CSLB General Building (B) — All Questions

Which component is considered the 'brain' of a computer, executing instructions and performing calculations?

• a.The power supply unit (PSU)
• b.The central processing unit (CPU)✓
• c.The hard disk drive (HDD)
• d.The network interface card (NIC)

The CPU carries out the instructions of a program by performing arithmetic, logic, and control operations. It is often called the brain of the computer. Other components like storage and power supplies support the CPU but do not execute program logic.

What is the primary purpose of RAM in a computer system?

• a.To provide fast, temporary storage for data the CPU is actively using✓
• b.To permanently store the operating system and user files
• c.To convert AC power to DC power for the motherboard
• d.To output video signals to a monitor

RAM (random access memory) is volatile memory that holds data and instructions the CPU needs quickly while programs run. Its contents are lost when power is removed, unlike permanent storage on a drive. More RAM generally lets a system run more programs simultaneously without slowing down.

Which storage technology has no moving parts and generally offers faster read and write speeds?

• a.Optical disc drive
• b.Magnetic tape
• c.Solid-state drive (SSD)✓
• d.Traditional hard disk drive (HDD)

An SSD stores data on flash memory chips with no spinning platters or moving read heads. This makes it faster and more shock-resistant than a traditional HDD. The lack of mechanical parts also reduces noise and power consumption.

What does the motherboard primarily provide in a computer?

• a.Long-term file storage for the operating system
• b.The main cooling for the CPU and GPU
• c.Backup power during outages
• d.A central circuit board connecting and allowing communication between components✓

The motherboard is the main printed circuit board that ties together the CPU, RAM, storage, and expansion cards. It provides the buses and connectors that let these parts communicate. Nearly every internal component plugs into or connects through the motherboard.

Which unit converts wall AC power into the DC voltages a computer's internal components need?

• a.The voltage regulator module (VRM)
• b.The power supply unit (PSU)✓
• c.The uninterruptible power supply (UPS)
• d.The CMOS battery

The PSU takes alternating current from the wall outlet and converts it into the direct current voltages such as 3.3V, 5V, and 12V used by internal parts. Choosing a PSU with adequate wattage is important for system stability. A failing PSU can cause random shutdowns or a system that will not power on.

What is the main function of a graphics processing unit (GPU)?

• a.To render images, video, and graphics for display✓
• b.To manage network traffic between devices
• c.To store the BIOS firmware
• d.To regulate the CPU's clock speed

A GPU is specialized hardware designed to handle the parallel calculations needed to render images and video efficiently. It offloads graphics work from the CPU, improving performance in games, design software, and video editing. GPUs are also increasingly used for tasks like machine learning.

Which port standard is commonly used to connect modern peripherals and supports a reversible connector?

• a.PS/2
• b.VGA
• c.USB-C✓
• d.Parallel (LPT)

USB-C is a modern, reversible connector that can carry data, video, and power over a single cable. Its symmetrical design means it can be inserted either way. It has become common on laptops, phones, and many peripherals.

What does BIOS or UEFI firmware do when a computer first powers on?

• a.It defragments the hard drive
• b.It connects the computer to the internet
• c.It encrypts all user files
• d.It initializes hardware and starts the boot process✓

BIOS or its modern successor UEFI is firmware stored on the motherboard that runs first at power-on. It performs a power-on self-test, initializes hardware, and then hands control to the bootloader to load the operating system. UEFI adds features like faster boot and support for larger drives.

Why is a heat sink or fan attached to a CPU?

• a.To increase the CPU's clock speed automatically
• b.To dissipate heat and prevent the CPU from overheating✓
• c.To provide additional storage capacity
• d.To supply power directly to the CPU

CPUs generate significant heat while operating, and excessive heat can cause instability or damage. A heat sink draws heat away from the chip, and a fan or liquid cooler moves that heat out of the case. Adequate cooling keeps the CPU within safe operating temperatures.

What is the purpose of the CMOS battery on a motherboard?

• a.To keep the system clock and BIOS settings powered when the computer is off✓
• b.To provide backup power to the CPU during outages
• c.To charge the laptop's main battery
• d.To store the operating system

The small CMOS battery, usually a coin cell, maintains the real-time clock and stored BIOS/UEFI settings while the computer is unplugged. If it dies, the system may lose the correct date and time or reset configuration on each boot. Replacing it is a simple, inexpensive fix.

Which of the following is an example of a peripheral (input) device?

• a.The motherboard
• b.The power supply
• c.A keyboard✓
• d.The system RAM

A keyboard is an input peripheral that lets a user send data and commands to the computer. Peripherals are external devices that extend the computer's functionality. Output peripherals include monitors and printers, while the motherboard and RAM are internal core components.

What is the main advantage of using DDR4 or DDR5 RAM over older DDR3?

• a.It stores data permanently without power
• b.It replaces the need for a CPU
• c.It functions as a graphics card
• d.It offers higher speeds and greater bandwidth✓

Each new generation of DDR memory generally increases data transfer rates and bandwidth while often lowering power consumption. DDR4 and DDR5 outperform DDR3 in speed. However, RAM generations are not backward compatible, so the motherboard must support the specific type.

