View Full CompTIA Tech+ FC0-U71 Exam Dumps and Practice Test Dumps

 

Question 321.

Which type of software is primarily designed to protect a computer against malicious programs?

1. Antimalware software
   2. Spreadsheet software
   3. Presentation software
   4. Media player

Correct Answer: 1. Antimalware software

Explanation:

Antimalware software is designed to detect, block, quarantine, and remove malicious software such as viruses, worms, Trojans, spyware, and ransomware. It may use signature-based detection, behavioral monitoring, and reputation services. Spreadsheet, presentation, and media applications are productivity tools rather than security controls. Antimalware is most effective when combined with regular software updates, strong authentication, safe browsing practices, least privilege, and reliable backups.

Question 322.

Which security control filters network traffic according to configured rules?

1. Hypervisor
   2. Firewall
   3. Spreadsheet
   4. Printer driver

Correct Answer: 2. Firewall

Explanation:

A firewall monitors and filters network traffic according to security rules. It can allow or block communications based on factors such as source, destination, port, protocol, application, or connection state. Firewalls may run on individual computers, dedicated appliances, routers, or cloud platforms. They are an important security layer, but they do not replace strong passwords, multifactor authentication, patching, endpoint protection, and secure user behavior.

Question 323.

Which type of malware secretly records keys pressed by a user?

1. Worm
   2. Ransomware
   3. Keylogger
   4. Firewall

Correct Answer: 3. Keylogger

Explanation:

A keylogger records keyboard input and may be used maliciously to capture usernames, passwords, messages, financial details, or other sensitive information. Keylogging can be implemented through software or hardware. Worms spread between systems, ransomware blocks access to data, and firewalls are security controls. Endpoint protection, least privilege, software updates, and caution when installing unknown programs can reduce keylogger risk.

Question 324.

Which security attack attempts to trick a user into voluntarily providing confidential information?

1. Disk cleanup
   2. RAID failure
   3. Defragmentation
   4. Social engineering**

Correct Answer: 4. Social engineering

Explanation:

Social engineering manipulates people into revealing information or performing actions that weaken security. Attackers may impersonate trusted individuals, create urgency, or use fear and curiosity to influence the victim. Phishing is one common form of social engineering. Technical protections help, but user awareness and independent verification of unusual requests are also important because social engineering targets human judgment rather than only software vulnerabilities.

Question 325.

Which security practice provides the best protection against password reuse attacks?

1. Use unique passwords for different accounts
   2. Use the same password everywhere
   3. Share passwords with coworkers
   4. Disable MFA

Correct Answer: 1. Use unique passwords for different accounts

Explanation:

Using a unique password for every account prevents a password stolen from one service from being reused successfully against another. This directly reduces the risk of credential stuffing. Password managers can help generate and securely store strong unique passwords. Multifactor authentication adds additional protection. Reusing credentials across many services creates unnecessary risk because one breach can expose multiple accounts.

Question 326.

Which practice provides an additional authentication layer beyond a password alone?

1. File compression
   2. Multifactor authentication
   3. Disk cleanup
   4. Screen scaling

Correct Answer: 2. Multifactor authentication

Explanation:

Multifactor authentication requires more than one authentication factor, such as something the user knows combined with something the user has or is. For example, a password may be combined with a security key, authenticator app, or biometric. This makes account takeover more difficult because stealing one factor may not be sufficient. Compression, cleanup, and screen scaling do not provide identity verification.

Question 327.

Which security control is most appropriate for protecting confidential data stored on a portable laptop?

1. Increase screen brightness
   2. Compress the files
   3. Full-disk encryption
   4. Change the wallpaper

Correct Answer: 3. Full-disk encryption

Explanation:

Full-disk encryption protects stored information by converting it into an unreadable form until authorized credentials or keys are provided. This is especially important for laptops because portable devices can be lost or stolen. Compression and display settings do not provide confidentiality. Encryption should be paired with strong authentication and secure recovery-key management to reduce the risk of unauthorized offline access.

Question 328.

Which security concept allows a system administrator to determine what an authenticated user can do?

1. Authentication
   2. Availability
   3. Encryption
   4. Authorization**

Correct Answer: 4. Authorization

Explanation:

Authorization determines what an authenticated user is permitted to access or perform. Authentication verifies identity, while authorization applies permissions after identity has been established. Examples include allowing one user to read a file while another can edit or delete it. Proper authorization supports least privilege and reduces unnecessary exposure of sensitive resources.

Question 329.

Which security objective ensures that information remains accessible to authorized users when required?

1. Availability
   2. Confidentiality
   3. Integrity
   4. Obfuscation

Correct Answer: 1. Availability

Explanation:

Availability ensures that systems, services, and data are accessible to authorized users when needed. Backups, redundant systems, failover, UPS devices, disaster recovery planning, and denial-of-service protections can all support availability. Confidentiality prevents unauthorized disclosure, while integrity protects information from improper modification. Strong security should address all three objectives.

Question 330.

Which security objective protects information from unauthorized disclosure?

1. Availability
   2. Confidentiality
   3. Integrity
   4. Scalability

Correct Answer: 2. Confidentiality

Explanation:

Confidentiality ensures that sensitive information is accessible only to authorized people or systems. Encryption, access controls, physical security, and strong authentication help maintain confidentiality. Integrity focuses on preventing unauthorized modification, while availability ensures that resources remain accessible when needed. Confidentiality is especially important for passwords, personal information, financial data, and proprietary business information.

Question 331.

Which security objective focuses on preventing unauthorized or accidental modification of data?

