Correct Answer:

Never, ever let anyone see you angry at a job site! It is the single most unprofessional thing you can do.

Incorrect Answers:

Getting hurt is bad, but not a social mistake.

Getting confused is bad, too, but not the end of the world.

Getting frustrated can lead to getting angry, but there's still time—save yourself the embarrassment and calm down.

Correct:

You'll find file information in HKEY_CLASSES_ROOT.

Incorrect:

The other Registry root keys contain important information, but not about file types.

Correct Answer:

Most likely, the recently-downloaded program was a Trojan Horse that released malware some days later with a trigger.

Incorrect Answers:

Keylogger malware would show up immediately, although probably with little noticeable effects.

Ransomware generally runs immediately, shutting down or encrypting systems, demanding money.

Rootkit malware doesn't have much in the way of visible effects.

Correct Answer:

Starting the computer in Safe Mode may enable you to update your anti-virus software since the virus's background process won't be running.

Incorrect Answers:

The Recovery Console is a troubleshooting tool for fixing Windows installs that are having boot problems or other serious issues.

Regedit is the tool for editing the Windows Registry.

MSCONFIG is the tool used to control what programs and services startup with Windows. You might be able to use MSCONFIG to help with this problem, but it's far easier to simply use Safe Mode.

Correct Answer:

12288MB is correct. Microsoft's suggestion for the minimum page file size in Windows 7 is 1.5x your system RAM.

Incorrect Answers:

4096 MB is incorrect. Microsoft's suggestion for the minimum page file size in Windows 7 is 1.5x your system RAM.

8192 MB is incorrect. Microsoft's suggestion for the minimum page file size in Windows 7 is 1.5x your system RAM.

16328 MB is incorrect. Microsoft's suggestion for the minimum page file size in Windows 7 is 1.5x your system RAM.

Correct Answer:

The CHKDSK command scans a hard drive for errors and repairs them as needed.

Incorrect Answers:

DISKPART enables you to partition a drive from the command line.

FORMAT erases all the data on a drive and sets up a new file format on it.

FDISK is an older partitioning tool that was replaced by DISKPART.

Correct Answer:

Autostarting programs can be loaded through the Services snap-in and from the Startup folder in all versions of Windows.

Incorrect Answers:

BOOT.INI only points to the location of the Windows OS boot files.

The Windows folder is the default location of the Windows OS boot files.

Bootcfg is a utility in the Recovery Console used to rebuild the Boot.ini.

Correct Answer:

Document the incident and purge all materials is correct. Once complete, the violating materials should be purged, so they cannot be used by any other person.

Incorrect Answers:

Isolate the workstation in a limited access facility is incorrect. The investigation does not require these measures.

Deleting the materials is correct, but it is not the BEST answer available.

Reprimand the user, and remove violating materials is incorrect. It is not the technician's responsibility to take disciplinary action on an employee.

Correct Answer:

See if the anti-malware program has an automatic update feature.

Incorrect Answers:

Windows Update does not update ALL anti-malware programs.

Task scheduler automates tasks; it doesn't update programs.

Many anti-malware programs have handy update options for either manual or automatic updating.

Correct Answer:

The best way to make sure that a virus infection doesn't recur is to educate the user about safe browsing practices and the use of anti-malware software.

Incorrect Answers:

Creating a restore point could result in an infected restore point. Doing this won't help anything. You should update the anti-virus program and schedule scans before trying to clean the infection.