection using secure IMAP. Which port should the client profile specify?
- A. 995
- B. 143
- C. 993
- D. 25
Show answer & explanation
Answer: C
IMAP over an implicit TLS connection uses TCP 993, which keeps server-side folders synchronized while encrypting the session. Port 995 is the secure version of POP3, a download-and-delete protocol that does not synchronize folders, 143 is IMAP without encryption, and 25 is the SMTP relay port used between mail servers rather than for mailbox access.101. A Windows user cannot map a drive to a file server that sits on a different routed segment, though the server responds to ping. Which TCP port must the firewall between the segments permit for the Windows file sharing protocol?
- A. 389
- B. 445
- C. 143
- D. 3389
Show answer & explanation
Answer: B
Modern Windows file and printer sharing runs SMB directly over TCP 445, so drive mapping across a routed boundary requires that port to be open. Port 389 is LDAP directory lookups, 143 is IMAP mail synchronization, and 3389 is Remote Desktop; none of them carry the SMB sessions that a mapped drive depends on.102. During the laser printer imaging process, which step actually deposits toner particles onto the electrostatic latent image that the laser wrote on the drum?
- A. Developing
- B. Processing
- C. Cleaning
- D. Fusing
Show answer & explanation
Answer: A
In the developing step, charged toner is attracted from the developer roller onto the areas of the drum the laser discharged, turning the invisible latent image into a visible toner image. Cleaning scrapes leftover toner off the drum after transfer, fusing happens later when heat bonds toner to paper, and processing is the initial step where the page is rasterized in memory before any physical imaging begins.103. From an affected workstation, pings to public IP addresses succeed every time, but browsing to any website by its name fails. Which network service should the technician investigate?
- A. SNMP
- B. DHCP
- C. SMTP
- D. DNS
Show answer & explanation
Answer: D
Successful pings to raw addresses prove routing and connectivity work end to end, so failures that appear only when names are involved isolate the fault to name resolution. DHCP evidently did its job because the machine has working addressing, SMTP only carries email between servers, and SNMP is a monitoring protocol for collecting device statistics rather than resolving names.104. A user brings in a laptop whose trackpad has started bulging upward, and the case no longer sits flat on a desk. The laptop still powers on normally. What should the technician do first?
- A. Recalibrate the battery by fully discharging and recharging it
- B. Update the trackpad driver and firmware
- C. Power the laptop down and replace the battery, which is likely swollen
- D. Press the case flat and monitor the laptop over the next month
Show answer & explanation
Answer: C
A bulging trackpad or a case that rocks on a flat surface is a classic sign of a swollen lithium-ion battery, which is a rupture and fire hazard. The safe response is to power down and replace the battery without compressing or puncturing it. Discharge cycles cannot reverse physical swelling, a driver update only touches software, and forcing the case flat risks rupturing the cell.105. A photographer wants a laptop whose panel produces true blacks by switching individual pixels completely off, with no backlight layer at all. Which display technology meets this requirement?
- A. IPS LCD
- B. TN LCD
- C. VA LCD
- D. OLED
Show answer & explanation
Answer: D
OLED panels are emissive: each pixel generates its own light and can turn fully off, producing true black without any backlight. IPS, TN, and VA are all LCD variants that filter light from an always-on backlight, so some light leaks through even when displaying black, and none of them can match the contrast of a self-emissive panel.106. A laptop screen appears almost completely dark, but when the technician shines a flashlight at the panel from an angle, the desktop image is faintly visible underneath. Which component has most likely failed?
- A. The discrete graphics processor
- B. The LCD panel's pixel matrix
- C. The display backlight or its power circuitry
- D. The video driver installed in the operating system
Show answer & explanation
Answer: C
If the image is present but only visible under a flashlight, the panel is still being driven correctly and only the illumination stage is dead, which points to the backlight or the circuit feeding it. A failed GPU or driver would produce no coherent image at all, and a failed pixel matrix would not render a faint but complete desktop.107. After a tablet screen assembly is replaced, taps register about an inch away from where the user actually touches. The picture itself looks perfect. Which component is the most likely cause?
- A. A defective LCD panel
- B. A failed gyroscope
- C. A misreading ambient light sensor
- D. A faulty or poorly seated digitizer
Show answer & explanation
Answer: D
The digitizer is the layer that senses touch position, so misaligned or offset touch input with a perfect image points to a digitizer that is defective or needs calibration after the repair. The LCD only produces the picture, the gyroscope handles orientation sensing, and the ambient light sensor only adjusts brightness, so none of those would shift touch coordinates.108. A technician replaces a laptop display assembly. Afterward the laptop detects almost no wireless networks even when sitting next to the access point. What did the technician most likely fail to do during reassembly?
- A. Enable the wireless radio in UEFI setup
- B. Reinstall the wireless network adapter driver
- C. Re-pair the laptop's Bluetooth devices
- D. Reconnect the Wi-Fi antenna leads that route up through the display housing
Show answer & explanation
Answer: D
Most laptops route their Wi-Fi antenna wires around the display panel inside the lid, and they must be unplugged from the wireless card during a screen replacement. Leaving them disconnected leaves the radio working but nearly deaf, which matches very weak signal at close range. A disabled radio or missing driver would show no adapter at all rather than weak reception, and Bluetooth pairing is unrelated to Wi-Fi scanning.109. An accountant wants to connect a laptop to two external monitors, wired Ethernet, and a keyboard through a single cable that also charges the laptop. What should the technician recommend?
- A. A USB 2.0 hub
- B. A USB-C docking station that supports Power Delivery and video output
- C. An HDMI splitter
- D. A Bluetooth adapter
Show answer & explanation
Answer: B
A USB-C dock with Power Delivery carries video, USB peripherals, Ethernet, and charging over one cable, which is exactly the single-connection desk setup requested. A USB 2.0 hub adds ports but carries no video or charging, an HDMI splitter mirrors one video signal rather than extending two displays and does nothing for power or Ethernet, and Bluetooth cannot drive monitors or charge a laptop.110. A customer's wireless earbuds were previously paired to an old phone, and now they will not appear in the new phone's Bluetooth list. What should the customer try first?
- A. Put the earbuds into pairing mode so they become discoverable to the new phone
- B. Factory reset the new phone
- C. Replace the earbud batteries
- D. Enable airplane mode on the new phone before scanning
Show answer & explanation
Answer: A
Bluetooth accessories usually reconnect automatically to their last paired device and stay hidden from scans until they are put back into pairing mode, so making the earbuds discoverable is the correct first step. A factory reset of the phone is a drastic measure that does not make the earbuds discoverable, sealed earbuds rarely have replaceable batteries, and airplane mode disables the very radios needed to pair.111. A customer asks which short-range technology built into most current smartphones lets them pay at a store terminal simply by holding the phone against the reader. What should the technician answer?
- A. NFC
- B. Bluetooth
- C. GPS
- D. Infrared
Show answer & explanation
Answer: A
Near-field communication operates over a range of a few centimeters and is the technology behind tap-to-pay wallets on phones and watches. Bluetooth works over several meters and requires pairing rather than a tap, GPS is a one-way positioning receiver with no payment capability, and infrared ports on phones are used for remote-control functions, not secure contactless transactions.112. A field sales representative staying at a hotel with no usable Wi-Fi needs to get a laptop online using only a smartphone that has a strong cellular signal. Which phone feature should the technician have the rep enable?
- A. The mobile hotspot or tethering feature
- B. NFC tag reading
- C. Wi-Fi calling
- D. Location sharing
Show answer & explanation
Answer: A
A hotspot shares the phone's cellular data connection with nearby devices over Wi-Fi, and tethering can do the same over USB or Bluetooth, which is exactly what the laptop needs. NFC is a payment and tag technology with centimeter range, Wi-Fi calling routes voice calls over an existing wireless network rather than providing one, and location sharing broadcasts position, not connectivity.113. A user spilled coffee on a laptop last week, and several keys now stick or repeat characters even though the machine otherwise works fine. What is the most practical long-term fix?
- A. Remap the sticking keys to unused key combinations
- B. Replace the laptop's internal keyboard assembly
- C. Have the user rely on the on-screen keyboard permanently
- D. Flash updated keyboard firmware
Show answer & explanation
Answer: B
Sugary liquid leaves residue under the keycaps and inside the membrane, and once keys stick or repeat, replacing the keyboard assembly or top case is the reliable repair. Remapping keys just relocates the problem while leaving contaminated switches in place, the on-screen keyboard is a workaround rather than a fix for daily typing, and firmware cannot compensate for physically fouled contacts.114. After a clean operating system reinstall on a laptop, the fingerprint sign-in option is grayed out, and Device Manager shows an unknown device with a warning icon. What should the technician do first?