Which expansion slot standard is most commonly used today for graphics cards and high-speed add-in cards?

• a.ISA
• b.PCI Express (PCIe)✓
• c.AGP
• d.PCMCIA

PCI Express is the modern high-speed serial expansion bus used for graphics cards, NVMe storage, and other add-in cards. It comes in different lane widths such as x1, x4, x8, and x16. Older standards like ISA and AGP have been largely retired.

What does the acronym 'NIC' stand for in computer hardware?

• a.Network interface card✓
• b.New integrated circuit
• c.Numeric input controller
• d.Nonvolatile internal cache

A network interface card (NIC) provides the physical connection that lets a computer join a network. It can be wired using an Ethernet port or wireless using Wi-Fi. Each NIC has a unique hardware MAC address.

When installing internal components, why should a technician use an antistatic wrist strap?

• a.To improve the speed of the installation
• b.To keep cables neatly organized
• c.To prevent electrostatic discharge from damaging components✓
• d.To increase electrical power to the parts

Electrostatic discharge (ESD) can silently damage sensitive electronic components such as CPUs and RAM. An antistatic wrist strap keeps the technician at the same electrical potential as the equipment, safely dissipating static charge. Working on an antistatic mat further reduces the risk.

What is the function of a laptop's inverter or backlight circuitry historically associated with the display?

• a.To store user documents
• b.To connect to Wi-Fi networks
• c.To cool the processor
• d.To power the illumination of the screen✓

Older laptop displays used an inverter to power the backlight that illuminates the LCD panel. A failing backlight can make the screen very dim even though an image is still faintly visible. Modern LED-backlit displays have largely eliminated the separate inverter.

Which type of connector and cable is standard for wired Ethernet networking on most computers?

• a.HDMI
• b.RJ45✓
• c.DisplayPort
• d.3.5mm audio

Wired Ethernet connections typically use an RJ45 connector on a twisted-pair cable such as Cat5e or Cat6. This connector plugs into the NIC and a switch or router. HDMI and DisplayPort are for video, not networking.

What is 'cache' memory on a CPU used for?

• a.To store frequently accessed data close to the CPU for faster access✓
• b.To permanently archive user files
• c.To supply power to the CPU cores
• d.To connect external displays

CPU cache is a small amount of very fast memory built into or near the processor. It holds frequently used instructions and data so the CPU can retrieve them faster than from main RAM. Caches are organized into levels such as L1, L2, and L3, with L1 being the smallest and fastest.

What is the primary role of an operating system?

• a.To physically cool the hardware components
• b.To provide internet connectivity by itself
• c.To manage hardware resources and provide services for applications✓
• d.To manufacture computer chips

An operating system manages a computer's hardware and software resources, including the CPU, memory, storage, and devices. It provides a platform and services on which applications run. Examples include Windows, macOS, Linux, Android, and iOS.

In a file path, what does a directory (folder) represent?

• a.A container that organizes files and other directories✓
• b.A single executable program
• c.A network connection
• d.A hardware device driver

A directory, commonly called a folder, is a container used to organize files and other directories in a hierarchy. This structure helps users and the system locate data logically. Paths describe the location of a file within this directory tree.

Which Linux command lists the files in the current directory?

• a.cd
• b.ls✓
• c.rm
• d.mkdir

The ls command lists the contents of a directory. Options like -l show detailed information and -a reveal hidden files. In contrast, cd changes directories, rm removes files, and mkdir creates directories.

What is a 'process' in an operating system?

• a.A physical component on the motherboard
• b.A type of network cable
• c.A permanent file stored on disk
• d.An instance of a program in execution✓

A process is a running instance of a program, including its code, current activity, and allocated resources such as memory. The operating system schedules processes on the CPU and manages their lifecycle. A single program can spawn multiple processes.

What does the term 'virtual memory' describe?

• a.Using disk space to extend the apparent amount of RAM available✓
• b.A cloud storage service
• c.The memory built into a GPU
• d.A backup of the BIOS settings

Virtual memory lets the operating system use a portion of the disk, called a page file or swap, as an extension of physical RAM. This allows more programs to run than would fit in RAM alone. However, disk is much slower than RAM, so heavy swapping can reduce performance.

In Windows, which tool is commonly used to view and end running processes and check resource usage?

• a.Disk Cleanup
• b.Device Manager
• c.Task Manager✓
• d.Registry Editor

Task Manager displays running processes, CPU, memory, disk, and network usage, and lets a user end unresponsive tasks. It is a quick way to diagnose performance problems and identify resource-hungry applications. It can be opened with Ctrl+Shift+Esc.

What is a file system responsible for?

• a.Cooling the storage drive
• b.Controlling how data is stored and retrieved on a storage device✓
• c.Encrypting network traffic
• d.Managing the display resolution

A file system defines how data is organized, named, stored, and retrieved on a storage device. Examples include NTFS on Windows, ext4 on Linux, and APFS on macOS. The chosen file system affects features like maximum file size, permissions, and reliability.