1. Availability
   2. Confidentiality
   3. Integrity
   4. Scalability

Correct Answer: 3. Integrity

Explanation:

Integrity protects the accuracy and trustworthiness of data by preventing or detecting unauthorized changes. Controls such as permissions, hashing, digital signatures, logging, and version control can support integrity. Confidentiality protects information from disclosure, while availability ensures accessibility. Integrity matters whenever incorrect or altered information could affect decisions, transactions, or system behavior.

Question 332.

Which method is commonly used to verify that a downloaded file has not changed?

1. File compression
   2. Screen locking
   3. Disk formatting
   4. Hash comparison**

Correct Answer: 4. Hash comparison

Explanation:

A hash function creates a fixed-length digest based on file contents. If the file changes, the resulting hash should also change. Comparing a calculated hash with a trusted published value can help verify file integrity. Hashing is different from encryption because it is generally intended to be one-way. Screen locking, formatting, and compression do not verify whether a file has been modified.

Question 333.

Which physical security control is most appropriate for restricting access to a server room?

1. Electronic door access control
   2. File compression
   3. Antivirus software
   4. DNS filtering

Correct Answer: 1. Electronic door access control

Explanation:

Electronic access controls such as badge readers, smart cards, or biometric systems can restrict physical entry to sensitive areas. Physical security matters because direct access to servers or network equipment can allow attackers to bypass some technical controls. Antivirus and DNS filtering provide software or network protection, while compression reduces file size. Physical controls are often combined with cameras, visitor procedures, and alarms.

Question 334.

Which practice is safest when receiving an unexpected email attachment from an unknown sender?

1. Open it immediately
   2. Do not open it until the sender and file are verified
   3. Disable antivirus first
   4. Forward it to coworkers

Correct Answer: 2. Do not open it until the sender and file are verified

Explanation:

Unexpected attachments from unknown senders may contain malware or be part of a phishing attack. The safest approach is to avoid opening the attachment until its legitimacy has been independently confirmed. Security tools should not be disabled to bypass warnings. Suspicious messages should be reported through the appropriate process. User caution is important because many attacks rely on convincing someone to execute malicious content.

Question 335.

Which action should be taken first if a user believes an account password has been stolen?

1. Ignore it
   2. Reuse the same password elsewhere
   3. Change the password through the legitimate service
   4. Publish the password online

Correct Answer: 3. Change the password through the legitimate service

Explanation:

A suspected stolen password should be treated as compromised. The user should change it through the legitimate service, review recent account activity, verify recovery settings, and enable or review multifactor authentication. If the same password was used elsewhere, those accounts should also receive unique new passwords. Delaying action gives an attacker more time to misuse the credential.

Question 336.

Which practice best protects important files against ransomware that encrypts the primary storage device?

1. Keep the only backup on the same drive
   2. Disable all backups
   3. Store only shortcuts
   4. Maintain separate protected backups**

Correct Answer: 4. Maintain separate protected backups

Explanation:

Separate protected backups provide recovery options if ransomware encrypts or damages the primary data. Backups should be isolated or otherwise protected so malware cannot easily modify them. Keeping the only backup on the same affected storage creates a single point of failure. Organizations should also test restores regularly to ensure backups are usable. Backups complement, rather than replace, patching, endpoint security, and user awareness.

Question 337.

Which software maintenance practice reduces exposure to known vulnerabilities?

1. Apply security updates and patches
   2. Disable all updates permanently
   3. Use unsupported software indefinitely
   4. Ignore vendor advisories

Correct Answer: 1. Apply security updates and patches

Explanation:

Patches correct known vulnerabilities and software defects. Applying updates in a timely manner reduces the opportunity for attackers to exploit weaknesses that vendors have already fixed. Organizations may test major updates before broad deployment, especially on critical systems. Unsupported software that no longer receives patches can create significant risk and should be upgraded, replaced, or appropriately isolated.

Question 338.

Which troubleshooting step should be performed after identifying and reproducing a problem?

1. Close the ticket
   2. Establish a theory of probable cause
   3. Replace all hardware
   4. Delete all logs

Correct Answer: 2. Establish a theory of probable cause

Explanation:

After identifying and reproducing the issue, the technician should develop a theory of probable cause based on the evidence. That theory should then be tested before a solution is implemented. Randomly replacing hardware or deleting diagnostic information can waste time and hide the root cause. A structured troubleshooting process improves efficiency and makes the final solution easier to validate and document.

Question 339.

Which troubleshooting action should occur after a theory of probable cause has been established?

1. Document the issue as solved immediately
   2. Replace unrelated hardware
   3. Test the theory
   4. Ignore the symptoms

Correct Answer: 3. Test the theory

Explanation:

Testing the theory determines whether the suspected cause actually explains the observed problem. If the test confirms the theory, the technician can plan and implement an appropriate solution. If it does not, another theory should be developed and tested. This evidence-based approach prevents unnecessary changes and helps isolate the real cause of the problem.

Question 340.

A user reports that a computer powers on but displays no image. Which basic check should be performed first?

1. Format the storage drive
   2. Reinstall the operating system
   3. Replace the motherboard immediately
   4. Check the monitor power, input source, and video cable**

Correct Answer: 4. Check the monitor power, input source, and video cable

Explanation:

Basic external checks should be performed before replacing internal components or reinstalling software. The technician should verify that the monitor is powered on, the correct input source is selected, and the video cable is securely connected. If those checks are successful, troubleshooting can continue with graphics hardware, memory, startup indicators, or other system components. Starting with simple likely causes follows an efficient troubleshooting methodology.