A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was extracted. Which of the following incident response procedures is best suited to restore the server?
A. Wipe the storage, reinstall the OS from original media and restore the data from the last known good backup. B. Keep the data partition, restore the OS from the most current backup and run a full system antivirus scan. C. Format the storage and reinstall both the OS and the data from the most current backup. D. Erase the storage, reinstall the OS from most current backup and only restore the data that was not compromised.
Answer: A
Explanation: Rootkits are software programs that have the ability to hide certain things from the operating system. With a rootkit, there may be a number of processes running on a system that do not show up in Task Manager or connections established or available that do not appear in a netstat display—the rootkit masks the presence of these items. The rootkit is able to do this by manipulating function calls to the operating system and filtering out information that would normally appear. Theoretically, rootkits could hide anywhere that there is enough memory to reside: video cards, PCI cards, and the like. The best way to handle this situation is to wipe the server and reinstall the operating system with the original installation disks and then restore the extracted data from your last known good backup. This way you can eradicate the rootkit and restore the data.
A technician is trying to diagnose a laptop that is experiencing heavy artifact corruption and random loss of video during operation. Which of the following are MOST likely causes of this problem? (Select TWO).
A. Integrated system video chip is failing and/or near death. B. Video drivers were not installed directly from Microsoft update. C. Incompatible or untested video drivers have been installed. D. The BIOS is not set for the proper operation temperature of the video chipset. E. The BIOS is underclocking the video cards operating speed.
Emily, a technician, is tasked with building a workstation that can host multiple virtual environments. Which of the following is the MOST important component for this type of build?
A. Specialized audio and video cards B. HTPC compact form factor C. High-end cooling D. Dual monitors E. Multiple CPU cores
When designing a gaming computer based upon dual video cards, which of the following two components will need to be chosen to specifically support a dual video adapter configuration? (Select TWO).
A. DDR Memory B. Dual Channel Memory C. Power supply D. RAID 5 configuration E. Motherboard
A technician is building a gaming PC for a user. The user wants to dual boot between Windows XP 32-bit and a 64-bit version of Windows 7 as some of the games require XP. The user requests the following specifications: 64-bit i7 processor (consisting of 6 cores @ 3.0GHz),16 GB of RAM (consisting of two 8 GB modules), One 200 GB SSD, RAID 1 (consisting of two 1TB SATA Drives), Two 2 GB SLI Video Cards. Which of the following components should the technician warn the user will be reported differently depending on the operating system that is currently booted?
A. RAID B. RAM C. Processor D. SSD Drive E. Video Card
A corporate technician has been tasked with providing a thin client PC for a new employee. Which of the following configurations would be the MOST appropriate?
A. A PC with the maximum amount of supported RAM B. A PC equipped with high end audio and video cards C. A PC that meets the minimum requirements for running an OS D. A PC with the most powerful processor
Correct Answer: C
Explanation: A thin client is a bare minimum box of components that is used for simple tasks. A PC with minimum requirements to run an OS can act as a thin client.