Which of the following is an example of file permissions in a Linux system?

• a.HTTP, FTP, SSH
• b.RAM, ROM, cache
• c.TCP, UDP, IP
• d.Read, write, execute✓

In Linux, files and directories have read, write, and execute permissions assigned to the owner, group, and others. These permissions control who can view, modify, or run a file. Commands like chmod adjust these permissions.

What is the purpose of a device driver?

• a.To allow the operating system to communicate with a specific hardware device✓
• b.To physically connect two computers
• c.To store user passwords
• d.To increase the screen brightness

A device driver is software that translates operating system commands into instructions a particular hardware device understands. Without the correct driver, a device such as a printer or graphics card may not function properly. Keeping drivers updated can fix bugs and improve compatibility.

In Windows, what is the Registry?

• a.A folder that stores all user documents
• b.A tool for defragmenting the hard drive
• c.A hierarchical database that stores system and application settings✓
• d.A type of antivirus software

The Windows Registry is a central hierarchical database that stores low-level settings for the operating system and many applications. Editing it incorrectly can cause serious problems, so changes should be made carefully. It is accessed through the Registry Editor (regedit).

What does 'multitasking' mean in the context of an operating system?

• a.Running the system on multiple monitors
• b.The ability to run multiple processes seemingly at the same time✓
• c.Installing multiple operating systems
• d.Connecting to multiple networks at once

Multitasking is the operating system's ability to manage multiple processes so they appear to run simultaneously. On a single core, the OS rapidly switches between processes, while multi-core CPUs can run several truly in parallel. Effective scheduling keeps the system responsive.

Which command in Windows Command Prompt changes the current directory?

• a.cd✓
• b.dir
• c.copy
• d.del

The cd command changes the current working directory in the Windows Command Prompt. The dir command lists directory contents, copy duplicates files, and del deletes them. Understanding basic command-line navigation is a core system administration skill.

What is the main benefit of creating user accounts with limited (standard) privileges instead of administrator rights?

• a.It makes the computer boot faster
• b.It increases available disk space
• c.It improves the screen resolution
• d.It limits the damage that malware or mistakes can cause✓

Standard user accounts cannot make system-wide changes without elevated permission, which reduces the impact of malware or accidental misconfiguration. Following the principle of least privilege improves security. Administrator rights should be reserved for tasks that truly require them.

What is a common reason to boot a computer into 'safe mode'?

• a.To increase gaming performance
• b.To troubleshoot problems by loading only essential drivers and services✓
• c.To permanently remove the operating system
• d.To connect to a faster network

Safe mode starts the operating system with a minimal set of drivers and services. This helps isolate whether a problem is caused by third-party software or drivers. It is a valuable troubleshooting environment for removing malware or reversing bad changes.

What does 'package management' refer to on Linux systems?

• a.Wrapping files for shipment
• b.Managing physical hardware boxes
• c.Installing, updating, and removing software using tools like apt or yum✓
• d.Organizing network cables

Package managers such as apt, yum, and dnf automate installing, updating, and removing software along with its dependencies. They pull software from repositories, simplifying maintenance. This centralized approach helps keep a system consistent and secure.

What is the purpose of 'group policy' in a Windows domain environment?

• a.To centrally manage settings and restrictions for many computers and users✓
• b.To increase RAM capacity
• c.To speed up the internet connection
• d.To cool the servers

Group Policy lets administrators define and enforce configuration settings across many users and computers in a domain from a central location. It can control security settings, software deployment, and user restrictions. This greatly simplifies large-scale administration.

In a directory service like Active Directory, what is a 'domain'?

• a.A single physical server
• b.A logical grouping of network objects such as users and computers under common administration✓
• c.A type of encryption key
• d.A backup storage device

A domain is a logical group of users, computers, and other objects that share a common directory database and security policies. Active Directory uses domains to centralize authentication and management. Administrators can control access across the domain from one place.

What is the function of the 'sudo' command in Linux?

• a.To shut down the network
• b.To list all running processes
• c.To compress files
• d.To run a command with elevated (superuser) privileges✓

The sudo command lets a permitted user execute a command with the privileges of the superuser (root). This is used for administrative tasks that require elevated access. It provides an audit trail and avoids the need to log in as root directly.

Why is regularly backing up data an important system administration task?

• a.To protect against data loss from hardware failure, malware, or user error✓
• b.To make the CPU run cooler
• c.To increase the monitor's refresh rate
• d.To reduce the number of user accounts

Backups create copies of data that can be restored if the original is lost due to hardware failure, ransomware, accidental deletion, or disaster. A common strategy is the 3-2-1 rule: three copies, on two types of media, with one offsite. Backups should be tested regularly to ensure they can be restored.

What is 'virtualization' in computing?

• a.Deleting unused files automatically
• b.Overclocking the processor
• c.Running one or more virtual machines on a single physical host✓
• d.Encrypting the hard drive

Virtualization uses a hypervisor to run multiple isolated virtual machines, each with its own operating system, on a single physical computer. This improves hardware utilization and flexibility. It is foundational to modern data centers and cloud computing.

