Comptia A+ Core 2 Active Recall Questions.

What does an operating system allow us to do?
Control the computer hardware (memory, hard drives, keyboards) and applications.

What are some standard OS features?
File management, application support, input and output support, and OS configuration tools.

What are some advantages of Microsoft Windows?
Large industry support, broad OS selection, and a wide variety of software support.

What are some disadvantages of Microsoft Windows?
A big target for security exploitation, has to support a large variety of hardware which is often difficult.

What are some advantages of macOS?
Easy to use, extremely compatible, and has fewer security concerns.

What are some disadvantages of macOS?
Requires Apple hardware, less industry support than Windows, and higher initial hardware cost.

There is no single linux operating system, instead there is a combination of features put together called what?
Distributions.

What are some examples of Linux distributions?
Ubuntu, Mint, Debian, Fedora, Red Hat, etc…

What are some advantages of Linux?
Free, works on a lot of hardware, and has an active and passionate community.

What are some disadvantages of Linux?
Limited driver support (especially with laptops) and limited support options.

What is a major difference between a 32-bit and 64-bit processor?
A 64-bit processor can process and store more information. 2^32 (4 GB max ram) vs 2^64 (17 billion GB max ram).

What is the abbreviation for a 32-bit and 64-bit OS?
32-bit=(x86), 64-bit=(x64).

64-bit OS can run 32-bit programs, but 32-bit OS cannot run what?
64-bit programs.

What OS is Android based on?
Linux.
Android apps can be developed on Windows, macOS, and Linux using what tool?
The Android Software Developers Kit (SDK).

What OS is iOS based on?
Unix.

iOS apps can be developed with what?
iOS Software Developers Kit (SDK) on macOS only.

What must happen to an iOS app before release?
It must be approved by Apple.

What OS is ChromeOS based on?
Linux kernel.

What does ChromeOS rely heavily on?
The cloud.

Why do web-based apps have potential?
Because they can seamlessly be used across many different operating systems.

What are the 6 Windows 7 editions?
Starter, Home Basic, Home Premium, Ultimate, Professional, and Enterprise.

When was Windows 7 released?
October 22, 2009.

When did mainstream support for Windows 7 end?
January 13, 2015.

What are netbooks?
Low performance inexpensive laptops that were replaced by tablets.

What operating system was built for netbooks?
Windows 7 Starter.

Why did Windows 7 Starter have no Aero, DVD playback, Internet Connection Sharing (ICS), Enterprise technologies, or Windows Media Center?
Because netbooks had very limited hardware that could not handle a lot of features.

What bit version and how many GB of ram does Windows 7 Starter support?
32-bit and a maximum of 2 GB of ram.

Who was Windows 7 Home Premium built for?
The consumer market.

What bit version and how many GB of ram does Windows 7 Home Premium support?
64-bit and a maximum of 16 GB of ram.

How many processors does Windows 7 Home Premium support?
2 physical processors.

What did Windows 7 Ultimate provide home users?
Complete functionality.

What are some features of Windows 7 Ultimate?
All enterprise technologies like Domain support, Remote Desktop, (encrypting file system) EFS, and full disk encryption with BitLocker.

What bit version and how many GB of ram does Windows 7 Ultimate support?
64-bit and a maximum of 192 GB of ram.

Windows 7 Ultimate is for the home user, but it has what?
The same features and Windows 7 Enterprise.

What was Windows 7 Professional missing?
Enterprise technologies like BitLocker.

What bit version and how many GB of ram does Windows 7 Professional support?
64-bit and a maximum of 192 GB of ram.

Who was Windows 7 Enterprise designed for?
Very large organizations.

What is one important feature of Windows 7 Enterprise?
Full disk encryption with BitLocker.

What is the difference between the hardware requirements for Windows 7 (x86) and Windows 7 (x64)?
1 GB ram (x86) vs 2 GB ram (x64). 16 GB free disk space (x86) vs 20 GB free disk space (x64).

