I85PREP
⌘ K
Punjab PSEB Senior Secondary NSQF IT/ITeS study materials
Punjab PSEB Senior Secondary NSQF IT/ITeS study resources

Punjab PSEB Senior Secondary NSQF IT/ITeS practice questions

One question at a time. Build your Punjab PSEB Senior Secondary NSQF IT/ITeS understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Information Technology / IT-enabled Services (NSQF vocational trade)

In an IT/ITeS workplace, which of the following best describes the role of a 'service desk' team?

  1. It manages only the payroll accounts of senior employees
  2. It is the single point of contact for users to report incidents and request IT services Correct answer.
  3. It designs the marketing campaigns for the organisation's products
  4. It is responsible for manufacturing hardware components for the company

Explanation

A service desk acts as the single point of contact (SPOC) between users and IT support, logging incidents and service requests and routing them to the right resolver group. It does not build hardware, run marketing, or limit itself to payroll.

Question 2Information Technology / IT-enabled Services (NSQF vocational trade)

A customer support executive working night shifts for an overseas client is best described as part of which industry?

  1. Business process outsourcing under IT-enabled services Correct answer.
  2. Construction and real estate
  3. Heavy engineering manufacturing
  4. Primary sector agriculture

Explanation

BPO is a classic IT-enabled service where processes such as customer support are delivered using IT infrastructure for a client. Agriculture, manufacturing and construction are not IT-enabled service activities.

Question 3Information Technology / IT-enabled Services (NSQF vocational trade)

Which keyboard shortcut is commonly used in Windows to copy the selected text to the clipboard?

  1. Ctrl + Z
  2. Ctrl + C Correct answer.
  3. Ctrl + V
  4. Ctrl + X

Explanation

Ctrl + C copies the current selection to the clipboard without removing it from the source. Ctrl + X cuts, Ctrl + V pastes, and Ctrl + Z undoes the last action.

Question 4Information Technology / IT-enabled Services (NSQF vocational trade)

In a spreadsheet used for an IT asset register, which function would you use to add the values in cells B2 to B20?

  1. =COUNT(B2:B20)
  2. =MAX(B2:B20)
  3. =SUM(B2:B20) Correct answer.
  4. =AVERAGE(B2:B20)

Explanation

The SUM function adds all numeric values in the given range, so =SUM(B2:B20) returns the total. AVERAGE gives the mean, COUNT counts numeric entries, and MAX returns the largest value.

Question 5Information Technology / IT-enabled Services (NSQF vocational trade)

Which of the following is the strongest example of a good password for a workplace login?

  1. password123
  2. Punjab@2024
  3. T7#kLm9$qR2v Correct answer.
  4. abcdefgh

Explanation

A strong password mixes upper and lower case letters, digits and symbols and avoids dictionary words or predictable patterns. T7#kLm9$qR2v satisfies length and complexity, while the others are weak or guessable.

Question 6Information Technology / IT-enabled Services (NSQF vocational trade)

What does the term 'confidentiality' mean in an information security policy?

  1. Ensuring data is never modified by anyone
  2. Ensuring data is available whenever authorised users need it
  3. Ensuring information is accessible only to authorised people Correct answer.
  4. Ensuring all data is stored only on paper

Explanation

Confidentiality means information is disclosed only to authorised persons. Availability concerns timely access, and integrity concerns accuracy and prevention of unauthorised modification.

Question 7Information Technology / IT-enabled Services (NSQF vocational trade)

In an IT/ITeS office, which action best demonstrates professional email etiquette when replying to a client?

  1. Write the entire reply in capital letters for emphasis
  2. Reply to all recipients including unrelated mailing lists
  3. Attach large files without mentioning them in the body
  4. Use a clear subject line and a courteous, concise message Correct answer.

Explanation

Professional email etiquette requires a meaningful subject, courteous and concise language, and clarity about attachments. Shouting in capitals, spamming lists, and unexplained large attachments are poor practice.

