A+ Core2 Day5a manage and configure basic security Windows

A user's system is heavily infected with malware. You suspect the antivirus isn't catching everything. Which safe mode option would be BEST to further investigate?

• Safe Mode
• Safe Mode with Command Prompt
• Safe Mode with Networking
• Normal Boot

Answer explanation

Safe Mode with Networking gives you internet access for research and downloading tools, while keeping most non-essential system components offline.

You want to configure Windows Updates to download but not install updates automatically. Which setting is the most appropriate in the Windows Update interface?

• Install Updates Automatically
• Download Updates but Let Me Choose...
• Check For Updates but Let Me Choose...
• Never Check for Updates

Answer explanation

"Download Updates but Let Me Choose..." keeps you informed while preserving your choice on when to install.

A technician is configuring a client's Windows Defender Firewall. They want to block any incoming traffic that doesn't match an existing rule. What setting should they configure?

• Block Outbound Connections
• Block Inbound Connections
• Allow Outbound Connections
• Allow Inbound Connections

Answer explanation

To restrict all unsolicited incoming communications, the inbound connections setting is the correct choice.

You have a user repeatedly forgetting their password. You enable a password expiration of 90 days, but they still have trouble. What additional setting might help?

• Require Password Complexity
• Do Not Allow User to Change Password
• Account Lockout After 3 Invalid Attempts
• Enforce Password History

Answer explanation

Enforce Password History prevents the reuse of old passwords, a common cause of forgotten passwords.

A Windows PC displays a "User Account Locked Out" message. The user reports they haven't mistyped their password. What's the FIRST troubleshooting step to take?

• Reset the User's Password
• Wait for the Account Lockout Duration
• Contact the System Administrator
• Force a System Restart

Answer explanation

Account lockout durations are in place for security. Waiting the configured time is the first step.

A group of users needs access to a shared folder on a Windows server. What's the most efficient way to manage these permissions?

• Grant access to each user individually
• Create a security group, add users, then assign the group permissions
• Grant "Everyone" access to the folder
• Share the folder with hidden permissions

Answer explanation

Security groups are designed for this situation, ensuring ease of management and consistent permissions.

After recent ransomware concerns, you're enabling features to protect critical data. What feature offers regular, versioned backups for user files?

• System Restore
• Controlled Folder Access
• File History
• Windows Backup and Restore

Answer explanation

File History is specifically designed for regular, versioned backups of user files within their profile folders.

A user wants only approved programs to run on their system. Which Windows feature, when configured appropriately, accomplishes this?

• User Account Control (UAC)
• AppLocker
• Windows Defender Firewall
• BitLocker

Answer explanation

AppLocker is a policy-based feature allowing granular control over which executables are permitted to run.

You're implementing anti-malware software on a user's machine. While installing, it detects an existing antivirus program. What's your BEST course of action?

• Continue, most security software coexist
• Uninstall the old antivirus, then proceed
• Pause the installation and investigate
• Install in Safe Mode

Answer explanation

Antivirus conflicts can lead to system problems. Pausing to investigate compatibility is the wise approach.

A user gets many pop-ups and ads in their web browser. You suspect adware. What Windows tool lets you view and manage programs that start automatically with the system?

• Task Manager
• System Configuration (Msconfig)
• Control Panel
• Services

Answer explanation

Msconfig's Startup tab is useful for identifying and disabling non-essential or suspicious startup programs.