What is the video requirement for both Windows 7 x86 and x64?
DirectX 9 graphics device that is compatible with Windows Display Driver Model (WDDM) 1.0 or higher.

When was Windows 8 released?
October 17 2012.

When was Windows 8.1 released and was it a free update?
October 2013 and it was a free update.

When did mainstream support end for Windows 8 and 8.1?
January 9, 2018.

What are the Windows 8 and 8.1 editions?
Windows 8/8.1 (Core), Windows 8/8.1 (Pro), Windows 8/8.1 (Enterprise).

What are some features of Windows 8/8.1 (Core)?
x86 and x64 version support, Microsoft account integration, and Windows Defender integration, and Windows Media Player.

What are some features of Windows 8/8.1 (Pro)?
Very similar to Windows 7 Professional / Ultimate. Full support for BitLocker and EFS. Windows Domain support.

What is the function of BitLocker?
Full disk encryption.

What does BitLocker encrypt?
Everything on the hard drive including the operating system.

What is EFS?
(Encrypting File System) A single encryption file feature built into Windows using the NTFS file system.

What does EFS protect?
Individual files and folders. Makes it so that hackers cannot see anything inside those files and folders.

What feature does Windows Domain allow?
Group Policy used by an IT team.

Who is Windows 8/8.1 (Pro) made for?
“Software Assurance” customers who require large volume licenses.

What are some features of Windows 8/8.1 (Enterprise)?
AppLocker, Windows To Go, DirectAccess, and Branch Cache.

What are the Windows 8/8.1 processor requirements?
PAE (Physical Address Extension) support, NX, and SSE2.

What is PAE (Physical Address Extension)?
A feature in cpus that allows 32-bit processors the ability to use more than 4 GB of physical memory.

What is the NX Processor Bit?
A CPU technology that protects against malicious software.

What is SSE2 (Streaming SIMD Extension 2)?
Processor instruction set used by third-party application and driver developers.

What are the hardware requirements for Windows 8/8.1?
1 GB ram (x86) vs 2 GB ram (x64). 16 GB free disk space (x86) vs 20 GB free disk space (x64). 1 GHz processor with support for PAE, NX, and SSE2.

What is the difference between the maximum RAM support in Windows 8/8.1 Core vs. Windows 8/8.1 Pro and enterprise?
Maximum ram support for Windows 8/8.1 Core is 128, but in Windows 8/8.1 Pro and Enterprise, the maximum is 512 GB.

When was Windows 10 installed?
July 29, 2015.

Why were upgrades from Windows 7 and 8.1 to Windows 10 free for the first year?
Because Microsoft wanted to get as many people on Windows 10 as possible.

Who is Windows 10 Home made for?
Home users.

What does Windows 10 home include by default?
Integration with a Microsoft Account and OneDrive, Windows Defender, and Cortana.

Who is Windows 10 Pro made for?
Professional users.

What are some features of Windows 10 Pro?
Remote Desktop host, BitLocker, and Windows Domain.

What is the minor difference between Windows 10 Education and Windows 10 Enterprise?
Windows 10 Education is meant to be used in a school environment while Windows 10 Enterprise is meant to be used in a business setting.

What is AppLocker?
A tool that controls what applications can run.

What is BranchCache?
A tool that allows files to be cached in a remote location instead of a very slow wide area network.

What is the concept of a cache?
A form of data storage that allows the stored data to be accessed quickly.

What other feature does Windows 10 Education and Enterprise allow?
Granular User Experience (UX) control.

What is Granular User Experience (UX) control useful for?
Kiosk and workstation customization.

The hardware requirement for Windows 10 is exactly the same as what OS?
Windows 8/8.1.

What is the maximum x64 ram support for Windows 10 Home, Pro, and Enterprise/Education.
Windows 10 Home=128 GB. Windows 10 Pro and Enterprise/Education=2048 GB.

What feature allows Windows to excel in an enterprise?
Active Directory Domain Services.