Question 8Information Technology / IT-enabled Services (NSQF vocational trade)

Which of these is the correct way to refer to the unique address that identifies a device on a network?

  1. Clipboard
  2. Screen resolution
  3. File extension
  4. IP address Correct answer.

Explanation

An IP address is the logical address assigned to a device so it can send and receive data on a network. File extensions, screen resolution and the clipboard are unrelated to network addressing.

Question 9Information Technology / IT-enabled Services (NSQF vocational trade)

A support agent receives a ticket, identifies the user's issue, and records the resolution steps in the ticketing tool. Which stage of the incident management lifecycle does recording the resolution steps represent?

  1. Change management approval
  2. Capacity planning
  3. Incident logging and documentation Correct answer.
  4. Incident identification

Explanation

Recording details and resolution steps in the ticketing tool is part of incident logging and documentation, which builds a knowledge base. Change approval and capacity planning are separate processes.

Question 10Information Technology / IT-enabled Services (NSQF vocational trade)

A user reports that their computer is running very slowly after installing new software. As a first-line support agent, what is the most appropriate first step?

  1. Ask the user clarifying questions and check recent changes Correct answer.
  2. Immediately reinstall the operating system
  3. Ignore the ticket as slow performance is normal
  4. Escalate to the hardware vendor without any checks

Explanation

First-line support should gather information and check recent changes such as new software before taking drastic action. Reinstalling the OS or blind escalation wastes resources and may lose data.

Question 11Information Technology / IT-enabled Services (NSQF vocational trade)

In a database table of employees, which field is most suitable as the primary key?

  1. Employee name
  2. Department name
  3. Employee ID Correct answer.
  4. Date of joining

Explanation

A primary key must uniquely identify each row and should not change. Employee ID is unique and stable, whereas names, departments and joining dates can repeat or change.

Question 12Information Technology / IT-enabled Services (NSQF vocational trade)

A company wants all its office computers to use the same security settings and desktop configuration. Which approach is most appropriate?

  1. Ask each employee to choose their own settings
  2. Configure each machine manually one by one
  3. Disable all security settings to avoid conflicts
  4. Apply a centralised policy through a directory service Correct answer.

Explanation

Centralised directory services such as Active Directory let administrators push consistent policies to many machines. Manual per-machine configuration is slow and error-prone, and disabling security is harmful.

Question 13Information Technology / IT-enabled Services (NSQF vocational trade)

In word processing, what is the main purpose of using styles such as Heading 1 and Heading 2?

  1. To convert the document into a spreadsheet
  2. To encrypt the document with a password
  3. To compress images inside the document
  4. To apply consistent formatting and enable automatic table of contents Correct answer.

Explanation

Styles apply consistent formatting and let the application build an automatic table of contents and navigation pane. They do not handle encryption, image compression or spreadsheet conversion.

Question 14Information Technology / IT-enabled Services (NSQF vocational trade)

A phishing email typically tries to trick a user into doing which of the following?

  1. Installing approved antivirus software
  2. Revealing credentials through a fake login link Correct answer.
  3. Updating the operating system from official settings
  4. Backing up data to an approved server

Explanation

Phishing uses deceptive messages and fake links to steal credentials or personal data. Legitimate updates, backups and approved software come from official channels, not unsolicited links.

Question 15Information Technology / IT-enabled Services (NSQF vocational trade)

Which protocol is used primarily to securely transfer files over a network with encryption?

  1. SFTP Correct answer.
  2. SMTP
  3. FTP
  4. HTTP

Explanation

SFTP runs over SSH and encrypts both credentials and data during file transfer. Plain FTP lacks encryption, HTTP is for web pages, and SMTP is for sending email.

Question 16Information Technology / IT-enabled Services (NSQF vocational trade)

A customer is angry about a delayed resolution. Which response best reflects good customer service in an IT/ITeS setting?