- A. Replace the fingerprint sensor hardware
- B. Re-enroll fingerprints without changing anything else
- C. Disable secure sign-in options entirely
- D. Install the vendor's fingerprint reader driver, then re-enroll the user's fingerprints
Show answer & explanation
Answer: D
A clean install wipes vendor-specific drivers, and an unknown device in Device Manager confirms the reader is detected but has no driver, so installing the correct driver and then re-enrolling prints restores the feature. Replacing hardware is premature when the sensor was working before the reinstall, enrollment cannot proceed while the option is grayed out, and disabling biometric sign-in abandons the feature instead of repairing it.115. An executive frequently reviews confidential spreadsheets on airplane flights and worries that the passenger in the next seat can read the laptop screen. Which accessory directly addresses this concern?
- A. An anti-glare matte film
- B. A tempered glass screen protector
- C. A blue light reduction filter
- D. A privacy filter that narrows the screen's viewing angle
Show answer & explanation
Answer: D
A privacy filter uses micro-louvers to restrict the visible angle of the display so only someone directly in front can read it, which defeats casual snooping from an adjacent seat. Anti-glare film only cuts reflections, tempered glass protects against scratches and impacts, and blue light filters change color temperature for eye comfort; none of those limit who can see the content.116. A graphic designer complains that colors on a budget laptop shift badly whenever the screen is viewed from the side. Which panel type should the replacement laptop use to get wide viewing angles and consistent color?
- A. TN
- B. A high refresh rate TN panel
- C. IPS
- D. A monochrome e-ink panel
Show answer & explanation
Answer: C
In-plane switching panels are known for stable, accurate color across wide viewing angles, which is why they dominate displays aimed at design work. Twisted nematic panels are cheap and fast but shift color and contrast dramatically off-axis, raising the refresh rate does nothing to fix that inherent TN weakness, and e-ink cannot display color-accurate design work at all.117. A firewall administrator must allow help desk staff to reach an internal jump box using the remote desktop client built into Windows. Which inbound TCP port must be opened on the firewall?
- A. 22
- B. 3389
- C. 443
- D. 5900
Show answer & explanation
Answer: B
Remote Desktop Protocol listens on TCP 3389 by default, so that port must be permitted for the built-in Windows client to connect. Port 22 carries SSH sessions, 443 carries HTTPS web traffic, and 5900 is the default for VNC, a different remote control product that the Windows client does not speak.118. A technician has decided to manage a Linux appliance across the WAN using SSH. Which TCP port does this traffic use by default?
- A. 23
- B. 21
- C. 25
- D. 22
Show answer & explanation
Answer: D
SSH provides an encrypted command-line channel on TCP port 22 by default. Port 23 belongs to Telnet, which sends credentials in cleartext and should not cross a WAN, port 21 is the FTP control channel for file transfers, and port 25 carries server-to-server SMTP mail relay, none of which are the secure shell service.119. A legacy batch job still transfers nightly reports with unencrypted FTP. When documenting firewall rules, which two default server-side ports should the technician list for this protocol?
- A. 21 for data and 22 for control
- B. 25 for data and 110 for control
- C. 20 for data and 21 for control
- D. 67 for data and 68 for control
Show answer & explanation
Answer: C
Classic FTP splits its work across two ports: commands travel on the TCP 21 control channel while file contents move on TCP 20 in active mode. Pairing 21 with 22 wrongly mixes in the SSH port, 25 and 110 are the SMTP and POP3 mail ports, and 67 and 68 are the UDP ports used by DHCP address leasing rather than file transfer.120. A network engineer is writing firewall rules for a relay agent that forwards client address lease requests to a central server on another subnet. Which UDP port pair does this leasing service use?
- A. 20 on the server side and 21 on the client side
- B. 67 on the server side and 68 on the client side
- C. 80 on the server side and 443 on the client side
- D. 137 on the server side and 138 on the client side
Show answer & explanation
Answer: B
DHCP servers listen on UDP 67 while clients send and receive on UDP 68, and a relay agent forwards between those ports across subnets. Ports 20 and 21 belong to FTP file transfer over TCP, 80 and 443 are web traffic, and 137 and 138 are legacy NetBIOS name and datagram services, none of which handle address leasing.121. A company purchases Wi-Fi 6E access points expecting relief from congestion, but its older laptops never appear on the newly available spectrum. Which frequency band can only Wi-Fi 6E and newer clients use?
- A. 6 GHz
- B. 2.4 GHz
- C. 5 GHz
- D. 60 GHz
Show answer & explanation
Answer: A
The E in Wi-Fi 6E stands for the extension into the 6 GHz band, spectrum that only 6E-capable radios can join, which is why legacy laptops stay on the old bands. The 2.4 GHz and 5 GHz bands have been used by earlier Wi-Fi generations for years, and 60 GHz belongs to the separate short-range WiGig technology rather than mainstream Wi-Fi 6E.122. A home user's wireless connection drops every time the kitchen microwave runs. The router broadcasts on both bands, and the affected laptop currently joins the 2.4 GHz network. What is the best fix?
- A. Connect the laptop to the 5 GHz network instead
- B. Increase the router's 2.4 GHz transmit power
- C. Change the WPA2 passphrase
- D. Enable WPS on the router
Show answer & explanation
Answer: A
Microwave ovens radiate noise in the 2.4 GHz range, so moving the client to 5 GHz sidesteps the interference entirely. Raising transmit power does not stop the microwave from drowning out the receive side, changing the passphrase affects authentication rather than radio interference, and WPS is a push-button pairing convenience that has no effect on signal quality.123. While surveying a small office, a technician finds three access points broadcasting 2.4 GHz on channels 3, 7, and 10, and clients report heavy interference. Which channel assignment should replace this plan?
- A. Channels 36, 40, and 44
- B. Channels 1, 2, and 3
- C. Channels 1, 6, and 11
- D. Channels 2, 5, and 8
Show answer & explanation
Answer: C
In the 2.4 GHz band, channels 1, 6, and 11 are the only trio spaced far enough apart to avoid overlapping each other, so three access points should be split across exactly those. The combinations 2, 5, 8 and 1, 2, 3 all overlap and interfere with one another, while 36, 40, and 44 are 5 GHz channels that do not exist in the 2.4 GHz band.124. A homeowner wants to view a self-hosted camera DVR from the internet. The DVR listens on a single TCP port at a private address on the home LAN. What must be configured on the SOHO router to make this work?
- A. A guest wireless network
- B. WPA3 encryption on the wireless radio
- C. A shorter DHCP lease time
- D. Port forwarding that maps an external port to the DVR's internal address and port
Show answer & explanation
Answer: D
Because the DVR sits behind NAT on a private address, the router must forward an external port to the DVR's internal address before inbound connections can reach it. A guest network only isolates visitor Wi-Fi, WPA3 secures wireless traffic but does not create an inbound path, and DHCP lease length controls how often addresses renew rather than how outside traffic gets in.125. A small business owner wants visiting clients to have internet access in the lobby without any ability to reach the office file server or printers. Which SOHO router feature accomplishes this most simply?
- A. An isolated guest network with its own SSID
- B. Port forwarding rules for each visitor device
- C. Quality of service prioritization
- D. Dynamic DNS
Show answer & explanation
Answer: A
Consumer and small business routers include a guest network mode that gives visitors internet access while blocking them from the internal LAN, which is precisely the requirement. Port forwarding controls inbound access to internal services and would do nothing to segregate guests, QoS shapes bandwidth priorities rather than access, and dynamic DNS just keeps a hostname pointed at a changing public address.126. After migrating to a new email provider, an administrator must point the domain's inbound mail delivery at the provider's servers. Which DNS record type must be updated?
- A. A
- B. CNAME
- C. MX
- D. TXT
Show answer & explanation
Answer: C
Mail exchanger records tell sending servers where to deliver email for a domain, so switching providers means updating the MX records to the new hosts. An A record maps a hostname to an IPv4 address for general traffic, a CNAME aliases one name to another, and TXT records hold arbitrary text such as sender verification strings; none of them direct inbound mail routing on their own.127. A web administrator wants a hostname to resolve directly to the server's IPv6 address. Which DNS record type should be created?
- A. A
- B. AAAA
- C. PTR
- D. MX
Show answer & explanation
Answer: B
AAAA records map a hostname to a 128-bit IPv6 address, which is exactly what forward resolution to an IPv6 server requires. An A record holds only a 32-bit IPv4 address, a PTR record performs the reverse job of mapping an address back to a name, and an MX record steers inbound email rather than resolving a host for general connections.128. An office network printer picks up a different address every few days, which breaks the printer port configured on every user's PC. Workstations should keep getting their settings automatically. What is the cleanest fix?