What information does the Active Directory Domain Services contain?
Contains information about all of the users in an enterprise, the computers the users use, and the system the users connect to.

Why is Active Directory Domain Services useful?
Because most enterprises use many different servers, workstations, and printers. The Active Directory Domain Services allows all of this to be managed in one simple resource.

What can Active Directory Domain Services also be used for?
Authentication by storing usernames and passwords.

What is PXE (“Pixie”)?
Preboot eXecution Environment is a standard client–server environment that can boot software using a Network Interface Card.

What is NetBoot?
An apple technology that allows users to boot macOS from a network (similar to PXE).

What is unattended installation?
A type of windows installation that has no interruptions.

Why does unattended installation have no interruption?
Because the installation questions are already answered and stored in a file called unattend.xml.

What is an In-place upgrade?
When a newer version of Windows is installed on top of an older version.

What is the benefit of in-place upgrades?
Existing applications and data are maintained.

What is a clean install?
When an old operating system is wiped clean and a newer one is installed.

What is an image?
A clone of an operating system that can be installed quickly on many computers simultaneously.

What is a repair installation used for?
Used to fix problems with the operating system.

Why is a repair installation useful?
Because it does not modify user files.

Running two or more operating systems from a single computer is known as what?
Multiboot.

What is a recovery partition?
A hidden partition with installation files.

What is a recovery partition commonly used with?
Repair installation and refresh/restore.

What is disk partitioning?
A process of separating a physics drive into logical pieces.

What is disk partitioning useful for?
Separating and maintaining operating systems.

Formatted partitions are called what?
Volumes.

What is MBR (Master Boot Record)?
An older partition style used by older operating systems.

What are the two different types of MBR partitions?
Primary and Extended.

What does the Primary partition contain?
The bootable OS.

What does the Extended partition contain?
Additional logical partitions.

What is the maximum number of primary partitions allowed per disk in MBR?
4.

Which operating system gets booted from by default in MBR?
The one contained in the active primary partition.

What is the maximum number of extended partitions allowed per disk in MBR?
1.

What is GPT (GUID Partition Table)?
The latest partition format standard that uses a Globally Unique Identifier.

What type of BIOS is required for GPT?
UEFI.

UEFI allows GPT to have how many partitions?
128 primary partitions. No need for extended partitions or logical drives.

What is dynamic disk storage?
A Windows feature that allows users to add multiple disks to their system and extend partitions across all of those physical disks. Data can be striped or mirrored.

What is a file system?
A set of data structures that controls how data is stored and retrieved.

What are the two popular file systems?
FAT32 and NTFS.

What are some other examples of file systems?
FAT, exFAT, etc…

What is FAT (File Allocation Table)?
One of the first PC-based file systems created around 1980.

What is FAT32 (File Allocation Table)?
Newer version of FAT that allows larger volume sizes (2TB) and file sizes (4GB).

What is exFAT?
An extended version of FAT32 that is used on flash drives to allow files larger than 4GB.

What is NTFS (NT File System)?
File system that offers improvements over FAT 32.

What are some features of NTFS?
Quotas, file compression, encryption, symbolic links, large file support, security, and recoverability.

What is CDFS (Compact Disk File System)?
A file system that uses the ISO 9660 standard which can be read by all operating systems.

What is ext3?
Third extended file system commonly used by the Linux OS.

What is ext4?
Fourth extended file system commonly used in Linux and Android OS.

What is NFS (Network File System)?
A file system that allows users to access files stored on a storage device that is across a network. The drive appears to be a local drive; however, it is stored on a network.

NFS clients are available across what?
Many operating systems.

What is HFS+ (Hierarchical File System)?
A file system used by Mac OS (also Mac OS Extended).

What replaced HFS+ and when?
APFS (Apple File System) in High Sierra (10.13).

What is a Swap partition?
A storage device that is used for memory management.

What does a Swap partition do?
It frees up memory by moving unused pages onto a fast drive and copies back to RAM when needed. Relates to hibernation.

