CLEARANCE INTELLIGENCE
Decode CompTIA exam objectives, multiple-choice wording, distractor traps, and PBQ strategy for A+, Network+, Security+, and CySA+ certification prep.
Exam Objectives: Your Roadmap to the Test
The official exam objective sheet is the blueprint for your certification exam. It organizes the knowledge and skills the exam covers into domains, then breaks those domains into specific objectives and topics. Think of it as the map: your books, videos, labs, and practice questions are the tools that help you travel it.
Start here before you start studying. Without the map, it is easy to spend hours on familiar topics while missing an entire area you will need. The objective sheet gives your preparation direction and turns "I think I am ready" into a checklist you can actually work through.
01 / Match Your Exam
Check the exam code and version against the test you plan to take. Certifications change; an older objective sheet can leave you studying the wrong scope or missing newly added topics.
02 / Read the Domains
Domains group related skills. Their percentage weights show the exam's overall emphasis, not a guaranteed number of questions. Give larger domains appropriate study time without ignoring the smaller ones.
03 / Follow the Verbs
"Identify" asks you to recognize something. "Compare" asks you to tell options apart. "Configure" or "troubleshoot" calls for application. Match your practice to the action, not just the vocabulary.
04 / Track Your Gaps
Mark each objective as new, learning, or ready. Link it to your notes and practice. Before marking it ready, explain it in your own words and demonstrate the skill or solve a relevant scenario.
Make it your weekly checkpoint: choose a weak objective, learn the concept, practice it, review your mistakes, and check it again. A strong practice score is useful; knowing which objectives you still cannot explain is useful too.
The sheet is a study blueprint, not a list of actual exam questions or a complete textbook. Use the official document for your exam version alongside the BB Tech Tools companion paths below.
Objective breakdowns are free with a free account.
CompTIA Question Strategy Before You Drill
Clearances are where learners build exam efficiency. If you do not learn the language of IT (acronyms + full terms), you will burn time decoding questions instead of solving them. This section trains acronym fluency, distractor elimination, and faster reading strategy so you can make accurate decisions under the test clock.
Multiple Choice Question Strategy
CompTIA MCQs test your ability to filter relevant symptoms from environmental "noise". Identifying the Intent and Assigned Role is required before pulling the trigger.
INTENT RECOGNITION
- Symptom-Based: Identify the most likely cause from observed behavior.
- Procedure-Based: Choose the correct next workflow step in a standard methodology.
- Definition-with-a-Twist: Logic and situational understanding over rote memorization.
- Constraint-Scenario: Explicit rules that limit otherwise correct answers, such as using "least-privilege".
ROLE-BASED PERSPECTIVE
- Help Desk: Focus on safe, reversible, and documented troubleshooting actions.
- Administrator: Focus on configuration, organizational policy, and access control.
- Security Analyst: Focus on least privilege, auditability, and defense-in-depth.
- Network Tech: Focus on layered troubleshooting and protocol awareness.
Distractor Engineering & Elimination
CompTIA distractors are "technically correct but contextually wrong". Defeat them by identifying these three traps:
- Correct Outcome, Wrong Order: Choosing a fix that eventually needs to happen but isn't the immediate next step.
- Overkill Solutions: Choosing an enterprise-grade fix for a simple home office (SOHO) problem.
- Legacy Traps: Choosing outdated technology (like WEP) when modern standards are available.
| Keyword | Tactical Implication | Strategy Tip |
|---|---|---|
| BEST / MOST | Several options may sound plausible; choose the one that best meets the stated requirements. | Compare each option and eliminate less effective or outdated choices. |
| FIRST / INITIAL | Emphasizes the starting point in a process or troubleshooting step. | Think about gathering information or checking physical connections first. |
| LAST / FINAL | Indicates the end or final step in a process. | Look for answers representing a concluding action or full resolution. |
| LEAST / EXCEPT / NOT | Requires finding the one option that does NOT fit the others. | Tests your knowledge of what is typical versus what is expected. |
| PRIMARY / PRIMARY PURPOSE | Focuses on the main reason, function, or cause for an action or tool. | Identify the fundamental purpose of the item (e.g., NAT or UPS). |
| MINIMUM / MAXIMUM | Asks about the smallest or largest value, setting, or requirement. | Recall system requirements or hardware tolerances. |
| ADVANTAGE / DISADVANTAGE | Points to comparing benefits or drawbacks of a specific technology. | Recognize the pros and cons of common IT solutions like VPNs. |
| BENEFIT | Asks about the positive aspects of a solution or process. | Look for answers emphasizing performance, reliability, or experience. |
| MOST LIKELY | Calls for the probable option in a given scenario, not necessarily a guarantee. | Identify the most typical or frequently occurring reason for the issue. |
10-SECOND TRIAGE
Start by ruling out options that don’t fit the scenario. Compare the remaining choices against Scope, Risk, and Simplicity. If you’re stuck, mark it for review and come back with a fresh look.