- A. Create a DHCP reservation tied to the printer's MAC address
- B. Shorten the DHCP lease time for the whole scope
- C. Set every workstation to a static address
- D. Disable DHCP on the network entirely
Show answer & explanation
Answer: A
A reservation makes the DHCP server hand the printer the same address every time based on its MAC, keeping the address stable while everything else stays dynamic. Shortening leases makes addresses change more often, not less, converting every workstation to static addressing is heavy-handed and does not stabilize the printer, and disabling DHCP breaks automatic configuration for the whole office.129. A network technician must keep VoIP phone traffic logically separated from desktop data traffic even though both use the same physical switches. Which technology provides this separation?
- A. NAT
- B. VLANs
- C. Power over Ethernet
- D. Dynamic DNS
Show answer & explanation
Answer: B
VLANs partition one physical switch into multiple logical broadcast domains, letting phones and PCs share hardware while their traffic stays segregated and separately prioritized. NAT translates private addresses to public ones at a boundary, PoE delivers electrical power over network cabling to devices like phones, and dynamic DNS keeps hostnames current; none of those isolate traffic on a shared switch.130. A Windows service crashes intermittently with no error visible to the user. Where should a technician look first for time-stamped records of each failure, including error codes?
- A. The Recycle Bin
- B. Credential Manager
- C. The Downloads folder
- D. The System and Application logs in Event Viewer
Show answer & explanation
Answer: D
Windows records service failures, faulting modules, and error codes with timestamps in the Event Viewer logs, making it the primary evidence source for intermittent crashes. The Recycle Bin holds deleted files, Credential Manager stores saved usernames and passwords, and the Downloads folder is just user file storage; none of them capture diagnostic events.131. A remote employee working from hotel rooms needs an encrypted tunnel into the corporate network so internal applications behave as if the laptop were in the office. What should the technician configure?
- A. A Telnet session to each internal server
- B. An SFTP client for the file server
- C. A VPN client that connects to the company concentrator
- D. A DNS forwarder on the laptop
Show answer & explanation
Answer: C
A VPN builds an encrypted tunnel from the laptop to the corporate gateway and places the machine logically on the internal network, which is the stated requirement. Telnet is an unencrypted terminal protocol unsuited to hostile hotel networks, SFTP moves files securely but only to one service rather than granting network access, and a DNS forwarder changes name lookups without providing any connectivity or encryption.132. In a wiring closet with an unlabeled patch panel, a technician must identify which panel port connects to a specific office wall jack. Which tool pair is designed for exactly this job?
- A. A tone generator and probe
- B. A crimper and RJ45 plugs
- C. A multimeter
- D. A loopback plug
Show answer & explanation
Answer: A
The tone generator injects an audible signal at the wall jack and the probe picks it up at the patch panel, letting the technician trace which port carries the tone. A crimper attaches connectors to cable ends, a multimeter measures voltage and continuity but cannot efficiently single out one cable in a bundle, and a loopback plug tests a single port's transmit and receive rather than tracing runs.133. A technician terminating Cat 6 cable onto the 110-style contacts on the back of a new keystone jack needs to seat each conductor and trim the excess in one motion. Which tool does this?
- A. An RJ45 crimper
- B. A punchdown tool
- C. A tone probe
- D. A cable stripper
Show answer & explanation
Answer: B
A punchdown tool presses each wire into the insulation-displacement contacts of a keystone jack or block and its blade trims the excess conductor in the same stroke. A crimper is for attaching modular plugs to cable ends rather than jacks, a tone probe locates cables instead of terminating them, and a stripper only removes the outer sheath before termination begins.134. A freshly made patch cable is suspected of having conductors landed in the wrong pin order. Which tool verifies the wire map of every conductor from one end of the cable to the other?
- A. A cable tester
- B. A loopback plug
- C. A Wi-Fi analyzer
- D. A punchdown tool
Show answer & explanation
Answer: A
A cable tester lights up each pin pair in sequence and reveals opens, shorts, and miswired or crossed pairs, which is exactly how a bad pinout is confirmed. A loopback plug checks a single network port by feeding its transmit line back to receive, a Wi-Fi analyzer surveys wireless channels rather than copper, and a punchdown tool terminates wire but cannot evaluate it.135. An access point must be mounted on a warehouse ceiling where a network drop exists but no electrical outlet is nearby. The existing switch does not supply power over its ports. What is the least disruptive way to power the access point?
- A. Replace the entire switch with a PoE-capable model
- B. Hire an electrician to add a ceiling outlet
- C. Insert a PoE injector between the switch and the access point
- D. Run a long extension cord across the ceiling joists
Show answer & explanation
Answer: C
A PoE injector adds power to the existing data run for a single device at minimal cost and with no changes to the rest of the network. Swapping the whole switch works but is far more expensive and disruptive for one port, adding an electrical outlet involves construction cost and delay, and stringing an extension cord across a ceiling violates electrical safety practice.136. A developer asks why the company softphone system tolerates a few lost packets during calls but never pauses to wait for retransmissions. Which transport behavior explains this design?
- A. The calls ride on TCP, which retransmits every lost segment
- B. The audio is carried inside ICMP echo packets
- C. The calls ride on UDP, which favors low latency over guaranteed delivery
- D. The audio is broadcast using ARP frames
Show answer & explanation
Answer: C
Real-time voice uses UDP because a retransmitted packet would arrive too late to be played anyway, so the protocol simply presses on and the codec conceals small gaps. TCP's reliable delivery would add delay and jitter that ruin conversations, ICMP is a diagnostic and error-reporting protocol that carries no application audio, and ARP resolves addresses on the local segment rather than transporting media.137. A workstation can print and reach internal file servers, but no external websites load and pings to public IP addresses fail. Internal DNS still resolves outside names correctly. Which network setting on the workstation is most suspect?
- A. The default gateway address
- B. The DNS server address
- C. A duplicate computer name
- D. The NIC duplex setting
Show answer & explanation
Answer: A
Local traffic works and names resolve, but nothing beyond the subnet answers, which is the signature of a wrong or missing default gateway since that is the only path off the local network. DNS is demonstrably working because external names resolve, a duplicate computer name causes naming conflicts rather than a clean split between local and remote reachability, and a duplex mismatch causes slowness and errors on all traffic instead of a hard boundary at the subnet edge.138. A user wants to drive a 4K monitor directly from a laptop's USB-C port using a single passive USB-C to DisplayPort cable. Which capability must the laptop's port support for this to work?
- A. USB On-The-Go
- B. Battery quick charge
- C. Audio accessory mode
- D. DisplayPort alternate mode
Show answer & explanation
Answer: D
Alternate mode reassigns some of the USB-C connector's high-speed pairs to carry native DisplayPort signaling, which is what a passive video cable depends on. USB On-The-Go lets a mobile device act as a USB host for peripherals, quick charge governs power negotiation rather than video, and audio accessory mode repurposes the pins for analog headsets; none of these can output a display signal.139. A financial analyst wants two monitors connected in a chain, with one cable from the PC to the first monitor and a second cable linking the first monitor to the second. Which display interface supports this arrangement natively?
- A. HDMI
- B. VGA
- C. DVI-D
- D. DisplayPort with multi-stream transport
Show answer & explanation
Answer: D
DisplayPort's multi-stream transport allows several independent displays to be daisy-chained through a single output, with each monitor passing the remaining streams along. HDMI has no native daisy-chain capability and mirroring splitters are not the same as extending, while VGA and DVI-D are legacy point-to-point interfaces that carry exactly one display per cable.140. A facilities team cabling a new office requires 10 Gbps over copper at run lengths approaching 100 meters. Which cable category is the minimum that meets this requirement at full distance?
- A. Cat 5e
- B. Cat 6
- C. Cat 3
- D. Cat 6a
Show answer & explanation
Answer: D
Cat 6a is rated for 10 Gbps at the full 100 meter channel length, making it the minimum grade for these runs. Cat 5e tops out at gigabit speeds for practical installs, Cat 6 can carry 10 Gbps only on short runs of roughly 55 meters or less, and Cat 3 is an obsolete voice-grade cable far below the requirement.141. Network runs at a manufacturing plant pass directly alongside high-voltage motor equipment, and the copper links keep corrupting frames. Which cabling change eliminates the interference problem entirely?