What is the difference between a Quick Format and a Full Format?
A Quick Format quickly creates a new file table without erasing any data or performing physical checks. A full format completely wipes the whole disk and checks for bad sectors, which is more time consuming.

What command can be used to create a full format?
diskpart

What is the difference between an Upgrade and a Clean Install?
An upgrade keeps files in place. A Clean Install starts over completely fresh.

You cannot upgrade x86 to x64 or vice versa. What will you need to do instead?
Migrate the OS.

Running a command prompt as an administrator grants users what?
Elevated privileges.

What Windows command can be used to fix "OS not found" type of errors?
bootrec. Variations include bootrec /fixmbr, bootrec /fixboot, and bootrec /rebuildbcd.

What Windows command lists files and directories?
dir

What Windows command changes the directory being used?
cd

What Windows command gives you the option to go to the folder above the current folder?
..

What Windows command can be used to shutdown a computer after 60 seconds?
shutdown /s /t 60

What Windows command can be used to reboot a computer after 60 seconds?
shutdown /r /t 60

What Windows command can be used to abort the shutdown of a computer?
shutdown /a

What Windows command can be used to repair your Windows image (WIM) or to modify Windows installation media?
dism

What Windows command can be used to scan all of the core operating system files for potential problems?
sfc

What Windows command can be used to check drives for errors?
chkdsk (/f (fixes logical file system) /r (locate bad sectors recover readable info (implies /f))

What Windows command can be used to manage different drives from the command line?
diskpart

What Windows command can be used to manage tasks from the command line?
tasklist and taskkill

When using taskkill, what must be added to kill an application from its executable or PID (Process ID)?
executable= taskkill /im notepad.exe  PID= taskkill /pid 1234 /t

What allows administrators to control every aspect of the operating system?
Group Policy.

What allows administrators to manage multiple machines?
Active Directory Domain.

What Windows command can be used to force a group policy update to a computer?
gpupdate /target:computername /force

What Windows command can be used to look at Group Policy settings on a computer?
gpresult /r.

What Windows command can be used to look at Group Policy settings of a specific user and in a specific domain on a remote device?
gpresult /user sgc/domain /v

What Windows command can be used to wipe a disk for use?
format

When using the copy command on Windows, what must be added to verify that the file was copied correctly?
/v

When using the copy command on Windows, what must be added to override any existing file that is being copied?
/y

What Windows command can be used to copy files in a directory (folder) to a different location?
xcopy

What Windows command is better than xcopy in that it allows an admin to resume an initiated copy in case anything goes wrong?
robocopy

What keys can be pressed to cancel commands that are not instantaneous like scan now?
control + c

What Windows command can be used to gather information about how a computer is configured on a network?
ipconfig

What command can be used to test reachability?
ping

What protocol does the command “ping” use?
ICMP (Internet Control Message Protocol).

What Windows command can be used to determine the route a packet takes to a destination?
tracert

What protocol does the command “tracert” use?
ICMP (Internet Control Message Protocol).

What command can be used to determine the type of connections that are occurring inbound or outbound from a local computer?
netstat

What command can be used to lookup information from DNS servers?
nslookup

What network command is specific to the Windows OS?
net

What tool can be used to manage different tools like device manager, event viewer, and services all in one place?
Computer Management.

What allows the operating system to communicate with connected hardware?
Drivers.

What tool can be used to manage different users on a computer?
Local Users and Groups.

What tool can be used to manage security policies?
Local Security Policy.

What tool can provide long term statistics of disk, memory, CPU, and other utilization?
Performance Monitor.

Background processes that have no user interaction are known as what?
Services.

What tool can be used to schedule an application or batch file to execute at a particular time?
Task Scheduler.

What service allows developers to build and view programs for the Windo ws platform?
Component Services (Microsoft COM+).

What allows an application developer to write an application without any concern of the type of database running on the backend?
ODBC Data Resources.

