Explanation:

✅ Correct Answer: A. Compare the hash value from the vendor.
When a technician suspects that a downloaded application might be illegitimate, even though it shares the same name as the official software, the best way to verify its authenticity is to compare its hash value with the one provided by the software vendor. Legitimate vendors often publish cryptographic hash values (like MD5, SHA-1, or SHA-256) for their downloads. Generating a hash of the downloaded file and comparing it to the vendor’s official hash ensures that the file has not been tampered with, altered, or replaced by malicious actors. This method provides certainty about the file’s integrity and authenticity, regardless of its name.

❌ Why the other options are incorrect:

B. Run Task Manager and compare the process ID → Process IDs are temporary numbers assigned each time an application runs. They cannot confirm whether a file is legitimate or malicious.

C. Run the application in safe mode → Safe mode loads minimal drivers and services but running suspicious software, even in safe mode, can still pose risks and won’t verify legitimacy.

D. Verify the file name is correct → File names can easily be duplicated by malicious actors. Matching the name alone does not prove that the file is genuine or safe.

Explanation:

✅ Correct Answer: D. Use the powercfg command in PowerShell
When a technician needs to change hibernation settings on a Windows computer through a batch file, the best way is to use the powercfg command. Powercfg is a built-in Windows utility that allows precise control over power settings, including enabling or disabling hibernation, adjusting sleep timers, and configuring various power schemes. It can be executed via PowerShell or Command Prompt and easily scripted into a batch file for automated deployment. Since domain policies are unavailable in this scenario, using powercfg directly on the local machine is the most efficient and reliable method for managing power configurations.

❌ Why the other options are incorrect:

A. Use Power Options in Control Panel → This provides a graphical interface but cannot be scripted in a batch file for automation.

B. Update the computer’s firmware → Firmware updates are unrelated to Windows hibernation settings and unnecessary for this task.

C. Run gpupdate from command prompt → Gpupdate refreshes Group Policy settings but is irrelevant when domain policies are unavailable, and it cannot directly change hibernation settings.

Explanation:

✅ Correct Answer: D. Deploy MDM (Mobile Device Management)
When a company-owned cell phone has an unrecognized password-cracking application installed, the root problem is a lack of proper control over the apps users can download and install. The best way to prevent further unauthorized installations on mobile devices is to deploy Mobile Device Management (MDM). An MDM solution allows IT administrators to enforce security policies, restrict app installations, push approved apps, monitor device compliance, and even remotely wipe or lock devices if needed. By using MDM, the company can ensure only authorized applications are allowed on its mobile devices, significantly reducing security risks.

❌ Why the other options are incorrect:

A. Configure Group Policy → Group Policy is mainly used to manage Windows desktop and server environments, not mobile devices like smartphones.

B. Implement PAM (Privileged Access Management) → PAM controls access for privileged users on systems but doesn’t manage app installations on mobile devices.

C. Install anti-malware software → Anti-malware tools help detect malicious apps but do not proactively prevent users from installing unauthorized software. MDM provides the preventive controls needed here.

Explanation:

✅ Correct Answer: A. The device is running out of free space
When an iOS-based smartphone shows 63.76GB used out of 64GB total, it has almost no free storage space left. iPhones—and smartphones in general—require free storage for system operations, temporary files, caching, and app updates. When storage is nearly full, the device can slow down significantly, causing lag, app crashes, and poor performance. Freeing up space by deleting unused apps, photos, or files is often the most effective solution to restore normal performance. Therefore, the primary cause of the user’s performance issues is running out of free space.

❌ Why the other options are incorrect:

B. The battery health is low → Battery health at 90% is quite good and unlikely to cause system performance issues.

C. The phone is not sufficiently charged → While 25% is low, it’s enough for normal operation and isn’t the reason for performance slowdowns.

D. The hotspot is degrading the performance → Having the hotspot on could affect battery life or network speed but typically doesn’t cause significant system slowdowns unless heavily used.

E. Too many applications are open → iOS handles background apps efficiently, and although having many apps open can slightly impact performance, it’s far less significant than running out of storage.

Explanation:

✅ Correct Answer: C. The technician should project confidence and maintain a positive attitude
When a customer is distressed and panicking—especially because of irreplaceable data like family photos—the technician’s ability to project confidence and maintain a positive attitude is critical. Showing calm, reassuring professionalism helps reduce the customer’s anxiety and builds trust that the technician is capable of resolving the issue or recovering the data. A confident and positive demeanor reassures the customer that the technician has the skills and knowledge to help, even if the outcome is not immediately certain. This type of empathetic communication is essential in delivering excellent customer service, particularly in emotionally charged situations.

❌ Why the other options are incorrect:

A. The technician should provide the customer with the appropriate SLA → Service Level Agreements are important but discussing contractual timelines won’t comfort a panicked customer in an emotional situation.

B. The technician should inform the customer about replacement options for an increased cost → Offering replacement hardware right away may come across as insensitive or pushy when the customer is focused on saving irreplaceable data.

D. The technician should be dressed in appropriate business casual attire → Professional appearance is important but does not directly address the immediate emotional needs of a distraught customer.