- A. Swap to a higher category of unshielded twisted pair
- B. Replace the affected runs with fiber optic cable
- C. Use coaxial cable with F connectors
- D. Shorten the runs by coiling excess cable near the motors
Show answer & explanation
Answer: B
Fiber carries light rather than electrical signals, so electromagnetic noise from motors cannot induce errors on it at all. A higher category of unshielded copper is still copper and still susceptible, coax remains an electrical medium with its own noise limits, and coiling slack near the noise source concentrates the problem instead of fixing it.142. A technician is installing a cable modem in a customer's home. Which connector attaches the service provider's coaxial line to the back of the modem?
- A. A BNC bayonet connector
- B. A threaded F connector
- C. An RJ11 plug
- D. An SC fiber connector
Show answer & explanation
Answer: B
Residential cable service uses RG6 coax terminated with a threaded F connector that screws onto the modem's port. BNC is a bayonet-style coax connector found on lab gear and legacy networks rather than home cable drops, RJ11 is the small modular plug for analog telephone lines, and SC is a square snap-in connector for fiber optic strands.143. A medical office still uses an analog fax line. Which connector terminates the telephone cord that plugs into the fax machine's line port?
- A. RJ45
- B. RJ11
- C. F connector
- D. USB-B
Show answer & explanation
Answer: B
Analog phone lines use the narrow RJ11 modular connector, typically wired with one or two pairs, and fax machines expect it on their line jack. RJ45 is the wider eight-position connector used for Ethernet, an F connector carries coaxial cable television and broadband, and USB-B is a peripheral data connector that cannot interface with the telephone network.144. An external SSD performs at a small fraction of its rated speed when plugged into the black USB-A port on a desktop's front panel, but reaches full speed in the blue port beside it. What explains the difference?
- A. The black port is USB 2.0, which is far slower than the USB 3.x blue port
- B. The SSD's onboard cache fills up in the black port
- C. Blue ports overclock the drive's controller
- D. The black port delivers less power, so the drive throttles
Show answer & explanation
Answer: A
Black USB-A ports typically indicate USB 2.0 at 480 Mbps, while blue signifies USB 3.x at 5 Gbps or better, so the same drive is simply bus-limited in the older port. The drive's cache behavior does not change by port, no USB port overclocks a device, and while ports differ in power delivery, the drive works normally in both, ruling out throttling as the cause of the gap.145. A technician tries to seat a DDR4 module in a brand-new motherboard, but the notch in the module does not line up with the key in the slot no matter the orientation. What does this indicate?
- A. The board uses a different memory generation with incompatible keying, likely DDR5
- B. The module is upside down and will seat once flipped
- C. The slot's retention latches are still closed
- D. The module requires a firmware update before it will fit
Show answer & explanation
Answer: A
Each DDR generation places its notch at a different position exactly so that modules cannot be inserted into slots of another generation, and a new board refusing DDR4 keying points to DDR5 slots. Flipping the module cannot align an off-center notch because the technician already tried both orientations, closed latches block downward pressure but do not misalign the key, and firmware is irrelevant to physical fit.146. A desktop has four memory slots labeled A1, A2, B1, and B2, and the manual instructs installing a matched pair into A2 and B2. What performance benefit does following this placement provide?
- A. It keeps the modules cooler by spacing them apart
- B. It enables dual-channel operation, widening effective memory bandwidth
- C. It lowers the CAS latency of both modules
- D. It reserves the other slots for ECC modules
Show answer & explanation
Answer: B
Placing one module in each channel lets the memory controller interleave accesses across both simultaneously, effectively doubling the data path compared with two modules on one channel. Any cooling difference from spacing is incidental and not the documented reason, timings like CAS latency are set by the modules and firmware rather than slot position, and consumer boards do not reserve slots for ECC memory.147. A virtualization host experiences rare, unexplained crashes that the vendor attributes to single-bit memory corruption. Which memory type detects and corrects these errors on the fly?
- A. ECC memory
- B. Dual-rank consumer memory
- C. Overclocked memory with XMP profiles
- D. SODIMM memory
Show answer & explanation
Answer: A
Error-correcting code memory stores extra check bits that let the controller detect and repair single-bit flips before they corrupt data, which is why servers and virtualization hosts use it. Dual-rank describes chip organization rather than error handling, XMP profiles push modules faster and can actually increase error rates, and SODIMM is merely a compact form factor with no error correction implied.148. A user adds a memory module rated at 3200 MT/s alongside an existing module rated at 2666 MT/s, and the system boots with both detected. At what speed will the pair typically operate?
- A. Both modules run at 3200 MT/s
- B. The pair averages out to roughly 2933 MT/s
- C. Both modules run at 2666 MT/s, the slower module's rate
- D. Each module runs independently at its own rated speed
Show answer & explanation
Answer: C
The memory controller clocks all installed modules together, so the whole configuration drops to the fastest speed every module can sustain, which is the slower rating. Running everything at the faster rate would push the older module beyond spec and cause instability, controllers do not average speeds, and modules on the same controller cannot be clocked independently of one another.149. A video editor's M.2 SATA SSD tops out around 550 MB/s. The motherboard's M.2 slot also accepts PCIe drives. Which upgrade provides the largest sequential speed increase using that same slot?
- A. A higher-capacity M.2 SATA drive
- B. An NVMe drive that uses the slot's PCIe lanes
- C. A second SATA data cable to the same drive
- D. Enabling hot swap for the SATA controller
Show answer & explanation
Answer: B
An NVMe drive communicates over PCIe lanes and can sustain several gigabytes per second, blowing past the roughly 600 MB/s ceiling of the SATA interface the current drive is stuck behind. A bigger SATA drive hits the same interface wall regardless of capacity, drives do not aggregate multiple data cables, and hot swap is a convenience feature that has no effect on throughput.150. A small accounting firm wants its bookkeeping workstation to keep running with no data loss if either of its two identical disks fails. No additional drives can be added. Which RAID level fits?
- A. RAID 0
- B. RAID 5
- C. RAID 1
- D. RAID 10
Show answer & explanation
Answer: C
RAID 1 mirrors two drives so every write lands on both, letting the system continue on the surviving disk if one dies. RAID 0 stripes with no redundancy and loses everything when a single drive fails, RAID 5 requires at least three drives to build its parity scheme, and RAID 10 needs a minimum of four drives to combine mirroring with striping.151. A NAS contains three 4 TB drives configured as a single-parity striped array. How much usable capacity does the array offer, and how many simultaneous drive failures can it survive?
- A. 12 TB usable, surviving one drive failure
- B. 4 TB usable, surviving two drive failures
- C. 8 TB usable, surviving one drive failure
- D. 8 TB usable, surviving two drive failures
Show answer & explanation
Answer: C
Single-parity striping across three drives is RAID 5, which sacrifices one drive's worth of space to parity, leaving two of the three 4 TB drives usable for 8 TB, and it tolerates exactly one failed member. Claiming all 12 TB ignores the parity overhead, and any answer promising two simultaneous failures describes dual-parity RAID 6, which needs at least four drives.152. A gaming PC stored its media library on two drives striped together with no parity or mirroring. One of the drives has just died completely. What is the state of the stored data?
- A. The half stored on the surviving drive remains fully usable
- B. The array rebuilds automatically from parity information
- C. The data is intact because the second drive was a mirror
- D. Effectively all of it is lost, because every file was split across both drives
Show answer & explanation
Answer: D
Striping without redundancy is RAID 0, which slices every file into alternating blocks across both drives, so losing one drive destroys part of essentially every file and the volume is unrecoverable. There is no clean half to salvage because files were interleaved rather than stored whole, no parity exists in RAID 0 to rebuild from, and mirroring is RAID 1, a different configuration than what was described.153. An engineer specifies an array of four drives that mirrors pairs of disks and then stripes data across the mirrored pairs, combining speed with redundancy. Which RAID level is being described?
- A. RAID 5
- B. RAID 10
- C. RAID 0
- D. RAID 1
Show answer & explanation
Answer: B
RAID 10 is a stripe of mirrors: drives are paired into mirrors first and data is then striped across those pairs, delivering strong read and write performance while tolerating a failure in each mirror set. RAID 5 uses distributed parity rather than mirrored pairs, RAID 1 is a plain two-drive mirror without striping, and RAID 0 stripes with no redundancy at all.154. A technician removes a CPU cooler while swapping a motherboard and plans to remount the same cooler on the same processor. What must be done to the mating surfaces before reassembly?
