Free FC0-U71 Practice Test

The practice of using the same credentials across multiple websites is known as password reuse. A password reuse policy, typically implemented as "password history," is the specific control designed to prevent a user from using the same password multiple times on a single system. While a policy on one system cannot technically prevent a user from reusing that same password on external, unaffiliated websites, it is the only policy option listed that directly addresses the principle of reusing passwords. The intent is to train users against the practice of reuse in general.

B. Complexity: This policy mandates the use of different character types (e.g., uppercase, lowercase, numbers, symbols) but does not prevent a user from reusing the same complex password on other sites.
C. Privacy: A privacy policy governs how user data is collected, used, and protected. It is not a technical control that defines the construction or history of a user's password.
D. Length: This policy enforces a minimum number of characters for a password. A user can still create a long password and reuse it across multiple services, which this policy would not prevent. ---

1. National Institute of Standards and Technology (NIST) Special Publication 800-53

Revision 5. Security and Privacy Controls for Information Systems and Organizations.

Reference: Control IA-5

Authenticator Management

Enhancement (1)(e).

Details: This control specifies the requirement to "Prevent password reuse for [Assignment: organization-defined number] generations." This directly links the concept of a "reuse" policy to preventing the use of historical passwords.

2. Microsoft Corporation Documentation. Password Policy.

Reference: Security Policy Settings

Account Policies/Password Policy.

Details: The "Enforce password history" policy setting is defined as determining "the number of unique new passwords that have to be associated with a user account before an old password can be reused." This is the technical implementation of a password reuse policy.

3. University of California

Berkeley

Information Security Office. Credential Management Standard.

Reference: Section 6.2

"Password Construction and Management."

Details: The standard outlines requirements for password management

including "Password Reuse

" which states

"Do not reuse passwords for a privileged account for at least one year. Do not reuse passwords for a regular user account for at least three months." This illustrates how an organization formally defines a reuse policy.

This question assesses the understanding of data storage capacity units. The units must be compared on a common basis. The hierarchy of standard decimal units is: Kilobyte (KB), Megabyte (MB), Gigabyte (GB), and Terabyte (TB). Each unit is approximately 1,000 times larger than the previous one. 2 Terabytes (TB) = 2,000 Gigabytes (GB) = 2,000,000 Megabytes (MB). 4,000 Megabytes (MB) = 4 Gigabytes (GB). 100 Gigabytes (GB) is simply 100 GB. 50 Kilobytes (KB) is approximately 0.05 MB. By converting all options to a common unit like Gigabytes (2,000 GB, 0.00005 GB, 100 GB, and 4 GB), it is clear that 2TB is the largest capacity.

B. 50KB: A Kilobyte (KB) is a very small unit of measurement, thousands of times smaller than a Megabyte and millions of times smaller than a Gigabyte.
C. 100GB: A Gigabyte (GB) is a smaller unit than a Terabyte (TB). One Terabyte is equivalent to 1,000 Gigabytes, making 100GB significantly smaller than 2TB.
D. 4,000MB: While 4,000 is a large number, the unit Megabyte (MB) is smaller than a Gigabyte. 4,000MB is equivalent to only 4GB, which is far less than 2TB (2,000GB).

1. Brookshear, J. G., & Brylow, D. (2019). Computer Science: An Overview (13th ed.). Pearson. In Chapter 1, Section 1.4, "Representing Information as Bit Patterns," the text defines the hierarchy of byte multiples, stating that "kilo" implies a thousand, "mega" a million, "giga" a billion, and "tera" a trillion, establishing the relative sizes.

2. Stanford University. (n.d.). CS101, Lecture 02: The Guts of a Computer. Stanford Engineering Everywhere. In the section "Bits and Bytes," the course material explains the prefixes for data storage: "A kilobyte (KB) is 1000 bytes... A megabyte (MB) is 1 million bytes... A gigabyte (GB) is 1 billion bytes... A terabyte (TB) is 1 trillion bytes." This confirms that TB is the largest unit listed.

