I85PREP
⌘ K
ILTS Technology Specialist (223) study materials
ILTS Technology Specialist (223) study resources

ILTS Technology Specialist (223) practice questions

One question at a time. Build your ILTS Technology Specialist (223) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Unspecified - official content domain weights not published in source

A school's technology plan requires that student data stored on district servers be protected so that a stolen drive cannot be read without the decryption key. Which control best satisfies this requirement?

  1. Daily incremental backups to a second site
  2. A password complexity policy for staff accounts
  3. Full-disk encryption on the servers and drives Correct answer.
  4. A firewall rule blocking inbound traffic

Explanation

Encryption at rest renders the data unreadable without the key even if the physical medium is removed, which is exactly the threat described. Firewalls, password policy, and offsite backups address other risks such as network intrusion, credential guessing, and data loss, but none of them prevents reading data off a stolen drive.

Question 2Unspecified - official content domain weights not published in source

A district wants a single sign-on experience so staff use one set of credentials across email, learning management, and library systems. Which technology directly provides this?

  1. A federated identity provider using SAML or OIDC Correct answer.
  2. A mobile device management enrollment profile
  3. A virtual local area network for staff devices
  4. A content filtering appliance at the network edge

Explanation

Federated identity protocols such as SAML and OpenID Connect let one trusted identity provider authenticate a user and assert that identity to multiple service providers, which is the definition of single sign-on. VLANs, content filters, and MDM profiles handle segmentation, web filtering, and device configuration rather than cross-application authentication.

Question 3Unspecified - official content domain weights not published in source

A teacher reports that a classroom projector shows the laptop image but no audio plays through the ceiling speakers. Which troubleshooting step should the technology specialist take first?

  1. Verify the selected playback device and cable routing in the sound settings Correct answer.
  2. Reset the teacher's network password
  3. Reimage the laptop operating system
  4. Replace the ceiling speakers

Explanation

When video reaches the projector but audio does not reach the speakers, the fault is usually the selected output device or the audio cable path. Confirming the active playback device and its cabling is the least invasive first step and isolates the problem before any hardware replacement. Reimaging, replacing speakers, or resetting credentials do not address an audio routing issue.

Question 4Unspecified - official content domain weights not published in source

Which practice best protects a school network against ransomware delivered through email attachments?

  1. Issuing students new library cards each semester
  2. Increasing the wireless access point transmit power
  3. Extending the DHCP lease time to seven days
  4. Filtering attachments at the mail gateway and maintaining tested offline backups Correct answer.

Explanation

Ransomware commonly arrives as an email attachment, so gateway filtering reduces delivery, and tested offline backups allow recovery without paying a ransom. Wireless power, library cards, and DHCP lease duration have no relationship to malware delivery or recovery.

Question 5Unspecified - official content domain weights not published in source

A technology specialist is asked to evaluate a new online assessment tool before district purchase. Which criterion most directly addresses student data privacy obligations?

  1. Whether the vendor offers a free trial period
  2. Whether the tool supports more than one browser
  3. Whether the interface uses a modern color scheme
  4. Whether the vendor signs a data privacy agreement limiting use and retention of student records Correct answer.

Explanation

Student data privacy review centers on contractual limits: what data the vendor collects, how it may be used, how long it is retained, and whether it can be disclosed. A signed data privacy agreement captures those commitments. Browser support, visual design, and trial availability are usability or procurement conveniences, not privacy safeguards.

Question 6Unspecified - official content domain weights not published in source

Which statement correctly describes the purpose of a wireless access point controller in a school building?

  1. It centrally manages configuration, channels, and roaming for multiple access points Correct answer.
  2. It stores teacher gradebooks in a local database
  3. It converts analog video signals for classroom displays
  4. It assigns public IP addresses to student devices

Explanation

A wireless controller or the cloud equivalent coordinates many access points so that settings, channel plans, and client roaming are managed from one place. It does not hand out public addresses, process video signals, or hold gradebook data.

Question 7Unspecified - official content domain weights not published in source

A student device repeatedly loses its wireless connection when moving between classrooms. Which configuration most likely improves the experience?

  1. Tuning access point power and channel overlap so clients roam smoothly Correct answer.
  2. Disabling the DHCP server on the student VLAN
  3. Shortening the wired switch uplink cable
  4. Setting all access points to the same management IP address

Explanation

Roaming problems often stem from poor coverage overlap or co-channel interference, so adjusting transmit power and channel plans encourages clients to move to the nearest access point. Disabling DHCP breaks address assignment, cable length is unrelated, and duplicate management addresses would create conflicts.