- A. Clean off the old thermal compound and apply a fresh layer
- B. Reuse the existing compound since it already covers both surfaces
- C. Add new compound on top of the old layer for extra coverage
- D. Mount the cooler dry and let heat spread the residue evenly
Show answer & explanation
Answer: A
Once the seal between cooler and CPU is broken, the old compound has air pockets and uneven coverage, so both surfaces should be cleaned with isopropyl alcohol and fresh paste applied. Reusing the disturbed layer traps voids that insulate rather than conduct, stacking new paste over old creates a thick, poorly conducting layer, and running without effective compound risks rapid overheating and thermal shutdown.155. A customer hands a technician a newly purchased CPU and an older motherboard from a different platform generation, asking for a build. What should the technician verify before attempting the installation?
- A. That the board's socket, chipset, and firmware all support this exact processor
- B. That the power supply cables are the same color as the board headers
- C. That the case has at least three fans
- D. That the board's SATA ports match the CPU brand
Show answer & explanation
Answer: A
CPUs only work in boards with the matching physical socket, and even then the chipset and firmware version must list that specific model as supported, so checking the vendor's compatibility list comes first. Cable colors carry no meaning for compatibility, fan count affects cooling rather than whether the chip runs, and SATA ports are storage connections with no relationship to the processor brand.156. A workstation is being specified to run several virtual machines at the same time for a QA lab. Which CPU characteristic most directly determines how well the host will juggle all of the guests at once?
- A. The clock speed of the integrated graphics
- B. The size of the stock cooler
- C. Whether the multiplier is unlocked for overclocking
- D. The number of cores and threads
Show answer & explanation
Answer: D
Each running VM needs processor time, and a high core and thread count lets the hypervisor schedule guests in parallel instead of forcing them to queue. Integrated graphics speed matters for display output rather than VM capacity, the cooler affects sustained thermals but is chosen to match the chip rather than defining capability, and an unlocked multiplier only matters for enthusiast overclocking.157. A user installs a high-end graphics card, and the PC now powers off abruptly under gaming load. The 450 W power supply offers a single 6-pin PCIe cable, while the card requires two 8-pin connections. What should the technician recommend?
- A. Chain adapters from spare SATA power connectors to feed the card
- B. Remove the case fans to free up power for the card
- C. Cap the monitor's refresh rate to reduce the card's needs
- D. Install a higher-wattage power supply that includes the required PCIe connectors
Show answer & explanation
Answer: D
The shutdowns under load show the supply cannot deliver what the card draws, and the missing connectors confirm it was never rated for this class of GPU, so a properly sized replacement PSU is the correct fix. SATA-to-PCIe adapter chains push far more current through connectors than they are rated for and are a known fire risk, case fans draw only a few watts, and lowering refresh rate does not bring a mismatched supply into spec.158. A builder assembling a compact small-form-factor case wants to attach only the power cables the build actually uses, keeping airflow paths clear. Which power supply feature enables this?
- A. An 80 Plus efficiency rating
- B. Active power factor correction
- C. A dual-rail 12 V design
- D. A fully modular cable design
Show answer & explanation
Answer: D
A fully modular supply lets every cable detach at the PSU body, so unused leads stay in the box instead of bunching up in a cramped case. An 80 Plus badge describes conversion efficiency, active power factor correction shapes the input current draw for the electrical circuit, and rail design describes how 12 V output is divided internally; none of those reduce cable clutter.159. A newly assembled PC spins its fans but never completes startup or shows video. The 24-pin motherboard cable is connected, but the technician notices an empty socket labeled EPS near the CPU socket. What is the most likely fix?
- A. Connect the supplemental 8-pin CPU power cable to the EPS socket
- B. Reseat the CMOS battery
- C. Move the RAM to a different slot
- D. Update the chipset drivers
Show answer & explanation
Answer: A
The EPS connector feeds the CPU's voltage regulators, and without it the board powers fans but the processor never starts, which matches fans spinning with no video. A CMOS battery problem resets firmware settings but does not prevent power-on, RAM placement would produce error beeps or codes rather than a totally dead CPU, and drivers cannot matter on a machine that has never reached an operating system.160. Pages from a laser printer look fully printed, but the toner smears and rubs off when anyone touches the paper. Which stage of the laser imaging process is failing?
- A. Fusing
- B. Charging
- C. Exposing
- D. Transferring
Show answer & explanation
Answer: A
The fuser's heated rollers melt toner permanently into the paper, so complete images that wipe off mean everything upstream worked and only the fusing stage failed. A charging fault would corrupt the drum's uniform charge and distort the image, an exposing fault would produce wrong or missing content, and a transfer fault would leave faint or patchy prints rather than crisp pages that simply smear.161. An inkjet printer used lightly for several weeks now produces pages with horizontal white streaks and entire missing colors. What should the technician try first?
- A. Replace the fuser assembly
- B. Reinstall the print spooler service
- C. Run the printer's nozzle check and automated head cleaning utility
- D. Switch the driver to grayscale output
Show answer & explanation
Answer: C
Infrequent inkjet use lets ink dry in the microscopic nozzles, and the built-in cleaning cycle is designed to flush exactly this kind of clog, making it the obvious first step. Inkjets have no fuser since that is a laser printer component, grayscale merely hides the missing colors instead of restoring them, and spooler problems stop jobs from printing at all rather than degrading print quality.162. Receipts from a point-of-sale printer have been getting progressively fainter. The device uses no ink or toner cartridges of any kind. Which two items should the technician inspect?
- A. The toner cartridge and the transfer belt
- B. The heating element and the quality of the paper stock
- C. The ink tanks and the printhead alignment
- D. The ribbon cartridge and the tractor feed
Show answer & explanation
Answer: B
A cartridge-free receipt printer is a direct thermal design that darkens chemically coated paper with a heated element, so fading points to a weakening element or the wrong, expired, or backward-loaded paper. Toner and transfer belts belong to laser printers, ink tanks and printheads belong to inkjets, and ribbons with tractor feeds describe impact printers, none of which match a device with no consumable cartridges.163. A shipping warehouse must print on three-part carbonless forms so that all copies are imprinted in a single pass. Which printer technology is required for this job?
- A. A laser printer
- B. An inkjet printer
- C. An impact printer
- D. A direct thermal printer
Show answer & explanation
Answer: C
Impact printers physically strike the page through a ribbon, and that mechanical pressure is what transfers the image through every layer of a multipart carbonless form. Laser printers fuse toner onto only the top surface, inkjets spray ink that never reaches the lower copies, and thermal printers rely on heat-sensitive paper, so none of them can imprint duplicate layers in one pass.164. An office sustainability push requires the shared printer to produce two-sided pages automatically, with no one flipping paper by hand. Which hardware capability must the printer include?
- A. An automatic duplexing assembly
- B. A higher resolution print engine
- C. A finisher that staples output
- D. A larger paper input tray
Show answer & explanation
Answer: A
A duplexing assembly mechanically reverses the sheet and feeds it back through the print path so the second side prints without user intervention. Higher resolution changes image sharpness rather than paper handling, a stapling finisher binds finished sets but cannot turn a page over for printing, and a larger tray only extends how long the printer runs between refills.165. Human resources staff print confidential offer letters to a shared multifunction device and worry that pages sit exposed in the output tray. Which feature holds each job until its owner authenticates at the device's panel?
- A. Automatic stapling
- B. Secure print release with a PIN or badge tap
- C. Toner save mode
- D. A banner page before each job
Show answer & explanation
Answer: B
Secure print release parks submitted jobs on the device or server and prints them only when the owner enters a PIN or taps a badge at the machine, so sensitive pages never sit unattended. Stapling only binds output that has already printed, toner save lightens print density to stretch supplies, and a banner page adds a cover sheet while the confidential pages still emerge immediately for anyone to read.166. A traveling manager wants to send documents from a smartphone to the office multifunction device over the internet without installing any printer driver. Which approach makes this possible?
- A. Pair the phone to the printer over Bluetooth from the hotel
- B. Register the device with a cloud printing service and print through it
- C. Connect the phone with a parallel port adapter
- D. Map the printer to the phone as LPT1
Show answer & explanation
Answer: B
Cloud print services let a registered device receive jobs relayed through the vendor's or organization's servers, so any authorized user can print from anywhere with no local driver. Bluetooth is a short-range radio that cannot reach an office from a hotel, parallel port adapters are legacy desktop hardware with no smartphone support, and LPT1 mapping is a local port concept from old PC printing rather than something a phone can use remotely.167. A security analyst wants to open a suspicious email attachment in a way that poses no risk to the production network or the analyst's own workstation. What is the best environment for this?