What tool allows administrators to manage everything related to printers?
Print Management.

What tool can be used to see what is happening or has happened in an operating system?
Event Viewer.

What is System Configuration (msconfig)?
A Windows program that is able to manage boot processes, startup, services, and etc...

What type of information does Task Manager provide?
Real-time system statistics.

What is the process called when data is being copied to a new replacement drive in RAID 1?
Resynching.

What is the process called when data is being rebuilt to a new replacement drive in RAID 5?
Regenerating.

What is a way to make a new drive look like a regular folder?
By mounting the drive.

What is a storage pool?
A group of storage devices combined together.

What is the Windows registry (regedit)?
A large database used by almost every aspect of Windows.

What is msinfo32 used for?
Viewing Windows System Information.

What is dxdiag used for?
Viewing information relating to 3D graphics, audio, and input options.

How can you move file fragments so that they are next to each other, allowing for much quicker read and write times on a spinning hard drive?
By using defragmentation (defrag).

What windows tool can be used to go back-in-time to correct problems?
System Restore.

What is the difference between Sleep (standby) mode and Hibernate mode in Windows?
In sleep mode, open apps are stored in memory. In hibernate mode, open apps are saved to disk, allowing the system to shut down completely and not use any power.

What is the Credential Manager used for in Windows?
Manage saved usernames and passwords and other credentials for different sites.

What piece of hardware is recommended to have installed on your motherboard before using BitLocker?
A TPM (Trusted Platform Module).

If a motherboard does not have TPM, what other tools can be used with BitLocker?
A flashdrive and a password.

What is the Sync Center?
A Windows feature that allows people to have access to their data even without being directly connected to their network. “Always available offline.”

When Sync Center is enabled, what happens when a person returns back to their network?
Any changes made to their files get automatically saved to their network.

What is the network-based installation method?
A type of software installation where all of the application is placed on one central server and any installation occurs across the network.

Where and how does Windows HomeGroup work?
It works only on a single private network to share files, photos, videos, and other things between all devices.

What does Windows Workgroup allow a user to do?
To create a logical grouping of devices that will be used to share files across multiple networks.

What is one challenge of working with a Windows Workgroup?
Each device is a standalone system, meaning not everything is uniform across different domains (Ex: Shipping department has a different username and password from accounting department).

What is Windows Domain?
A centralized system that allows a user to manage users, devices, and anything else on the network all from one central authentication service.

What is the difference between Remote Assistance and Remote Desktop Connection?
Remote Assistance is only available on Home editions and allows for one-time remote access. Windows Desktop Connection is only available on Non-Home editions and allows for ongoing access.

What is the function of a Proxy Server?
To act as a buffer between a network connection and the internet. This can be a great source of security and privacy.

What is Network Share in windows?
A feature that allows a drive to be shared across multiple users on the same network.

What does a VPN concentrator allow a person to do?
Securely communicate with a corporate network while not being directly connected to the corporate network.

Why can a Dial-up connection be useful?
Because it can allow a system administrator to connect to a remote network when the primary network connection is not available.

WPA2-Enterprise uses what authentication method?
802.1X authentication.

What does WPA2-Enterprise (802.1X authentication) allow users to do?
Access a wireless network using their login credentials rather than one router password.

What is WWAN?
Wireless access through a cellular frequency.

What is a loopback address (127.0.0.1) used for?
To reference a local computer by IP address.

What is Wake on LAN?
A networking standard that allows a computer to be turned on or awakened by a network message.

What is Quality of Service (QoS)?
A set of technologies that can prioritize network traffic.

What is DSCP (Differentiated Services Code Points)?
A networking architecture that is able to manage network traffic and provide quality of service (QoS).

What is a Time Machine?
A built-in backup program included in MacOS.

What does Time Machine do when the backup drive is filled on a Mac?
It starts deleting the oldest information and replaces them with newer ones.

When do system updates occur in MacOS?
The App Store.

