- During disaster recovery planning for a private company, management wants to ensure critical systems can be restored even if the primary data centre is unavailable. They plan to keep copies of backups in a separate geographic location to reduce the impact of a local disaster. Which component is essential to meet this offsite recovery requirement?
Answer: Offsite backup storage (such as a secure cloud repository or secondary site) that holds backup copies outside the primary location
This question evaluates knowledge of disaster recovery infrastructure components, specifically offsite backup strategies. The scenario requires backup copies in a separate geographic location to enable recovery if the primary data center is unavailable due to local disaster. Offsite backup storage (A) such as cloud repositories or secondary sites directly addresses this requirement by maintaining backup copies outside the primary location's disaster impact zone. Local recycle bins (B) only store recently deleted files on individual workstations without offsite protection. Token-ring networks (C) are obsolete LAN technologies that cannot prevent disasters. Spreadsheet passwords (D) control file access but don't replace backup requirements. For comprehensive disaster recovery, recognize offsite backup storage as essential for protecting against site-wide disasters and ensuring business continuity.
- In an IT infrastructure audit of a public company, the auditor reviews how employee laptops receive IP addresses and network settings when connecting to the corporate network. Management wants a centralized component that automatically assigns IP addresses and reduces configuration errors to align with IT operations standards. What is the primary role of the component that provides this service?
Answer: A dynamic host configuration protocol (DHCP) server that automatically assigns IP addresses and network parameters to devices
This question tests knowledge of network infrastructure services, specifically automatic IP address management. The scenario requires centralized assignment of IP addresses and network parameters to reduce configuration errors and support IT operations standards. A DHCP server (A) provides this service by automatically assigning IP addresses, subnet masks, default gateways, and DNS servers to devices when they connect to the network, eliminating manual configuration. Database servers storing passwords in plain text (B) represent poor security practice unrelated to IP management. Infrared file transfer devices (C) are obsolete short-range technologies that don't replace networking. Physical locks (D) secure facilities but don't configure network settings. For network administration efficiency, identify DHCP as the standard protocol for automatic network configuration, reducing errors and administrative overhead.
- A government agency conducts an IT security assessment and identifies that staff frequently reuse passwords across systems. Management wants to reduce account takeover risk by enforcing additional verification during sign-in and by requiring stronger credential handling. Which IT infrastructure component is most vulnerable to security threats if it is misconfigured or not properly protected, given it stores and validates user credentials for many systems?
Answer: A directory service controller that centralizes authentication and authorization for multiple systems
This question assesses understanding of authentication infrastructure vulnerabilities and security risks. The scenario identifies password reuse across systems and asks which component is most vulnerable if misconfigured, given its role in storing and validating credentials for multiple systems. A directory service controller (A) like Active Directory Domain Controller is indeed the most critical component because it centralizes authentication for many systems - if compromised, attackers gain access to all integrated applications. Network printers (B) produce output but don't store authentication credentials. CD jukeboxes (C) provide archival storage without authentication functions. Wallpaper policies (D) standardize desktop appearance but don't enforce encryption or manage accounts. When assessing authentication infrastructure risks, recognize directory service controllers as high-value targets requiring stringent security controls due to their central role in enterprise authentication.
- In an IT infrastructure audit at a public company, the auditor evaluates how software updates are distributed to employee endpoints. Management wants a centralized mechanism to deploy approved patches consistently and to report patch compliance, supporting IT governance and security standards. Which component is essential to manage this patch deployment process?
Answer: An endpoint patch management system that deploys approved updates and reports compliance across devices
This question assesses knowledge of endpoint management infrastructure components. The scenario requires centralized deployment of approved patches with compliance reporting to support IT governance and security standards. An endpoint patch management system (A) provides these capabilities by maintaining a central repository of approved patches, deploying them according to defined schedules, and generating compliance reports showing patch status across all managed devices. Network hubs (B) broadcast traffic but don't distribute software updates intelligently. Floppy disk distribution (C) is an obsolete, manual, and unreliable method for modern patching. Document retention policies (D) govern information lifecycle but don't install software. For enterprise patch management, identify centralized systems that automate deployment, ensure consistency, and provide visibility into patch compliance across the endpoint population.