Explanation:

✅ Correct Answer: D. File size and related memory utilization
When a user reports that loading a specific spreadsheet causes their computer to become unresponsive and the application’s title bar shows “not responding,” the most likely cause is that the file is very large or complex, consuming significant system memory and processing power. Spreadsheets can become extremely resource-intensive if they contain large datasets, complex formulas, numerous charts, or embedded objects. The technician should inspect the file size and monitor memory and CPU utilization while the file is opening to determine whether system resources are being overwhelmed. Identifying high memory usage can help pinpoint whether the hardware needs an upgrade or if the spreadsheet can be optimized for better performance.

❌ Why the other options are incorrect:

A. Anti-malware logs → Malware can cause general system slowness, but since the problem only occurs with a specific spreadsheet, it’s unlikely to be malware-related.

B. Workstation repair options → Repairing the OS or applications would be premature without first checking if the issue is simply due to the file’s size and resource demands.

C. Bandwidth status as reported in the Task Manager → Network bandwidth is unrelated to loading a local spreadsheet unless it’s hosted on a remote server, and even then, the primary concern is typically file size and processing requirements.

Explanation:

✅ Correct Answer: B. Windows Hello
For a Microsoft OS laptop user who frequently forgets their password, enabling Windows Hello is the ideal solution. Windows Hello offers alternative, secure authentication methods, such as facial recognition, fingerprint scanning, or a PIN, allowing users to log in quickly without having to remember a complex password each time. These methods are convenient, faster than typing a password, and provide strong security because biometric data is stored securely on the device and never transmitted externally. Enabling Windows Hello would help the user avoid frequent lockouts while maintaining system security.

❌ Why the other options are incorrect:

A. Single sign-on (SSO) simplifies logging into multiple services with one set of credentials, but the user would still need to remember their primary password to access Windows initially.

C. BitLocker is a drive encryption feature for protecting data, not an alternative login method.

D. User Account Control (UAC) helps prevent unauthorized changes to the system but does not replace or simplify the login process.

Explanation:

✅ Correct Answers: C. Enable screensaver locks and F. Apply the BIOS password
To secure a newly deployed workstation and ensure that only authorized users can access it, the technician should enable a screensaver lock (C) and apply a BIOS password (F).

Enabling screensaver locks ensures that when the workstation is left unattended for a period of time, it automatically locks the session, requiring the user to enter their credentials to regain access. This protects sensitive data from unauthorized viewing if someone walks by the workstation.

Applying a BIOS password prevents unauthorized users from changing boot order settings or accessing low-level hardware configurations. It adds an extra layer of security, ensuring that someone cannot boot the system with unauthorized tools or external media to bypass the operating system’s login protections.

❌ Why the other options are incorrect:

A. Defragment the hard drive improves disk performance on traditional HDDs but doesn’t contribute to security or user access control.

B. Enable SSH is typically used for secure remote connections on servers and networking devices, not for securing local user access on a workstation.

D. Disable iCloud integration may protect data privacy in some contexts but is not directly related to restricting workstation access to authorized users.

E. Enable the firewall is essential for network security but doesn’t directly control who can physically or locally access the workstation itself.

Explanation:

✅ Correct Answer: B. Services
When troubleshooting a print spooler that fails to start on a Windows 11 desktop computer, a technician would use the Services tool to investigate the issue. The Services console allows technicians to view, start, stop, and configure all Windows services and examine their dependencies. If the print spooler service cannot start because required dependencies (like the Remote Procedure Call service) are not running, the Services tool is where the technician can identify and correct those issues. By checking the Dependencies tab within the spooler service’s properties, the technician can see which services must be running for the print spooler to operate correctly.

❌ Why the other options are incorrect:

A. Process (referring to Task Manager’s Processes tab) shows currently running applications and processes but doesn’t allow viewing or configuring service dependencies.

C. Startup refers to programs set to launch automatically when Windows boots and does not manage services or dependencies.

D. Performance (also found in Task Manager) monitors CPU, memory, disk, and network usage but doesn’t display service dependencies or allow service management.

Explanation:

✅ Correct Answer: A. Port mapping
The scenario involves a customer wanting to access a surveillance system’s web interface via its IP address on the local network while preventing external login attempts from the internet. The best way to accomplish this is to properly configure port mapping (also known as port forwarding or port filtering) on the network’s router or firewall.

Here’s how it works:
By not mapping the surveillance system’s web interface port to the router’s public IP address, external users on the internet cannot reach the system.
The device remains accessible only on the local LAN because no outside traffic is forwarded to it.
Alternatively, if port forwarding was mistakenly set up, removing or disabling it would block external attempts.
Port mapping ensures internal-only access while blocking unwanted external connections, which is critical for security, especially for surveillance systems.

❌ Why the other options are incorrect:

B. Subnetting helps organize and segment networks but doesn’t inherently block internet access to a device’s web interface.

C. Static IP assigns a fixed IP address to the device, which is useful for local access but doesn’t prevent external connections.

D. Content filtering restricts which websites or categories of sites users can visit but doesn’t directly block inbound traffic to a specific local device from the internet.