CompTIA A+ (Core 2) Practice Questions

Answer Explanation:
Journaling is a feature in file systems designed to improve fault tolerance and protect data integrity. It works by keeping a log (or journal) of changes before they are actually made to the file system. This helps recover data and prevent corruption in case of unexpected crashes, power failures, or system errors. Essentially, it’s like a safety net for your data.

The file systems that support journaling are:

NTFS: The default file system for Windows, known for its reliability and advanced features.
APFS: Apple's modern file system, used in macOS and iOS, which includes journaling to safeguard metadata.
ext3: A Linux file system that introduced journaling, making it a popular choice for improved data safety.
ext4: The successor to ext3, with enhanced journaling features and better performance.
However, FAT32 and exFAT do not support journaling. These file systems prioritize compatibility and simplicity but lack the fault tolerance that journaling provides.

So, next time your CEO asks for a robust file system, recommend NTFS (if it's Windows) or APFS (if it's a Mac). And remember—journaling won't save your job, but it might save their data!

Correct Answer: - Personalization > Background

Correct Answer:

The 3-2-1 rule is like having 3 pizzas: 2 in the fridge, 1 offsite. Grandfather-Father-Son is more like "one pizza for today, one for last week, and one from last month."

Backups: whether it's pizza or data, you can never have too much.

TL: DR

3-2-1 Backup Rule:

Keep 3 copies of your data:

2 stored on different devices or media (e.g., hard drive and external drive).
1 stored offsite (e.g., cloud storage or another location).

Grandfather-Father-Son Backup:

A rotational backup system with 3 generations of backups:

Son (daily backups),
Father (weekly backups),
Grandfather (monthly backups).

This ensures you have backups from different points in time for recovery.

Correct Answer:

Update the antivirus software and run a full system scan to detect any lingering threats.

Because a quarantine is good, but you’ve got to make sure the malware didn’t leave any "friends" behind! 👾

Answer:

Run an antivirus scan and delete the file while whispering, "Nice try, buddy."

It’s important to stay professional…but hey, a little sarcasm never hurt when dealing with malware!

Correct Answer:

A virus requires user action (AKA dumb HR departments) to spread, while other malware can self-replicate without user interaction.

If ever asked to differentiate between a virus or malware (hint: you probably will be), remember the following:

Virus: Needs a host file and often requires user action (e.g., opening an infected file) to execute and spread.

Malware: A broader term that includes worms, Trojans, ransomware, etc., many of which can self-replicate or execute without user intervention.

So...

Virus = Needs User Interaction

Malware = Does Not Need User Interaction

The correct answer is: Kerberos

TL: DR

A) Kerberos – The protocol that uses tickets to securely verify users’ identities and allows Single Sign-On across systems like a true VIP access pass.

B) RADIUS (Remote Authentication Dial-In User Service) – Great for centralized authentication but doesn’t deal with Single Sign-On or ticketing systems.

C) TACACS+ (Terminal Access Controller Access-Control System Plus) – Focuses on authenticating and authorizing commands, not Single Sign-On.

D) LDAP (Lightweight Directory Access Protocol) – It’s great for organizing and querying user data but doesn’t provide secure ticket-based authentication.

The correct answer is TACACS+. TACACS+ has the ability to allow for the remote monitoring of authentication and use of network devices. Additionally, unlike with RADIUS, you can also restrict the use of the devices on a more granular level. Since the question states we need to control which commands IT staff can execute, the best choice here is TACACS+.

Correct Answer: RADIUS.

Because RADIUS handles remote access like a bouncer with a clipboard, ensuring only the right people get in. 🛡️📡.

In all seriousness, RADIUS is perfect for monitoring end users on a network, as it is lightweight, and designed with remote management in mind. Since you need a remote solution that is lightweight, RADIUS is the solution that we should pick here.

TACACs on the other hand, is ideal for large enterprise networks where multiple admins manage various devices and roles need tight control. TACACs is a heavier solution that encrypts more information, whereas RADIUS is lightweight and will only encrypt passwords. Additionally, TACACs can provide more granular control (allowing you to limit things like which commands a user might use).

Correct Answer: Accelerometer.

Because the accelerometer knows when you’re tilting, flipping, or just being lazy, and it’s happy to rotate the screen to remind you. 📱🔄

The correct answer here is battery back ups.

Changing the name might help, although there is a real business in the UK called "Things in Bread", and it seems to be doing well despite the name.