  1. Argue that the delay was the customer's fault
  2. Transfer the call repeatedly without explanation
  3. Listen actively, apologise for the delay, and give a realistic timeline Correct answer.
  4. Promise an immediate fix you cannot guarantee

Explanation

Good service means active listening, acknowledging the problem sincerely, and giving an honest, realistic timeline. Arguing, blind transfers and false promises damage trust.

Question 17Information Technology / IT-enabled Services (NSQF vocational trade)

Which of the following best describes the purpose of a Service Level Agreement (SLA) in an IT/ITeS contract?

  1. It specifies the colour scheme of the office building
  2. It replaces the need for any documentation
  3. It lists the personal hobbies of the support staff
  4. It defines the agreed service standards such as response and resolution times Correct answer.

Explanation

An SLA formally records measurable service commitments such as response times, uptime and resolution targets between provider and client. It does not cover staff hobbies, office decor, or remove documentation needs.

Question 18Information Technology / IT-enabled Services (NSQF vocational trade)

In a spreadsheet, a column of invoice amounts contains some text entries. Which function best counts only the numeric entries?

  1. SUM
  2. LEN
  3. COUNT Correct answer.
  4. COUNTA

Explanation

COUNT counts only cells containing numbers, ignoring text and blanks, which suits counting numeric invoice amounts. COUNTA counts all non-empty cells, SUM adds values, and LEN returns text length.

Question 19Information Technology / IT-enabled Services (NSQF vocational trade)

Which of the following is an example of an operating system used on desktop computers?

  1. Adobe Photoshop
  2. Windows 11 Correct answer.
  3. Google Chrome
  4. Microsoft Word

Explanation

Windows 11 is an operating system that manages hardware and provides a platform for applications. Word and Photoshop are applications, and Chrome is a web browser.

Question 20Information Technology / IT-enabled Services (NSQF vocational trade)

A company stores customer data in a cloud service. Which practice best supports data privacy compliance?

  1. Disabling logging to save storage space
  2. Granting access on a least-privilege basis with audit logs Correct answer.
  3. Sharing the data with all employees by default
  4. Using one shared password for the whole team

Explanation

Least-privilege access limits data exposure, and audit logs provide accountability and traceability, both of which support privacy compliance. Broad sharing, disabled logs and shared passwords increase risk.

Question 21Information Technology / IT-enabled Services (NSQF vocational trade)

A support team notices that the same printer fault recurs every Monday morning. Which action is most aligned with problem management rather than incident management?

  1. Close each ticket as resolved without investigation
  2. Replace the printer whenever a user reports a fault
  3. Restart the printer each Monday when users complain
  4. Analyse the recurring pattern and implement a permanent fix Correct answer.

Explanation

Problem management seeks root causes and permanent fixes for recurring incidents, whereas incident management restores service quickly. Repeated restarts or blind replacement treat symptoms without removing the cause.

Question 22Information Technology / IT-enabled Services (NSQF vocational trade)

An employee receives an email from a lookalike domain asking to urgently transfer funds. Which combination of checks best verifies authenticity before acting?

  1. Check the sender's full domain, confirm through a separate known phone number, and follow the approval process Correct answer.
  2. Trust the message because it uses the company logo
  3. Forward the request to a colleague and act if they agree
  4. Reply to the email asking the sender to confirm they are genuine

Explanation

Verifying the exact domain, using an independent known contact channel, and following formal approval processes defend against business email compromise. Replying to the suspicious email or trusting logos is unsafe.

Question 23Information Technology / IT-enabled Services (NSQF vocational trade)

A junior developer is asked to store user passwords. Which approach is the correct security practice?

  1. Encrypt passwords with a key kept in the same table
  2. Store a salted hash generated with a strong algorithm Correct answer.
  3. Store passwords in plain text for easy recovery
  4. Email passwords to the administrator for backup

Explanation

Passwords should be stored as salted hashes using a strong, slow algorithm so that original values cannot be recovered even if the database leaks. Plain text, emailing and storing the key alongside the data all defeat protection.