Field Drills: Applying The Logic
DRILL 01: Wi-Fi SECURITY (BEST / MOST)
Your company is setting up a secure Wi-Fi network for employees. The IT manager wants to ensure the highest level of security while maintaining usability. Several security measures are being considered, including MAC address filtering, SSID hiding, and signal reduction. What is the BEST method to secure the Wi-Fi network?
Correct Answer: A) Use WPA3-Personal with a strong passphrase
Analysis: WPA3-Personal provides modern authentication and encryption. MAC addresses and hidden network names can be discovered or spoofed, and reduced transmit power does not authenticate clients. For a managed enterprise network, evaluate WPA3-Enterprise and 802.1X against organizational requirements.
DRILL 02: CONNECTIVITY (FIRST / INITIAL)
A laptop is connected to the expected Wi-Fi network, but it cannot open internal or internet sites. Other clients on the same network work. You have confirmed the reported symptoms. Which diagnostic action should you take FIRST before changing settings?
Correct Answer: D) Inspect the laptop's IP address and gateway
Analysis: A valid Wi-Fi association does not prove that the client has a usable IP address, gateway, or DNS settings. Inspect the current configuration before changing it. Restarting or replacing equipment removes evidence or expands the impact without identifying the cause.
DRILL 03: DECOMMISSIONING (LAST / FINAL)
A company is retiring a drive that held confidential employee data. Its disposal policy requires an approved physical destruction method after data sanitization. Which action should the technician perform LAST before documenting disposal?
Correct Answer: C) Destroy the drive using the approved method
Analysis: The scenario explicitly requires physical destruction under the disposal policy. Use the approved destruction method and document the result. Formatting or removing partitions is not sanitization. Validated sanitization methods can be appropriate in other scenarios; destruction is not universally required.
DRILL 04: AUTHENTICATION (LEAST / EXCEPT / NOT)
Your team is reviewing security measures for protecting systems against unauthorized access. You are given a list of options and need to identify which one is NOT considered an effective security measure.
Correct Answer: A) Retain the original administrator password
Analysis: Known default administrator credentials make unauthorized access easier. Replace defaults before use and apply least privilege. The other options strengthen authentication or accountability rather than leaving a known credential in place.
DRILL 05: POWER PROTECTION (PRIMARY)
A company wants to protect its critical business systems from power outages. The IT director has requested a solution that provides temporary power to allow safe shutdowns. What is the PRIMARY reason for using an Uninterruptible Power Supply (UPS)?
Correct Answer: B) Keep the equipment powered for a safe shutdown
Analysis: A UPS supplies short-term battery power when utility power fails, giving supported equipment time to shut down safely. Runtime depends on load and battery condition. It does not replace cooling, network design, or capacity planning.
DRILL 06: SYSTEM REQUIREMENTS (MINIMUM / MAXIMUM)
A technician is preparing to install Windows 11 (64-bit) on a workstation. The system currently has 2GB of RAM installed. What is the MINIMUM amount of RAM required to install Windows 11 (64-bit)?
Correct Answer: D) 4 GB
Analysis: Microsoft lists 4 GB of RAM as the minimum for Windows 11. This is an installation requirement, not a recommendation for every workload. Check the processor, storage, firmware, TPM, and other requirements too.
DRILL 07: REMOTE ACCESS (ADVANTAGE / DISADVANTAGE)
A company is considering using a VPN to secure remote employee access to internal systems. The IT director asks about potential drawbacks. What is a key DISADVANTAGE of using a VPN?
Correct Answer: C) It can add latency and reduce available throughput
Analysis: Tunnel encapsulation, encryption, and the path through the VPN endpoint can add latency or reduce throughput. This is a potential performance tradeoff, not a guaranteed slowdown. Protection applies to the tunnel; a VPN does not make every website or endpoint safe.
DRILL 08: STORAGE (BENEFIT)
A system administrator is setting up RAID 5 on a server to ensure data protection and performance optimization. What is a key BENEFIT of implementing RAID 5?
Correct Answer: A) It tolerates one failed drive using distributed parity
Analysis: RAID 5 uses distributed parity and can tolerate one drive failure. Usable capacity is approximately (N - 1) times the smallest drive capacity in a uniform array. Parity writes have a cost, a rebuild creates risk, and RAID is not a backup.
DRILL 09: NETWORKING (PRIMARY PURPOSE)
Your company is configuring Network Address Translation (NAT) on a router to allow multiple employees to access the internet using a single external IP. Which function lets these devices share that address using NAT overload (PAT)?
Correct Answer: D) Share a public address by translating source ports
Analysis: Port address translation (PAT), often called NAT overload, lets multiple internal hosts share one public IPv4 address by tracking address and port mappings. NAT is the broader address-translation concept. Neither feature inherently encrypts traffic or increases bandwidth.
