Linux Foundation LFCS Exam Prep
Linux Foundation Certified System Administrator (Page 4 )

• Smartphones and tablets
• Laptops and workstations
• Other mobile or endpoint computing devices

• Containment policy: controls permitted communication during containment.
• Detection/response configuration: determines when containment is initiated.

• Note the question number before leaving—for example, Question 38.
• Use the exam’s question navigator or Back/Previous button to return to that number.
• If you close or refresh the page, your position may not be saved, depending on the site. Reopen the page and select the question number again.
• Avoid using the browser’s Back button if it causes the exam page to reload; use the exam’s built-in navigation instead.

• FUNCTION (D)
• SECURITY POLICY (E)

1. Create an inline table-valued filter predicate function. It defines which rows a user may see, often by comparing a table column with the current user identity.
2. Create a security policy that applies that function to Table1. The policy filters query results automatically.

• Accept: Acknowledging the risk without taking additional action.
• Transfer: Moving the risk’s financial impact to a third party, such as an insurer.
• Mitigate: Reducing the likelihood or impact through controls, such as patching or employee training.
• Avoid: Eliminating the activity that creates the risk.

1. Open Notepad as Administrator.
2. Open:

1. Remove or correct the line mapping the website to the wrong IP address.
2. Save the file.
3. Optionally run:

cmd 
   ipconfig /flushdns

• CHAP: Uses a challenge-response exchange, so the password is not directly transmitted.
• IPsec: Provides authentication, integrity, and encryption for IP communications.
• EAP: An authentication framework that supports stronger methods, such as certificates or token-based authentication.

Statement 1 — Correct

Statement 2 — Correct

• Review the risk register.
• Check the documented risk response strategy, such as using a backup resource, reallocating work, or adjusting sequencing.
• Implement the planned response promptly.

• B: Moving the task may affect the critical path and should not be done without first evaluating the planned response and impacts.
• C: Excluding a required task would change scope and business requirements without proper analysis or approval.
• D: Updating lessons learned and the risk log may be appropriate later, but it does not address the immediate problem. First, execute the response.

• B — AWS DataSync: Transfers data between storage systems. It is not a marketplace or integration service for third-party datasets.
• C — Kinesis Data Streams and CodeCommit: CodeCommit stores source code, not third-party analytical datasets. Kinesis is for streaming data, not retrieving datasets from repositories.
• D — Kinesis Data Streams and ECR: Amazon ECR stores container images, not third-party datasets.

• Active remediation actions role in Microsoft Defender for Endpoint

• Security Reader role in Azure AD/Entra ID

• Security Administrator is broader than necessary because it grants extensive security-management permissions, violating least privilege.
• Compliance Data Administrator is intended for compliance data management, not Defender for Endpoint remediation approvals.

• On-premises resources, such as an existing database
• Cloud resources, such as Azure services or virtual machines
• Connectivity that allows the application to use both environments

• Public cloud: resources are entirely provided through a public cloud provider.
• Private cloud: resources are dedicated to one organization, typically on-premises or privately hosted.

• A. Adjust resolution: Incorrect because an incompatible resolution usually causes no display, distortion, or an unsupported-mode message—not intermittent flickering.
• B. Swap the HDMI cable: Correct. Replacing the common, easily tested component is the appropriate troubleshooting step.
• C. Replace the projector: Incorrect because the issue also occurs with a monitor.
• D. Configure refresh rate: A mismatched refresh rate can cause visual problems, but the repeated flicker across displays points more strongly to the cable.

• Incident and problem management
• Change management
• Service-level management
• Configuration management
• Continual improvement

• Kanban: A workflow and task-visualization method; useful within service teams but not a complete service-management framework.
• Lean Six Sigma: Focuses on reducing waste and process variation; broader process-improvement methodology.
• ITSM: The overall discipline of managing IT services, not a specific framework or process model.

• VPC: A logically isolated virtual network within a public cloud.
• NFV: Replaces dedicated network appliances with virtualized network functions.
• SaaS: Software delivered over the internet as a service. This application could be delivered as SaaS, but the key detail in the question is that it serves multiple user groups or tenants.

