CPA Isc Quiz: Identify Components Of It Infrastructure

What this quiz covers

This quiz focuses on Identify Components Of It Infrastructure, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA Isc.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. A web application firewall that filters malicious web requests before they reach applications
2. A directory service that centrally manages user identities, groups, and authentication policies (correct answer)
3. A tape drive that archives monthly reports for long-term storage
4. A legacy token-ring network that improves throughput for modern cloud applications

Explanation: This question tests understanding of identity and access management components in IT infrastructure. The scenario requires centralized management of user accounts and group memberships to support access governance and timely deprovisioning across multiple systems. A directory service (B) like Active Directory or LDAP provides this centralized identity management, storing user accounts, groups, and authentication policies in a hierarchical database that multiple systems can query. Web application firewalls (A) filter malicious web traffic but don't manage user identities. Tape drives (C) provide archival storage without identity management capabilities. Token-ring networks (D) are obsolete LAN technologies unrelated to modern cloud applications or identity management. When evaluating access governance requirements, identify components that centralize identity lifecycle management and provide single-source-of-truth for user authentication and authorization across enterprise systems.

Question 2

1. A dynamic host configuration protocol (DHCP) server that automatically assigns IP addresses and network parameters to devices (correct answer)
2. A database server that stores user passwords in plain text for easy retrieval
3. A legacy infrared file transfer device that replaces wired networking
4. A physical lock on the server room door that prevents network misconfiguration

Explanation: This question tests knowledge of network infrastructure services, specifically automatic IP address management. The scenario requires centralized assignment of IP addresses and network parameters to reduce configuration errors and support IT operations standards. A DHCP server (A) provides this service by automatically assigning IP addresses, subnet masks, default gateways, and DNS servers to devices when they connect to the network, eliminating manual configuration. Database servers storing passwords in plain text (B) represent poor security practice unrelated to IP management. Infrared file transfer devices (C) are obsolete short-range technologies that don't replace networking. Physical locks (D) secure facilities but don't configure network settings. For network administration efficiency, identify DHCP as the standard protocol for automatic network configuration, reducing errors and administrative overhead.

Question 3

1. Server virtualization that consolidates workloads onto fewer physical servers and enables faster provisioning of new systems (correct answer)
2. Manual re-entry of data into multiple systems to reduce integration complexity
3. Use of dial-up networking to limit bandwidth and reduce server load
4. Disabling system logs to improve performance by eliminating audit trails

Explanation: This question tests understanding of how virtualization technology improves IT efficiency. The scenario describes underutilized physical servers that management wants to consolidate while maintaining workload controls. Server virtualization (A) directly improves efficiency by consolidating multiple workloads onto fewer physical servers, increasing hardware utilization from typical 15-20% to 60-80%, while enabling rapid provisioning through template-based deployment. Manual data re-entry (B) increases errors and labor without improving infrastructure efficiency. Dial-up networking (C) severely limits bandwidth and would decrease efficiency. Disabling system logs (D) eliminates audit trails required for compliance and troubleshooting. When evaluating IT efficiency improvements, recognize server virtualization as a transformative technology that reduces hardware costs, power consumption, and administrative overhead while improving agility.

Question 4

1. An endpoint patch management system that deploys approved updates and reports compliance across devices (correct answer)
2. A network hub that distributes software updates by broadcasting them to all devices
3. A legacy floppy disk distribution process for monthly operating system updates
4. A document retention policy that automatically installs patches on endpoints

Explanation: This question assesses knowledge of endpoint management infrastructure components. The scenario requires centralized deployment of approved patches with compliance reporting to support IT governance and security standards. An endpoint patch management system (A) provides these capabilities by maintaining a central repository of approved patches, deploying them according to defined schedules, and generating compliance reports showing patch status across all managed devices. Network hubs (B) broadcast traffic but don't distribute software updates intelligently. Floppy disk distribution (C) is an obsolete, manual, and unreliable method for modern patching. Document retention policies (D) govern information lifecycle but don't install software. For enterprise patch management, identify centralized systems that automate deployment, ensure consistency, and provide visibility into patch compliance across the endpoint population.

Question 5

1. A virtualization hypervisor that allows multiple virtual machines to run on the same physical server hardware (correct answer)
2. A tape rotation schedule that determines how often backup tapes are reused
3. A dot-matrix printer that produces multi-part forms for accounts payable
4. A personal firewall installed on each user’s smartphone to block all internet access

Explanation: This question evaluates understanding of server virtualization technology in modern IT infrastructure. The scenario describes multiple applications running on shared physical hosts with a need to increase capacity without purchasing separate servers for each application. A virtualization hypervisor (A) enables this consolidation by abstracting physical hardware and allowing multiple virtual machines to share the same physical server resources efficiently. Tape rotation schedules (B) manage backup media lifecycle but don't address server consolidation. Dot-matrix printers (C) are legacy output devices unrelated to server capacity. Personal firewalls on smartphones (D) provide endpoint security but don't consolidate server workloads. When evaluating server infrastructure efficiency, recognize virtualization as the key technology enabling hardware consolidation, resource optimization, and rapid provisioning of new systems.