What does an OS 'kernel' do?

• a.It displays the desktop wallpaper
• b.It is the core that manages memory, processes, and hardware access✓
• c.It provides the web browser
• d.It stores user photos

The kernel is the central core of an operating system that manages memory, schedules processes, and controls access to hardware. It operates in a privileged mode and acts as a bridge between applications and the physical machine. A stable kernel is essential for system reliability.

What is the benefit of keeping an operating system updated with patches?

• a.It fixes security vulnerabilities and bugs✓
• b.It permanently increases storage capacity
• c.It replaces the need for a CPU
• d.It removes the need for backups

Operating system updates deliver security patches, bug fixes, and sometimes new features. Applying them promptly closes vulnerabilities that attackers could exploit. Patch management is a key responsibility of system administrators.

What does the acronym 'IP' stand for in networking?

• a.Internal Protocol
• b.Interface Port
• c.Internet Protocol✓
• d.Integrated Packet

IP stands for Internet Protocol, which is responsible for addressing and routing packets of data so they can travel across networks. Every device on an IP network has an IP address. IP works together with TCP in the widely used TCP/IP suite.

What is the primary purpose of DNS (Domain Name System)?

• a.To translate human-readable domain names into IP addresses✓
• b.To assign IP addresses automatically to devices
• c.To encrypt web traffic
• d.To physically connect cables between routers

DNS acts like the internet's phone book, translating domain names such as example.com into the numeric IP addresses computers use to communicate. Without DNS, users would need to memorize IP addresses. DNS resolution happens through a hierarchy of servers.

What does DHCP do on a network?

• a.Encrypts all network traffic
• b.Automatically assigns IP addresses and network configuration to devices✓
• c.Translates domain names to IP addresses
• d.Blocks malicious websites

DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses, subnet masks, gateways, and DNS servers to devices as they join a network. This removes the need to configure each device manually. Addresses are leased for a period and can be renewed.

Which protocol is connection-oriented and ensures reliable, ordered delivery of data?

• a.ICMP
• b.UDP
• c.ARP
• d.TCP✓

TCP (Transmission Control Protocol) establishes a connection and guarantees that data arrives reliably and in order, retransmitting lost packets. This makes it suitable for applications like web browsing and email. UDP, by contrast, is faster but does not guarantee delivery.

How many layers are in the OSI networking model?

• a.Seven✓
• b.Four
• c.Five
• d.Nine

The OSI (Open Systems Interconnection) model has seven layers: physical, data link, network, transport, session, presentation, and application. Each layer has a specific role in network communication. The model is a conceptual framework used to understand and troubleshoot networks.

What is a MAC address?

• a.A temporary address assigned by DHCP
• b.The name of a website
• c.A unique hardware identifier assigned to a network interface✓
• d.A type of encryption key

A MAC (Media Access Control) address is a unique identifier burned into a network interface card by the manufacturer. It operates at the data link layer and is used for communication within a local network segment. Unlike IP addresses, MAC addresses are generally fixed to the hardware.

What is the role of a router in a network?

• a.To store website data
• b.To forward data packets between different networks✓
• c.To generate electricity for devices
• d.To scan for viruses

A router directs data packets between separate networks, such as between a home network and the internet. It determines the best path for traffic based on IP addresses and routing tables. Routers are essential for connecting local networks to the wider internet.

What does a subnet mask define?

• a.The speed of the network
• b.The physical length of a cable
• c.The color coding of network wires
• d.Which portion of an IP address identifies the network versus the host✓

A subnet mask divides an IP address into a network portion and a host portion. This lets devices determine whether a destination is on the local network or needs to be routed elsewhere. For example, 255.255.255.0 designates the first three octets as the network.

Which command is commonly used to test connectivity to another host by sending echo requests?

• a.ping✓
• b.format
• c.chmod
• d.del

The ping command sends ICMP echo request packets to a target host and reports whether replies are received and how long they take. It is a fundamental tool for testing basic network connectivity. A successful ping indicates the host is reachable.

What is the difference between TCP and UDP?

• a.TCP is wireless while UDP is wired
• b.TCP is for video only while UDP is for text only
• c.TCP is reliable and connection-oriented while UDP is faster but connectionless✓
• d.There is no difference between them

TCP establishes a connection and guarantees reliable, ordered delivery with error checking and retransmission. UDP is connectionless and does not guarantee delivery, trading reliability for lower overhead and speed. UDP suits real-time uses like streaming and online gaming.

Which port number is the default for HTTP web traffic?

• a.443
• b.80✓
• c.22
• d.53

HTTP typically uses port 80 for unencrypted web traffic. Port 443 is used for HTTPS, the encrypted version. Knowing common port numbers helps in configuring firewalls and troubleshooting connectivity.

What does the 'traceroute' (or tracert) command show?