• Penetration test: Tests for exploitable vulnerabilities; it does not provide a broad opinion on whether security controls operate effectively.
• Annual self-assessment: Not independent, so it provides less assurance.
• Allow each client the right to audit: Inefficient because every customer may conduct a separate audit, creating duplicated effort and disruption.

• Physical: Protects facilities or equipment, such as locks and security cameras.
• Technical: Uses technology, such as firewalls, encryption, or access controls.
• Operational: Covers day-to-day actions and processes, such as training, backups, or incident response.
• Managerial: Includes policies, standards, risk assessments, and procedures.

• The product is already in production.
• The organization is examining the product’s functions and cost drivers.
• The objective is to reduce cost without reducing perceived value or required quality.

• Kaizen costing focuses on continuous, usually incremental, cost reductions during the manufacturing stage. It is not specifically the systematic examination of a product’s functions.
• Standard costing compares actual costs with predetermined standards; it is a control technique, not a product redesign method.
• Process innovation concerns developing significantly improved production processes, rather than analysing the product’s functions and value.

• A — Tables
• B — Named file formats
• C — Schemas
• E — Databases

Why these are correct

• Tables: Can be cloned using CREATE TABLE ... CLONE. The clone initially uses zero-copy cloning, so storage is shared until changes are made.
• Named file formats: Can be cloned as database objects, preserving the file-format definition.
• Schemas: A schema and its eligible objects can be cloned.
• Databases: A database and its eligible schemas and objects can be cloned.

Why the others are incorrect

• Shares: A share is an account-level data-sharing object, not a normal cloneable database object.
• Users: Users are security principals and cannot be cloned with CLONE.

1. Install a Cassandra-compatible ODBC driver.
2. Configure a data source name (DSN), if required.
3. In Power BI Desktop, select Get Data > ODBC.
4. Choose the configured DSN and connect.

• Microsoft SQL Server database: Connects to SQL Server, not Cassandra.
• OLE DB: Requires a compatible OLE DB provider; this is not the standard choice for Cassandra in Power BI.
• OData: Requires Cassandra data to be exposed through an OData service, which is not the normal direct connection method.

• A is correct: It establishes the revised dates and identifies the effect on the critical path.
• B is premature: Stakeholders should be informed after the impact has been assessed and the updated schedule is understood.
• C is not automatically appropriate: Fast-tracking may introduce additional risk and should be considered only after analyzing schedule options.
• D is premature: Adding resources may not resolve a dependency and could increase costs without addressing the actual constraint.

• B. Deploy to a SageMaker endpoint: This is needed for SageMaker-hosted models, not for a model intended to be used directly in Amazon Bedrock.
• C. Register with SageMaker Model Registry: SageMaker Model Registry is unrelated to invoking custom models in Bedrock.
• D. Grant access in Bedrock: Access permissions may be necessary, but they do not replace the required provisioned capacity.

• Link connects
• Link drops
• Link reconnects
• The cycle repeats

• Failing switch port or network interface
• Damaged cable or loose connector
• Speed/duplex mismatch
• Power or hardware problems
• Spanning Tree configuration issues

• Behavioral and anomaly detection
• Threat intelligence integration
• User and entity behavior analytics
• Automated response actions, often through SOAR integration

• Virus signatures: Associated primarily with antivirus or endpoint protection.
• Security agent deployment: Usually an endpoint-management or EDR function.
• Vulnerability scanning: Typically performed by vulnerability-management tools, though a SIEM may integrate their results.

• A — Consumption-based pricing: AWS generally uses a pay-as-you-go model. You pay for the resources you consume rather than purchasing hardware upfront or paying for unused capacity.
• C — Economies of scale: AWS purchases and operates infrastructure at a very large scale, allowing it to reduce costs and pass some savings to customers through lower service prices.

• Perpetual licenses: These involve paying once for permanent software ownership and are not a primary AWS Cloud economic benefit.
• AWS Enterprise Support at no additional cost: Enterprise Support has an additional charge.
• Bring-your-own-hardware model: AWS provides and manages the underlying cloud infrastructure; customers do not normally bring their own physical servers.