Question 6

1. Data replication technology that continuously or frequently copies changed data to a secondary site (correct answer)
2. A local printer queue that stores print jobs until a printer is available
3. A compact cassette tape recorder used for manual data export
4. A password rotation policy that copies database records to another site automatically

Explanation: This question evaluates understanding of data replication technologies for disaster recovery. The scenario requires near-real-time data synchronization between primary and secondary sites to minimize recovery point objectives for a billing system. Data replication technology (A) provides this capability through continuous or frequent copying of changed data blocks or database transactions to the secondary site, ensuring minimal data loss if failover is required. Printer queues (B) temporarily store print jobs but don't replicate data between sites. Cassette tape recorders (C) are obsolete manual recording devices unsuitable for automated replication. Password rotation policies (D) enhance security but don't copy data between locations. For disaster recovery with aggressive recovery point objectives, identify real-time or near-real-time replication as essential for maintaining synchronized data copies across sites.

Question 7

1. A document management system that centralizes files with version control, permissions, and search capabilities (correct answer)
2. A network switch that stores document versions in its routing table
3. A legacy magnetic tape drive used as the primary location for daily document editing
4. A password policy that automatically merges duplicate documents across all folders

Explanation: This question tests understanding of content management infrastructure components. The scenario describes inefficient document management with employees struggling to find current versions across multiple shared drives, requiring centralization with version control and permissions. A document management system (A) provides these capabilities through a centralized repository that maintains version history, enforces access permissions, enables full-text search, and prevents duplication through check-in/check-out workflows. Network switches (B) forward packets but don't store documents or manage versions. Magnetic tape drives (C) provide sequential access unsuitable for daily document editing. Password policies (D) enforce authentication requirements but don't merge documents. For improving document management efficiency, identify dedicated systems that centralize content, automate version control, and provide structured access to organizational knowledge.

Question 8

1. The server operating system platform on the on-premises servers to ensure vendor support and security patching (correct answer)
2. A word processing template used for donor thank-you letters
3. A floppy disk inventory used for historical data transfers
4. A manual sign-in sheet at reception used to track visitors

Explanation: This question assesses knowledge of IT infrastructure lifecycle management, specifically server operating system components. The scenario describes aging servers approaching end-of-support, which increases operational risk and prevents security patching per governance requirements. The server operating system platform (A) is the component needing upgrade because unsupported operating systems cannot receive critical security updates, exposing the organization to vulnerabilities. Word processing templates (B) support document creation but aren't infrastructure components. Floppy disk inventories (C) track obsolete media unrelated to server support. Manual sign-in sheets (D) provide physical access logs but don't affect server patching. When evaluating infrastructure upgrade needs, prioritize components reaching end-of-support status as they pose significant security and compliance risks.

Question 9

1. A directory service controller that centralizes authentication and authorization for multiple systems (correct answer)
2. A network printer that produces physical copies of reports
3. A compact disc (CD) jukebox used for long-term archival storage
4. A workstation wallpaper policy that enforces encryption for all user accounts

Explanation: This question assesses understanding of authentication infrastructure vulnerabilities and security risks. The scenario identifies password reuse across systems and asks which component is most vulnerable if misconfigured, given its role in storing and validating credentials for multiple systems. A directory service controller (A) like Active Directory Domain Controller is indeed the most critical component because it centralizes authentication for many systems - if compromised, attackers gain access to all integrated applications. Network printers (B) produce output but don't store authentication credentials. CD jukeboxes (C) provide archival storage without authentication functions. Wallpaper policies (D) standardize desktop appearance but don't enforce encryption or manage accounts. When assessing authentication infrastructure risks, recognize directory service controllers as high-value targets requiring stringent security controls due to their central role in enterprise authentication.

Question 10

1. A virtual private network (VPN) gateway that encrypts remote connections and authenticates users before network access (correct answer)
2. A network hub that broadcasts remote traffic to all internal devices
3. A fax machine that transmits login credentials securely over phone lines
4. A local printer spooler that encrypts all internet traffic by default

Explanation: This question tests understanding of secure remote access technologies in IT infrastructure. The scenario requires encrypted connections for remote users accessing internal applications over the internet with controlled access per security policies. A VPN gateway (A) provides this capability by creating encrypted tunnels between remote devices and the corporate network, authenticating users before granting access and applying security policies. Network hubs (B) broadcast traffic locally without encryption or remote access capabilities. Fax machines (C) transmit documents over phone lines but don't secure network connections. Printer spoolers (D) queue print jobs locally without encrypting internet traffic. When implementing secure remote access, identify VPN technology as the standard solution for creating encrypted connections over untrusted networks while maintaining access controls.