- A. The analyst's daily laptop with antivirus running
- B. A spare desktop plugged into the office VLAN
- C. An isolated virtual machine with networking disabled and a snapshot ready to roll back
- D. A folder excluded from antivirus scanning on a file server
Show answer & explanation
Answer: C
A sandbox VM with its virtual NIC removed contains anything the attachment does, and reverting to a snapshot erases every trace afterward, which is exactly the point of using virtualization for malware analysis. Antivirus on a production laptop can miss new threats that then own the machine, a spare desktop on the office VLAN can spread infection laterally, and an exclusion folder on a server is the opposite of containment.168. An IT team is consolidating ten aging physical servers onto a single host and wants the hypervisor installed directly on the hardware with no underlying operating system. Which hypervisor type is this?
- A. Type 2, a hosted hypervisor
- B. Type 1, a bare-metal hypervisor
- C. A container runtime
- D. A hardware emulator
Show answer & explanation
Answer: B
Type 1 hypervisors run directly on the server hardware and are the standard for production consolidation because they avoid the overhead and attack surface of a general-purpose host OS. Type 2 products install as applications on top of an existing desktop OS, container runtimes share a single kernel rather than running full guest machines, and emulators translate foreign architectures with heavy performance penalties.169. A development team deploys its code to a cloud platform where the provider manages the servers, operating systems, patching, and runtime, and the team is responsible only for its own application. Which service model is this?
- A. Infrastructure as a service
- B. Software as a service
- C. A colocation facility
- D. Platform as a service
Show answer & explanation
Answer: D
Platform as a service abstracts away the infrastructure and runtime layers so developers just push application code, matching the division of responsibility described. Infrastructure as a service would leave the team administering operating systems and patching on rented VMs, software as a service delivers a finished application with no custom code deployment at all, and colocation only rents rack space and power for hardware the customer still owns and manages.170. A retailer runs its core systems in its own private data center year-round but automatically expands into a public cloud provider when holiday traffic spikes beyond local capacity. Which cloud deployment model is this?
- A. Community cloud
- B. Public cloud only
- C. Hybrid cloud
- D. Private cloud only
Show answer & explanation
Answer: C
Combining privately operated infrastructure with public cloud capacity that absorbs overflow is the definition of a hybrid deployment, sometimes called cloud bursting. A community cloud is shared among organizations with common requirements rather than owned by one retailer, a purely public model would run everything at the provider, and a purely private model would have no external expansion at all.171. A call center wants its agents working on inexpensive thin clients while every agent's full desktop environment actually executes on servers in the data center. Which technology delivers this arrangement?
- A. A Type 2 hypervisor installed on each thin client
- B. Peer-to-peer screen sharing between agents
- C. Virtual desktop infrastructure
- D. Booting each client from network-attached storage
Show answer & explanation
Answer: C
Virtual desktop infrastructure hosts each user's desktop as a VM on central servers and streams only the display to lightweight endpoints, which is exactly the thin client model described. Running a hypervisor locally defeats the purpose of cheap low-power clients, screen sharing lets people view one another's sessions rather than providing personal desktops, and network booting still executes the workload on the local machine.172. A lab host with 32 GB of physical RAM runs many virtual machines whose combined assigned memory far exceeds that amount. Under load, guests turn sluggish and one refuses to power on. What is the underlying problem?
- A. The guest tools package is outdated inside the VMs
- B. The virtual network adapters are misconfigured
- C. Host memory is overcommitted and physical RAM is exhausted
- D. The guests are running 32-bit operating systems
Show answer & explanation
Answer: C
Assigning more total memory than the host owns is overcommitment; when guests actually demand it, the hypervisor swaps heavily and eventually cannot reserve enough to start another VM, producing exactly these symptoms. Outdated guest tools degrade graphics and device integration rather than blocking power-on, network misconfiguration breaks connectivity but not startup, and guest OS bitness limits memory per guest without exhausting the host.173. A startup's cloud-hosted web tier automatically adds server instances during a sudden viral traffic surge and quietly removes them once demand subsides. Which cloud characteristic is being demonstrated?
- A. Rapid elasticity
- B. Metered utilization
- C. High availability failover
- D. Single tenancy
Show answer & explanation
Answer: A
Scaling resources out and back automatically in response to demand is rapid elasticity, one of the defining traits of cloud computing. Metered utilization describes measuring and billing consumption rather than the scaling itself, high availability failover shifts load to surviving systems after a failure instead of tracking demand, and single tenancy describes dedicated infrastructure for one customer, unrelated to scaling behavior.174. A finance director reviewing the monthly cloud invoice notices it itemizes exact compute hours, storage gigabytes, and data transfer consumed, charging only for what was actually used. Which cloud characteristic does this billing model reflect?
- A. Metered utilization
- B. Rapid elasticity
- C. Broad network access
- D. Infrastructure as code
Show answer & explanation
Answer: A
Measuring consumption precisely and billing on a pay-per-use basis is metered utilization, which lets organizations trade capital hardware spending for operational costs that track real usage. Rapid elasticity is the scaling behavior itself rather than how it is billed, broad network access refers to reaching services from many device types over the network, and infrastructure as code is a provisioning practice, not a billing property.175. A developer must test an installer against several different Windows releases using a single workstation, resetting each test environment to a pristine state between runs. What is the most efficient setup?
- A. Multiboot partitions that are manually reimaged after each test
- B. Borrowing physical PCs from coworkers for each release
- C. A single installation using compatibility mode for each test
- D. A workstation hypervisor running one VM per Windows release, restored from snapshots between runs
Show answer & explanation
Answer: D
A desktop hypervisor lets the developer keep one VM per OS release and snap each back to a clean baseline in seconds, which is the standard workflow for cross-version installer testing. Reimaging multiboot partitions takes far longer per cycle, borrowing physical machines does not scale and risks coworker data, and compatibility mode merely masquerades one OS as another rather than genuinely testing each release.176. Several regional hospitals subject to identical regulatory requirements jointly fund and share a cloud environment purpose-built for their group's compliance needs. Which cloud deployment model is this?
- A. Public cloud
- B. Private cloud for a single organization
- C. Community cloud
- D. Hybrid cloud
Show answer & explanation
Answer: C
A community cloud serves a defined group of organizations that share concerns such as compliance, jurisdiction, or mission, which describes hospitals pooling a purpose-built environment. A public cloud is open to any paying customer rather than a closed group, a private cloud belongs to one organization alone, and a hybrid model describes bridging private and public infrastructure rather than sharing among peers.177. A user reports intermittent shutdowns on an office PC. Before touching the machine, the technician asks what changed recently, when the problem began, and whether any messages appeared. Which step of the troubleshooting method is being performed?
- A. Establishing a theory of probable cause
- B. Verifying full system functionality
- C. Documenting findings and outcomes
- D. Identifying the problem by gathering information from the user
Show answer & explanation
Answer: D
Interviewing the user, identifying symptoms, and asking about recent changes all belong to the first step, identifying the problem, which builds the foundation for everything after. Forming a theory comes only after the information is gathered, verifying functionality happens after a fix has been applied, and documentation is the closing step once the issue is resolved and confirmed.178. A technician has finished gathering symptoms of a boot failure, reviewed the logs, and listed the recent hardware changes. According to the standard troubleshooting methodology, what comes next?
- A. Verify full functionality and apply preventive measures
- B. Escalate immediately to a senior engineer
- C. Establish a theory of probable cause
- D. Document lessons learned in the knowledge base
Show answer & explanation
Answer: C
Once the problem is identified, the methodology calls for proposing a probable cause, starting with the obvious and simple explanations, which the technician will then test. Verification of functionality belongs near the end after a solution is implemented, escalation is only warranted when a confirmed theory exceeds the technician's authority or ability, and documentation is the final step of the process.179. A technician replaced a failed network card, tested connectivity thoroughly, and had the user confirm that everything works as expected. What is the final step of the troubleshooting process before the ticket is closed?
- A. Document the findings, actions taken, and outcome
- B. Establish a new theory of probable cause
- C. Re-image the workstation as a precaution
- D. Roll back the replacement to confirm the diagnosis
Show answer & explanation
Answer: A
The methodology ends with documenting what happened, what was done, and how it turned out so future technicians can benefit from the history. Forming another theory only applies when the problem persists, re-imaging a working machine wastes the user's time and destroys a good configuration, and reinstalling the failed part just to re-observe the fault would deliberately break a verified fix.180. A desktop that was just moved between offices powers on with spinning fans but gives repeating short beeps and displays nothing. What should the technician try first?