Question 8Unspecified - official content domain weights not published in source

A district adopts a policy that every student device must be enrolled and configured before it can reach the network. Which technology enforces this requirement?

  1. Network access control with device posture checking Correct answer.
  2. A guest wireless network with a shared password
  3. Port mirroring on the core switch
  4. A domain name system forwarder

Explanation

Network access control evaluates a device's enrollment and compliance state before granting access, which matches the requirement. A shared guest password does not verify posture, port mirroring only copies traffic for monitoring, and DNS forwarding resolves names without authorizing devices.

Question 9Unspecified - official content domain weights not published in source

A technology specialist must provide a reliable wired connection to a lab of thirty desktops. Which cabling and switching choice is most appropriate?

  1. Wireless bridges for each desktop
  2. Coaxial cable to a single unmanaged hub
  3. Powerline adapters sharing one circuit
  4. Category 6 cabling to a managed switch with enough access ports Correct answer.

Explanation

Category 6 cabling supports gigabit speeds over the distances found in a school building, and a managed switch provides sufficient ports plus monitoring and VLAN capability. Coaxial with a hub, wireless bridges, and powerline adapters are either obsolete or introduce shared-medium contention and instability for a fixed lab.

Question 10Unspecified - official content domain weights not published in source

A school wants to prevent students from reaching known malicious websites while allowing legitimate research. Which solution best fits?

  1. A larger DHCP address pool
  2. A second internet service provider
  3. A DNS filtering service that categorizes and blocks domains Correct answer.
  4. A stronger Wi-Fi encryption standard

Explanation

DNS filtering resolves requests through a service that classifies domains and blocks malicious or disallowed categories, which directly meets the goal. Wireless encryption protects the air link, a larger address pool supports more devices, and a second provider adds redundancy rather than content control.

Question 11Unspecified - official content domain weights not published in source

A teacher wants students to submit work to a shared folder where each student can see only their own submissions. Which configuration achieves this?

  1. Email attachments sent to the teacher's personal account
  2. One shared folder with full control granted to all students
  3. A public link that allows anyone to upload
  4. Per-student subfolders with permissions granting each student access only to their own folder Correct answer.

Explanation

Least-privilege sharing means each student receives access only to the folder that contains their own work, while the teacher retains access to all subfolders. Full control on a single folder lets students read and alter peers' files, public upload links are uncontrolled, and personal email bypasses district records retention.

Question 12Unspecified - official content domain weights not published in source

A district plans to replace aging classroom computers with cloud-based devices. Which consideration most affects the success of this migration?

  1. Sufficient sustained network bandwidth and low-latency coverage in each classroom Correct answer.
  2. The color options available for device cases
  3. The physical weight of the replacement devices
  4. The number of USB ports on the old computers

Explanation

Cloud-based devices depend on the network for nearly all application delivery, so bandwidth per classroom and reliable low-latency wireless coverage determine whether the experience is usable. Device weight, legacy USB port counts, and case colors do not affect whether cloud applications perform acceptably.

Question 13Unspecified - official content domain weights not published in source

A technology specialist is documenting a recurring projector failure. Which information is most useful to record for later diagnosis?

  1. The teacher's years of service in the district
  2. The brand of whiteboard in the room
  3. The number of students enrolled in the class
  4. Time of failure, input source in use, error indicators, and recent changes to the room Correct answer.

Explanation

Useful incident records capture reproducible conditions: when the failure occurred, which input was active, any lamp or error indicators, and recent changes such as a new cable or firmware update. Unrelated staffing, enrollment, and whiteboard details do not help isolate an AV fault.

Question 14Unspecified - official content domain weights not published in source

A school receives a request from a parent to review all data the district holds about their child. Which response aligns with typical student privacy obligations?

  1. Publish the records on the district website
  2. Forward the request to the child's teacher without documentation
  3. Provide the parent access to their child's education records through the established district process Correct answer.
  4. Refuse because the records belong to the district

Explanation

Parents generally hold a right to inspect and review their child's education records, so the district should honor the request through a defined, documented process. Refusing, publishing publicly, or informally forwarding the request without a record violates that right and risks improper disclosure.