Question 24Information Technology / IT-enabled Services (NSQF vocational trade)

A team must back up critical data so that recovery is possible after a ransomware attack. Which strategy is most robust?

  1. Rely only on the recycle bin for deleted files
  2. Keep a single backup on the same drive as the live data
  3. Maintain offline or immutable backups tested with periodic restore drills Correct answer.
  4. Back up once a year and never test restoration

Explanation

Offline or immutable backups prevent ransomware from encrypting the copies, and restore drills prove that recovery actually works. Same-drive backups, the recycle bin and untested annual backups are unreliable.

Question 25Information Technology / IT-enabled Services (NSQF vocational trade)

When writing a formal report in a word processor for a client, which feature is most appropriate for listing references at the end with consistent numbering?

  1. Applying random font colours to each entry
  2. Using an automatic numbered list or citation feature Correct answer.
  3. Manually typing numbers and updating them by hand
  4. Inserting a screenshot of the references

Explanation

Automatic numbered lists and citation tools keep numbering consistent and update when entries are added or removed. Manual numbering is error-prone, and screenshots or random colours harm readability.

Question 26Information Technology / IT-enabled Services (NSQF vocational trade)

In an IT/ITeS workplace, which type of software licence allows an organisation to install a program on a fixed number of computers while keeping the total installations controlled?

  1. Open source licensing
  2. Freeware licensing
  3. Volume licensing Correct answer.
  4. Public domain licensing

Explanation

Volume licensing is designed for organisations that need to install software on many machines under one agreement with a defined seat count. Freeware and open source licences are about cost and source availability rather than controlling a fixed installation count. Public domain software has no ownership restrictions at all.

Question 27Information Technology / IT-enabled Services (NSQF vocational trade)

A helpdesk agent needs to log a caller's problem so that another shift can continue the work. Which element is most essential in the ticket record?

  1. The colour of the faulty device
  2. A clear description of the issue and the actions already taken Correct answer.
  3. The agent's personal opinion of the caller
  4. The caller's favourite browser

Explanation

A useful ticket must let the next agent understand the problem and avoid repeating work, so the issue description and completed actions are essential. Personal opinions, browser preference and device colour do not help diagnose or continue the case. Clear documentation is the basis of continuity in IT/ITeS support.

Question 28Information Technology / IT-enabled Services (NSQF vocational trade)

Which unit is commonly used to express the speed of a computer's processor?

  1. Gigahertz Correct answer.
  2. Megabyte
  3. Milliampere
  4. Kilobit

Explanation

Processor clock speed is measured in hertz, and modern CPUs are rated in gigahertz, meaning billions of cycles per second. Megabyte and kilobit measure data size or transfer, not clock cycles. Milliampere measures electric current.

Question 29Information Technology / IT-enabled Services (NSQF vocational trade)

In a spreadsheet used for IT asset tracking, which formula adds the values in cells B2 to B10 only when the asset status in column C equals 'Active'?

  1. =SUM(B2:B10)
  2. =AVERAGE(B2:B10)
  3. =SUMIF(C2:C10,"Active",B2:B10) Correct answer.
  4. =COUNTIF(C2:C10,"Active")

Explanation

SUMIF tests a range against a condition and adds the matching values from a separate sum range, which fits this requirement exactly. Plain SUM adds everything without checking status, and COUNTIF returns a count rather than a total. AVERAGE gives a mean, not a conditional sum.

Question 30Information Technology / IT-enabled Services (NSQF vocational trade)

An IT/ITeS company wants to reduce the risk of losing data if a single office building is damaged. Which measure directly addresses this risk?

  1. Storing all backups in the same server room
  2. Keeping off-site or cloud backups in addition to local copies Correct answer.
  3. Increasing the screen resolution of office monitors
  4. Changing the desktop wallpaper policy

Explanation

Keeping a copy in a separate location protects data when the primary site is lost, which is the core idea of geographic redundancy. Local-only backups fail together with the building. Display and wallpaper settings have no bearing on data survivability.