• True positive: The scan reports a vulnerability that really exists.
• False positive: The scan reports a vulnerability that does not exist.
• True negative: The scan correctly reports no vulnerability.
• False negative: The scan fails to detect a vulnerability that is actually present.

• No servers or database infrastructure to provision.
• Uses standard SQL.
• Supports formats such as JSON, CSV, Parquet, and ORC.
• You typically define the table structure with AWS Glue Data Catalog or Athena’s own schema definitions.
• Charges are generally based on the amount of data scanned, so partitioning and columnar formats can reduce cost.
• It does not copy the data into a separate database; it reads the files in S3 when you run a query.

• Honeypots are deliberately vulnerable or attractive systems designed to lure attackers. Legitimate users should not normally access them, so activity there can indicate a successful intrusion or lateral movement.

• A DNS sinkhole redirects requests for known malicious domains to a controlled internal system instead of the real destination. Security teams can monitor those requests and identify compromised devices attempting to contact command-and-control infrastructure.

• Tokenization: Replaces sensitive data with non-sensitive tokens; it is a protection method, not an attacker-detection method.
• CI/CD: Automates software development and deployment processes.
• Threat modeling: Identifies potential threats during design and planning.
• Data obfuscation: Makes information harder to understand, but does not directly detect infiltrators.

• ??????? ?? ??????? ????? ?? ???? Discount ????? ????? ??? 0.05.
• ?? Power Query Editor? ???? ???? Discount ?? ????:

• ???? ?????? 0.05.

• Remove Errors: ???? ?????? ???? ????? ??? ?????? ???? ????? ??? ???????? ??? ??????.
• Keep Errors: ????? ??? ??????? ???? ??? ?????? ???? ??? ???????.
• Edit the query in the Query Errors group: ???? ?? ???? ????????? ???????? ???? ?? ?????? ??? ????? ???? ???????? ???????.

• The backup file is complete and uncorrupted.
• The required data can actually be recovered.
• The recovery process and documentation work as expected.
• Recovery objectives, such as acceptable downtime, can be met.

• Backup logs may show that a job completed, but not that the backup is usable.
• File size does not prove the contents are valid.
• Email notifications may confirm process completion, not recoverability.
• Appointing a DBA does not itself validate backups.

• A — Technical review by business owner: A business owner may approve the business impact, but a technical review is normally performed by technical personnel.
• C — Cost-benefit analysis after implementation: Cost-benefit analysis should occur before implementation to support the approval decision.
• D — Business continuity testing: This can be appropriate for major changes, but it is primarily part of business continuity and disaster recovery planning—not a universal change-management activity.

• desktopwidth:i:1280
• desktopheight:i:1024

• Connection information: Controls connection-related settings, not the desktop resolution.
• Scaling plan: Controls when session hosts start, stop, or scale based on demand.
• Session behaviour: Controls behavior such as disconnect or logoff handling.
• Display settings: Specifically controls RDP display properties, making it the appropriate choice.

• Allow only approved MAC addresses
• Limit the number of learned addresses
• Shut down or restrict a port when a violation occurs

• Load balancer: Distributes application traffic; it does not protect switch MAC tables.
• IPS: May detect some attack traffic, but it is not the direct control for limiting MAC addresses on switch ports.
• NGFW: Filters routed network traffic, while this attack targets Layer 2 switch behavior.

• Free: Doesn’t support the required custom domain and SSL configuration.
• Shared: Doesn’t provide the required SSL support or scalability.
• Basic: Supports multiple instances and SSL, but its storage limit is insufficient for the required 12 GB.
• Standard: Supports:

• Due diligence: Investigating and evaluating a third party before entering into or continuing a business relationship.
• Attestation: An independent party provides assurance about an organization’s claims or controls. A SOC 2 examination is an example of an attestation engagement, but the analyst requesting and reviewing the report is performing due diligence.
• Internal audit: Reviews the organization’s own internal controls.
• Penetration testing: Actively tests systems for exploitable vulnerabilities.