Question 15Unspecified - official content domain weights not published in source

A technology specialist must back up a student information system so that recovery can occur within four hours of an outage. Which element is most important to verify?

  1. That backup tapes are stored in the same server room
  2. That restore procedures have been tested and meet the four-hour recovery objective Correct answer.
  3. That backups run only once per school year
  4. That the backup software uses the default schedule

Explanation

A recovery time objective is only meaningful if restores are rehearsed and demonstrably complete within the target window. Untested backups, same-room storage, annual-only schedules, and untouched defaults leave the four-hour goal unproven and vulnerable to a site-wide incident.

Question 16Unspecified - official content domain weights not published in source

A teacher asks how to share a large video with students without exceeding the district's email attachment limit. Which approach is most appropriate?

  1. Split the file into many email attachments
  2. Post the video to a public video site with no access restriction
  3. Upload to the district's approved cloud storage and share a permission-controlled link Correct answer.
  4. Copy the file to each student's USB drive

Explanation

Approved cloud storage with a permission-controlled link avoids attachment size limits and keeps access limited to intended recipients. Splitting attachments is unreliable, public unrestricted posting risks privacy and licensing problems, and distributing USB drives is impractical and insecure.

Question 17Unspecified - official content domain weights not published in source

A district's help desk receives many tickets about slow internet in one wing of a building while other wings perform normally. Which diagnostic approach best isolates the cause?

  1. Change the district's internet service provider
  2. Reset all staff passwords district-wide
  3. Replace every computer in the affected wing
  4. Compare switch port statistics and wireless client counts for the affected wing against a healthy wing Correct answer.

Explanation

Because the problem is localized, comparing link utilization, error counters, and client counts on the affected wing with a known-good wing quickly reveals whether the cause is congestion, a failing uplink, or excessive clients. Replacing computers, changing providers, or resetting passwords targets unrelated layers.

Question 18Unspecified - official content domain weights not published in source

Which measure best reduces the risk of phishing compromising staff email accounts?

  1. Enforcing multi-factor authentication on email sign-in Correct answer.
  2. Allowing password reuse across personal and work accounts
  3. Sharing one administrative mailbox among all staff
  4. Disabling email logging to save storage

Explanation

Multi-factor authentication blocks most account takeovers because a stolen password alone is insufficient to sign in. Password reuse, disabled logging, and shared mailboxes each increase exposure by weakening credentials, reducing visibility, or removing accountability.

Question 19Unspecified - official content domain weights not published in source

A technology specialist is planning a one-to-one device rollout. Which step should occur before devices are distributed to students?

  1. Ordering spare parts after the first devices fail
  2. Waiting until midyear to configure filtering
  3. Deferring staff training until after testing season
  4. Finalizing an acceptable use agreement, device management enrollment, and repair workflow Correct answer.

Explanation

A successful rollout depends on policy, technical readiness, and support capacity being in place beforehand: signed agreements, enrolled management profiles, filtering, and a defined repair process. Ordering parts reactively, delaying filtering, and postponing training create avoidable disruption once students have the devices.

Question 20Unspecified - official content domain weights not published in source

A district must retain email for a defined period to satisfy records requirements. Which capability is most important in the chosen system?

  1. Automatic deletion of messages after thirty days
  2. A colorful webmail interface
  3. Policy-based retention with legal hold and searchable archives Correct answer.
  4. Unlimited mailbox size for all users

Explanation

Records retention requires enforceable policies that preserve messages for the mandated period, support legal hold when litigation is anticipated, and allow authorized search. Unlimited mailbox size, automatic early deletion, and interface design do not satisfy retention obligations and may destroy required records.

Question 21Unspecified - official content domain weights not published in source

A school's wireless network must support thousands of simultaneous testing devices without authentication failures. Which design element is most critical?

  1. A single access point with maximum transmit power
  2. Restricting the network to wired connections only
  3. Adequate DHCP scope, authentication capacity, and access point density planned for peak load Correct answer.
  4. Disabling encryption to reduce handshake overhead

Explanation

Peak-load testing events fail most often when address pools, authentication servers, or access point density are undersized, so capacity planning across all three is essential. One overpowered access point cannot serve thousands of clients, disabling encryption weakens security without solving capacity, and abandoning wireless defeats the requirement.

Question 22Unspecified - official content domain weights not published in source

An administrator reports that a newly installed interactive display powers on but shows no image from the connected computer. Which sequence reflects sound diagnostic reasoning?