- As part of a system upgrade proposal, a nonprofit reviews its internet connectivity because video meetings and cloud-based finance applications frequently drop during peak hours. Management wants a more reliable and higher-capacity connection to support business operations and reduce downtime risk. Based on the scenario, which IT infrastructure component needs upgrading?
Answer: The wide area network (WAN) internet circuit bandwidth to support higher volumes of cloud and collaboration traffic
This question tests understanding of network infrastructure capacity planning. The scenario describes insufficient internet bandwidth causing video meetings and cloud applications to drop during peak usage, requiring a more reliable, higher-capacity connection. The WAN internet circuit bandwidth (A) is the component needing upgrade because modern cloud services and video collaboration require significantly more bandwidth than legacy applications, and insufficient capacity directly causes the described service disruptions. Keyboards and mice (B) are local input devices unrelated to network capacity. Dial-up connections (C) provide extremely limited bandwidth unsuitable for cloud access. Paper filing cabinets (D) store physical documents without affecting network performance. When evaluating connectivity upgrades, assess bandwidth requirements for cloud services, video conferencing, and concurrent users to determine appropriate circuit capacity.
- In a system upgrade proposal for a nonprofit, the IT team reviews aging on-premises servers that host the donor database and internal file shares. The servers are approaching end-of-support, increasing operational risk and limiting the ability to apply security patches in line with governance expectations. Based on the scenario, which IT infrastructure component needs upgrading?
Answer: The server operating system platform on the on-premises servers to ensure vendor support and security patching
This question assesses knowledge of IT infrastructure lifecycle management, specifically server operating system components. The scenario describes aging servers approaching end-of-support, which increases operational risk and prevents security patching per governance requirements. The server operating system platform (A) is the component needing upgrade because unsupported operating systems cannot receive critical security updates, exposing the organization to vulnerabilities. Word processing templates (B) support document creation but aren't infrastructure components. Floppy disk inventories (C) track obsolete media unrelated to server support. Manual sign-in sheets (D) provide physical access logs but don't affect server patching. When evaluating infrastructure upgrade needs, prioritize components reaching end-of-support status as they pose significant security and compliance risks.
- A private company performs an IT efficiency evaluation of its branch offices, where employees frequently experience slow access to shared files stored at headquarters. The company wants a network component that can prioritize business-critical traffic (such as voice and ERP transactions) over noncritical traffic to improve user experience. Which component is essential for implementing this prioritization across the network?
Answer: A quality of service configuration on network routers or switches that prioritizes selected traffic types
This question tests knowledge of network traffic management components, specifically Quality of Service (QoS) implementations. The scenario requires prioritizing business-critical traffic like voice and ERP transactions over non-critical traffic to improve performance across branch office connections. QoS configuration on routers or switches (A) provides this capability by classifying traffic types and allocating bandwidth according to business priorities. Cold-site leases (B) provide disaster recovery facilities but don't manage network traffic. Dial-up modem pools (C) are obsolete low-bandwidth technologies that would worsen performance. Checksums (D) verify data integrity but don't prioritize network traffic or prevent database queries. For network performance optimization, identify components that can classify and prioritize traffic flows based on application requirements and business criticality.
- During an IT security assessment of a government agency, the auditor notes that system administrators log in to servers using standard user accounts and then elevate privileges without clear tracking. Management wants to enforce controlled elevation and session monitoring for privileged activities to align with security governance. Which component is essential for managing and monitoring privileged access?
Answer: A privileged access management solution that controls, audits, and monitors elevated administrative sessions
This question evaluates understanding of privileged access security infrastructure. The scenario identifies uncontrolled privilege elevation without clear tracking, requiring managed elevation and session monitoring to meet security governance requirements. A privileged access management (PAM) solution (A) addresses these requirements by controlling how administrators access privileged accounts, enforcing approval workflows, recording privileged sessions, and providing detailed audit trails. File compression servers (B) reduce storage needs but don't manage privileged access. Terminal emulators (C) provide text-based interfaces but don't eliminate privileged account requirements. Power-saving settings (D) reduce energy consumption but don't prevent privilege escalation. For securing administrative access, recognize PAM solutions as specialized infrastructure that enforces least privilege principles and provides accountability for high-risk activities.