Question 31Information Technology / IT-enabled Services (NSQF vocational trade)

Which statement correctly describes the role of a router in a small office network?

  1. It converts digital signals into printed pages
  2. It forwards data packets between different networks and chooses a path for them Correct answer.
  3. It permanently stores the files shared by all users
  4. It supplies electrical power to desktop computers

Explanation

A router works at the network layer, forwarding packets between networks and selecting paths using routing information. Printing is done by a printer, shared file storage by a file server, and power by a power supply unit or UPS. Each device has a distinct function.

Question 32Information Technology / IT-enabled Services (NSQF vocational trade)

A field technician is asked to connect a new desktop to the office LAN using a cable. Which connector type is most commonly used with the Ethernet port on the computer?

  1. 3.5 mm audio jack
  2. USB-C
  3. HDMI
  4. RJ-45 Correct answer.

Explanation

Ethernet twisted-pair cabling terminates in the RJ-45 connector, which fits the standard network port on a desktop. USB-C, HDMI and audio jacks serve other purposes such as peripherals, video and sound. Matching the connector to the port is a basic hardware skill.

Question 33Information Technology / IT-enabled Services (NSQF vocational trade)

Which file extension typically identifies a compressed archive that must be extracted before its contents can be used?

  1. .txt
  2. .zip Correct answer.
  3. .mp3
  4. .html

Explanation

The .zip extension marks an archive that bundles and compresses files, so it must be extracted before use. Text, audio and web page files are used directly and are not archives. Recognising file types helps agents guide users correctly.

Question 34Information Technology / IT-enabled Services (NSQF vocational trade)

A user's laptop connects to the office Wi-Fi but cannot reach any website, while a colleague's laptop on the same Wi-Fi works normally. Which troubleshooting step should the agent try first?

  1. Ask the internet service provider to change the office plan
  2. Reinstall the operating system on the user's laptop
  3. Check the laptop's IP configuration and renew its address Correct answer.
  4. Replace the office wireless access point

Explanation

Since other devices work on the same network, the fault is likely local to the affected laptop, such as an invalid or stale IP address. Renewing the address and checking configuration is a quick, low-risk first step. Replacing hardware or reinstalling the OS is disproportionate before basic checks.

Question 35Information Technology / IT-enabled Services (NSQF vocational trade)

When a support agent must escalate a technical issue to the second-line team, what makes the handover most effective?

  1. Waiting until the user calls again before escalating
  2. Forwarding the user's entire mailbox
  3. Sending only the ticket number with no context
  4. Summarising the symptoms, steps already tried, and any error messages Correct answer.

Explanation

A good escalation gives the receiving team enough context to act without repeating diagnostics, so symptoms, attempted fixes and error text are essential. A bare ticket number forces rework, and forwarding unrelated mail or delaying the handover wastes time. Structured handover is a core IT/ITeS practice.

Question 36Information Technology / IT-enabled Services (NSQF vocational trade)

In a relational database for an IT service desk, which relationship best represents one customer raising many separate tickets over time?

  1. One-to-many Correct answer.
  2. One-to-one
  3. Many-to-many with no linking table
  4. No relationship at all

Explanation

A single customer can be linked to multiple ticket records while each ticket belongs to one customer, which is a one-to-many relationship. One-to-one would allow only a single ticket per customer. Ignoring the relationship loses the ability to trace tickets to their owner.

Question 37Information Technology / IT-enabled Services (NSQF vocational trade)

A company must ensure that only authorised staff can view payroll records stored on a shared drive. Which control achieves this most directly?

  1. Printing the payroll records weekly
  2. Compressing the payroll files to save space
  3. Renaming the shared folder to an obscure name
  4. Assigning file and folder permissions based on job role Correct answer.

Explanation

Role-based permissions restrict access to files according to a person's duties, which is the direct technical control for confidentiality. Compression, obscure names and printing do not prevent unauthorised viewing and may increase exposure. Access control is a fundamental security principle.

