Correct Answers:

NTFS and ReFS are correct.

Local file system permissions can be set on NTFS and ReFS file systems.

Incorrect Answers:

FAT32 and FAT are incorrect.

Local file system permissions cannot be set on FAT32 file systems.

Local file system permissions cannot be set on FAT file systems.

Correct Answer:

Replicate the problem is correct.

Replicating the problem is part of identifying the problem and its scope.

Incorrect Answers:

Determine common symptoms, make one change at a time, and verify system functionality are incorrect.

Determining common symptoms does not fall under the step of identifying a problem and its scope.

Making one change at time does not fall under the step of identifying a problem and its scope.

Verifying system functionality does not fall under the step of identifying a problem and its scope.

Correct Answer:

Layer 4 is correct.

Layer 4, the transport layer, is the layer in which ports are defined.

Incorrect Answers:

Layer 2, Layer 3, and Layer 5 are incorrect.

MAC addresses apply to Layer 2 of the OSI model.

IP addresses apply to Layer 3 of the OSI model.

There are no specific Layer 5 addresses, just session identifiers.

Correct Answer:

Load balancing is correct.

A load balancer accepts users’ requests for service and directs those requests to the least-busy back-end server to improve response time.

Incorrect Answers:

Failover clustering, IPv6, and virtualization is incorrect.

Failover clustering provides high availability but does not improve application response time.

IPv6 will not improve response time over IPv4.

Virtualization alone does not imply that performance will increase.

Correct answer:

Verify that name resolution is working is correct.

The first thing to test is whether name resolution is working.

Incorrect Answers:

Ping the default gateway, verify that TCP/IP is functional on user systems, verify that TCP/IP is functional on user systems is incorrect.

Since internal sites also do not respond, pinging the default gateway is not the first thing to check in this case.

TCP/IP is functional if you can remotely control the system.

The correct subnet mask is configured if you can remotely control the system.

Correct Answer:

Encryption is correct.

Encryption provides confidentiality for sensitive information.

Incorrect Answers:

Hashing, digital signatures, and auditing are incorrect.

Hashing is used to verify that data has not changed.

Digital signatures are used to verify authenticity (signatures) of the data.

Auditing tracks specific user activity.

Correct Answer:

SSH is correct.

Secure Shell (SSH) is remote administration traffic that uses TCP port 22.

Incorrect Answers:

Telnet, RDP, and KVM are incorrect.

Telnet is remote administration traffic, but Telnet uses TCP port 23.

Remote Desktop Protocol (RDP) is remote administration traffic, but RDP uses TCP and UDP port 3389.

Keyboard, video, mouse (KVM) does not use TCP port 22.

Correct Answer:

Server Core provides only a command prompt and not a GUI is correct.

A Server Core installation does not provide a GUI, only a command prompt, both locally and remotely.

Incorrect Answers:

Use SSH with X-forwarding instead, Server Core cannot have GUI components installed, and use VNC instead are incorrect.

Secure Shell (SSH) will not provide a GUI when used against Server Core.

GUI components can in fact be added and removed with Server 2016; all that is required is a reboot.

Virtual Network Computing (VNC) will not provide a GUI when used against Server Core.

Correct Answer:

A vulnerability scan identifies vulnerabilities but does not exploit those vulnerabilities is correct.

Vulnerability scans do not attempt to exploit discovered weaknesses.

Incorrect Answers:

A vulnerability scan exploits discovered vulnerabilities, a penetration test identifies vulnerabilities but does not exploit those vulnerabilities, and a penetration test is passive are incorrect.

Vulnerability scans do not attempt to exploit discovered weaknesses.

A penetration test actively exploits weaknesses. C is incorrect. A penetration test actively exploits weaknesses.

Correct Answer:

Change the BIOS/UEFI boot order is correct. Changing the BIOS/UEFI boot order will enable the system to boot from DVD.

Incorrect Answers:

Update the BIOS/UEFI firmware, configure legacy mode in the BIOS/UEFI, and remove the BIOS/UEFI password is incorrect.

A firmware update will not enable DVD boot.

Configuring legacy mode in the BIOS/UEFI firmware will not enable DVD boot.

Removing the BIOS/UEFI password will not enable DVD boot.