1. A developer is designing a program where several variables, such as 'username', 'password', and 'email', need to be declared. Which of the following is an example of good practice for naming these variables to improve code readability?
Software Development Concepts
A.Using names that start with numbers, like '1user', '2pass'.
B.Using descriptive names like 'username', 'password', 'email'.
C.Using short, cryptic names like 'u', 'p', 'e'.
D.Using all uppercase letters for all variables, like 'USERNAME', 'PASSWORD'.
Show answerAnswer
B. Using descriptive names like 'username', 'password', 'email'.
Descriptive variable names significantly enhance code readability and maintainability. Names like 'username', 'password', and 'email' clearly indicate the purpose of each variable, making the code easier to understand for anyone reading it.
2. A developer is creating a program to simulate a simple traffic light. The program needs to cycle through 'Red', 'Yellow', and 'Green' states repeatedly. Which control structure is most appropriate for ensuring this continuous cycle?
Software Development Concepts
A.If-else statement
B.Infinite loop
C.For loop
D.Do-while loop
Show answerAnswer
B. Infinite loop
An infinite loop (often implemented using a 'while True' or 'for ;;' construct) is specifically designed to run indefinitely or until explicitly broken. This is ideal for processes that need to run continuously, like a traffic light cycle in a simulation, without a predefined end condition.
3. A developer is writing a program that needs to store a user's chosen difficulty level for a game, which can be 'Easy', 'Medium', or 'Hard'. Which of the following data types would be most appropriate for this variable?
Software Development Concepts
A.Boolean
B.Integer
C.String
D.Float
Show answerAnswer
C. String
The difficulty levels 'Easy', 'Medium', and 'Hard' are textual values. The String data type is used to store sequences of characters, which is perfect for these descriptive labels.
4. An employee working remotely needs to securely access internal company resources over the public internet as if directly connected to the corporate LAN, with all traffic encrypted in transit. Which technology should the employee use?
Infrastructure
A.NAT
B.VPN
C.DNS
D.DHCP
Show answerAnswer
B. VPN
A VPN (Virtual Private Network) creates an encrypted tunnel over a public network like the internet, allowing remote users to securely access internal resources as though they were on the local network. NAT translates addresses, DNS resolves names, and DHCP assigns addresses—none provide encrypted remote access.
5. A user is attempting to install a new application on their macOS computer. During the installation process, a message appears stating, 'This application cannot be opened because it is from an unidentified developer.' What is the MOST appropriate action for the user to take to proceed with the installation?
Applications and Software
A.Run the Terminal command 'sudo spctl --master-disable' to permanently disable security checks.
B.Drag the application directly to the Applications folder without running the installer.
C.Disable Gatekeeper temporarily in System Settings to allow the installation.
D.Right-click (or Control-click) the application icon and select 'Open' from the contextual menu.
Show answerAnswer
D. Right-click (or Control-click) the application icon and select 'Open' from the contextual menu.
macOS's Gatekeeper feature prevents applications from unidentified developers from running by default. The standard and safest way to bypass this for a trusted application is to right-click (or Control-click) the application, select 'Open,' and then confirm in the dialog box.
6. A developer is creating a web application that needs to securely transmit sensitive user data, such as login credentials and financial information, between the client's browser and the server. Which protocol is essential for ensuring this secure communication?
Applications and Software
A.FTP
B.HTTPS
C.HTTP
D.SMTP
Show answerAnswer
B. HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP. It uses SSL/TLS encryption to protect data in transit, making it essential for transmitting sensitive information securely over the internet. HTTP, FTP, and SMTP do not provide inherent encryption for data in transit.
7. A user reports receiving numerous unsolicited emails advertising questionable products and services. The user also mentions that many of these emails contain suspicious links. Which of the following best describes this type of unwanted communication?
Security
A.Malware
B.Social Engineering
C.Spam
D.Phishing
Show answerAnswer
C. Spam
Spam refers to unsolicited bulk electronic messages, often commercial in nature and sent indiscriminately. While some spam may contain malicious links, the primary characteristic is its unsolicited and often commercial nature.
8. A systems administrator is about to install an untested software update on a virtual machine. Before doing so, the administrator saves the current state of the VM so that the system can be instantly reverted if the update causes problems. Which virtualization feature is being used?
Infrastructure
A.Sandboxing
B.Clustering
C.Snapshot
D.Load balancing
Show answerAnswer
C. Snapshot
A snapshot captures the state of a virtual machine at a specific point in time, allowing an administrator to quickly revert to that state if something goes wrong, such as a failed update. Load balancing distributes traffic, sandboxing isolates code for testing without necessarily reverting state, and clustering groups servers for redundancy/performance.
9. A technician is wiring a new office and wants Ethernet cabling that supports higher speeds and less crosstalk than the older cable type currently installed. Which cable category should the technician choose for the upgrade?
Infrastructure
A.Cat5
B.Cat5e
C.Cat3
D.Cat6
Show answerAnswer
D. Cat6
Cat6 cable supports higher bandwidth (up to 10 Gbps at shorter distances) and has tighter twists that reduce crosstalk compared to Cat5e, Cat5, and Cat3. It is the best upgrade choice among the options listed.