  1. Reinstall the computer operating system, then check the input source
  2. Reset the district firewall, then inspect the display
  3. Confirm the active input source, then test the cable and alternate source before replacing hardware Correct answer.
  4. Replace the display immediately, then check the cable

Explanation

Effective diagnosis moves from the most likely and least costly causes outward: verify the selected input, then swap the cable or try another source to isolate the fault. Replacing hardware first, reinstalling an operating system, or touching the firewall skips basic checks and may not resolve the issue.

Question 23Unspecified - official content domain weights not published in source

A district wants to minimize the blast radius of a compromised staff account. Which combination of controls best achieves this?

  1. Disabling audit logs to reduce storage costs
  2. A single shared administrator account for all staff
  3. Least-privilege roles, conditional access, and segmented network access Correct answer.
  4. Permanent full administrative rights for convenience

Explanation

Least privilege limits what a compromised account can reach, conditional access restricts where and how it can be used, and segmentation prevents lateral movement to other systems. Shared or permanently elevated accounts and disabled logging each expand the damage a single compromised credential can cause.

Question 24Unspecified - official content domain weights not published in source

A technology specialist must choose between repairing aging classroom projectors and replacing them with laser displays. Which analysis best supports the decision?

  1. Choose whichever vendor responds to email fastest
  2. Compare total cost of ownership including lamp replacements, labor, downtime, and expected service life Correct answer.
  3. Choose the option with the shortest warranty
  4. Compare only the purchase price of each option

Explanation

A defensible decision weighs all costs and benefits over the equipment's life, including consumables, maintenance labor, instructional downtime, and service life, not just the sticker price. Purchase price alone, warranty length alone, or vendor responsiveness omits the operating costs that often dominate the comparison.

Question 25Unspecified - official content domain weights not published in source

A teacher needs assistive technology so a student with limited fine motor control can operate a classroom computer. Which solution is most appropriate to evaluate first?

  1. Alternative input devices such as a larger trackball or switch interface configured for the student Correct answer.
  2. A faster processor in the computer
  3. A higher-resolution monitor
  4. A larger hard drive

Explanation

Assistive technology should match the specific access barrier, and limited fine motor control calls for alternative input hardware or switch access configured for the student. Monitor resolution, processor speed, and storage capacity do not change how the student physically operates the computer.

Question 26Unspecified - official content domain weights not published in source

A technology specialist is asked to explain what a district's acceptable use policy (AUP) governs for staff and students. Which description is most accurate?

  1. The electrical and cabling standards required in newly constructed classrooms
  2. The physical inventory schedule for tagging and auditing district-owned hardware
  3. The vendor contract terms that set hardware warranty and repair turnaround times
  4. The expected and prohibited ways users may use district devices, networks, and data Correct answer.

Explanation

An acceptable use policy is a governance document that defines permitted and prohibited behavior for users of district technology resources, including devices, network access, and data. It typically covers privacy expectations, consequences for violations, and consent for monitoring.

Question 27Unspecified - official content domain weights not published in source

A technology specialist is selecting a replacement for a failed uninterruptible power supply in a classroom network closet that holds a switch and a wireless access point. Which specification matters most for keeping equipment running through short outages?

  1. The number of surge-protected outlets on the unit
  2. The length of the power cable supplied with the unit
  3. The color and rack-mount orientation of the chassis
  4. The VA/watt rating and battery runtime at the connected load Correct answer.

Explanation

Runtime depends on the load in watts relative to the UPS capacity, so the VA/watt rating and the runtime curve at the actual connected load determine whether the switch and access point stay up during an outage. Outlet count alone says nothing about capacity or duration.

Question 28Unspecified - official content domain weights not published in source

A technology specialist is asked to define the difference between a full backup and an incremental backup for a district records server. Which statement is correct?

  1. A full backup copies all selected data each run; an incremental copies only data changed since the last backup of any type Correct answer.
  2. A full backup requires the server to be offline; an incremental always runs while users are working
  3. A full backup copies only changed files; an incremental copies the entire dataset on every scheduled run
  4. A full backup stores data offsite; an incremental is restricted to local disk storage

Explanation

A full backup captures the entire selected data set on each run, while an incremental captures only changes since the most recent backup of any kind. Restoring from incrementals therefore requires the last full plus each incremental in sequence.