3. National Institute of Standards and Technology (NIST). (2008). The International System of Units (SI). (NIST Special Publication 330). p. 31, Table 5. This official publication defines the SI prefixes, where tera- (T) represents a factor of 10¹², giga- (G) is 10⁹, mega- (M) is 10⁶, and kilo- (k) is 10³. This standard confirms the multiplicative factors and relative order of the units.

Random Access Memory (RAM) is a form of volatile memory, which means it requires a constant source of electrical power to maintain the data stored within it. When a workstation is turned off, the power supply to the RAM modules is cut. As a result, all the information held in RAM, such as the operating system, active applications, and any unsaved data, is completely erased. This loss of data is effectively a "reset" of the memory's contents to a blank state.

A. BIOS: The BIOS (or UEFI) is firmware stored on a non-volatile flash memory chip on the motherboard; its settings are preserved by a CMOS battery even when the main power is off.
B. NIC: A Network Interface Card's fundamental configuration, such as its MAC address, is stored in non-volatile memory (ROM) and is not reset when the computer is powered down.
C. CPU: While the CPU's internal cache is volatile, the CPU itself is a processor, not a primary data storage device in the same way as RAM. Its core architectural state is not what is considered "reset."

1. Silberschatz

A.

Galvin

P. B.

& Gagne

G. (2018). Operating System Concepts (10th ed.). Wiley. In Chapter 1

Section 1.2.1

"Computer-System Operation

" the text states

"Main memory...is a large storage area that the processor can access directly. It commonly is volatile storage that loses its contents when power is turned off or otherwise lost."

2. Patterson

D. A.

& Hennessy

J. L. (2017). Computer Organization and Design: The Hardware/Software Interface (5th ed.). Morgan Kaufmann. In Appendix B

Section B.4

"Memory Technology

" DRAM is described as volatile: "Like all DRAMs

the contents are lost when the power is turned off."

3. MIT OpenCourseWare. (2017). 6.004 Computation Structures

Spring 2017. Massachusetts Institute of Technology. In Lecture 15

"Memory Technologies

" slide 10 explicitly defines DRAM (the technology used for main RAM) as "Volatile

" meaning "data is lost when power is removed."

The scenario describes the process of tracking and logging user actions, specifically logon events, by reviewing log files. This is the definition of Accounting within the AAA (Authentication, Authorization, and Accounting) security framework. Accounting is responsible for collecting data on user activity, such as logon times, resources accessed, and duration of sessions. This information is then used for auditing, security analysis, and resource management. The technician's action of reviewing logs to track user logons is a direct application of the accounting principle.

B. Authorization: This concept involves granting or denying permissions to resources after a user has been authenticated. It does not involve tracking or logging past events.
C. Authentication: This is the process of verifying a user's identity (e.g., with a password or biometric scan) at the moment they attempt to log on, not the subsequent tracking of those events.
D. Non-repudiation: This is a security service that provides proof of the integrity and origin of data, ensuring a user cannot deny having performed an action. While accounting logs can support non-repudiation, the act of tracking itself is accounting. ---

1. National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5

"Security and Privacy Controls for Information Systems and Organizations":

Reference: Appendix D

Glossary

page D-1.

Content: Defines Accountability as "The property of a system or system resource that ensures that the actions of a system entity may be traced uniquely to that entity." The control family AU (Audit and Accountability) directly addresses the mechanisms

like event logging (AU-2)

required to achieve this.

2. Internet Engineering Task Force (IETF) RFC 2866

"RADIUS Accounting":

Reference: Section 1

"Introduction

" Paragraph 1.

Content: This foundational document states

"This document describes a protocol for carrying accounting information between a Network Access Server and a shared Accounting Server." It specifies tracking attributes like session start and stop times

which directly corresponds to tracking user logons.