• a.The MAC address of a device
• b.The amount of free disk space
• c.The password of a router
• d.The path packets take through routers to reach a destination✓

Traceroute maps the route packets take from your computer to a destination, listing each hop along the way and the time to reach it. This helps identify where delays or failures occur in the path. On Windows the command is tracert.

What is NAT (Network Address Translation) used for?

• a.Allowing multiple devices on a private network to share a single public IP address✓
• b.Encrypting all email messages
• c.Speeding up the CPU
• d.Translating domain names to IP addresses

NAT lets many devices on a private network share one public IP address when accessing the internet. The router translates private addresses to the public address and tracks connections. This conserves scarce public IPv4 addresses and adds a layer of separation.

What is the main difference between IPv4 and IPv6?

• a.IPv6 is only for wireless networks
• b.IPv6 uses 128-bit addresses providing far more available addresses than IPv4's 32-bit✓
• c.IPv4 is newer than IPv6
• d.IPv6 does not use IP addresses

IPv4 uses 32-bit addresses, allowing about 4.3 billion unique addresses, which are running out. IPv6 uses 128-bit addresses, providing a vastly larger address space. IPv6 was developed to address IPv4 exhaustion and includes other improvements.

What device connects multiple devices within a single local network and forwards frames based on MAC addresses?

• a.A modem
• b.A router
• c.A switch✓
• d.A firewall

A switch connects devices within the same local network and uses MAC addresses to forward frames only to the intended port. This makes it more efficient than an older hub, which broadcast to all ports. Switches operate primarily at the data link layer.

What does 'bandwidth' refer to in networking?

• a.The maximum rate of data transfer across a network connection✓
• b.The physical thickness of a cable
• c.The number of devices on a network
• d.The distance between two routers

Bandwidth is the maximum amount of data that can be transferred over a network connection in a given time, often measured in megabits per second. Higher bandwidth generally allows more data to move faster. It should not be confused with latency, which is delay.

Which protocol securely encrypts web traffic and is indicated by 'https' in a URL?

• a.FTP
• b.Telnet
• c.SMTP
• d.TLS/SSL (HTTPS)✓

HTTPS uses TLS (formerly SSL) to encrypt data between a browser and a web server. This protects information like passwords and payment details from eavesdropping. A padlock icon in the browser usually indicates a secure HTTPS connection.

What is 'latency' in a network?

• a.The total storage capacity of a server
• b.The delay between sending and receiving data✓
• c.The number of open ports
• d.The encryption strength of a connection

Latency is the time it takes for data to travel from source to destination, usually measured in milliseconds. High latency causes noticeable delays, which is especially problematic for video calls and gaming. It is distinct from bandwidth, which measures capacity.

What is the purpose of a default gateway on a device?

• a.To store DNS records
• b.To encrypt the local network
• c.To provide the route for traffic destined outside the local network✓
• d.To assign MAC addresses

The default gateway is the device, usually a router, that traffic is sent to when the destination is not on the local network. It acts as the exit point toward other networks and the internet. Without a correct gateway, a device cannot reach external networks.

Which command displays a computer's IP configuration on Windows?

• a.ipconfig✓
• b.ls
• c.chmod
• d.ping google

The ipconfig command on Windows displays the current IP address, subnet mask, and default gateway for the machine's interfaces. Using ipconfig /all reveals more details like DNS servers and the MAC address. On Linux and macOS, ip addr or ifconfig serves a similar role.

What are the three core principles of the classic information security 'CIA triad'?

• a.Control, Isolation, Access
• b.Confidentiality, Integrity, Availability✓
• c.Cryptography, Identity, Authorization
• d.Compliance, Inspection, Auditing

The CIA triad stands for Confidentiality, Integrity, and Availability. Confidentiality keeps data private, integrity ensures data is accurate and unaltered, and availability ensures systems and data are accessible when needed. These principles guide most security decisions.

What does encryption accomplish?

• a.It converts readable data into an unreadable form that only authorized parties can decode✓
• b.It permanently deletes data
• c.It speeds up data transfer
• d.It compresses files to save space

Encryption transforms plaintext into ciphertext using an algorithm and a key, making it unreadable to anyone without the correct key. This protects data confidentiality both in transit and at rest. Only authorized parties with the key can decrypt and read the data.

In the AAA security framework, what do the three A's stand for?

• a.Access, Audit, Alert
• b.Assign, Approve, Archive
• c.Authentication, Authorization, Accounting✓
• d.Analyze, Act, Adapt

AAA stands for Authentication, Authorization, and Accounting. Authentication verifies identity, authorization determines what an authenticated user may do, and accounting tracks their activity. Together they provide a structured approach to controlling and auditing access.

What is multi-factor authentication (MFA)?

• a.Using the same password on multiple sites
• b.Encrypting a hard drive twice
• c.Logging in from multiple devices
• d.Requiring two or more independent forms of verification to prove identity✓

MFA requires two or more distinct factors to authenticate, such as something you know (password), something you have (a phone or token), or something you are (a fingerprint). This greatly increases security because a stolen password alone is not enough. MFA is a strong defense against account compromise.

What is the difference between symmetric and asymmetric encryption?