10. A technician is designing a Products table and needs a column to store the price of each item, which may include decimal values such as 19.99. Which data type is most appropriate for this field?
Data and Database Fundamentals
A.Boolean
B.Text
C.Decimal
D.Integer
Show answerAnswer
C. Decimal
A decimal (or numeric) data type stores numbers with fractional precision, making it ideal for currency values like 19.99. Integer only stores whole numbers, Boolean stores true/false, and Text would prevent proper numeric calculations.
11. A technician is evaluating different types of non-volatile storage. They need a solution that offers the fastest possible random read/write access for small files, directly connected to the motherboard's high-speed bus. Which storage technology would be the BEST choice?
IT Concepts and Terminology
A.NVMe SSD
B.USB 3.0 External SSD
C.SAS HDD RAID array
D.SATA SSD
Show answerAnswer
A. NVMe SSD
NVMe (Non-Volatile Memory Express) SSDs connect directly to the motherboard's PCIe bus, which offers significantly higher bandwidth and lower latency than the SATA interface used by traditional SSDs. This makes NVMe the best choice for the fastest random read/write access, especially for small files and demanding applications.
12. A security analyst is investigating a suspected data breach where sensitive customer information may have been compromised. The analyst needs to review records of who accessed the application, what actions they performed, and when those actions took place. Which security control would provide this crucial information?
Security
A.Encryption keys
B.Access logs
C.Antivirus scans
D.Firewall logs
Show answerAnswer
B. Access logs
Access logs specifically record user activity, including who accessed a system or application, what resources they accessed, and the timestamps of those actions. This information is critical for forensic analysis during a data breach investigation.
13. A security analyst is investigating a suspected data breach where sensitive customer information may have been compromised through a web application. The analyst needs to review records of who accessed the application, what actions they performed, and when those actions took place. Which security control would provide this crucial information?
Security
A.Access logs
B.Encryption keys
C.Antivirus scans
D.Firewall logs
Show answerAnswer
A. Access logs
Access logs specifically record user activity, including who accessed a system or application, what resources they accessed, and the timestamps of those actions. This information is critical for forensic analysis during a data breach investigation.
14. A technician is troubleshooting a network connectivity issue on a user's workstation. The user can access local network resources but cannot reach any external websites. The workstation has a valid IP address, subnet mask, and DNS server configured. What is the MOST likely cause of this issue?
Infrastructure
A.IP address conflict
B.Incorrect DNS server address
C.Faulty network adapter
D.Incorrect default gateway
Show answerAnswer
D. Incorrect default gateway
If a workstation can access local resources but not external ones, it indicates that local network communication is working (IP address, subnet mask are likely correct). The inability to reach external networks points to a problem with routing traffic outside the local network, which is the function of the default gateway.
15. A network engineer assigns a subnet using the CIDR notation /26. How many usable host addresses does this subnet provide?
Infrastructure
A.14
B.30
C.126
D.62
Show answerAnswer
D. 62
A /26 subnet leaves 32-26=6 host bits, giving 2^6=64 total addresses. Subtracting 2 for the network and broadcast addresses leaves 62 usable host addresses (64-2=62).
16. A technician needs to add a brand-new customer record, including name, email, and phone number, into an existing Customers table using SQL. Which statement should be used?
Data and Database Fundamentals
A.DELETE
B.UPDATE
C.SELECT
D.INSERT
Show answerAnswer
D. INSERT
The INSERT statement is used to add new rows of data into a table. The technician would use a statement like INSERT INTO Customers (Name, Email, Phone) VALUES ('Jane','jane@example.com','555-1234') to add the new record.
17. A database administrator needs to permanently remove all records from a Customers table where the Status field equals 'Inactive', without dropping the table itself. Which SQL statement should be used?
Data and Database Fundamentals
A.DROP TABLE Customers WHERE Status = 'Inactive';
B.SELECT * FROM Customers WHERE Status = 'Inactive';
C.DELETE FROM Customers WHERE Status = 'Inactive';
D.UPDATE Customers SET Status = 'Inactive';
Show answerAnswer
C. DELETE FROM Customers WHERE Status = 'Inactive';
The DELETE statement removes rows that match a WHERE condition while leaving the table structure intact. DROP TABLE removes the entire table, UPDATE changes values instead of removing rows, and SELECT only retrieves data.
18. A technician is setting up a new virtual machine (VM) on a Windows 10 host using VirtualBox. The VM needs to run a separate operating system, such as Linux. Which type of hypervisor is VirtualBox, and how does it generally operate?
Applications and Software
A.Type 1, runs within a container.
B.Type 2, runs directly on hardware.
C.Type 2, runs on a host operating system.
D.Type 1, runs directly on hardware.
Show answerAnswer
C. Type 2, runs on a host operating system.
VirtualBox is a Type 2 hypervisor, also known as a hosted hypervisor. It runs as an application on top of an existing operating system (the host OS), which then manages the virtual machines. Type 1 hypervisors run directly on the hardware.