3. MIT OpenCourseWare

Course 6.857: Computer and Network Security

Fall 2017:

Reference: Lecture 15 Notes

"Network Security

" Section on AAA.

Content: The courseware explicitly defines the components of AAA. Accounting is defined as the question "what did you do?" and is associated with logging and auditing user actions

which is precisely what the technician in the scenario is doing.

Satellite internet service inherently experiences the highest latency due to the immense physical distance signals must travel. A request from a user's computer is sent to a satellite in geostationary orbit (approximately 35,786 km or 22,236 miles above the Earth), then relayed to a ground station (Network Operations Center), and the response travels back along the same path. This round trip, constrained by the speed of light, results in a significant propagation delay, typically ranging from 500 to 700 milliseconds. Terrestrial services like DSL, cable, and fiber have much shorter physical paths, resulting in significantly lower latency, usually under 50 ms.

A. DSL: Latency is much lower than satellite. It is a terrestrial service where delay is primarily influenced by the distance to the telephone company's central office.
B. Fiber: This technology offers the lowest latency among all options. Signals travel as light pulses through glass fibers with minimal delay, making it ideal for latency-sensitive applications.
D. Cable: Provides low latency, comparable to DSL. As a ground-based technology, the signal path is short, though latency can be affected by network congestion in a shared local loop.

1. Federal Communications Commission (FCC). (2021). Eleventh Measuring Fixed Broadband Report. Public Notice DA 21-1593, Section 5.1.1, Table 5.1.1.1 "Weighted Average Latency (ms) by Technology". The report provides empirical data showing the weighted average latency for satellite at 629.1 ms, compared to 29.9 ms for DSL, 17.8 ms for Cable, and 12.3 ms for Fiber.

2. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. In Section 1.3.1, "Home Access: DSL, Cable, FTTH, Dial-Up, and Satellite," the text states, "For satellite links, a significant propagation delay is incurred as the signal must travel from the earth to the geo-stationary satellite and back again. This delay, on the order of 280 msec [one-way], can be a showstopper for some applications..."

3. International Telecommunication Union (ITU). (2017). ITU-T Recommendation G.1010: End-user multimedia QoS categories. Section 6.2, "Delay," discusses the impact of propagation delay on different network types, noting the significant delay inherent in satellite communication links which places them in higher-delay QoS classes compared to terrestrial networks.

A web browser's cache stores local copies of website files (such as HTML, images, and scripts) to reduce load times on subsequent visits. When a website is updated, the browser may continue to load the outdated version from its cache instead of fetching the new files from the server. This results in the user seeing an old page. Clearing the cache forces the browser to discard all stored files and download the most recent version of the web page directly from the server, resolving the issue.

A. Synchronize the profile: This function syncs user settings like bookmarks and passwords across devices and does not affect the cached content of a web page.
B. Disable browser extensions: While a faulty extension can cause various issues, the specific problem of loading a stale page is most directly and commonly caused by the cache.
D. Enable the pop-up blocker: This feature prevents unwanted pop-up windows from appearing and has no impact on the version of the content loaded on the main page.

1. Mozilla Foundation. (n.d.). How to clear the Firefox cache. Mozilla Support. Retrieved from https://support.mozilla.org/en-US/kb/how-clear-firefox-cache.

Reference Detail: The article states

"The cache temporarily stores files... from websites you visit. If you are having problems with a website

clearing the cache can sometimes help." This supports clearing the cache as a troubleshooting step for page loading issues.

2. Indiana University. (2024

January 18). Clear your web browser's cache

cookies

and history. University Information Technology Services Knowledge Base. Retrieved from https://kb.iu.edu/d/ahic.

Reference Detail: In the "Cache" section

it explains

"If you are unable to see recent changes to a website

you may need to clear your browser's cache. The cache is a tool used by your internet browser to speed up the page loading process." This directly links the problem (not seeing recent changes) to the solution (clearing the cache).

