Which of the following threats is shoulder surfing an example of?
Shoulder surfing is explicitly categorized as a social engineering technique because it relies on human behavior and observation rather than exploiting software flaws or cracking passwords through computation. Quentin Docter defines it directly: ''Another form of social engineering is known as shoulder surfing. It involves nothing more than watching someone when they enter their sensitive data,'' such as a password or credit card number. Docter also notes that privacy filters can reduce viewing angles, but ''privacy filters do not protect you as you are entering a password, since a shoulder surfer will watch your keystrokes,'' and the best defense is to ''survey your environment before entering personal data.''
The Mike Meyers Lab Manual reinforces the same classification: ''Shoulder surfing is another technique for gathering information and gaining unauthorized access... observing someone's screen or keyboard to get information, often passwords.'' Since this is about manipulating or exploiting a person's situation (being nearby, watching, taking advantage of inattentiveness), it is not a zero-day, evil twin, or brute-force method. Therefore, Social engineering (C) is correct.
An end user is unable to access the intranet. A technician needs to confirm whether the Windows web server is online and functioning. Which of the following default remote access technologies would the technician most likely use to remotely connect to the server?
The correct answer is C. RDP (Remote Desktop Protocol), because RDP is the default remote access technology for Windows servers. It allows technicians to remotely connect to the graphical desktop environment of a Windows server to verify services, logs, and system status.
According to the Quentin Docter -- CompTIA A+ Complete Study Guide, RDP is built into Windows operating systems and is commonly used by administrators to manage Windows servers and workstations. It provides full access to the desktop, making it ideal for checking whether services such as IIS (Internet Information Services) are running properly.
The Travis Everett & Andrew Hutz -- All-in-One Exam Guide explains that while SSH is commonly used for Linux and network devices, Windows servers typically rely on RDP for administrative access. VNC is a third-party remote desktop solution and is not enabled by default on Windows systems.
The Mike Meyers / Mark Soper Lab Manual reinforces that SPICE is primarily used in virtualized environments and is not a standard Windows remote access tool.
Because the technician needs to verify a Windows web server's operational status using a built-in method, RDP is the most appropriate and likely technology, making C the correct answer.
A technician is troubleshooting the reason that an application is down. The technician verifies that a service that was running has unexpectedly stopped. The technician tries to manually start the service, but it fails to start. Which of the following is the cause of this issue?
When a Windows service suddenly stops and then fails to start manually, one of the first places to confirm why it cannot start is the service logon context. A very common root cause is that the account configured on the service cannot authenticate anymore---often because the password changed or the account is locked. Quentin Docter notes that if the service fails due to misconfiguration, ''the most likely cause is the user account the service is configured to start with,'' and you should ensure ''the user account is not locked out.'' This aligns with standard service troubleshooting: check Event Viewer (Service Control Manager events) for login failures, then validate the service's Log On tab configuration and the account state.
The All-in-One guide also reinforces validating services via the Services console and correcting service settings when services fail to start.
Therefore, the best cause given the options is that the service account is locked out (C).
A technician reviews an organization's incident management policy. The organization uses a third-party vendor with multiple tools to protect its assets. What service type is this?
Managed Detection and Response (MDR)involves outsourcing security monitoring to a third-party that uses multiple tools and analytics.
FromTravis Everett -- All-in-One Exam Guide:
''MDR providers handle threat detection and response using a combination of advanced tools, analytics, and expert personnel.''
An organization is experiencing an increased number of issues. A technician notices applications that are not installed by default. Users are reporting an increased number of system prompts for software licensing. Which of the following would the security team most likely do to remediate the root cause?
If unauthorized or non-standard applications are appearing on systems and users are receiving licensing prompts, it's likely users are installing software themselves. Removing users from the local administrators group will prevent them from installing software without approval and reduce the likelihood of introducing unapproved or malicious programs.
A . Deploying a PKI helps with secure communications but doesn't address user software installation rights.
C . Blocking suspicious websites is helpful but doesn't prevent local installations.
D . Stricter UAC may add prompts but can still be bypassed by admin users.
CompTIA A+ 220-1102 Objective 2.2: Compare and contrast access control methods and user privilege settings.
Study Guide Section: Principle of least privilege and managing local admin rights
===========================
Jeffrey Cook
3 days agoDaniel Torres
4 days agoSusan Campbell
1 month agoMaria Cook
1 month agoSarah Adams
1 month agoAdam Jackson
2 months agoRyan Green
2 months agoRachel Hill
2 months agoAdam Garcia
3 months agoBrian Roberts
3 months agoCynthia Young
3 months agoHarold Roberts
4 months agoEmma Young
4 months agoBetty Mitchell
4 months agoDaniel Sanchez
5 months agoSharon Baker
5 months agoJason Mitchell
5 months agoMaria Davis
5 months agoStephen Rivera
5 months agoCarol Thomas
5 months agoJennifer Wright
5 months agoCharlette
6 months agoJanella
6 months agoRaymon
7 months agoCammy
7 months agoMiles
7 months agoLilli
7 months agoKenneth
8 months agoBrent
8 months agoJerry
8 months agoMarsha
8 months agoDaren
9 months agoAlana
9 months agoHyman
9 months agoLorrie
9 months agoLisbeth
10 months agoDorthy
10 months agoThaddeus
10 months agoDella
10 months agoMargurite
11 months agoLaurene
11 months agoAlecia
11 months agoElin
11 months agoSilvana
12 months agoGarry
12 months agoFrancine
1 year agoMitsue
1 year agoJudy
1 year agoTheodora
1 year agoAnnmarie
1 year agoDorothea
1 year agoParis
1 year agoDevon
1 year agoIrma
1 year agoJerry
1 year agoRoy
1 year agoMa
1 year agoLeonor
1 year agoBenedict
1 year ago