TRYHACKME SEC1
PRACTICE TEST EXAM
PREP 70 QUESTIONS
Question 1: Which Windows built-in tool is designed to review system, security, and application event logs?
Choices:
1) Event Viewer 2) Task Scheduler 3) Registry Editor 4) Device Manager
Correct Answer: Event Viewer
Explanation: Event Viewer provides access to Windows event logs, including Security, System, and Application logs used for administration and incident investigation.Page 1
Question 2: In PowerShell, which cmdlet is used to list currently running processes?
Choices:
1) Get-Service 2) Get-Process 3) Get-Item 4) Get-ComputerInfo
Correct Answer: Get-Process
Explanation: Get-Process returns information about active processes. Get-Service lists services rather than processes.Question 3: A Windows user needs temporary administrative rights to run a trusted system task. Which principle should guide the access granted?
Choices:
1) Always grant permanent local administrator membership 2) Disable User Account Control �rst 3) Grant only the minimum privileges required for the task 4) Share an administrator password with the user
Correct Answer: Grant only the minimum privileges required for the task
Explanation: The principle of least privilege requires granting only the permissions necessary to complete the task and avoiding broader or permanent administrative access.Page 2
Question 4: A Windows workstation is joined to an Active Directory domain. What is the main role of a domain controller?
Choices:
1) Provide only local printer drivers 2) Replace all endpoint �rewalls 3) Act only as a DNS caching server 4) Centralize authentication and directory services
Correct Answer: Centralize authentication and directory services
Explanation: A domain controller hosts Active Directory Domain Services and centrally handles authentication, authorization, and directory information for domain resources.Question 5: A Windows service is con�gured to start automatically at boot. From a security perspective, why should unnecessary services be disabled?
Choices:
1) They increase the attack surface and consume resources 2) They always corrupt the registry 3) They prevent security updates 4) They disable NTFS permissions
Correct Answer: They increase the attack surface and consume resources
Explanation: Every enabled service can introduce additional code, listening interfaces, or privileges. Disabling unneeded services reduces attack surface and unnecessary resource use.Page 3