What is intentionally invisible in MacOS?
The internals of the operating system.

Drivers in MacOS are in what mode?
View only mode, meaning no changes can be made.

MacOS does not come with built in antivirus/antimalware, what can be done instead?
A 3rd-party option can be downloaded if a user wishes to do so.

When dealing with Image recovery on MacOS, the operating system creates what in Disk Utility?
An Apple Disk Image (.dmg) file.

What is the command line called in MacOS and Linux?
Terminal.

In MacOS, remote desktop is known as what?
Screen sharing.

3rd-party utilities that are compatible with screen sharing can use what in MacOS?
VNC (Virtual Network Computing).

What is Mission Control in MacOS?
A feature that allows users to quickly view everything that’s running at the same time.

What is Spaces/Multiple desktops?
A feature in MacOS that allows users to separate what they’re doing into separate logical desktops.

What is Keychain?
A centralized password management utility used in MacOS.

What is Spotlight?
The search utility used in MacOS.

What is iCloud?
Apple’s cloud-based service that allows users to integrate MacOS and iOS devices into one single cloud-based service.

File explorer is to Windows as what is to MacOS?
Finder.

What is Remote Disc?
A feature in MacOS that allows a device with a DVD rom player to share data from the DVD rom with others on the network.

The taskbar is to Windows as what is to MacOS?
The Dock.

What tool can be used to Dual-boot into Windows on Mac hardware?
Boot Camp.

What is tar (Tape Archive)?
A utility commonly used to back up and restore data in Linux.

What is rsync?
A utility used in Linux to sync files between storage devices.

What is su/sudo?
A Linux command that temporarily provides a user account root privileges.

What is apt-get, yum?
(Advanced Packaging Tool) A command used in Linux to install, update, and remove programs.

What is Patch Management?
The process of scheduling updates.

What also happens when the kernel updates in Linux?
Drivers get updates.

What is dd?
A Linux command line utility that can backup and restore entire partitions. Can also copy and convert files.

What are some 3rd-party backup and restore Linux utilities?
GNU Parted, Clonezilla.

What is vi?
A Linux text editor used for configuration files (Visual Mode Editor).

What does the “ls” command do in Linux?
Lists files and directory contents.

Instead of using a backslash when using command (like in Windows), Linux and MacOS use what type of slash?
A forward slash (/).

Adding a “-l” to the “ls” command does what in Linux?
Provides more information about the directories.

What is the “grep” command used for in Linux?
To find text in a file (kind of like ctrl+f).

What other key can be used to stop a processing command in Linux?
q.

What is the difference between the command “pwd” and “passwd” in Linux?
“pwd” stands for Print Working Directory, and it displays the current working directory name. The “passwd” command is used to change passwords for accounts.

What is the “mv” command used for in Linux?
It is used to rename a file.

What is the “cp” command used for in Linux?
It is used to duplicate files or directories.

What is the “rm” command used for in Linux?
It is used to delete files or directories.

In Linux, directories can only be removed once they are what?
Empty. This can be bypassed by adding -r to the rm command.

What is the “mkdir” command used for in Linux?
It is used to create directories or a folder for file storage.

What is the “chmod” command used for in Linux?
It is used to change the mode or permissions of a file.

What is the “chown” command used for in Linux?
It is used to change a file’s owner and group.

What is the “iwconfig” command used for in Linux?
It is used to view or change wireless network configuration.

What is the “ifconfig” command used for in Linux?
It is used to view or configure a network interface and IP configuration of a wired network.

What Linux command has started to replace the “ifconfig” command?
The “ip” command.

What is the “ps” command used for in Linux?
It is used to view current processes (like Windows’ Task Manager).

What is the “kill” command used for in Linux?
It is used to force close applications.

What is a Mantrap?
A small area with two doors where only 1 person or very few people can move through at a time.

In a Mantrap, both doors are never what at the same time?
Opened.

What is Biometric authentication?
A type of authentication that incorporates a human (Fingerprint, retina, voiceprint).

