Q1. A small business owner wants to deploy a new accounting application across 50 Windows 10 workstations. The application requires specific .NET Framework versions and has a custom configuration file that needs to be identical on all machines. The owner wants the most efficient method to ensure all workstations have the application installed with the correct settings simultaneously, minimizing manual intervention. Which Core 2: Operating Systems feature should be leveraged?
-
Scheduled Tasks
-
Disk Cleanup Utility
-
Group Policy Object (GPO) ✓ Correct
-
System Restore
Why: Group Policy Objects (GPOs) are the most effective tool for deploying software, managing configurations, and ensuring consistency across multiple Windows machines in a domain environment. They allow for centralized management of application installations and settings. Scheduled Tasks are for running specific programs at set times and are not designed for mass application deployment. The Disk Cleanup Utility is for freeing up disk space, and System Restore is for reverting system changes, neither of which are relevant to software deployment or configuration.
Q2. A system administrator is tasked with hardening a Windows Server 2022 machine that will host a critical database. The primary security concern is to prevent unauthorized access to the server's file system and restrict user privileges to only what is absolutely necessary for the database operations. Which of the following Core 2: Operating Systems configuration methods is MOST appropriate for achieving this granular control?
-
User Account Control (UAC) settings
-
File and Printer Sharing settings
-
Local Security Policy (LSP) and NTFS permissions ✓ Correct
-
Windows Firewall advanced settings
Why: Local Security Policy allows for fine-grained control over user rights assignments and security settings, while NTFS permissions provide granular control over access to files and folders. Together, these are the primary tools for hardening an operating system by restricting user privileges and protecting resources. User Account Control (UAC) is a security feature that helps prevent unauthorized changes but does not offer the same level of granular permission control over files as NTFS. File and Printer Sharing settings control network resource access, and Windows Firewall settings control network traffic, neither of which directly addresses file system access restrictions on the local machine.
Q3. A user is experiencing frequent application crashes on their Windows 11 workstation. They suspect that a recently installed third-party utility might be the cause. The user wants to revert the system to a state before the utility was installed to resolve the issue, without affecting their personal files. Which Core 2: Operating Systems recovery feature is BEST suited for this task?
-
Startup Repair
-
System Restore ✓ Correct
-
Windows Memory Diagnostic
-
File History
Why: System Restore allows users to revert their computer's system files, installed applications, and Windows registry to a previous point in time, effectively undoing recent system changes without impacting personal files. Startup Repair is designed to fix issues that prevent Windows from loading. Windows Memory Diagnostic is used to test the system's RAM for errors. File History is a backup feature for personal files, not system configurations.
Q4. A developer is setting up a new Linux workstation for software development. They need to install several development tools and libraries, and they want to ensure that these packages are managed efficiently and that dependencies are resolved automatically. They also want to be able to easily update and remove software. Which Core 2: Operating Systems package management tool is MOST appropriate for this scenario?
-
System Configuration (msconfig)
-
Task Scheduler
-
APT (Advanced Package Tool) or YUM (Yellowdog Updater, Modified) ✓ Correct
-
Registry Editor (regedit)
Why: APT (commonly used in Debian/Ubuntu) and YUM/DNF (commonly used in Fedora/CentOS/RHEL) are powerful package management systems designed to handle the installation, update, and removal of software, including automatic dependency resolution. System Configuration (msconfig) is used to manage startup programs and system services in Windows. Task Scheduler is for automating tasks at specific times. Registry Editor is a Windows tool for viewing and modifying the system registry, which is not a package management tool.
Q5. A company is experiencing an issue where certain user accounts on a Windows domain are intermittently unable to log in. The IT administrator suspects that the user profiles on the affected workstations might be corrupted. To address this, the administrator needs to create a new, clean profile for the affected users to test if this resolves the login issue, without immediately migrating all their old data. Which Core 2: Operating Systems process allows for the creation of a temporary or new user profile for testing purposes?
-
Running Disk Cleanup
-
Creating a new local user account ✓ Correct
-
Using the User Profile Wizard
-
Disabling User Account Control (UAC)
Why: Creating a new local user account on the affected workstation will generate a fresh user profile. If the login issue is resolved with this new profile, it strongly indicates that the original user profile was corrupted. The User Profile Wizard is a tool for migrating user profiles, not for creating new ones for testing. Disk Cleanup is for freeing up disk space, and disabling UAC affects security prompts, neither of which are directly related to creating a new user profile for troubleshooting.
