Cloud Infrastructure & Managed IT Services (MSP) Practice Test

Workstations joined to an AD domain maintain a secure channel with the Domain Controller using a computer account password that rotates automatically every 30 days. If a machine was restored from an old snapshot or offline during rotation, the machine account password gets out of sync, triggering this trust relationship error.

RTO (Recovery Time Objective) is the target time allotted to restore an outage before severe business impact occurs. In contrast, RPO (Recovery Point Objective) defines the maximum age of data that must be recovered (data loss threshold).

AWS Security Best Practices strictly mandate: lock down the AWS root account, enforce Multi-Factor Authentication (MFA) on all administrative users, and grant only the minimum permissions necessary (Least Privilege) using IAM Roles and Policies.

A Network Security Group (NSG) contains security rules that allow or deny inbound and outbound network traffic to several types of Azure resources, filtered by source/destination IP, port, and protocol.

An A Record maps a hostname to a 32-bit IPv4 address, while an AAAA Record (Quad-A) maps a hostname to a 128-bit IPv6 address. CNAME is an alias, and MX directs mail.

A Forward Lookup Zone translates friendly domain names into IP addresses. A Reverse Lookup Zone translates IP addresses back into hostnames, crucial for email server validation and network diagnostic utilities (nslookup).

According to ITIL v4: an Incident is an unplanned interruption or performance degradation requiring rapid restoration. A Problem is the underlying root cause of recurring incidents, investigated to prevent future occurrences.

Get-Service is the PowerShell cmdlet that retrieves objects representing the status and configuration of services on a local or remote computer.

SaaS (Software as a Service) provides complete, centrally hosted end-user applications delivered over the internet, where the cloud provider manages infrastructure, operating systems, patches, and runtime environments.

If IP-level connectivity is intact (raw IPs respond and route correctly) but domain names cannot be resolved, the workstation's DNS resolver is unreachable, misconfigured, or the DNS service has failed.

Routers drop broadcast packets by default. A DHCP Relay Agent intercepts client DHCP broadcasts on a local subnet and forwards them as unicast packets to a centralized DHCP server on another subnet, allowing one server to manage multiple network segments.

The 3-2-1 Backup Rule is the golden standard for data protection: retain 3 copies of important data (1 primary and 2 backups), stored on 2 different media formats (e.g. disk and cloud), with at least 1 copy held offsite/air-gapped against ransomware and physical disasters.