Question 29Unspecified - official content domain weights not published in source

A technology specialist is asked which protocol automatically assigns IP addresses to student laptops joining the district network. Which protocol performs that function?

  1. SNMP
  2. DHCP Correct answer.
  3. SMTP
  4. DNS

Explanation

Dynamic Host Configuration Protocol leases IP addresses, subnet masks, gateways, and DNS server addresses to clients so devices can join the network without manual configuration. The other protocols serve name resolution, mail transport, and device monitoring respectively.

Question 30Unspecified - official content domain weights not published in source

A teacher reports that a classroom printer is visible on the network but every job stays in the queue and never prints. Which first step best isolates the cause?

  1. Reboot the building's core switch during class time
  2. Check the printer's own status page and error panel for a paper, toner, or jam condition Correct answer.
  3. Replace the network cable between the printer and the wall jack
  4. Reinstall the printer driver on every student laptop in the room

Explanation

A job that queues but never completes often reflects a condition at the device itself, such as a jam, empty tray, or consumable error, so the printer's status panel is the fastest diagnostic. Escalating to driver reinstalls or switch reboots skips that basic check.

Question 31Unspecified - official content domain weights not published in source

A technology specialist must explain why the district segments student devices onto a separate VLAN from administrative systems. Which benefit is the primary reason?

  1. It guarantees student devices will receive faster internet speeds
  2. It removes the need to authenticate student devices on the network
  3. It increases the wireless signal strength available to student laptops
  4. It limits how far traffic from student devices can reach if one of them is compromised Correct answer.

Explanation

VLAN segmentation, combined with access control between segments, contains the reach of a compromised or misbehaving device by restricting which systems it can contact. It is a containment control, not a signal or performance guarantee.

Question 32Unspecified - official content domain weights not published in source

A technology specialist is asked to describe the role of a directory service such as LDAP or Active Directory in a school district. Which description is correct?

  1. It stores and serves the district's shared video and document files
  2. It encrypts all district network traffic between buildings automatically
  3. It assigns public IP addresses to devices that leave the district network
  4. It centralizes identity records so users authenticate once and are granted access by group membership Correct answer.

Explanation

A directory service holds user and group objects and serves as the authentication and authorization source for connected systems, enabling single sign-on and group-based permissions. File storage, encryption, and public addressing are handled by other services.

Question 33Unspecified - official content domain weights not published in source

A technology specialist is asked what a mobile device management (MDM) profile can enforce on district-owned tablets. Which capability is the clearest example?

  1. Requiring a passcode and enabling remote wipe of district data on the device Correct answer.
  2. Preventing students from physically dropping the device
  3. Guaranteeing the device battery will last a full school day
  4. Increasing the storage capacity of the device

Explanation

MDM profiles enforce configuration and security settings such as passcode requirements, encryption, app restrictions, and the ability to remotely wipe managed data. They cannot alter physical durability, battery chemistry, or installed storage.

Question 34Unspecified - official content domain weights not published in source

A teacher wants to show a short instructional video in class, but the district blocks streaming sites by category. Which action by the technology specialist is most appropriate?

  1. Verify the resource against curriculum need and use the district's content-review exception process Correct answer.
  2. Disable the district's web filter for the entire building during that class period
  3. Provide the teacher an administrator account with unrestricted filtering rights
  4. Instruct the teacher to use a personal mobile hotspot for the whole class

Explanation

Filtering exceptions should be handled through a documented review process that weighs instructional value against policy and safety obligations such as CIPA. Broadly disabling filters or granting elevated rights bypasses those controls.

Question 35Unspecified - official content domain weights not published in source

A technology specialist is asked to recommend the most appropriate authentication method for staff accounts that access student records. Which recommendation best balances security and usability?

  1. Security questions based on information published on the district website
  2. A shared department password changed once each school year
  3. A password of at least six characters with no complexity requirement
  4. Multifactor authentication with a password plus a separate verification factor Correct answer.

Explanation

Multifactor authentication resists credential theft because a stolen password alone is insufficient to sign in. Shared, short, or publicly guessable secrets all weaken accountability and are poor fits for sensitive records systems.

Question 36Unspecified - official content domain weights not published in source

A technology specialist receives a help desk ticket stating that a classroom's interactive display shows the computer image but touch input does not register. Which step should be taken first?