• a.Symmetric uses one shared key while asymmetric uses a public/private key pair✓
• b.Symmetric is always weaker than asymmetric
• c.Asymmetric does not use keys
• d.There is no difference

Symmetric encryption uses a single shared key for both encrypting and decrypting data, which is fast but requires securely sharing the key. Asymmetric encryption uses a mathematically linked public and private key pair, allowing secure exchange without sharing a secret key. Many systems combine both for efficiency and security.

What is 'phishing'?

• a.A method of encrypting emails
• b.A fraudulent attempt to trick people into revealing sensitive information✓
• c.A type of firewall
• d.A backup technique

Phishing is a social engineering attack where criminals impersonate a trustworthy source, often via email, to trick victims into revealing passwords, financial details, or other sensitive data. Warning signs include urgent language, suspicious links, and mismatched sender addresses. User awareness is a key defense.

What is the purpose of a firewall?

• a.To speed up the internet connection
• b.To store user passwords
• c.To monitor and control incoming and outgoing network traffic based on rules✓
• d.To defragment the hard drive

A firewall inspects network traffic and permits or blocks it according to a set of security rules. It acts as a barrier between trusted internal networks and untrusted external ones. Firewalls can be hardware appliances, software, or both.

Why is 'principle of least privilege' important in security?

• a.It makes systems boot faster
• b.It increases available bandwidth
• c.It eliminates the need for passwords
• d.It limits users and processes to only the access they need, reducing risk✓

The principle of least privilege means granting users and processes only the minimum access required to perform their tasks. This limits the potential damage from compromised accounts or mistakes. It is a foundational concept in reducing an organization's attack surface.

What is malware?

• a.Software designed to harm, exploit, or gain unauthorized access to systems✓
• b.A type of network cable
• c.A legitimate operating system update
• d.A hardware cooling device

Malware is malicious software created to damage systems, steal data, or gain unauthorized access. Categories include viruses, worms, trojans, ransomware, and spyware. Antivirus software, patching, and cautious user behavior help defend against it.

What does hashing provide that plain encryption does not necessarily provide?

• a.Reversible transformation of data
• b.A one-way transformation useful for verifying data integrity✓
• c.Faster internet speeds
• d.Automatic data backups

Hashing produces a fixed-length one-way digest of data that cannot be reversed back to the original. It is commonly used to verify integrity and to store passwords securely. If input changes even slightly, the resulting hash changes significantly.

What is a VPN (Virtual Private Network) primarily used for?

• a.To increase RAM
• b.To defragment drives
• c.To create a secure, encrypted connection over a public network✓
• d.To generate stronger Wi-Fi signals

A VPN creates an encrypted tunnel between a device and a remote network over the public internet. This protects data from eavesdropping and can mask the user's location. It is widely used for secure remote access to corporate resources.

Which of the following is the strongest password practice?

• a.Using your birthday for easy recall
• b.Using the same short password everywhere
• c.Writing your password on a sticky note on the monitor
• d.Using a long, unique passphrase and a password manager✓

Strong passwords are long, unique to each account, and hard to guess, ideally managed with a password manager. Reusing passwords or choosing personal information makes accounts vulnerable. Combining strong passwords with multi-factor authentication provides even better protection.

What is 'social engineering' in the context of security?

• a.Manipulating people into divulging information or performing insecure actions✓
• b.Designing social media platforms
• c.Building physical networks
• d.Encrypting social media posts

Social engineering exploits human psychology rather than technical vulnerabilities to gain access or information. Tactics include impersonation, pretexting, and creating a false sense of urgency. Training and healthy skepticism are the best defenses against it.

What is the purpose of network hardening?

• a.To increase the physical length of network cables
• b.To reduce vulnerabilities by disabling unnecessary services and applying secure configurations✓
• c.To boost the monitor refresh rate
• d.To add more user accounts

Network hardening reduces the attack surface by closing unused ports, disabling unnecessary services, applying patches, and enforcing strong configurations. These measures make it harder for attackers to find and exploit weaknesses. Hardening is an ongoing security practice.

What does 'ransomware' do?

• a.It speeds up the computer
• b.It backs up your files automatically
• c.It encrypts a victim's files and demands payment to restore access✓
• d.It updates the operating system

Ransomware is malware that encrypts a victim's data and demands a ransom, often in cryptocurrency, in exchange for the decryption key. Reliable, offline backups are the best defense, allowing recovery without paying. Paying does not guarantee data recovery and encourages further attacks.

Why should Wi-Fi networks use WPA2 or WPA3 encryption instead of WEP?

• a.WEP is faster and more secure
• b.WPA3 does not use any encryption
• c.WEP supports more devices
• d.WEP is outdated and easily cracked while WPA2/WPA3 provide stronger security✓

WEP is an old wireless security standard with serious flaws that can be broken quickly. WPA2 and the newer WPA3 use much stronger encryption and authentication. Networks should always use the strongest supported standard with a robust passphrase.

What is a 'zero-day' vulnerability?