Q6. A network administrator is configuring a new Windows Server 2022 machine that will act as a file server for a small office. The administrator needs to restrict access to specific folders, ensuring that only members of the 'Marketing' group can read files and members of the 'Sales' group can read and write files, while all other users have no access. Which Core 2: Operating Systems security feature should the administrator MOST effectively use to implement these restrictions?
-
Share Permissions
-
NTFS Permissions ✓ Correct
-
User Account Control (UAC)
-
Windows Firewall
Why: NTFS permissions provide granular control over file and folder access at the file system level, allowing administrators to define specific read, write, and modify permissions for individual users or groups. Share permissions control access to shared folders over the network, but NTFS permissions are more granular and take precedence when both are applied. User Account Control (UAC) manages user privilege elevation prompts, and Windows Firewall controls network traffic, neither of which directly manage file-level access permissions.
Q7. A user reports that their Windows 10 computer is running very slowly. They mention that it takes a long time for applications to open and that the system frequently becomes unresponsive. The user has confirmed that their internet connection is stable and that no single application is consuming excessive CPU or RAM resources. The administrator suspects that disk fragmentation might be contributing to the performance degradation. Which Core 2: Operating Systems tool should be used to analyze and optimize the disk drive?
-
Event Viewer
-
Task Manager
-
Disk Defragmenter ✓ Correct
-
Resource Monitor
Why: Disk Defragmenter is a utility within Windows designed to reorganize fragmented files on a hard disk drive (HDD), which can improve read/write speeds and overall system performance. Event Viewer logs system events and errors, Task Manager displays running processes and resource usage, and Resource Monitor provides detailed real-time system performance information, but none of these tools directly perform disk defragmentation. While checking these tools might be part of a broader investigation, Disk Defragmenter is the specific tool for addressing fragmentation.
Q8. A cybersecurity analyst is preparing to deploy several new workstations for employees in a sensitive department. To ensure a strong security posture from the outset, the analyst wants to configure the operating system to enforce strict password policies, limit the installation of unauthorized software, and restrict access to certain system utilities. Which Core 2: Operating Systems configuration framework is BEST suited for centrally managing and enforcing these security settings across multiple workstations?
-
Registry Editor
-
Services.msc
-
Group Policy Object (GPO) ✓ Correct
-
Command Prompt
Why: Group Policy Objects (GPOs) are a fundamental feature of Windows operating systems (particularly in domain environments) for centrally managing and enforcing security configurations, user rights, software restrictions, and system policies across multiple computers. The Registry Editor allows direct modification of registry keys but is less scalable and more prone to error for complex policy enforcement. Services.msc manages running services, and the Command Prompt is an interface for executing commands, neither of which are primary tools for deploying and enforcing system-wide security policies.
Q9. A technician is preparing to upgrade 40 workstations from Windows 10 to Windows 11. Before deploying, they need to confirm each machine meets the firmware-level security requirement enforced by the installer. Which OS-level check should the technician run to verify this specific requirement is satisfied?
-
Confirm TPM 2.0 is present and enabled via tpm.msc ✓ Correct
-
Verify the drive is formatted as FAT32 in Disk Management
-
Check that the pagefile is set to system-managed size
-
Ensure the workstation is joined to a workgroup rather than a domain
Why: Windows 11 requires a TPM 2.0 module, and tpm.msc is the built-in management console that reports the chip's presence, version, and status. FAT32 is wrong because Windows 11 requires an NTFS system partition and GPT/UEFI, not FAT32. Pagefile configuration has no bearing on Windows 11 hardware eligibility. Domain versus workgroup membership does not affect whether the upgrade requirements are met, so those distractors do not address the firmware security check.
Q10. An administrator must apply an identical set of local security policy settings, service configurations, and registry tweaks to 25 standalone Windows 11 Pro workstations that are NOT part of a domain. They want a repeatable, scriptable method rather than clicking through each GUI. Which approach is BEST suited to this non-domain environment?
-
Export and import Local Group Policy using LGPO.exe combined with a PowerShell configuration script ✓ Correct
-
Create a domain Group Policy Object and link it to an organizational unit
-
Manually configure secpol.msc on each machine and document the steps
-
Use Active Directory Users and Computers to push settings to each host
Why: LGPO.exe lets you export a baseline local policy and import it repeatably on standalone machines, and PowerShell handles the registry and service portions in a scriptable way. A domain GPO and Active Directory Users and Computers both require the machines to be domain-joined, which the scenario explicitly rules out. Manually running secpol.msc on each host is neither repeatable nor scriptable and is prone to inconsistency across 25 machines, so it fails the stated requirement.