  1. Replace the display's HDMI cable with a longer one
  2. Confirm the USB cable carrying touch data is connected and recognized by the computer Correct answer.
  3. Reimage the teacher's computer
  4. Update the district's web filter categories

Explanation

On most interactive displays, video travels over HDMI or DisplayPort while touch data travels over a separate USB connection, so a missing or unrecognized USB link explains video without touch. Filtering and reimaging do not affect the touch channel.

Question 37Unspecified - official content domain weights not published in source

A technology specialist is planning device refresh for a school and must estimate total cost of ownership. Which set of factors belongs in that estimate?

  1. Only the advertised purchase price of each device
  2. Only the manufacturer's warranty period
  3. Only the electricity cost of running the devices
  4. Purchase price, warranty, management licensing, consumables, support labor, and disposal Correct answer.

Explanation

Total cost of ownership aggregates acquisition, warranty, software or management licensing, consumables, support labor, and end-of-life disposal. Using purchase price alone understates the ongoing cost of operating devices in a school.

Question 38Unspecified - official content domain weights not published in source

A technology specialist is asked to reduce the risk that a stolen staff laptop exposes student data stored on its drive. Which control addresses that risk most directly?

  1. Full-disk encryption enforced through device management Correct answer.
  2. An inventory tag on the chassis
  3. A longer login timeout before the screen locks
  4. A screen privacy filter on the display

Explanation

Full-disk encryption renders the drive contents unreadable without the decryption key, which directly mitigates the risk of data exposure from a stolen device. Screen filters, lock timeouts, and tags reduce other risks but not drive-level exposure.

Question 39Unspecified - official content domain weights not published in source

A technology specialist is asked to explain why a district uses a guest wireless network separate from the staff network. Which explanation is most accurate?

  1. Guests can manage the wireless controller through the guest SSID
  2. Guests receive higher priority bandwidth than staff devices
  3. Guests are exempt from the district's acceptable use policy
  4. Guests get internet access while being prevented from reaching internal district systems Correct answer.

Explanation

A guest SSID typically provides internet-only access with client isolation and no route into internal resources, protecting district systems while serving visitors. Guests remain subject to district policy and never receive management access.

Question 40Unspecified - official content domain weights not published in source

A technology specialist must document the configuration of a newly deployed classroom switch so it can be restored after failure. Which practice is most useful?

  1. Note the physical location of the switch in the building
  2. Photograph the front panel indicator lights
  3. Export and store a dated copy of the running configuration with the device's firmware version Correct answer.
  4. Record the serial number on the asset inventory only

Explanation

A saved configuration export paired with the firmware version lets a replacement device be restored to the same state, since configuration and firmware must match. Photos, serials, and location notes aid inventory but cannot rebuild settings.

Question 41Unspecified - official content domain weights not published in source

A teacher asks the technology specialist how to make a shared classroom device usable by many students without creating individual accounts. Which approach is most appropriate?

  1. Create one account shared by the entire building
  2. Configure a shared kiosk or generic student profile that resets between sessions Correct answer.
  3. Disable the screen lock so any student can resume a session
  4. Give every student the local administrator password

Explanation

A kiosk or generic profile scoped to the classroom, with state reset between users, provides shared access without exposing credentials or persisting one student's data for the next. Administrator rights and disabled locks create security and privacy problems.

Question 42Unspecified - official content domain weights not published in source

A technology specialist is evaluating whether to virtualize a lab's desktop environment. Which condition most favors a virtual desktop approach?

  1. The district wants each workstation to keep its own unique local configuration
  2. Users require high-end local graphics rendering for CAD work
  3. The lab's network links between buildings are congested and unreliable
  4. Users need a consistent image that can be centrally updated and devices are mostly thin clients Correct answer.

Explanation

Virtual desktops shine when a standardized image can be managed centrally and endpoints are lightweight, because updates and patching happen in the data center. Heavy local graphics, poor network links, and a desire for unique per-device configurations work against the model.

Question 43Unspecified - official content domain weights not published in source

A technology specialist is asked which practice best protects district data when staff use personal cloud storage accounts for school files. Which response aligns with data governance?

  1. Allow personal accounts because they are free to the district
  2. Encourage personal accounts to reduce district storage costs
  3. Permit personal accounts only for files containing student records
  4. Direct staff to district-approved storage with defined retention and access controls Correct answer.

Explanation

District-approved storage provides enforceable retention, access control, and auditability, which personal accounts cannot guarantee. Placing student records in personal accounts creates privacy and records-retention exposure regardless of cost savings.