• a.A security flaw unknown to the vendor and unpatched at the time it is exploited✓
• b.A vulnerability that has existed for zero days
• c.A password that expires daily
• d.A firewall that blocks all traffic

A zero-day vulnerability is a security flaw that is unknown to the software vendor and has no available patch when attackers begin exploiting it. These are especially dangerous because defenders have had no time to fix them. Rapid patching and layered defenses help mitigate the risk.

What is the role of a digital certificate in security?

• a.To store a user's photos
• b.To bind a public key to an identity and enable trust, often for HTTPS✓
• c.To increase disk space
• d.To cool the server

A digital certificate, issued by a trusted certificate authority, binds a public key to a verified identity such as a website. Browsers use certificates to confirm they are communicating with the legitimate server and to establish encrypted HTTPS connections. This underpins trust on the web.

What is 'two-factor authentication' an example of?

• a.A type of encryption algorithm
• b.A backup strategy
• c.Strengthening authentication with an additional verification step✓
• d.A network cable standard

Two-factor authentication is a form of multi-factor authentication that adds a second verification step beyond a password, such as a code from a phone. This makes accounts much harder to compromise. Even if a password is stolen, the attacker still lacks the second factor.

What is the best response when a user receives a suspicious email asking them to urgently click a link and enter their password?

• a.Do not click the link and verify the request through a trusted channel✓
• b.Immediately click and enter the password to be safe
• c.Forward it to all coworkers
• d.Reply with the password to confirm identity

Suspicious, urgent requests for credentials are classic phishing signs. The safest action is to avoid clicking the link and instead verify the request directly through a known, trusted contact or website. Reporting the email to IT or security helps protect others.

What is a good first step in a structured troubleshooting methodology?

• a.Replace all hardware immediately
• b.Identify and clearly define the problem✓
• c.Reinstall the operating system
• d.Tell the user it is their fault

Effective troubleshooting starts by identifying and clearly defining the problem, often by gathering information and asking the user questions. Understanding the symptoms precisely prevents wasted effort. Only after defining the issue should you form and test hypotheses.

Why is asking open-ended questions helpful when troubleshooting a user's issue?

• a.It encourages the user to describe the problem in detail✓
• b.It makes the call end faster
• c.It avoids talking to the user
• d.It hides information from the user

Open-ended questions invite users to explain what happened in their own words, revealing details you might not think to ask about. This helps you understand the full context of the problem. Follow-up closed questions can then confirm specifics.

In troubleshooting, why is it useful to change only one variable at a time?

• a.It makes the process take longer for billing
• b.It looks more professional
• c.It lets you clearly identify which change fixed or affected the problem✓
• d.It uses less electricity

Changing one variable at a time lets you isolate the exact cause of a problem and know which action produced a result. If you change several things at once, you cannot tell which one mattered. This disciplined approach leads to reliable, repeatable fixes.

What does it mean to 'escalate' a support ticket?

• a.To delete the ticket
• b.To close the ticket without resolution
• c.To make the customer angry
• d.To pass the issue to a higher tier or specialist when it is beyond your scope✓

Escalation means transferring an issue to a more specialized or higher-level support team when it exceeds your knowledge, permissions, or time constraints. Knowing when and how to escalate ensures the customer gets timely, competent help. Good documentation makes escalation smoother.

Why is documenting the steps taken and the resolution important after solving a problem?

• a.It creates a knowledge base that helps resolve similar issues faster in the future✓
• b.It wastes the technician's time
• c.It is only needed for hardware issues
• d.It replaces the need to talk to users

Documenting the problem, steps taken, and final resolution builds a knowledge base that speeds up future troubleshooting. It also helps colleagues and provides an audit trail. Good documentation turns one solved case into a reusable reference.

A user reports their computer will not turn on at all. What is a sensible first thing to check?

• a.Reinstall the operating system
• b.Whether the power cable is connected and the outlet has power✓
• c.Replace the CPU
• d.Update the graphics driver

When a computer shows no signs of power, start with the simplest and most likely causes, such as the power cable, connection, and outlet. Verifying power before assuming a major component failure saves time and effort. Troubleshooting should move from simple to complex.

What is the value of empathy when providing customer support?

• a.It slows down the resolution
• b.It has no effect on outcomes
• c.It helps the user feel heard and builds trust, improving the interaction✓
• d.It replaces technical knowledge

Empathy means acknowledging the user's frustration and showing you understand their situation. This builds rapport and trust, making users more cooperative and satisfied even when problems are difficult. Combining empathy with technical skill leads to the best support experiences.

A printer is not printing. Following a logical process, which check comes early?

• a.Reinstall the entire operating system
• b.Replace the motherboard
• c.Buy a new printer immediately
• d.Confirm the printer is powered on, connected, and has paper and ink✓

Starting with basic physical checks, such as power, connection, paper, and ink, resolves many printer issues quickly. These simple causes are common and easy to rule out first. Only after basics are confirmed should you investigate drivers or spooler problems.

Why should a technician avoid using excessive technical jargon when speaking with a non-technical user?