Question 11

1. The wide area network (WAN) internet circuit bandwidth to support higher volumes of cloud and collaboration traffic (correct answer)
2. A local keyboard and mouse set used by the accounting team
3. A legacy dial-up connection as the primary method for modern cloud access
4. A paper filing cabinet used for storing printed invoices

Explanation: This question tests understanding of network infrastructure capacity planning. The scenario describes insufficient internet bandwidth causing video meetings and cloud applications to drop during peak usage, requiring a more reliable, higher-capacity connection. The WAN internet circuit bandwidth (A) is the component needing upgrade because modern cloud services and video collaboration require significantly more bandwidth than legacy applications, and insufficient capacity directly causes the described service disruptions. Keyboards and mice (B) are local input devices unrelated to network capacity. Dial-up connections (C) provide extremely limited bandwidth unsuitable for cloud access. Paper filing cabinets (D) store physical documents without affecting network performance. When evaluating connectivity upgrades, assess bandwidth requirements for cloud services, video conferencing, and concurrent users to determine appropriate circuit capacity.

Question 12

1. A load balancer that routes incoming application requests across multiple servers based on defined rules (correct answer)
2. A tape vaulting service that stores backup media offsite
3. A legacy serial port switch that increases internet bandwidth
4. A password manager that automatically assigns IP addresses to servers

Explanation: This question evaluates understanding of load balancing technology in IT infrastructure. The scenario describes a web application hosted on multiple servers experiencing performance issues, requiring traffic distribution to improve response times and eliminate single points of failure. A load balancer (A) provides this functionality by intelligently routing incoming requests across available servers based on algorithms like round-robin, least connections, or server health. Tape vaulting services (B) store backup media offsite but don't distribute application traffic. Serial port switches (C) are legacy connectivity devices unrelated to internet bandwidth or load distribution. Password managers (D) store credentials but don't assign IP addresses or route traffic. When designing scalable application architectures, recognize load balancers as essential components for distributing workloads, improving performance, and providing failover capabilities.

Question 13

1. Database transaction log backups that record changes and enable recovery to a specific point in time (correct answer)
2. A domain name system server that resolves hostnames for internal applications
3. A network hub that connects multiple devices on the same local network segment
4. A screen-saver timeout policy that locks user workstations after inactivity

Explanation: This question evaluates knowledge of database recovery components in disaster recovery planning. The scenario requires point-in-time recovery capability for an ERP database with minimal data loss, which is a fundamental disaster recovery requirement. Database transaction log backups (A) record all database changes sequentially, enabling administrators to restore to any specific point in time by replaying transactions after restoring a full backup. DNS servers (B) resolve network names but don't provide database recovery capabilities. Network hubs (C) are basic connectivity devices without recovery functions. Screen-saver policies (D) provide workstation security but don't support database recovery. For disaster recovery planning, prioritize components that capture incremental changes and enable granular recovery points, particularly transaction logs for database systems requiring consistent state recovery.

Question 14

1. A server cluster that provides redundancy and automatic failover between nodes (correct answer)
2. A single external hard drive connected by USB for occasional manual backups
3. A legacy coaxial network that reduces the need for redundant servers
4. A data classification label that prevents hardware failures through policy enforcement

Explanation: This question evaluates knowledge of high-availability infrastructure components for critical systems. The scenario requires automatic failover capability with minimal downtime when a physical server fails, which is essential for meeting availability objectives. A server cluster (A) provides this redundancy by connecting multiple nodes that monitor each other's health and automatically transfer workloads when failures occur. Single external USB drives (B) provide basic backup storage but no automatic failover. Legacy coaxial networks (C) are outdated cable technologies that don't provide server redundancy. Data classification labels (D) categorize information sensitivity but don't prevent hardware failures. For high-availability requirements, identify clustering technologies that provide active-active or active-passive configurations with automatic failover capabilities to minimize service disruptions.

Question 15

1. A non-production test environment that replicates production configurations for validating changes before deployment (correct answer)
2. A shared mailbox that stores copies of change requests
3. A legacy parallel-port dongle that prevents unauthorized code changes
4. A desktop shortcut that automatically approves change tickets

Explanation: This question evaluates understanding of change management infrastructure components. The scenario requires a controlled environment mirroring production for validating patches and changes before deployment, supporting IT governance and change management practices. A non-production test environment (A) provides this capability by replicating production configurations in an isolated setting where changes can be thoroughly tested without affecting live systems. Shared mailboxes (B) store communications but don't provide test environments. Parallel-port dongles (C) are legacy hardware keys unrelated to change testing. Desktop shortcuts (D) provide quick access but don't approve changes. For effective change management, recognize test environments as essential infrastructure components that reduce deployment risks by validating changes in production-like conditions before release.