Question 44Unspecified - official content domain weights not published in source

A technology specialist is troubleshooting a laptop that connects to the wireless network but cannot reach any website while other laptops in the same room work normally. Which cause is most likely?

  1. The access point in the room has failed
  2. The district's content filter is offline
  3. The building's internet circuit is saturated
  4. The laptop has an incorrect static IP address or DNS setting Correct answer.

Explanation

When one device fails while peers on the same access point succeed, the fault is usually local to that device, such as a misconfigured static address or DNS entry. Shared infrastructure problems would affect the other laptops as well.

Question 45Unspecified - official content domain weights not published in source

A technology specialist is asked to plan patch management for classroom computers across many schools. Which schedule best reflects sound practice?

  1. Let each teacher decide individually when to install updates
  2. Defer all updates indefinitely to avoid classroom disruption
  3. Apply every update immediately to all machines the day it is released
  4. Test updates on a small pilot group, then deploy on a defined schedule with a rollback plan Correct answer.

Explanation

Pilot testing catches compatibility problems before wide deployment, and a defined schedule with rollback limits disruption if an update misbehaves. Immediate mass deployment, indefinite deferral, and uncoordinated per-teacher installs all increase risk.

Question 46Unspecified - official content domain weights not published in source

A technology specialist must choose between leasing and purchasing classroom devices for a four-year refresh cycle. Which analysis point is most relevant to the decision?

  1. Leasing transfers responsibility for student misuse to the vendor
  2. Leasing shifts cost to predictable annual payments but adds financing cost over the term Correct answer.
  3. Purchasing removes the need for any device management
  4. Leasing always lowers the total amount paid compared with purchasing

Explanation

Leasing trades a capital outlay for predictable operating payments, typically at a higher total cost than outright purchase, and it aligns replacement with the refresh cycle. It does not eliminate management duties or transfer user-misconduct liability.

Question 47Unspecified - official content domain weights not published in source

A technology specialist is designing a backup strategy for a student information system and must meet a recovery point objective of fifteen minutes. Which design satisfies that objective?

  1. Monthly archival copies stored offsite
  2. Continuous or frequent transaction-log shipping to a secondary system Correct answer.
  3. Nightly full backups retained for thirty days
  4. Weekly full backups with no log shipping

Explanation

A fifteen-minute recovery point objective caps acceptable data loss at fifteen minutes, which requires continuous or very frequent log or replication of changes. Weekly, nightly, or monthly cycles leave far more data at risk.

Question 48Unspecified - official content domain weights not published in source

A technology specialist is investigating why a school's wireless performance degrades each afternoon when carts of devices are in use. Which analysis is most useful?

  1. Review the district's email retention settings
  2. Check the warranty expiration dates on the access points
  3. Review channel utilization and client counts per access point during peak periods Correct answer.
  4. Count how many network jacks exist in each classroom

Explanation

Afternoon degradation tied to device carts points to airtime contention, co-channel interference, or access point client overload, all revealed by channel utilization and per-AP client counts at peak. Warranty dates, jack counts, and email retention do not describe radio conditions.

Question 49Unspecified - official content domain weights not published in source

A technology specialist is asked to evaluate a vendor's cloud service for storing student data. Which combination of contract terms is most important to confirm?

  1. The visual design of the vendor's user interface
  2. Data ownership, breach notification timelines, retention and deletion terms, and subcontractor disclosure Correct answer.
  3. The vendor's stock price trend and number of employees
  4. The vendor's office locations and parking availability

Explanation

Student data agreements hinge on who owns the data, how quickly breaches are reported, how records are retained and deleted, and whether subcontractors handle the data. These terms define the district's ability to meet privacy and records obligations.

Question 50Unspecified - official content domain weights not published in source

A technology specialist must decide how to handle a staff member who reports a lost district laptop that may contain student records. Which sequence of actions is most defensible?

  1. Reassign the staff member's accounts to a colleague without changing credentials
  2. Wait several days to see whether the laptop is returned before taking any action
  3. Trigger a remote lock or wipe, notify the privacy officer, and document the incident and response Correct answer.
  4. Post the loss on social media asking for the device's return

Explanation

A suspected data exposure calls for immediate containment through remote lock or wipe, escalation to the designated privacy or compliance officer, and a written record of the incident and response. Delay, public posting, and credential reuse all increase risk.