• a.It can confuse the user and hinder clear communication✓
• b.It makes the technician sound less smart
• c.Users prefer to feel confused
• d.Jargon is always required by policy

Non-technical users may not understand specialized terminology, which can cause confusion and frustration. Explaining in plain language ensures the user understands the situation and any steps they need to take. Clear communication is a key customer service skill.

What is the purpose of 'verifying full system functionality' after a repair?

• a.To bill the customer more
• b.To confirm the problem is truly fixed and no new issues were introduced✓
• c.To end the call quickly
• d.To avoid documenting the fix

After applying a fix, verifying full functionality confirms the original problem is resolved and that the repair did not cause new issues. This step ensures the customer's system works as expected before closing the case. It is a standard part of a complete troubleshooting process.

A user's application keeps freezing. Which step reflects forming and testing a hypothesis?

• a.Ignoring the issue and hoping it resolves
• b.Immediately replacing the hard drive
• c.Suspecting insufficient memory and checking resource usage in Task Manager✓
• d.Telling the user to buy a new computer

After identifying the problem, you form a probable theory of the cause and test it. Suspecting a memory shortage and checking resource usage is a logical hypothesis test. If the theory is confirmed, you can address it; if not, you form a new theory.

Why is active listening important during a support interaction?

• a.It lets the technician multitask on other issues
• b.It is only useful for sales
• c.It slows down troubleshooting
• d.It ensures you fully understand the problem and makes the user feel valued✓

Active listening means giving full attention, confirming understanding, and not interrupting. It ensures you accurately capture the problem details and helps the user feel respected. This reduces miscommunication and speeds accurate resolution.

When a fix requires restarting a user's computer, what is good customer service practice?

• a.Warn the user and let them save their work before restarting✓
• b.Restart without any notice
• c.Refuse to explain what will happen
• d.Restart repeatedly without asking

Before taking disruptive actions like a restart, inform the user so they can save work and prepare. This respects the user's time and prevents accidental data loss. Clear communication about what you are doing builds trust.

A group of users on the same floor all lose internet at once. What does this pattern suggest?

• a.Each user's individual computer is broken
• b.A shared network device or connection, such as a switch or router, may be the cause✓
• c.The monitors need replacing
• d.The keyboards are faulty

When many users are affected simultaneously, the likely cause is a shared component rather than each individual machine. Investigating shared infrastructure such as a switch, router, or uplink is efficient. Recognizing patterns helps narrow the scope quickly.

Why is it important to consider the 'scope' of a problem early in troubleshooting?

• a.To make the ticket look complicated
• b.To avoid helping the user
• c.To understand whether one user, many users, or a whole system is affected✓
• d.To increase the repair cost

Determining scope, whether the issue affects one user, a group, or an entire system, guides where to focus your investigation. A widespread outage points to shared infrastructure, while an isolated case points to a local cause. This early assessment saves time and directs resources appropriately.

What is a benefit of maintaining a calm, patient tone with a frustrated customer?

• a.It guarantees the problem is hardware related
• b.It removes the need to fix the issue
• c.It ends the interaction immediately
• d.It helps de-escalate emotions and keeps the interaction productive✓

Staying calm and patient helps defuse a frustrated customer's emotions and keeps the conversation focused on solving the problem. Reacting defensively can escalate tension. Professional composure improves both the outcome and the customer's experience.

A laptop shows no display but you can hear it running. Which is a reasonable early check?

• a.Adjust brightness and connect an external monitor to isolate the display✓
• b.Immediately replace the motherboard
• c.Reinstall all applications
• d.Format the hard drive

When the system runs but the screen is blank, checking brightness settings and connecting an external monitor helps determine whether the problem is the display panel or the computer itself. This isolates the fault before replacing parts. Working from simple checks toward complex ones is efficient.

Why is it useful to reproduce a reported problem when possible?

• a.To make the user repeat themselves unnecessarily
• b.To confirm the issue exists and observe the exact conditions that trigger it✓
• c.To delay solving the problem
• d.To avoid documenting the issue

Reproducing a problem lets you observe it directly and understand the conditions that cause it. This confirms the issue is real and helps you test whether a fix actually works. If a problem cannot be reproduced, gathering more detail from the user is important.

After resolving an issue, why should you follow up with the customer when appropriate?

• a.To sell them additional products
• b.To reopen closed tickets randomly
• c.To confirm the solution is still working and ensure satisfaction✓
• d.To avoid documenting anything

Following up confirms that the fix held and that the customer is satisfied with the resolution. It demonstrates care and can catch any lingering or recurring issues early. This professional courtesy strengthens the customer relationship.

A user says 'the internet is down,' but only one website fails to load while others work. What does this indicate?

• a.The user's entire network connection is broken
• b.The computer needs to be replaced
• c.All websites are offline
• d.The problem is likely with that specific website or its DNS, not the user's whole connection✓

If other sites load normally, the user's internet connection is generally working, so the issue is specific to one site or its DNS resolution. Clarifying the actual symptom prevents chasing the wrong cause. This shows the value of confirming details rather than accepting a broad description.