What are locking cabinets used for?
They are used to store hardware from unauthorized users.

What is a USB lock used for?
It is used to physically lock USB ports.

What is a Privacy Filter used for?
It is used to hide the screen of a laptop from those who are not sitting directly in front of it.

Active Directories are organized into what?
OUs (Organizational Units).

What is MDM (Mobile Device Management)?
The administration of mobile devices.

What is Port Security?
A feature that prevents unauthorized users from connecting to a switch interface (Alert or disable the port).

MAC (Media Access Control) Filtering is used to do what?
A feature that only allows specific MAC address access on a router or switch.

Smart cards use what kind of authentication?
Certificate-based authentication.

What is a PIV (Personal Identity Verification) card?
A type of smart card used by the US Federal Government.

What is a CAC (Common Access Card)?
A type of smart card used by the US Department of Defense.

What are Host-based firewalls?
Software-based “personal” firewalls included in many operating systems.

What are Network-based firewalls?
A type of firewall that can encrypt traffic into/out the network and can proxy traffic.

What is a VPN concentrator?
A hardware device that is responsible for encrypting and decrypting information.

What is DLP (Data Loss Prevention)?
A tool that can be used to protect against data leakages.

What are Access Control Lists (ACLs) used for?
Used to allow or deny traffic.

What are Email filters used for?
Used to identify and stop any email to users that contain unsolicited messages or software.

What term is used to refer to users who have rights and permissions set to the bare minimum?
Least privilege.

What is the least secure wireless encryption method?
WEP (Wired Equivalent Privacy).

What wireless encryption method was a step above WEP in terms of security?
WPA (Wi-Fi Protected Access).

With WPA, each packet gets what type of encryption key?
A unique 128-bit encryption key.

What kind of capabilities did TIKP (Temporal Key Integrity Protocol) bring to WPA?
Mixing root keys, preventing replay attacks, and protecting against tampering.

What is WPA2?
Wireless encryption method that is better than WPA. It uses CCMP and AES (Advanced Encryption Standard) for encryption.

How does AES work?
It uses the one key to both encrypt and decrypt data.

What type of wireless encryption uses RADIUS and TACACS?
WPA2-Enterprise (WPA2-802.1X).

What is RADIUS and TACACS?
Authentication servers that allow users to be individually authenticated using their login username and password. RADIUS= Wireless authentication.

What is Randsomeware?
A type of malware where you pay attackers to remove.

What is a Trojan Horse?
A type of malware that pretends to be something else.

What is Spyware?
A type of malware that watches what a user does.

What is a Keylogger?
A tool that can capture every keystroke and send it back to a hacker.

What is a Rootkit?
A type of malware that modifies core system files (essentially part of the system).

What makes Rootkits so dangerous?
They can be invisible to the operating system and antivirus utilities.

What is a Virus?
A type of malware that can reproduce itself with a user’s assistance.

What are some types of viruses?
Program viruses (part of an application), Boot sector viruses (runs with the OS), Script viruses (comes in through a browser), and Macro viruses (found in Microsoft Office).

What are Worms?
A type of malware that can replicate itself from system to system without a user’s assistance.

What are Botnets?
A type of malware that turns your computer into a robot used to execute attacks.

What can be used to repair a virus-infected system that does not want to boot?
A Recovery console (Windows Recovery Environment).

What method can be used to permanently remove a virus or malware?
Restoring from an old backup.

What tool can be used to monitor the local computer and prevent malware communication?
Software firewalls like Windows Firewall.

What can Secure DNS services do?
They can be used to block domains that are known to contain viruses.

Why is fighting social engineering difficult?
Because it is constantly changing.

What are the social engineering principles?
Authority (posing as someone important), Intimidation, Social Proof/ Consensus (normal/ convincing situation), Scarcity (given time frame), Urgency (act quick, don’t think), Familiarity (friend of a friend), and Trust (“Certified Microsoft Technician” btw). (AISSUFT (kind of like airsoft))

What is Vishing?
Voice Phishing. Ex: “IRS” calling you and telling you to send money right now!