- A. Reseat the memory modules
- B. Reinstall the operating system
- C. Replace the monitor
- D. Swap in a new power supply
Show answer & explanation
Answer: A
Repetitive beeps during power-on self-test most commonly signal a memory error, and modules jostled loose during a physical move are the prime suspect, so reseating them is the fastest first check. The operating system never loads this early so reinstalling it is irrelevant, a bad monitor would not cause error beeps, and the power supply is evidently delivering power since the fans spin and the board is alive enough to beep.181. Right after a CPU cooler replacement, a desktop boots but shuts itself down within a few minutes, and the firmware hardware monitor shows the processor temperature climbing steeply the whole time. What is the most likely cause?
- A. The memory is installed in the wrong slots
- B. The cooler is not making proper contact or thermal compound was omitted
- C. The display refresh rate is set too high
- D. A SATA data cable is loose
Show answer & explanation
Answer: B
A runaway temperature curve immediately after cooler work points to poor mounting pressure, a missed protective film, or missing compound, and the system is shutting down to protect the CPU. Memory slot placement affects bandwidth rather than processor heat, refresh rate is a display setting with no thermal effect on the CPU, and a loose storage cable causes drive detection errors instead of thermal shutdowns.182. An aging desktop freezes at random moments, and a visual inspection of the motherboard reveals several capacitors with bulging, split, or leaking tops. What is the appropriate remedy?
- A. Flash the latest firmware
- B. Apply thermal compound over the damaged capacitors
- C. Add an extra intake fan to the case
- D. Replace the motherboard
Show answer & explanation
Answer: D
Bulging or leaking capacitors can no longer smooth and filter power, causing exactly the random instability observed, and in field service the board is treated as a replaceable unit. Thermal compound is for heat transfer between chips and coolers and does nothing for failed electrolytics, firmware cannot repair physical component damage, and additional airflow will not restore capacitors that have already vented.183. A PC emits a sharp burning smell and shuts down, and a coworker recalls hearing a faint pop from the rear of the case near the power inlet. How should the technician proceed?
- A. Open the power supply and replace its internal fuse
- B. Spray contact cleaner into the power supply vents
- C. Resume using the PC with a window open for ventilation
- D. Unplug the machine and replace the power supply without attempting to reuse it
Show answer & explanation
Answer: D
A pop and burning odor at the power inlet indicate a failed supply that could damage connected components or start a fire, so it must be disconnected and swapped for a new unit. Opening a supply exposes capacitors that hold dangerous charge even when unplugged, spraying solvent into a failed electrical device solves nothing and adds hazard, and continuing to run visibly burned equipment is an obvious safety violation.184. A user's desktop has started making a rhythmic clicking sound from the drive bay, and large file copies now hang partway through. What is the most urgent action for the technician?
- A. Run a full defragmentation overnight
- B. Disable the page file to reduce drive activity
- C. Update the graphics driver
- D. Copy the user's data off the drive immediately and plan its replacement
Show answer & explanation
Answer: D
Rhythmic clicking from a mechanical drive means the heads are failing to read and retrying, a strong sign of imminent total failure, so rescuing the data comes before anything else. Defragmentation forces hours of additional stress on a dying mechanism and can finish it off, moving the page file changes nothing about the physical failure, and the graphics driver is entirely unrelated to storage symptoms.185. During startup, a laptop displays a warning that the storage device's self-monitoring system predicts imminent failure, though Windows still loads normally afterward. What should the technician do first?
- A. Suppress the alert in firmware and continue monitoring
- B. Run an extended memory diagnostic
- C. Reinstall the chipset drivers
- D. Create a full backup or image of the drive right away
Show answer & explanation
Answer: D
That warning comes from S.M.A.R.T. data, and once the drive itself predicts failure, the remaining lifespan is unknowable, so preserving the data takes priority over every other step. Silencing the alert removes the warning while keeping the risk, memory diagnostics test a different subsystem entirely, and chipset drivers have no influence on the physical health counters the drive is reporting.186. A technician installs a second NVMe drive in a desktop's spare M.2 slot, but it appears neither in the operating system nor in UEFI setup. The primary drive works fine. What should the technician check first?
- A. Disk Management, to initialize and format the new drive
- B. The UEFI settings for that M.2 slot, including bandwidth shared with SATA ports
- C. The CMOS battery voltage
- D. The memory profile settings
Show answer & explanation
Answer: B
Many boards disable a secondary M.2 slot or steal its lanes when certain SATA ports are occupied, and a drive invisible even to UEFI points to exactly this kind of firmware-level configuration rather than a software issue. Disk Management can only touch drives the firmware already presents, a weak CMOS battery resets settings but does not hide one specific slot, and memory profiles govern RAM speed with no connection to storage lanes.187. A small business server flashes an alert that its storage array is in a degraded state after one member drive failed, yet all data remains accessible to users. What should the technician do?
- A. Replace the failed member promptly and let the array rebuild
- B. Reformat the array to clear the alert
- C. Ignore the alert since the data is still reachable
- D. Convert the array to a striped set for better speed
Show answer & explanation
Answer: A
Degraded means the array is running without its redundancy, so one more failure loses everything; swapping in a replacement drive and rebuilding restores protection. Reformatting destroys the data that the redundancy just saved, ignoring the state gambles the whole array on the surviving drives, and converting to a plain stripe would permanently remove fault tolerance at the worst possible moment.188. During graphically intense games, a desktop's screen erupts in flickering checkerboard patterns and stray colored triangles before the video driver crashes. Card temperatures log very high. The desktop display is normal at idle. What is the most likely cause?
- A. The firmware needs a routine update
- B. The monitor panel has stuck pixels
- C. The display cable is loose
- D. The video card is overheating or beginning to fail
Show answer & explanation
Answer: D
Artifacts that appear only under 3D load and coincide with high temperatures are classic signs of GPU distress, either thermal or from degrading memory on the card. Stuck pixels stay in fixed positions regardless of workload, a loose cable causes flicker or signal loss at all times rather than only under load, and routine firmware updates do not address load-dependent visual corruption.189. A hotel lobby screen that displayed the same welcome graphic around the clock now shows a faint ghost of that graphic on top of everything else it displays. What has happened, and which display technology is most prone to it?
- A. Backlight bleed, most common on IPS panels
- B. A failing display cable causing double images
- C. Dead pixels spreading across the panel
- D. Permanent image burn-in, most common on OLED panels
Show answer & explanation
Answer: D
Static content shown for months unevenly ages the self-emissive pixels of OLED displays, leaving a permanent ghost called burn-in; digital signage is the textbook scenario for it. Backlight bleed is light leaking at panel edges rather than a retained image, cable faults cause noise or signal loss rather than a persistent ghost of specific content, and dead pixels are dark dots that do not form a recognizable image.190. A laptop's built-in display flickers and occasionally goes black when the user tilts the lid, but the picture on an attached external monitor stays perfectly stable. What is the most likely fault?
- A. A failing graphics processor
- B. A corrupted user profile
- C. A damaged internal display cable or hinge wiring
- D. An outdated wireless driver
Show answer & explanation
Answer: C
Symptoms that track lid movement point to the display cable that flexes through the hinge, since physical motion is disturbing the connection while the video source itself is proven healthy by the stable external output. A failing GPU would corrupt both displays, a user profile affects settings and files rather than hardware signal paths, and the wireless driver has nothing to do with video output.191. A conference room projector keeps shutting itself off after about twenty minutes of use, and inspection shows its intake vents packed with dust. What was the most likely cause of the shutdowns?
- A. An HDCP handshake failure with the laptop
- B. An incorrect aspect ratio setting
- C. Overheating due to blocked airflow
- D. Depleted batteries in the remote control
Show answer & explanation
Answer: C
Projectors generate substantial heat and protect their lamp by powering down when internal temperatures climb, so clogged vents leading to thermal shutdown fits the twenty-minute pattern perfectly. A content protection handshake failure blanks or blocks the image immediately rather than after warm-up, aspect ratio only distorts the picture's shape, and the remote's batteries cannot switch a running projector off on a schedule.192. Every time a desktop is unplugged from the wall, its clock resets to a date years in the past and the firmware settings revert to factory defaults. Which component should be replaced?
- A. The processor
- B. The primary storage drive
- C. The coin cell battery on the motherboard
- D. The power supply unit
Show answer & explanation
Answer: C
The motherboard's coin cell keeps the real-time clock and firmware settings alive while the system has no AC power, so losing both on every unplug is the textbook sign it is depleted. The power supply only matters while the machine is plugged in, the processor holds no persistent settings at all, and the storage drive retains its contents without any battery, which is why the OS itself is unaffected.193. A user's smartphone now drains its battery within a few hours and feels warm even when sitting idle in a pocket. Which diagnostic step should a technician take first?