- In an IT security assessment of a public company's email environment, management is concerned about malicious attachments and phishing links reaching users. They want a control that scans and filters inbound email content before it is delivered to mailboxes, supporting the organization's security framework. Which component is essential for this function?
Answer: An email security gateway that filters and scans inbound messages for malware and phishing indicators
This question assesses knowledge of email security infrastructure components. The scenario requires filtering malicious attachments and phishing links before they reach user mailboxes, supporting the organization's security framework. An email security gateway (A) provides this functionality by scanning inbound messages for malware signatures, suspicious attachments, and phishing indicators, quarantining or blocking threats before delivery. File compression utilities (B) reduce attachment sizes but don't scan for threats. Pager systems (C) provide notifications but don't filter email content. Network switches (D) forward network traffic but don't analyze email content or quarantine messages. For email security architecture, identify dedicated email security gateways as the primary defense against email-borne threats, positioned between the internet and internal mail servers.
- In an IT security assessment at a public company, the auditor reviews controls over sensitive financial data stored on a shared file server. Management wants to ensure that even if the storage media is removed or stolen, the data remains unreadable without proper authorization. Which component is essential for protecting data in this scenario?
Answer: Full-disk or volume encryption that renders stored data unreadable without the encryption key
This question tests understanding of data-at-rest encryption as a security control in IT infrastructure. The scenario requires protecting sensitive financial data stored on file servers against physical theft or unauthorized access to storage media. Full-disk or volume encryption (A) addresses this requirement by rendering all stored data unreadable without the proper encryption key, providing protection even if drives are physically removed. Content delivery networks (B) optimize web performance but don't encrypt stored data. Network hubs (C) broadcast signals without encryption capabilities. Printer access logs (D) track usage but don't patch systems or encrypt data. When implementing data protection controls, recognize encryption at rest as the primary safeguard against unauthorized access to data on stolen or improperly disposed storage media.
- During an IT infrastructure audit of a nonprofit, the auditor observes that application servers and database servers share the same network segment as employee workstations. Management wants to reduce the risk of unauthorized lateral movement by separating systems into distinct network zones while maintaining controlled connectivity. Which infrastructure component is essential for creating these logical network separations?
Answer: Virtual local area networks (VLANs) that logically segment a network into separate broadcast domains
This question assesses understanding of network segmentation technologies in IT infrastructure security. The scenario identifies a flat network where servers and workstations share the same segment, creating lateral movement risks that management wants to mitigate through logical separation. Virtual Local Area Networks (VLANs) (A) provide this capability by creating separate broadcast domains at Layer 2, allowing administrators to group devices logically regardless of physical location while controlling inter-VLAN routing. Screen capture tools (B) record user activity but don't segment networks. Floppy disk drives (C) are obsolete storage devices unrelated to network segmentation. Password policies (D) enforce credential strength but don't create network separations or encrypt traffic. When designing secure network architectures, recognize VLANs as the fundamental technology for creating logical network boundaries that limit broadcast domains and enable controlled communication between segments.
- A private company is performing disaster recovery planning for its on-premises enterprise resource planning (ERP) system hosted on virtual machines. The ERP database must be recoverable to a consistent point in time after an outage, with minimal data loss, in accordance with IT governance requirements. Which component is essential to support point-in-time recovery for the database?
Answer: Database transaction log backups that record changes and enable recovery to a specific point in time
This question evaluates knowledge of database recovery components in disaster recovery planning. The scenario requires point-in-time recovery capability for an ERP database with minimal data loss, which is a fundamental disaster recovery requirement. Database transaction log backups (A) record all database changes sequentially, enabling administrators to restore to any specific point in time by replaying transactions after restoring a full backup. DNS servers (B) resolve network names but don't provide database recovery capabilities. Network hubs (C) are basic connectivity devices without recovery functions. Screen-saver policies (D) provide workstation security but don't support database recovery. For disaster recovery planning, prioritize components that capture incremental changes and enable granular recovery points, particularly transaction logs for database systems requiring consistent state recovery.