A generator might also help, although as a small business you are probably on a budget, and a generator would be expensive, as well as unnecessary. Generators are for longer power outages, and we have been told the bread shop only experiences short power outages.

Additionally, solar is another solution, albeit this solution is also expensive and most likely unnecessary.

The correct answer is:

Compare the file’s hash value to the one provided by the source.

While scanning the file for viruses or malware is always a good idea, checking the hash value published on the source website should be your first step. If the hash value of your downloaded file doesn’t match, it’s a strong indicator that something’s wrong—such as a corrupted download, a spoofed website, or even a Man-in-the-Middle (MITM) attack where the file was tampered with during transfer. Verifying the hash ensures the file’s integrity and authenticity.

Additionally, checking the download size is also not the best way to verify you have the original file. If the website says the download is 5GB and you end up with a 2GB file, then obviously there is a problem worth investigating, however you could encounter a situation where the file is the same size as what the website suggests, and yet it has still been tampered with or corrupted. Checking the hash will let you know if this is the case.

Correct Answer:

Shred it in an industrial shredder – When you’re ready to treat your SSD like confetti at a techno funeral.

Because... well, finding a volcano might be hard.

Correct Answer: A) IoT.

Because your “smart toaster” doesn’t need to know your Wi-Fi password, but now it’s probably reporting back to the mothership. 🍞👾

In all seriousness, IoT devices are notorious for their susceptibility to vulnerabilities. IoT devices are often made in foreign countries, and they are often developed on budgets that do not warrant an investment in security. These devices usually ship with open source firmware, do not come with a way to update the firmware, or are sold with the sole intention of hacking SOHO networks in the United States.

If you are considering buying a smart water timer, or a smart light bulb, or a smart anything for that matter, do your research on the company providing the product to ensure it is a safe product to purchase.

DHCP could hand out an IP to a malicious actor, SSO is a single point of failure, and PnP is almost too friendly. However, given these options, IoT (Internet of Things) devices pose the greatest threat.

Correct Answer: All of the above.

Auto-locking isn’t just about security; it also saves Bob from becoming the next office legend—for all the wrong reasons. 🔒

The correct answer is: All of the above, because convenience is king and passwords are the enemy.

Because SSO is the ultimate cheat code for logging in without the "Oops, wrong password... again" dance. 🎮

SSO works by allowing you to authenticate the use of multiple different applications via the authentication of one. The idea is that you sign on to one app, and then by signing on to this one app, the SSO application will handle the authentication for every other app that you have connected to it. An example of this would be a Gmail account. Users that have gmail accounts can sign in to their email, then directly go to their Google Drive Account, YouTube Account, Google Business Account etc. all without the need to re-authenticate.

Where password managers might provide a similar SSO like feel, they are not SSO, as the passwords are auto-filled and pre-populated by the password manager software, and users still have to visit the login page. With SSO, protocols like SAML (Security Assertion Markup Language) are used to bypass the login page entirely, making for faster logins and more seamless experience.

Correct Answer:

All of the above, because your employer knows you better than you know yourself. AUP stands for Acceptable Use Policy, and employers know that you will probably try to browse YouTube or something else that has nothing to do with work. As a result, most employers require employees to sign an AUP, confirming that they agree to only use the computers for work related tasks.

The correct answer is "Fingerprint Scanner":

Because no one else has your greasy, pizza-loving fingerprints—yet. 🍕

Correct Answer: Biometrics.

Because no one’s stealing your face… unless they’ve watched too many spy movies.

Correct Answer: B) Privacy Settings.

Because Apple trusts no one, and is somewhat like the rich kid who lives at the private beach. If you can remember that the rich kids like their private surf spot, as well as their expensive Macbooks, you might be able to remember that third party apps must gain permission to access the private Macbooks (through Privacy Settings).

The correct answer, is use "Remote Disk Utility".

When working for the government, DVD disks will often be used as they can more easily be shredded after use. In the government work force, disk drives containing secret or sensitive information are often destroyed after they are no longer needed. As a result, the request for a USB copy of the update will probably not be granted.

Additionally, creating your own USB copy is probably unauthorized, and most USB drives on government computers are disabled by default.

Remote Disk Utility is a feature that allows a computer without a built-in optical drive (like a DVD or CD drive) to access a disk inserted into another computer that does have an optical drive. It's often used with Apple devices, particularly MacBooks that lack DVD drives.