19. A technician is troubleshooting a network connectivity issue. After verifying the physical connections, they ping a known good IP address on the local network and receive no response. Which of the following is the MOST appropriate next step in a standard troubleshooting methodology?
IT Concepts and Terminology
A.Verify full system functionality.
B.Implement a solution and test it.
C.Establish a theory of probable cause.
D.Document findings, actions, and outcomes.
Show answerAnswer
C. Establish a theory of probable cause.
After identifying the problem (no ping response) and gathering initial information (physical connections verified), the next logical step in troubleshooting is to establish a theory about why the problem is occurring.
20. A company is implementing a new policy for employee passwords. The policy states that passwords must be at least 12 characters long, contain a mix of uppercase and lowercase letters, numbers, and special characters. Additionally, employees cannot reuse any of their last 10 passwords. Which security control is being enforced by the 'cannot reuse any of their last 10 passwords' requirement?
Security
A.Password Complexity
B.Password Length
C.Password History
D.Account Lockout
Show answerAnswer
C. Password History
Password history is a security control that prevents users from reusing a set number of their previous passwords. This makes it harder for attackers to compromise accounts by guessing recently used or slightly modified old passwords.
21. A technician is configuring a new virtual machine (VM) for a critical application. The application requires dedicated and consistent performance, particularly for CPU and memory resources, and should not be affected by the resource demands of other VMs on the same physical host. Which virtualization resource allocation setting should the technician prioritize?
Infrastructure
A.Dynamic allocation
B.Resource pooling
C.Ballooning
D.Resource reservation
Show answerAnswer
D. Resource reservation
Resource reservation guarantees a specific amount of CPU, memory, or storage resources to a VM, ensuring that these resources are always available to the VM regardless of the load on the physical host or the demands of other VMs. This is crucial for critical applications requiring consistent performance.
22. A user reports that their Windows 10 computer is running extremely slow and frequently displays pop-up ads, even when a web browser is not open. The user also notices new, unfamiliar icons on their desktop. Which type of malware is MOST likely causing these symptoms?
Applications and Software
A.Spyware
B.Rootkit
C.Adware
D.Ransomware
Show answerAnswer
C. Adware
Adware is designed to display unwanted advertisements and often installs without explicit user consent, leading to pop-ups and sometimes new desktop icons. Its primary goal is to generate revenue through ads.
23. A small business owner wants a storage configuration for a file server that mirrors data across two identical drives so that if one drive fails, the data remains fully accessible from the other with no data loss. Which RAID level should be implemented?
Infrastructure
A.RAID 1
B.RAID 5
C.RAID 0
D.RAID 10
Show answerAnswer
A. RAID 1
RAID 1 mirrors data identically across two drives, providing full redundancy so that if one drive fails, the other retains a complete copy with no data loss, though total usable capacity equals only one drive. RAID 0 stripes data for performance with no redundancy, RAID 5 uses striping with parity across three or more drives, and RAID 10 combines mirroring and striping but requires at least four drives.
24. Which type of computer memory loses all of its stored data when the power is turned off?
Infrastructure
A.RAM
B.HDD
C.SSD
D.ROM
Show answerAnswer
A. RAM
RAM (Random Access Memory) is volatile memory, meaning it requires continuous power to retain data and loses its contents when power is removed. SSDs, HDDs, and ROM are non-volatile and retain data without power.
25. After implementing a new nightly backup routine, an IT administrator wants to be fully confident the backups can actually be used to recover data in an emergency. Which action should the administrator take to validate this?
Data and Database Fundamentals
A.Increase the backup retention period to one year
B.Rename the backup files to include the current date
C.Compress the backup files to save storage space
D.Periodically perform a test restore of backup data
Show answerAnswer
D. Periodically perform a test restore of backup data
Performing a test restore verifies that backup files are not corrupted and that the recovery process actually works, which is the only way to confirm backups are truly usable in a disaster. Retention period, file naming, and compression do not verify the backup's actual recoverability.
Variable naming conventions are a set of rules or guidelines for choosing identifiers for variables, functions, and other entities in code. Good conventions improve code readability, maintainability, and consistency.
An infinite loop is a control flow statement that iterates indefinitely because the loop's termination condition is never met. It is intentionally used for processes that are meant to run continuously, such as server applications or simulations.
The IP address of a router on a local network that acts as an access point to other networks, allowing devices to send and receive data outside their current subnet.
Essential for communicating with devices on different subnets or the internet.
If incorrect, local network communication works, but external communication fails.
Typically the IP address of the router on the local network.
A virtualization setting that guarantees a minimum amount of CPU, memory, or storage resources to a specific virtual machine, ensuring consistent performance regardless of host load.
Software that automatically displays or downloads unwanted advertisements, often bundled with legitimate software, leading to pop-ups and performance issues.
The process of periodically restoring data from backup files to verify that the backup is complete, uncorrupted, and usable for actual disaster recovery.
Untested backups may be corrupted or incomplete without anyone knowing
Should be performed on a regular schedule, not just after creation
Confirms both data integrity and the recovery procedure work as expected
Questions are original practice items written to match the published exam objectives. Step2Study is not affiliated with or endorsed by any certification body.