- A government agency is performing an IT efficiency evaluation and finds that many internal applications are hosted on underutilized physical servers. Management wants to improve hardware utilization and simplify provisioning while maintaining appropriate controls over workloads. How does the key infrastructure component contribute to overall IT efficiency in this scenario?
Answer: Server virtualization that consolidates workloads onto fewer physical servers and enables faster provisioning of new systems
This question tests understanding of how virtualization technology improves IT efficiency. The scenario describes underutilized physical servers that management wants to consolidate while maintaining workload controls. Server virtualization (A) directly improves efficiency by consolidating multiple workloads onto fewer physical servers, increasing hardware utilization from typical 15-20% to 60-80%, while enabling rapid provisioning through template-based deployment. Manual data re-entry (B) increases errors and labor without improving infrastructure efficiency. Dial-up networking (C) severely limits bandwidth and would decrease efficiency. Disabling system logs (D) eliminates audit trails required for compliance and troubleshooting. When evaluating IT efficiency improvements, recognize server virtualization as a transformative technology that reduces hardware costs, power consumption, and administrative overhead while improving agility.
- During an IT security assessment at a public company, the auditor notes that employees access cloud-based accounting and file storage from laptops over the internet. Management wants to ensure remote users must prove their identity using a second factor beyond a password to align with the company's information security policies. Which component is essential for enforcing this authentication requirement in the IT infrastructure?
Answer: A multi-factor authentication service that validates user logins using an additional verification factor
This question tests understanding of multi-factor authentication (MFA) as a critical security component in IT infrastructure. The scenario describes remote users accessing cloud-based systems over the internet, requiring identity verification beyond passwords to meet security policies. Multi-factor authentication service (B) directly addresses this requirement by adding a second verification factor (something you have or are) to the standard password (something you know). Network-attached storage (A) provides file sharing but doesn't address authentication requirements. Tape backup libraries (C) support data recovery but don't control user access. Hub-based networks (D) are outdated broadcast technologies that don't provide authentication services. When evaluating IT security controls for remote access, identify components that enforce authentication requirements through multiple verification factors to reduce unauthorized access risk.
- As part of an IT security assessment of a public company, the auditor notes that users connect from home to access internal finance applications hosted on the corporate network. Management wants an encrypted tunnel over the internet so remote traffic is protected in transit and access is controlled according to security policies. Which component is essential for providing this secure remote connectivity?
Answer: A virtual private network (VPN) gateway that encrypts remote connections and authenticates users before network access
This question tests understanding of secure remote access technologies in IT infrastructure. The scenario requires encrypted connections for remote users accessing internal applications over the internet with controlled access per security policies. A VPN gateway (A) provides this capability by creating encrypted tunnels between remote devices and the corporate network, authenticating users before granting access and applying security policies. Network hubs (B) broadcast traffic locally without encryption or remote access capabilities. Fax machines (C) transmit documents over phone lines but don't secure network connections. Printer spoolers (D) queue print jobs locally without encrypting internet traffic. When implementing secure remote access, identify VPN technology as the standard solution for creating encrypted connections over untrusted networks while maintaining access controls.
- As part of a system upgrade proposal, a private company reviews its data storage for an analytics platform that is running out of capacity and experiencing slow read/write performance. Management wants scalable storage that supports redundancy and improved throughput for multiple servers. Based on the scenario, which IT infrastructure component needs upgrading?
Answer: A storage area network (SAN) that provides centralized, high-performance shared storage to servers
This question assesses knowledge of enterprise storage infrastructure components. The scenario describes an analytics platform experiencing capacity constraints and performance issues, requiring scalable storage with redundancy and improved throughput for multiple servers. A Storage Area Network (SAN) (A) provides this capability through dedicated high-speed networks connecting servers to centralized storage arrays, offering features like RAID redundancy, dynamic allocation, and multi-path I/O for performance. Fax servers (B) route documents but don't provide data storage. ZIP drives (C) are obsolete removable media with limited capacity. Screensaver policies (D) secure workstations but don't affect server storage. For enterprise storage requirements, identify SAN technology as the solution for centralized, high-performance, scalable storage supporting multiple servers with advanced features.