Here’s how it works:

Sharing the Disk:

On a computer with a DVD drive (let’s call it the host), you enable DVD or CD sharing in the settings. This allows the disk in the host computer’s drive to be accessed over the network.

Accessing the Disk Remotely:

The computer without the DVD drive (the client) connects to the host computer over the network and accesses the disk as if it were in a local drive.

This process can be especially helpful when you’re installing software or updating an operating system, and you only have access to a physical DVD. Instead of needing external DVD drives or creating USB bootable drives, Remote Disk Utility lets you "borrow" another computer's optical drive.

The correct answer is D) ext4, and here’s why:

A) NTFS:

NTFS (New Technology File System) is the default file system for Windows. While Linux can read and write to NTFS drives (with the right drivers), no Linux enthusiast would set up their primary Linux workstation with a file system that screams, “I miss Windows!”. It’s like putting ketchup on sushi – technically possible, but not ideal.

B) HFS+:

HFS+ (Hierarchical File System Plus) is Apple’s file system used on older macOS systems. While Linux can read HFS+ volumes, using it on a Linux workstation would confuse even the penguin mascot (Tux). Linux doesn’t have time to pretend to be a MacBook – it’s far too busy being customizable and open-source.

C) FAT32:

FAT32 (File Allocation Table) is an ancient file system from the Windows 95 era. It’s great for USB drives because of its widespread compatibility, but it comes with some significant limitations, like a 4GB file size limit. Using FAT32 on a Linux workstation would be like using a floppy disk to store your Netflix downloads – impractical and outdated.

D) ext4:

ext4 (Fourth Extended File System) is the default and most widely used file system for Linux workstations. It’s reliable, efficient, and designed with Linux in mind. It supports large files, journaling, and modern features, making it the go-to choice for Linux users who value stability and performance.

In Summary:

NTFS is for Windows, HFS+ is for Macs, FAT32 is for legacy devices and USB drives, but ext4 is the king of Linux file systems. If you’re running Linux and not using ext4, even Tux (the Linux mascot) might give you a disappointed look. 🐧

The MOST likely answer here is: "They set the network to “Public” because they thought, "This seems like it should be set to public"."

If they have a strong internet connection but cannot see any other network devices, then the network has probably been set to public. Changing the network to "Public" is Windows’ way of saying, “You don’t know these devices on the local private network, and I don’t trust them either!”

Changing the workstations IP address to "777" would disconnect the workstation from the internet entirely, and our question tells us the internet connection is strong, so this cannot be the answer.

Airplane mode would disable internet connection entirely, and this is a mobile device setting.

Additionally, while clicking on a random pop could infect the computer with malware or a virus, and while it is possible that an attacker might set the workstation to public, the question says that the user has been "tinkering" with the settings, so this is most likely a settings related issue. Having said that, public networks block network discovery, meaning your computer won't be able to find or interact with other devices. This can prevent system administrators or security tools on the same network from spotting unusual activity, like data exfiltration.

Explanation:

To sync the time on a Windows workstation (or, in your case, Santa's ticking time bomb), you need to navigate to "Time and Language" settings. Here’s how:

1. Open the Settings menu (⚙️).

2. Click on "Time & Language".

3. Under "Date & Time", toggle on "Set time automatically" or manually sync it by clicking "Sync now" under "Additional settings".

This ensures the workstation aligns with the correct Internet Time Server, syncing the clock to avoid accidental mistimed explosions.

Why not the other options?

Internet Options (B): Deals with browser settings, not system time. Even the Grinch knows this won’t help blow up the sleigh on schedule.

Network and Sharing Center (C): Manages network connections—great for ensuring Wi-Fi is on but terrible for clock-syncing evil plans.

Network and Internet (D): A general settings category for networking stuff, but syncing time isn’t handled here.

So if you want the bomb to ruin Christmas at the exact moment Santa opens his workshop doors, Time and Language is your Grinch-approved choice. 🎄💣

The correct answer is:

1. Check "See Hidden Files," because the best hiding spot is the one everyone forgets to check.

2. Open root file permissions and adjust them, because rules were made to be rewritten

On a Windows computer, the root file system is hidden by default, and one must check "Show Hidden Files" in order to see the Operating System files at the root directory of the system. Additionally, one must also have the correct permissions in order for them to see these files.

The other answers are incorrect. BIOS does not grant access to everything. There is also no way to access the root files from the terminal / command line if the user does not have the correct permissions.