3. Massachusetts Institute of Technology (MIT). (n.d.). Clear Web Browser Cache in Chrome

Firefox

and Safari on a Mac. Information Systems & Technology. Retrieved from https://ist.mit.edu/services/desktop-os/macos/clear-cache.

Reference Detail: The document notes

"Clearing your browser's cache and cookies is an important first step for almost any troubleshooting for internet browsing. The cache is a component of your computer that stores data so that future requests for that data can be served faster." This establishes clearing the cache as a primary troubleshooting step for browsing problems.

The action of a user typing on a keyboard is the fundamental process of providing data and commands to a computer. This process is known as input. The keyboard is a primary input device that converts physical keystrokes into electronic signals that the computer's central processing unit (CPU) can understand and process. The user's action directly corresponds to the "input" stage of the basic computing cycle (Input, Processing, Output, Storage).

B. Storage: This refers to the act of saving data to a non-volatile medium, such as a hard drive or solid-state drive, for future retrieval. Typing does not inherently involve storage.
C. Output: This is the process of presenting processed data to the user, for example, displaying text on a monitor or printing a document. It is the result of input, not the action itself.
D. Processing: This is the manipulation of data by the CPU according to a set of instructions. While the computer processes the keystrokes, the user's physical act of typing is the input that initiates this process.

1. Brookshear, J. G., & Brylow, D. (2015). Computer Science: An Overview (12th ed.). Pearson Education. In Chapter 0, Section 0.3, "The Organization of a Modern Computer," the text describes the components of a computer system. It states, "The devices that allow a computer to communicate with the outside world are collectively known as I/O (input/output) devices... Common input devices are keyboards, mice..." (p. 20).

2. MIT OpenCourseWare. (2016). 6.0001 Introduction to Computer Science and Programming in Python, Fall 2016. Lecture 1: What is Computation? The lecture slides present a diagram of a "Basic Machine Architecture" where "Input" from devices like a keyboard and mouse is shown feeding into the Central Processing Unit (CPU) and Memory (Slide 10).

3. Patterson, D. A., & Hennessy, J. L. (2017). Computer Organization and Design RISC-V Edition: The Hardware Software Interface. Morgan Kaufmann. In Chapter 1, Section 1.4, "Under the Covers," the authors describe the standard components of a computer, identifying the keyboard as an "input device" that provides data to the system (p. 24).

The question describes a scenario where a technical issue has already been resolved. This implies that the preceding steps of the standard troubleshooting methodology—identifying the problem, establishing and testing a theory, creating and implementing a plan of action, and verifying functionality—have been completed. The final and next logical step in this structured process is to document the findings, actions taken, and the outcome. This creates a record for future reference, helps in identifying trends, and contributes to a knowledge base for other technicians.

A. Test the theory: This step occurs early in the troubleshooting process to confirm the probable cause of an issue, before a solution is implemented.
C. Create an action plan: This is done after a theory is confirmed but before the solution is applied. The issue has already been resolved.
D. Implement the action plan: This is the step where the fix is applied. The question states the issue is already resolved, so this step is complete.

1. Purdue University Information Technology. (n.d.). ITaP Troubleshooting Methodology. This document outlines the seven steps of the troubleshooting methodology used by Purdue's IT department, which aligns with the CompTIA framework. Step 7, the final step after verifying the solution, is "Document findings, actions, and outcomes." Retrieved from Purdue University IT documentation. (Specific internal document, but the methodology is standard and publicly referenced in university IT training).

2. University of Washington, UW-IT. (n.d.). A General Strategy for Troubleshooting. This guide details a systematic approach to problem-solving. The final phase discussed is "Follow-up," which includes documenting the solution to help others and prevent future occurrences. This corresponds directly to documenting findings after a resolution.

3. Valacich, J. S., & George, J. F. (2020). Modern Systems Analysis and Design (9th ed.). Pearson. In Chapter 12, "Maintaining Information Systems," the text describes the corrective maintenance process, which concludes with documenting all actions taken to resolve an issue in a system's log or knowledge base after the fix has been verified. (Section: The Maintenance Process).