Question 38Information Technology / IT-enabled Services (NSQF vocational trade)

Which practice best protects a laptop's data if the device is stolen while an employee is travelling?

  1. Enabling full-disk encryption with a strong login password Correct answer.
  2. Keeping the laptop logged in with no screen lock
  3. Saving all files on the desktop for quick access
  4. Disabling automatic updates to save battery

Explanation

Full-disk encryption makes the stored data unreadable without the correct credentials, so theft does not automatically expose information. Leaving the device unlocked removes even the basic barrier. Desktop storage and disabled updates add risk instead of reducing it.

Question 39Information Technology / IT-enabled Services (NSQF vocational trade)

In a word processor, a user wants the same company footer to appear automatically at the bottom of every page of a long document. Which feature should be used?

  1. Adding a footer to the document's header and footer section Correct answer.
  2. Inserting a text box on each page manually
  3. Using the spell-check tool
  4. Typing the footer at the end of the last page only

Explanation

The header and footer area is designed to repeat content automatically across all pages, including newly added ones. Manual text boxes must be redone on every page and can shift out of place. Typing at the end affects only one page and spell-check has no layout role.

Question 40Information Technology / IT-enabled Services (NSQF vocational trade)

Which statement correctly distinguishes a LAN from a WAN in an IT/ITeS context?

  1. A LAN covers a small area such as one office, while a WAN spans large geographic distances Correct answer.
  2. A LAN and a WAN are identical in scope
  3. A WAN is limited to a single room, while a LAN connects cities
  4. A LAN always uses wireless links, while a WAN always uses fibre

Explanation

The key distinction is geographic scope: a LAN serves a limited area like a building, while a WAN links sites across cities or countries. The choice of medium is independent of the LAN or WAN label. Treating the two as identical ignores their different scale and management.

Question 41Information Technology / IT-enabled Services (NSQF vocational trade)

A client asks for a weekly report of all unresolved tickets older than seven days. Which spreadsheet approach produces this most reliably?

  1. Manually scanning the ticket list each week
  2. Deleting old tickets so the list looks shorter
  3. Filtering the ticket data by status and age, then counting the results Correct answer.
  4. Sorting tickets by the agent's name only

Explanation

Filtering on status and age isolates exactly the tickets that meet both conditions, and counting them gives the required figure. Manual scanning is error-prone and slow, while deleting records destroys evidence. Sorting by agent name does not apply the age or status criteria.

Question 42Information Technology / IT-enabled Services (NSQF vocational trade)

An IT/ITeS team is asked to reduce paper use in its documentation workflow. Which change has the greatest direct impact?

  1. Using smaller font sizes on printed pages
  2. Printing in draft mode instead of normal mode
  3. Replacing colour printers with black-and-white printers
  4. Switching routine approvals and forms to a digital document system Correct answer.

Explanation

Moving approvals and forms to a digital workflow removes most printing at its source, which is the largest direct reduction. Draft mode, smaller fonts and monochrome printing only trim paper use slightly. Source elimination beats incremental efficiency gains.

Question 43Information Technology / IT-enabled Services (NSQF vocational trade)

Which action best demonstrates respect for data minimisation when a service desk collects caller details?

  1. Collecting only the information needed to resolve and record the issue Correct answer.
  2. Storing caller details indefinitely on personal devices
  3. Collecting every possible detail in case it is useful later
  4. Sharing caller details with all colleagues by email

Explanation

Data minimisation means collecting only what is necessary for the stated purpose, which reduces privacy risk and storage burden. Collecting everything, broadly sharing details and storing data indefinitely on personal devices all increase exposure. The principle is central to privacy-aware IT/ITeS work.

Question 44Information Technology / IT-enabled Services (NSQF vocational trade)

A user reports that a spreadsheet formula shows #REF! after rows were deleted. What does this error most likely indicate?