- A. Perform an immediate factory reset
- B. Replace the battery the same day
- C. Disable the cellular radio permanently
- D. Review the battery usage statistics to identify a misbehaving app
Show answer & explanation
Answer: D
Heat and rapid drain at idle usually mean some process is running constantly, and the OS battery statistics screen names the offender in seconds, making it the cheapest and most informative first step. A factory reset may fix it but destroys data without ever identifying the cause, replacing hardware before diagnosis wastes money if an app is at fault, and permanently disabling cellular service makes the phone useless as a phone.194. A smartphone only charges when its cable is held at a specific angle, and the behavior is identical with three different known-good cables. What should the technician examine first?
- A. The charging port for lint or debris compacted inside
- B. The battery's charge cycle count
- C. The version of the phone's operating system
- D. The SIM card seating
Show answer & explanation
Answer: A
Pocket lint gets packed into the bottom of charging ports and prevents connectors from seating fully, producing exactly this angle-dependent contact, and multiple cables behaving identically clears the cables themselves. Battery wear reduces capacity rather than causing positional charging, the OS version does not change the physical connection, and the SIM slot is an entirely separate compartment unrelated to power.195. Employees report that Wi-Fi is unusable only in the far conference room, where laptops show a single bar of signal. Everywhere else in the office is fine, and the problem affects every user in that room. What is the best solution?
- A. Replace the wireless cards in the affected laptops
- B. Assign static IP addresses to conference room users
- C. Add or reposition an access point to cover that area
- D. Change the wireless network password
Show answer & explanation
Answer: C
Weak signal isolated to one physical area affecting every device is a coverage gap, and the fix is to extend the wireless footprint with an added or relocated access point. Replacing NICs cannot conjure signal that does not reach the room, static addressing operates at a layer that does not exist until the radio link is usable, and the network password has no bearing on signal strength.196. Every PC connected to one access switch reports a self-assigned address beginning with 169.254 and cannot reach any servers. Machines on the building's other switches are working normally. What is the most likely cause?
- A. All the network cards on that switch failed simultaneously
- B. The DNS server has gone offline
- C. The wireless passphrase expired for those users
- D. That switch's uplink to the rest of the network is down, cutting off the DHCP server
Show answer & explanation
Answer: D
Addresses in the 169.254 range are automatic private addresses that Windows self-assigns when no DHCP server answers, and an entire switch losing them at once points to that switch's uplink rather than the clients. Dozens of NICs do not fail in the same moment, a DNS outage breaks name lookups but leaves leased addresses intact, and these are wired connections where a Wi-Fi passphrase plays no role.197. One employee's wired file transfers crawl while neighbors on the same switch run at full speed. The wall jack tests clean, but the user's patch cable has a visibly crushed section and the NIC negotiated 100 Mbps half duplex on a gigabit network. What should the technician do first?
- A. Replace the switch
- B. Re-image the workstation
- C. Add memory to the workstation
- D. Replace the damaged patch cable and confirm the link renegotiates to full gigabit
Show answer & explanation
Answer: D
A crushed cable can corrupt the wire pairs that gigabit negotiation requires, forcing the link down to a degraded speed and duplex, so swapping the visibly damaged cable and rechecking negotiation is the obvious first move. The switch serves the fast neighbors correctly, re-imaging attacks software when a physical fault is in plain sight, and memory has no effect on link negotiation.198. A long cable run stapled along the ceiling passes close to fluorescent light ballasts, and the attached PC logs intermittent network errors that worsen when the lights are on. The path cannot be rerouted. Which change best mitigates the problem?
- A. Coil the excess cable near the fixtures
- B. Force the NIC to half duplex
- C. Replace the run with properly grounded shielded twisted pair
- D. Shorten the DHCP lease on that segment
Show answer & explanation
Answer: C
Fluorescent ballasts radiate electromagnetic noise that induces errors on unshielded cable, and when the route is fixed, grounded shielded cabling is the standard countermeasure. Coiling slack beside the noise source concentrates the pickup instead of reducing it, forcing half duplex degrades performance without addressing interference, and DHCP lease timing is an addressing detail with no relationship to electrical noise.199. In a dense office park, staff on the 2.4 GHz band complain of terrible latency at midday. A wireless scan shows dozens of neighboring networks crowding every 2.4 GHz channel. What should the technician do?
- A. Raise the transmit power on the 2.4 GHz radios
- B. Hide the SSID from broadcast
- C. Shorten the DHCP lease duration
- D. Move capable clients and access points to the 5 GHz band
Show answer & explanation
Answer: D
When every 2.4 GHz channel is saturated by neighbors, the practical escape is the 5 GHz band, which offers many more channels and shorter interference range. Raising transmit power adds to the congestion and does nothing for the receive side, hiding the SSID changes only visibility rather than airtime contention, and DHCP lease length is unrelated to wireless channel congestion.200. A flash drive is never recognized in a desktop's front panel ports, though the same drive works instantly in the rear ports. Every other device tried in the front ports behaves the same way. What is the most likely cause?
- A. The USB mass storage driver is missing
- B. The front panel USB header cable is loose or disconnected from the motherboard
- C. The drive is formatted with an unsupported filesystem
- D. The power supply wattage is too low
Show answer & explanation
Answer: B
Front panel ports connect to the motherboard through an internal header cable, and when every device fails there while the rear ports work, that internal connection is the common factor. A missing driver would break the drive on every port including the rear ones, an unsupported filesystem still enumerates as hardware, and a wattage shortfall would show under heavy load rather than only on specific ports.
More in this family
Explore more Technology & IT Certifications
In the same family
More in this category
- Google Cloud Certified - Associate Cloud EngineerPractice questions →
- Google Cloud Certified - Cloud Digital LeaderPractice questions →
- Certified Information Systems AuditorPractice questions →
- Certified Information Security ManagerPractice questions →
- ISC2 Certified in Cybersecurity (CC)Practice questions →
- Project Management Professional (PMP)Practice questions →
- Microsoft Certified: Power BI Data Analyst Associate (Exam PL-300)Practice questions →
- Salesforce Certified Platform AdministratorPractice questions →
- HashiCorp Certified: Terraform Associate (004)Practice questions →
2026 statistics
Key facts: CompTIA A+ exam
Every free resource for this exam
Get a free CompTIA A+ study plan
A week-by-week plan plus new practice questions, straight to your inbox.
Official sources
Primary documents used to verify the exam details shown on this page.
- CompTIA A+ Core 1 (220-1201) Exam DetailsCompTIAcomptia.org
- CompTIA A+ Core 2 (220-1202) Exam DetailsCompTIAcomptia.org
- CompTIA Network+ certification exam detailsCompTIAcomptia.org
- Occupational Employment and Wage Statistics, May 2025 — Computer User Support Specialists (SOC 15-1232)U.S. Bureau of Labor Statisticsbls.goveffective May 31, 2025
- CompTIA A+ Core 1 and 2 (V15) Certification OverviewCompTIAcomptia.org
- CompTIA Certification Renewal PolicyCompTIAcomptia.org
- CompTIA A+ Certification OverviewCompTIAcomptia.org
- Occupational Employment and Wage Statistics, May 2025 — Computer User Support Specialists (SOC 15-1232), national employmentU.S. Bureau of Labor Statisticsbls.goveffective May 31, 2025
Last verified against the official exam content outline:
Frequently asked questions
Do I have to pass two exams to earn CompTIA A+, and can I take them in either order?
Yes. CompTIA A+ certification requires passing two separate exams: Core 1 (220-1201) and Core 2 (220-1202). Candidates may take the two A+ exams in any order. Because Core 1 focuses on hardware and networking while Core 2 focuses on operating systems and security, many candidates schedule them close together but sequence them around whichever domain set they feel more prepared for first.
What score do I need to pass each A+ exam, and are the passing marks the same for both?
No, the two cutoffs differ. The passing score for A+ Core 1 is 675 on a scale of 900, while the passing score for A+ Core 2 is 700 on a scale of 900. Because both exams are scored out of 900, Core 2 requires a slightly higher raw performance to pass, so don't assume a comfortable Core 1 result guarantees the same margin on Core 2.
How many questions are on each A+ exam and how long do I get?
Each A+ exam contains a maximum of 90 questions and allows 90 minutes per exam. That works out to roughly one minute per question if the exam is at its maximum length, so budget your time on performance-based items and flag longer questions to revisit rather than stalling on them.
Once I earn A+, how long is it valid and do I have to retake the exams to keep it?
CompTIA A+ certification is valid for three years from the certification date, and the Continuing Education renewal cycle is three years from the date the certification is earned. You do not have to sit the exams again: A+ may be renewed by earning Continuing Education Units (CEUs) without retaking the exam. Plan to accumulate CEUs across the three-year window rather than scrambling near expiration.