What is Tailgating?
The process of gaining access to something by following someone who already has access.

What is Dumpster Diving?
The process of gathering information by digging through a garbage bin.

What is a DoS (Denial of Service)?
When some type of external force forces a service to fail by overloading the service or using a vulnerability.

What is a DDoS (Distributed Denial of Service)?
A type of Denial of Service that comes from many different places (botnet) simultaneously.

What are the devices in a Botnet doing the attacking known as?
Zombies.

What does the term “Zero-day” mean when dealing with vulnerabilities?
It means the vulnerability has not been detected or published.

What is the concept of a Man-in-the-middle?
An attacker watches the communication a user makes with a device and intercepts that information (kind of like a spyware but not really).

What is the concept of ARP poisoning Spoofing?
When an attacker pretends to be a router and sends an incorrect MAC address. The attacker then connects to the actual router and intercepts information.

What is a Brute Force attack?
The constant trial and error method to find a password. A dictionary can speed up the process.

What are Rainbow tables?
Tables of reversed hashes used to crack password hashes. Speeds up the hashing process.

What is the concept of Spoofing?
Pretending to be something you are not.

What are non-compliant systems?
Systems that do not meet the requirements of or have the same settings as an organization.

What are the levels of users and groups?
Administrator > Power User > Standard Users > Guest.

What is the difference between NTFS permissions and Share permissions?
NTFS permissions apply to local connections. Share permissions apply to connections over the network.

What symbol hides system files and folders?
$.

What is SSO (Single sign-on)?
A feature that gives access to other resources by only needing to log in once.

What profile stores all local configurations and synchronizes them on centralized servers?
The Roaming user profile.

What process moves file fragments so they are next to each other?
Defragmentation.

What is one way to boot into safe mode from the desktop?
Restart the PC and hold shift.

What are the 7 steps of malware removal?
1. Identify and research malware symptoms. 2. Quarantine the infected systems. 3. Disable System Restore (in Windows). 4. Remediate the infected systems. 5. Schedule scans and run updates. 6. Enable System Restore and create a restore point (in Windows). 7. Educate the end user. (IQDRSEE)

What is WindowsPE?
Pre-installation environment. Use the OS without fully installing it.

In order to Broadcast to a TV, both devices need to be what?
Connected to the same SSID.

What is the difference between an image level backup and a File level backup?
An image level backup backs up the OS system and everything else (bare metal), and a File level backup only backs up important files (requires a OS to restore).

What does a UPS (Uninterruptible Power Supply) do?
Provides short-term access to power during power loss.

What does a surge suppressor do?
Controls the voltage being output to a device. In the case of a spike in voltage, a surge suppressor takes the additional voltage and sends it to ground.

What is electrostatic discharge?
The discharge of static electricity.

What is one way to control ESD?
Work in an environment that has humidity over 60%.

How can you know the proper disposal procedures?
Refer to the MSDS (Material Safety Data Sheets).

Who mandates the MSDS (Material Safety Data Sheets)?
OSHA (Occupational Safety and Health Administration).

High and low humidity promote what?
High humidity promotes condensation, and low humidity promotes static discharges (50% is perfect).

What is PII?
Personally Identifiable information.

What standard protects credit card information?
PCI DSS (Payment Card Industry Data Security Standard).

What is the GDPR (General Data Protection Regulation)?
Data protection and privacy for people in the EU.

What does PHI (Protected Health information) protect?
The personal health records of people.

What are scripts used for?
To automate tasks.

What are some Script file types?
.bat= command prompt scripting, .ps1= advanced version of .bat used by admins, .vbs= Microsoft scripting used primarily with office suite, .sh= .bat scripting for MacOS and Linux (#! shebang), .py= general purpose scripting and programming (also uses #! but has.py), .js= browser scripting.