  1. The formula refers to a cell or range that no longer exists Correct answer.
  2. The printer driver is out of date
  3. The keyboard layout has changed
  4. The file has been saved in the wrong language

Explanation

The #REF! error appears when a formula points to a cell or range that has been removed, so the reference is invalid. Language, printer drivers and keyboard layout do not affect formula references. Correcting or restoring the reference clears the error.

Question 45Information Technology / IT-enabled Services (NSQF vocational trade)

An organisation wants a single sign-on experience so staff use one set of credentials for several internal applications. Which technology supports this requirement?

  1. A shared generic password for all staff
  2. Disabling passwords in favour of no authentication
  3. A central directory service with identity federation Correct answer.
  4. A separate local account on each application server

Explanation

A central directory combined with identity federation lets users authenticate once and access multiple applications through trust relationships. Separate local accounts force multiple logins, shared passwords destroy accountability, and removing authentication is unsafe. Centralised identity is the standard approach.

Question 46Information Technology / IT-enabled Services (NSQF vocational trade)

During a malware incident, why should an analyst capture volatile evidence such as running processes and memory contents before powering off the machine?

  1. Because powering off improves the accuracy of memory contents
  2. Because shutting down automatically removes all malware
  3. Because volatile data is lost when the system is shut down Correct answer.
  4. Because volatile data is stored permanently on the hard disk

Explanation

Memory and running process information exist only while the system is powered, so they disappear on shutdown. Capturing them first preserves evidence that may explain how the malware operated. Powering off does not improve memory accuracy or guarantee malware removal.

Question 47Information Technology / IT-enabled Services (NSQF vocational trade)

A developer must let a web application query a database without embedding the database administrator's credentials in the source code. Which approach is most appropriate?

  1. Hard-coding the administrator password in a configuration file committed to the repository
  2. Creating a limited-privilege application account and storing its secret in a secure vault Correct answer.
  3. Using the administrator account but changing its password monthly
  4. Publishing the credentials in project documentation for transparency

Explanation

A dedicated account with only the privileges the application needs limits damage if compromised, and a secret vault keeps credentials out of source control. Hard-coding or documenting credentials exposes them widely, while merely rotating an over-privileged account still leaves excessive rights. Least privilege plus secret management is the sound design.

Question 48Information Technology / IT-enabled Services (NSQF vocational trade)

A team migrating an on-premises service to cloud infrastructure must decide how to handle peak load cost-effectively. Which design choice best matches this goal?

  1. Running all workloads on a single fixed server
  2. Provisioning permanently for the highest possible peak
  3. Disabling monitoring to reduce overhead
  4. Using automatic scaling so capacity follows demand Correct answer.

Explanation

Automatic scaling adds capacity during peaks and releases it afterwards, so cost tracks actual demand rather than worst-case forecasts. Permanent peak provisioning wastes money during quiet periods, and a single fixed server cannot absorb load. Monitoring should be kept to verify behaviour.

Question 49Information Technology / IT-enabled Services (NSQF vocational trade)

An auditor finds that several employees share one login for a ticketing system. Which risk is the most significant consequence?

  1. The system will run more slowly for all users
  2. Actions cannot be reliably attributed to an individual Correct answer.
  3. The ticket database will automatically lose records
  4. The shared password will become shorter over time

Explanation

Shared credentials break the link between an action and a person, so audit logs cannot prove who did what. Performance, data loss and password length are not direct consequences of sharing an account. Accountability is the core reason each user needs a unique identity.

Question 50Information Technology / IT-enabled Services (NSQF vocational trade)

A support team wants to measure whether it is meeting agreed response times. Which metric is most directly relevant?

  1. The number of keyboards replaced this month
  2. The total floor area of the office
  3. The average age of the team's laptops
  4. The percentage of tickets first responded to within the agreed time Correct answer.

Explanation

Response-time compliance is measured by comparing actual first-response times with the agreed target, usually as a percentage met. Hardware counts, laptop age and office size say nothing about service responsiveness. Choosing metrics tied to the agreement keeps reporting meaningful.