Question 16

1. Virtual local area networks (VLANs) that logically segment a network into separate broadcast domains (correct answer)
2. A screen capture tool that records user activity during training sessions
3. A floppy disk drive used to transfer configuration files between servers
4. A password complexity policy that automatically encrypts all network traffic

Explanation: This question assesses understanding of network segmentation technologies in IT infrastructure security. The scenario identifies a flat network where servers and workstations share the same segment, creating lateral movement risks that management wants to mitigate through logical separation. Virtual Local Area Networks (VLANs) (A) provide this capability by creating separate broadcast domains at Layer 2, allowing administrators to group devices logically regardless of physical location while controlling inter-VLAN routing. Screen capture tools (B) record user activity but don't segment networks. Floppy disk drives (C) are obsolete storage devices unrelated to network segmentation. Password policies (D) enforce credential strength but don't create network separations or encrypt traffic. When designing secure network architectures, recognize VLANs as the fundamental technology for creating logical network boundaries that limit broadcast domains and enable controlled communication between segments.

Question 17

1. Full-disk or volume encryption that renders stored data unreadable without the encryption key (correct answer)
2. A content delivery network that accelerates website performance for external users
3. A hub that repeats network signals to all connected devices
4. A printer access log that automatically patches server operating systems

Explanation: This question tests understanding of data-at-rest encryption as a security control in IT infrastructure. The scenario requires protecting sensitive financial data stored on file servers against physical theft or unauthorized access to storage media. Full-disk or volume encryption (A) addresses this requirement by rendering all stored data unreadable without the proper encryption key, providing protection even if drives are physically removed. Content delivery networks (B) optimize web performance but don't encrypt stored data. Network hubs (C) broadcast signals without encryption capabilities. Printer access logs (D) track usage but don't patch systems or encrypt data. When implementing data protection controls, recognize encryption at rest as the primary safeguard against unauthorized access to data on stolen or improperly disposed storage media.

Question 18

1. An email security gateway that filters and scans inbound messages for malware and phishing indicators (correct answer)
2. A file compression utility that reduces the size of email attachments
3. A legacy pager system that alerts users to new emails
4. A network switch that automatically quarantines suspicious emails in user inboxes

Explanation: This question assesses knowledge of email security infrastructure components. The scenario requires filtering malicious attachments and phishing links before they reach user mailboxes, supporting the organization's security framework. An email security gateway (A) provides this functionality by scanning inbound messages for malware signatures, suspicious attachments, and phishing indicators, quarantining or blocking threats before delivery. File compression utilities (B) reduce attachment sizes but don't scan for threats. Pager systems (C) provide notifications but don't filter email content. Network switches (D) forward network traffic but don't analyze email content or quarantine messages. For email security architecture, identify dedicated email security gateways as the primary defense against email-borne threats, positioned between the internet and internal mail servers.

Question 19

1. A firewall that enforces network access rules by allowing or blocking traffic between network zones (correct answer)
2. A file server that stores user documents on shared folders
3. A fax modem that transmits scanned forms over analog phone lines
4. A spreadsheet macro that automates monthly reporting tasks

Explanation: This question assesses knowledge of network security components, specifically perimeter defense mechanisms. The scenario describes a public-facing application in a DMZ requiring protection from internet-based attacks through traffic filtering and logging. A firewall (A) is the primary infrastructure component designed for this purpose, enforcing network access rules by inspecting packets and allowing or blocking traffic based on configured policies while maintaining detailed logs. File servers (B) store documents but don't filter network traffic. Fax modems (C) transmit documents over phone lines without network security functions. Spreadsheet macros (D) automate calculations within applications but don't control network traffic. For network security architecture, recognize that firewalls serve as the fundamental enforcement point for traffic filtering between network zones, particularly at internet boundaries.

Question 20

1. Offsite backup storage (such as a secure cloud repository or secondary site) that holds backup copies outside the primary location (correct answer)
2. A local recycle bin on each workstation for deleted files
3. A legacy token-based ring network that prevents natural disasters
4. A spreadsheet access password that replaces the need for backups

Explanation: This question evaluates knowledge of disaster recovery infrastructure components, specifically offsite backup strategies. The scenario requires backup copies in a separate geographic location to enable recovery if the primary data center is unavailable due to local disaster. Offsite backup storage (A) such as cloud repositories or secondary sites directly addresses this requirement by maintaining backup copies outside the primary location's disaster impact zone. Local recycle bins (B) only store recently deleted files on individual workstations without offsite protection. Token-ring networks (C) are obsolete LAN technologies that cannot prevent disasters. Spreadsheet passwords (D) control file access but don't replace backup requirements. For comprehensive disaster recovery, recognize offsite backup storage as essential for protecting against site-wide disasters and ensuring business continuity.