- During an IT efficiency evaluation at a nonprofit, users report frequent delays when accessing an internal web application. The application is hosted on multiple identical web servers, and management wants to distribute incoming requests to improve performance and reduce single points of failure. Which component is essential for distributing this traffic across servers?
Answer: A load balancer that routes incoming application requests across multiple servers based on defined rules
This question evaluates understanding of load balancing technology in IT infrastructure. The scenario describes a web application hosted on multiple servers experiencing performance issues, requiring traffic distribution to improve response times and eliminate single points of failure. A load balancer (A) provides this functionality by intelligently routing incoming requests across available servers based on algorithms like round-robin, least connections, or server health. Tape vaulting services (B) store backup media offsite but don't distribute application traffic. Serial port switches (C) are legacy connectivity devices unrelated to internet bandwidth or load distribution. Password managers (D) store credentials but don't assign IP addresses or route traffic. When designing scalable application architectures, recognize load balancers as essential components for distributing workloads, improving performance, and providing failover capabilities.
- A private company performs an IT efficiency evaluation and finds that employees spend significant time searching for the latest versions of policies and procedures stored across shared drives. Management wants a centralized platform with version control and access permissions to improve document management and reduce duplication. Which component is essential to support this improvement?
Answer: A document management system that centralizes files with version control, permissions, and search capabilities
This question tests understanding of content management infrastructure components. The scenario describes inefficient document management with employees struggling to find current versions across multiple shared drives, requiring centralization with version control and permissions. A document management system (A) provides these capabilities through a centralized repository that maintains version history, enforces access permissions, enables full-text search, and prevents duplication through check-in/check-out workflows. Network switches (B) forward packets but don't store documents or manage versions. Magnetic tape drives (C) provide sequential access unsuitable for daily document editing. Password policies (D) enforce authentication requirements but don't merge documents. For improving document management efficiency, identify dedicated systems that centralize content, automate version control, and provide structured access to organizational knowledge.
- A government agency is conducting an IT security assessment of its public-facing permit application portal hosted in a demilitarized zone (DMZ). The agency wants to reduce the risk of internet-based attacks by filtering inbound and outbound traffic based on defined rules and logging blocked connections. Which IT infrastructure component is most directly responsible for this traffic filtering function?
Answer: A firewall that enforces network access rules by allowing or blocking traffic between network zones
This question assesses knowledge of network security components, specifically perimeter defense mechanisms. The scenario describes a public-facing application in a DMZ requiring protection from internet-based attacks through traffic filtering and logging. A firewall (A) is the primary infrastructure component designed for this purpose, enforcing network access rules by inspecting packets and allowing or blocking traffic based on configured policies while maintaining detailed logs. File servers (B) store documents but don't filter network traffic. Fax modems (C) transmit documents over phone lines without network security functions. Spreadsheet macros (D) automate calculations within applications but don't control network traffic. For network security architecture, recognize that firewalls serve as the fundamental enforcement point for traffic filtering between network zones, particularly at internet boundaries.
- A government agency is completing disaster recovery planning for a critical case management system. The system must continue operating even if one physical server fails, and the agency wants automatic failover with minimal downtime to meet availability objectives. Which IT infrastructure component is essential to provide this high-availability capability?
Answer: A server cluster that provides redundancy and automatic failover between nodes
This question evaluates knowledge of high-availability infrastructure components for critical systems. The scenario requires automatic failover capability with minimal downtime when a physical server fails, which is essential for meeting availability objectives. A server cluster (A) provides this redundancy by connecting multiple nodes that monitor each other's health and automatically transfer workloads when failures occur. Single external USB drives (B) provide basic backup storage but no automatic failover. Legacy coaxial networks (C) are outdated cable technologies that don't provide server redundancy. Data classification labels (D) categorize information sensitivity but don't prevent hardware failures. For high-availability requirements, identify clustering technologies that provide active-active or active-passive configurations with automatic failover capabilities to minimize service disruptions.
