The correct answer is B. exFAT, because exFAT (Extended File Allocation Table) is designed to provide cross-platform compatibility between Windows and macOS while supporting large files and large storage devices. When an external hard drive must be readable and writable by both operating systems without additional drivers or configuration, exFAT is the preferred choice.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, exFAT was developed to overcome the limitations of FAT32, such as file size and volume size restrictions, while maintaining broad operating system support. Both Windows and macOS include native support for exFAT, making it ideal for removable storage devices.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that NTFS is fully supported on Windows but only has limited or read-only support on macOS by default. APFS is Apple’s proprietary filesystem and is not natively supported by Windows. XFS is a Linux filesystem and is incompatible with both Windows and macOS without third-party tools.

The Mike Meyers / Mark Soper Lab Manual reinforces that for external drives shared across platforms, exFAT offers the best balance of compatibility, performance, and simplicity.

Therefore, exFAT is the best filesystem choice, making B the correct answer.

Using many separate systems (endpoints) to attack one target is the defining characteristic of a Distributed Denial of Service (DDoS) attack. Mike Meyers’ Lab Manual defines DDoS as: “An attack on a computer or network device in which multiple computers send data and requests to the device in an attempt to overwhelm it so that it cannot perform normal operations.” That description exactly matches the scenario: many endpoints are coordinated to flood one endpoint, preventing legitimate use.

This is different from an on-path (man-in-the-middle) attack, which intercepts traffic between two parties; SQL injection, which targets databases via malicious input; and brute-force attacks, which attempt repeated authentication guesses. The key clue is multiple endpoints working together, which implies distribution (often via botnets) and service disruption by volume. That is why the correct classification is Distributed Denial of Service (D).

The correct answer is B. VNC . The key phrase is graphical interface access . VNC, or Virtual Network Computing, is a remote-control technology used to share and control graphical desktops. Quentin Docter’s Complete Study Guide explains that VNC is a remote control tool for desktop sharing, uses a client-server model, and allows remote control of the host where the VNC server is installed. The Mike Meyers/Mark Soper material also explains that SSH is excellent for command-line administrative tasks, but when full graphical desktop access is needed, a remote desktop application is required; VNC is identified as cross-platform and usable for remote graphical control. SSH provides secure command-line access, not a full graphical interface by default. WinRM is mainly a Windows remote-management technology. Telnet is an insecure text-based remote access protocol and should not be used for secure remote administration.

In emotionally sensitive situations, it is critical that the technicianprojects confidenceand maintains a calm, positive demeanor to reassure the customer.

FromAll-in-One Exam Guide:

“Confidence and empathy are key when working with distressed users. Demonstrating competence can help ease the customer ' s anxiety.”

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

When an OS is no longer receiving updates, it is generally because it has reachedend of life (EOL), meaning the vendor has ceased support.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“End-of-life refers to the point when an OS vendor no longer issues updates or support. Systems at EOL pose security risks and must be upgraded or isolated.”

Operating systems periodically reach a status known as " end of life " (EOL), at which point the developer (e.g., Microsoft, Apple) ceases to provide security updates, patches, or technical support. When this happens, the OS becomes vulnerable and non-compliant with security best practices, which is why organizations typically receive advance notifications from vendors or support teams.

A. Manufacturer support expiration only applies to hardware, not OS patching.

C. Security software may be upgraded or removed, but that does not affect patching the OS itself.

D. The release of a new version doesn’t automatically stop updates for the current version.

A Zero-day vulnerability refers to a security flaw in software or hardware that is unknown to the vendor or has not yet been patched. If this vulnerability is exploited before the vendor has issued a fix or patch, it becomes a Zero-day exploit. These attacks are highly dangerous because they take advantage of the absence of defenses due to the lack of awareness or mitigation options.

A. Spoofing is a form of impersonation, not necessarily tied to unpatched vulnerabilities.

B. Brute-force attacks rely on repeatedly guessing credentials and are not related to software flaws.

C. DoS (Denial of Service) attacks are meant to overwhelm systems and don ' t necessarily exploit unknown vulnerabilities.

Before deploying an application update broadly, best practice is to test it in an isolated environment to avoid breaking production systems. The All-in-One guide defines sandbox testing clearly: “a sandbox is a place where you can experiment without messing up the primary system,” typically a virtualized environment, and it “entails checking out new and updated applications without putting the systems and data you depend on at risk.” That directly aligns with rolling out a new application update across the organization.

Mike Meyers’ Lab Manual repeats the same concept: sandbox testing uses an isolated environment and snapshots to test changes safely before production deployment. It’s positioned as a documented business process within change-management best practices, reinforcing why it comes early—before impact spreads.

A backup/rollback plan is important too, but the question asks for the first step when applying a new update to everyone. Testing first helps identify compatibility issues, installation failures, and side effects early—so you don’t deploy a bad update at scale. Therefore, Sandbox testing (C) is correct.

Running atnear full storage capacitysignificantly slows down smartphones. iOS in particular requires space for caching and temporary files. Performance improves when storage is cleared.

FromMike Meyers ' Lab Manual:

“Lack of free space causes mobile operating systems to struggle with temp files and updates. Performance improves significantly with adequate storage.”