Process management is a fundamental function of an operating system (OS) that involves the creation, scheduling, and termination of processes (running programs). A critical component of process management is the scheduler, which determines which process gets to use the CPU and for how long. The scheduler uses algorithms, often based on priority levels, to manage the allocation of system resources like CPU time among all competing processes. This ensures that critical system tasks and high-priority applications receive the necessary resources to run efficiently.

A. Application management is a broader concept involving the installation, updating, and removal of software, not the real-time prioritization of resource allocation for running programs.
C. Access management pertains to security, controlling which users or processes have permission to access specific files or system resources, not the order or priority of their execution.
D. Device management involves the OS interacting with hardware components through drivers. It manages hardware access, not the prioritization of which application process gets CPU time.

1. Silberschatz

A.

Galvin

P. B.

& Gagne

G. (2018). Operating System Concepts (10th ed.). Wiley. In Chapter 3

"Processes

" the text establishes that managing processes is a primary responsibility of the OS. Chapter 5

"CPU Scheduling

" details how the OS scheduler

a key part of process management

selects a process to run and allocates the CPU to it

often using priority scheduling (Section 5.3.4).

2. Arpaci-Dusseau

R. H.

& Arpaci-Dusseau

A. C. (2018). Operating Systems: Three Easy Pieces. Arpaci-Dusseau Books. Chapter 7

"Scheduling: Introduction

" Section 7.2

explicitly states that the scheduler is the part of the OS that decides which of the ready processes to run on the CPU

a core function of managing processes.

3. Stallings

W. (2018). Operating Systems: Internals and Design Principles (9th ed.). Pearson. Chapter 9

"Uniprocessor Scheduling

" Section 9.1

"Types of Processor Scheduling

" describes scheduling as a fundamental OS function that manages which process is running on the processor at any given time

directly linking resource prioritization to process management.

A touch screen is a hybrid peripheral that combines the functions of both an input and an output device. It serves as an output device by presenting visual information to the user, just like a standard monitor. Concurrently, it acts as an input device by detecting the location of a user's touch on its surface, allowing for direct manipulation of on-screen elements and data entry. This dual capability is fundamental to its design and purpose in modern computing devices.

A. Storage: This is the function of components like hard disk drives (HDDs) or solid-state drives (SSDs), not the screen.
D. Networking: Connectivity is managed by network interface controllers (NICs), such as Wi-Fi or Ethernet adapters.
E. Processing: The central processing unit (CPU) and graphics processing unit (GPU) are responsible for executing instructions and computations.
F. Logging: This is a software function that records system events; the screen may display logs but does not perform the logging itself.

1. Patterson

D. A.

& Hennessy

J. L. (2017). Computer Organization and Design RISC-V Edition: The Hardware Software Interface. Morgan Kaufmann. In Chapter 1

Section 1.3

"Under the Covers

" the authors describe the five classic components of a computer

including input and output. A touch screen is explicitly categorized as a device that serves both functions: "The screen is not only an output device; it is also an input device" (p. 10).

2. Buxton

W. (1990). "A Three-State Model of Graphical Input." In D. Diaper et al. (Eds.)

Human-Computer Interaction - INTERACT '90 (pp. 449-456). Elsevier Science Publishers B.V. This foundational academic paper on human-computer interaction discusses input technologies

where touch screens are implicitly treated as integrated input/output systems for direct manipulation

contrasting with indirect input devices like a mouse that are separate from the display (output).

3. University of California

Berkeley. (2019). CS 61C: Great Ideas in Computer Architecture (Machine Structures)

Lecture 1: Introduction. In introductory lectures on computer architecture

peripherals are classified by function. The touch screen is a canonical example of a device that belongs to both the input and output categories. (See slide decks for "Five Components of a Computer").