• Response and resolution time frames
• Availability or uptime requirements
• Performance targets
• Support obligations
• Penalties for failing to meet requirements

• SOW (Statement of Work): Defines the project’s scope, tasks, and deliverables.
• MOA (Memorandum of Agreement): Describes cooperation and responsibilities between parties.
• MOU (Memorandum of Understanding): Records a general mutual understanding, usually without detailed enforceable service targets.

• Review administrative-role membership ? PIM access reviews
• Require justification for continued membership ? PIM can require justification when activating or maintaining privileged access
• Alerts about administrator assignment changes ? PIM alerts and notifications
• History of administrator activation ? PIM audit history
• See changes made to Azure resources ? PIM activation/audit information can be correlated with Azure Activity Logs

1. x = -100
2. -100 < x < 100
3. 100 = x < 1000
4. x = 1000

• -500 ? class 1
• 0 ? class 2
• 100 ? class 3
• 1000 ? class 4

• The requirement is an assessment of the Azure environment’s design, which requires a support plan offering proactive architectural guidance.
• Premier support would provide this capability, but it is a high-cost option.
• Since the requirement says to minimize expenses, Premier is not the best recommendation.
• A lower-cost plan with the required advisory/design-review capability—historically Professional Direct in Azure’s support-plan model—would be more appropriate.

• Deterrent control: The signs warn people they may be filmed. This can discourage unauthorized activity because individuals know surveillance is present.
• Detective control: CCTV monitors and records activity, helping identify or investigate incidents after—or while—they occur.

• Preventive: Stops an incident from occurring; CCTV generally does not physically prevent access.
• Corrective: Restores systems after an incident.
• Directive: Tells people what they must do, such as a security policy.
• Compensating: An alternative control used when the preferred control cannot be implemented.

• Third-party attestation: Provides independent confirmation, often for formal compliance reporting, but is not usually performed frequently.
• Penetration testing: Attempts to exploit vulnerabilities; it focuses on technical security, not overall compliance procedures.
• Vulnerability scans: Identify known technical weaknesses in systems, but do not evaluate whether policies and processes meet compliance requirements.

• SAML (Security Assertion Markup Language): Commonly used for enterprise SSO between an identity provider and cloud applications. It sends signed authentication assertions to the service provider.
• RADIUS: Primarily used for centralized authentication to network devices, VPNs, and wireless networks.
• EAP: An authentication framework commonly used with network access technologies; it is not typically the SSO protocol for SaaS applications.
• OpenID: Related to identity authentication, but traditional enterprise SSO questions involving cloud applications generally expect SAML. OpenID Connect is a newer authentication layer built on OAuth 2.0.

• Maximum response and resolution times
• Expected uptime or availability
• Performance requirements
• Escalation procedures
• Consequences for failing to meet requirements

• SOW: Defines a project’s scope, tasks, deliverables, and schedule.
• MOA: Documents specific responsibilities agreed upon by two parties.
• MOU: Records a general understanding or intent to cooperate.

• Espionage: Stealing information, usually for competitive or political purposes.
• Data exfiltration: Unauthorized removal or transfer of data.
• Nation-state attack: An attack sponsored or conducted by a government.
• Shadow IT: Unapproved technology or access methods used by employees.

• Suporta domínios personalizados.
• Oferece 50 GB de armazenamento — suficiente para os 10 GB de cada aplicação.
• Usa instâncias de computação dedicadas.
• Inclui balanceamento de carga entre instâncias.
• É o plano mais econômico entre as opções que atendem a todos esses requisitos.

1. CALCULATE
2. AND
3. FILTER

DAX 
Transaction Category = 
CALCULATE( 
    MAX('Transaction Size'[Size]), 
    FILTER( 
        'Transaction Size', 
        AND( 
            Sales[Sales Amount] >= 'Transaction Size'[Minimum], 
            Sales[Sales Amount] <= 'Transaction Size'[Maximum] 
        ) 
    ) 
)

• FILTER examines the rows in the Transaction Size table.
• AND ensures the sales amount falls between the category’s minimum and maximum values.
• CALCULATE evaluates the result in the modified filter context and returns the matching category.