DRILL 10: TROUBLESHOOTING (MOST LIKELY)
A laptop shuts down during a demanding workload. Diagnostics show high CPU temperature, and the cooling fan is not spinning. The battery is charged. What is the MOST LIKELY cause?
Correct Answer: B) A cooling problem causing thermal protection
Analysis: High CPU temperature and a failed or obstructed cooling fan point to a thermal protection shutdown. Inspect cooling and airflow safely before replacing components. Account, printer, and DNS problems do not explain the temperature reading and abrupt power loss.
PBQ Strategy: Performance-Based Questions
A performance-based question (PBQ) drops you into a simulated environment and asks you to complete a task: configure a router, fix a printer, place devices on a network. In a multiple-choice question, you select. In a PBQ, you perform. That is why learners who ace practice tests can still stall on exam day. CompTIA doesn't publish its exact PBQ scoring. Focus on meeting every requirement, then check your work.
What a PBQ Looks Like on Screen
THE LAYOUT
- Scenario panel: the ticket. "A sales user can't print to the network printer. Diagnose and restore printing."
- Simulation window: the environment. A virtual desktop, a router config page, a topology, or a server rack.
- No hints: nothing tells you what to click. The simulation presents the task and waits.
THE TWO COMMON FORMATS
- Drag-and-drop: place the router, switch, access point, and modem on an office floor plan so the whole network works.
- Performance task: configure the real setting. Example: set a 12-character, complex, 60-day password policy after a brute-force attack.
Original examples by exam
- A+: a printer won't take network jobs. Check cabling, driver, print queue, and firewall on the workstation.
- Network+: one workstation can't reach the internet. Trace the path, check the switch, verify the router's DHCP settings.
- Security+: a server shows brute-force signs. Find the targeted service, isolate it, apply the right mitigation.
YOUR PBQ GAME PLAN
- Check the Setup: Compare your finished configuration with every requirement in the scenario.
- Work Through Each Task: If one part has you stuck, complete the parts you can and come back to it.
- Order Matters: Firewall rule order and boot priority affect how a system works. Check both when the task calls for them.
- Aim for Every Part: CompTIA doesn't publish its exact PBQ scoring, so don't count on a particular partial-credit formula.
COMMON TRAPS
- Red Herrings: Extra tools, icons, or menus may be provided but are not required.
- The One-Toggle Fail: Leaving a single VLAN or encryption toggle unchecked can invalidate a configuration.
- Default Dangers: PBQs often require changing a default setting like SSID security.
- Naming Conventions: Match the requested hostnames and SSIDs exactly so your setup meets the requirements.
PBQ Reading Strategy: The SysAdmin Ticket
Parse requirements like a technical ticket: Circle the Goal, Underline Constraints, and Identify Success Indicators.
| Phase | Tactical Action | Duration |
|---|---|---|
| Scan | Identify tabs, tools, and mission scope. | 90s |
| Execute | Perform only required tasks. Avoid "exploring". | 3-6m |
| Validate | Ping, check status lights, and review rule order. | 30s |
How to Train for the PBQ Section
- Redefine studying. For every concept, ask "how would I do this in a real environment?" Reading how to set a static IP is recognition; opening the adapter settings and doing it is skill.
- Practice in scenarios. Use the Simulations, then build your own: a free VirtualBox VM, an old router and switch, or your home router's config page. Break things on purpose, then fix them.
- Practice pacing. Try a timed round when you’re comfortable with the task. Notice where you slow down and review those steps afterward.
- Keep a mistake journal. Write down what you missed and why: skipped the physical layer, forgot to verify. Review it weekly. Your repeat mistakes are your study plan.
- Learn the mechanism, not the answer. Know why a DHCP pool needs 20 addresses and what breaks at 10. A dump can't teach click-paths or configuration steps; only doing them can.
- Repeat until it's automatic. You're ready when you see a scenario and already know your first diagnostic step.
ALWAYS VERIFY: Use the available terminal commands or status indicators to check your work when the task calls for it. Make verification part of every practice rep.
GIVE YOURSELF ROOM TO PRACTICE. Start with the free labs in Simulations and see which skills could use another round before exam day.
Clearances FAQ
What are BB Clearances?
Clearances are study briefings that explain CompTIA exam objectives, question types, distractor logic, and PBQ strategy before learners move into drills or simulations.
Which certification paths do Clearances support?
BB Tech Tools supports A+ Core 1, A+ Core 2, Network+, Security+, and CySA+, with objective sheets and related study paths for each.
How do Clearances connect to Drills?
Use Clearances to understand how questions are built, then use Drills to practice that logic with randomized practice questions and answer explanations.
How do Clearances help with PBQs?
The PBQ strategy section walks you through the task layout, reading requirements, common traps, and checking your work. CompTIA doesn't publish its exact PBQ scoring, so the goal is to get every part right.
Is this an official CompTIA resource?
No. BB Tech Tools is an independent study resource. Certification names are used only to identify supported study paths; no official endorsement or affiliation is implied.
LON: 0000
DEP: 0000