A+ Certification Exam: Core 2 Free Sample Questions

When multiple users with the same Android device model experience identical application crashes, this typically indicates an OS compatibility issue between the application and the specific Android version. Updating the OS resolves compatibility conflicts and often includes security patches that fix app stability issues. Reinstalling the app would not address underlying OS compatibility problems, rolling back may not be available, and clearing cache only addresses temporary data issues, not systemic compatibility problems.

For a Windows 10 PC running slowly, chkdsk and dism are the most effective commands. The chkdsk command scans and repairs file system errors, bad sectors, and disk corruption that can significantly slow system performance. The dism command can repair Windows system image corruption and restore missing or damaged system files. The other options serve different purposes: dir lists directory contents, ipconfig manages network settings, format erases drives completely, and diskpart manages disk partitions but does not repair performance issues.

For a Windows 10 PC running slowly, chkdsk and dism are the most effective commands. The chkdsk command scans and repairs file system errors, bad sectors, and disk corruption that can significantly slow system performance. The dism command can repair Windows system image corruption and component store issues. Dir simply lists directory contents, ipconfig manages network configuration, format erases drives, and diskpart manages disk partitions - none of these directly address system slowness.

To increase Windows terminal server security, placing the server in the router DMZ and blocking unused ports on the LAN switch are the most effective measures. DMZ placement isolates the terminal server from the internal network, limiting potential damage if compromised. Blocking unused switch ports prevents unauthorized physical network access and reduces attack surface. Changing the default port and enforcing password complexity are good practices but less critical than network isolation, while disabling logon restrictions and using local certificates actually decrease security.

To increase Windows terminal server security, placing the server in the router DMZ and blocking unused ports on the LAN switch are the most effective measures. DMZ placement isolates the terminal server from the internal network, limiting potential damage from breaches. Blocking unused ports prevents unauthorized network access and reduces attack surface. Changing the default port, enforcing password complexity, and disabling logon restrictions are good practices but less critical than network isolation and port security.

SSH (Secure Shell) is the correct protocol for secure remote access to network switches and routers. SSH provides encrypted authentication and data transmission, protecting credentials and configuration commands from interception. Telnet transmits data in plain text and is inherently insecure. RDP and VNC are designed for remote desktop access to Windows and graphical systems respectively, not for command-line network device management. SSH is the industry standard for secure network device administration.

The attack described indicates WPS (Wi-Fi Protected Setup) and WEP vulnerabilities were exploited. WPS uses an 8-digit PIN that can be brute-forced relatively easily, especially since the last digit is a checksum, leaving only 7 digits to crack. Once WPS is compromised, attackers gain full network access. WEP encryption is also notoriously weak and easily cracked. Default login credentials on the router allowed DNS modification after network access was gained. Guest networks, TKIP, and outdated firmware, while security concerns, were not the primary attack vectors described in this scenario.

Asset ID and MAC address provide the most effective PC naming convention for tracking and identification. Asset IDs are unique organizational identifiers that link directly to inventory management systems for asset tracking, warranty management, and support records. MAC addresses are globally unique hardware identifiers that never change, making devices easily identifiable on networks. Domain names and locations can change, IP addresses are dynamic and reassignable, and RFID requires additional hardware infrastructure that may not be present in all environments.

Badge readers and biometric locks provide the best security for server rooms by implementing multi-factor authentication and access control. Badge readers validate authorized personnel through ID cards linked to access control systems, providing audit trails of entry/exit times. Biometric locks use unique physical characteristics like fingerprints or retinal scans that cannot be duplicated or shared, ensuring only authorized individuals gain access. Bollards protect against vehicle intrusion but not relevant for server rooms, cable locks secure individual devices but not room access, USB tokens are authentication devices but not access control systems, and privacy window shades provide visual security but no access control.

Spear phishing uses personalized information to target specific individuals with customized attacks that appear legitimate. Unlike generic phishing, spear phishing incorporates personal details like names, job titles, company information, or recent activities to increase credibility and success rates. Whaling targets high-profile executives but is not necessarily personalized, impersonation involves pretending to be someone else but may not use personal information, and spoofing involves falsifying sender information but does not necessarily incorporate personalized content about the target.

Invalid certificate errors on port 443 (HTTPS) affecting only one workstation typically indicate incorrect date and time settings. SSL/TLS certificates have validity periods defined by start and end dates, and browsers reject certificates if the local system time falls outside this range. Since other computers on the same LAN work properly, the issue is isolated to this specific workstation system configuration. UEFI boot mode affects hardware initialization not certificate validation, logon times control user access periods not certificate verification, and user access control manages permissions but does not affect certificate date validation.