Correct Answer: Network and Sharing Center

This is where you actually go to mess with your Wi-Fi properties, assuming you’ve got the patience to find it. It’s the central hub for managing your network settings, but good luck finding anything quickly because Microsoft decided user-friendliness was optional.

Correct Answer: A. The computer is running Windows 10 Home, which doesn't believe in "remote access" because it prefers social distancing.

Explanation:
Windows 10 Home does not include the built-in Remote Desktop feature that allows incoming remote connections. To enable Remote Desktop, the computer would need to run Windows 10 Pro, Enterprise, or Education editions. While third-party software like TeamViewer or Chrome Remote Desktop can be used as a workaround, the lack of native support is a show-stopper for this feature on Home edition.

Incorrect Answers:

B. The computer is in hibernation—because even computers need their beauty sleep.

While a computer in hibernation might prevent a connection, it’s not the most likely issue here because you’d generally know it’s in hibernation (or sleep mode) if you were monitoring the system. Plus, many remote tools allow "wake-on-LAN" to bring the computer out of its slumber, assuming the feature is enabled in the BIOS and network settings.
C. The computer is begging for an update, and it's holding remote access hostage until you comply.

Updates are notorious for causing problems, but they wouldn’t block your connection outright unless they’re actively running or the computer restarted itself mid-update. Since updates usually leave Remote Desktop settings untouched, this is less likely to be the issue.
D. An employee is actively using the computer and refuses to share because it’s their turn on Solitaire.

This could technically happen, but Remote Desktop connections can still be established even if someone is logged in to the computer. The user would get a notice about being disconnected, which might lead to a stern conversation later, but this wouldn’t block your initial connection.

The correct answer is A. Event Viewer. This tool is like the gossip column of your computer—it logs all the juicy details about application crashes, errors, and warnings. By reviewing these logs, you can pinpoint the root cause of the issue and start troubleshooting.

While Device Manager (B) is great for identifying hardware-related problems, it won’t help with software-specific issues. System Information (C) is handy for gathering detailed specs about the system but won’t tell you why an app is throwing a tantrum. Task Scheduler (D) might help if your apps are misbehaving on a strict schedule, but it’s not the go-to for general application troubleshooting.

In short, Event Viewer is your go-to detective for solving application mysteries!

Correct Answer: All of the above, because this setup makes as much sense as a screen door on a submarine.

Explanation: The subnet mask 255.255.255.255 isolates the IP address into a network with a single host, meaning the gateway cannot be reached.

With a subnet mask of 255.255.255.255, also known as a /32 prefix, you’re saying, “This network has room for only one single IP address.” That means no other devices can exist in the same network—not even a gateway!

In your scenario:

IP: 192.168.0.120 is on a /32 subnet, which means it can only talk to itself.

Gateway: 192.168.0.1 is effectively outside this network because there's no room for it within the subnet.

To fix this, you’d typically use a larger subnet mask, like 255.255.255.0 (/24), which provides room for 254 usable IP addresses in the same network, including both the IP and the gateway.

The correct answer is:

net use X: "\\TwerkStation\MusicLibrary"

net use is used to map a network drive or connect to a shared resource, not to manage user accounts.

net user is the correct command to add, delete, or modify user accounts.

The correct answer is: net user "Caramel Latte" /add

net use is used to map a network drive or connect to a shared resource, not to manage user accounts.

net user is the correct command to add, delete, or modify user accounts.

The correct answer is to use EFS. EFS stands for Encrypting File System. This is the correct answer because the user has requested that they want to encrypt the file. While you could password protect the file, the question states that you want to encrypt the file, not password protect it.

EFS works by only allowing our users account to access the file, and when our user logs in, the file will be decrypted. Even if your psycho girlfriend stole your hard drive, she would not be able to read the file unless she knows your account credentials. EFS (Encrypting File System) ties the encryption to your Windows user account. It uses encryption keys that are far more secure than most ZIP passwords. Plus, EFS encryption happens in the background automatically, making it harder for unauthorized access.

Bitlocker is also not the correct answer. While Bitlocker is available for Windows, it encrypts the entire file system. You only need to encrypt a single file.

For the removal of files, one should use the "del" command. For the removal of folders, one should use the "rd" command.

In this case, since Stuxnet.exe is a singular file, you will want to use the "del" command to delete it.

You would use the "rd" command. A folder is a directory, and rd stands for "remove directory". The correct answer is "rd"