Errata

To cover the following exam objective:
1.0 PC Hardware
1.1 Configure and apply BIOS settings.
? Monitoring
o Bus speed

The following section is to be added on page 67 before the Security section:

Bus Speed
A bus is simply a circuit that connects one part of the motherboard to another. The more data a bus can handle at one time, the faster it allows information to travel. The speed of the bus, measured in megahertz (MHz), refers to how much data can move across the bus simultaneously.

Bus speed usually refers to the speed of the front side bus (FSB), which connects the CPU to the north bridge. FSB speeds can range from 66 MHz to over 800 MHz. Since the CPU reaches the memory controller though the north bridge, FSB speed can dramatically affect a computer's performance.

Here are some of the other busses found on a motherboard:
? The back side bus connects the CPU with the level 2 (L2) cache, also known as secondary or external cache. The processor determines the speed of the back side bus.
? The memory bus connects the north bridge to the memory.
? The IDE or ATA bus connects the south bridge to the disk drives.
? The AGP bus connects the video card to the memory and the CPU. The speed of the AGP bus is usually 66 MHz.
? The PCI bus connects PCI slots to the south bridge. On most systems, the speed of the PCI bus is 33 MHz. Also compatible with PCI is PCI Express, which is much faster than PCI but is still compatible with current software and operating systems. PCI Express is likely to replace both PCI and AGP busses.

The faster a computer's bus speed, the faster it will operate -- to a point. A fast bus speed cannot make up for a slow processor or chipset. You can monitor the bus speed through the mother board utilities. Additionally, many BIOS programs include tools that monitor the bus speed. For example, Figure 2-11 showed a BIOS page with the speed of the CPU and RAM based on the 133 MHz clock. Some BIOS programs also include the ability to modify the speeds and overclock the system.

To cover the following exam objective:
3.0 Laptops
3.1 Install and configure laptop hardware and components.
? Hardware/device replacement
o CPU

The following section is to be added on page 292 after the System section:

How to Replace Your Laptop CPU

If you need to replace the CPU on a laptop, ensure that you refer to the manual to identify the steps required for the specific laptop. The following generic steps apply to most laptops:

1. Remove the plastic panels.
2. Detach the keyboard.
3. Lift the heat sink.
4. Remove and replace the CPU.
5. Clean off the thermal paste.
6. Add new thermal paste.
7. Replace the heat sink.
8. Re-assemble the laptop.
9. Power up the system and check out.

To cover the following exam objective:
4.0 Troubleshooting
4.3 Given a scenario, troubleshoot hard drives and RAID arrays with appropriate tools.
? Tools
o FORMAT

The following section is to be added on page 559 before the Shares section:

Troubleshooting Hard Drives and RAID Arrays

The previous section covered many of the tools you can use with disks. In addition to knowing what the tools are, you should also know when to use them.

? Fdisk. If you need to install an older operating system that doesn?t include built-in tools to create partitions, you can use the fdisk program to create partitions. After the partitions are created, you need to format them. An undocumented feature with fdisk is the fdisk /mbr command that can be used to repair the master boot record on older operating systems. Newer operating systems include the Fixmbr command from the recovery console.
? Format. Use this on new disks and RAID arrays to prepare them with either the FAT32 or NTFS file system. If an existing disk is having problems, you can use chkdsk (or Check Disk) to locate bad sectors and fix errors on a disk. If there are many errors and you have a backup of the data, you can do a full format instead of using chkdsk. This will check the disk for bad sectors and mark all bad sectors so they won?t be used. While this step deletes all the data on the disk, you can restore the data from your backup.

To cover the following exam objective:
4.0 Troubleshooting
4.3 Given a scenario, troubleshoot hard drives and RAID arrays with appropriate tools.
? Tools
o FDISK

This topic is now covered by the text added to page 559, described in another errata item.

To cover the following exam objectives:
4.7 Given a scenario, troubleshoot common security issues with appropriate tools and best practices.
? Common symptoms
o Spam
o Renamed system files
o Files disappearing
o File permission changes
o Hijacked email

The following section is to be added on page 897 before the "Recognizing Other Security Threats" section:

Troubleshooting Common Security Issues

Once you?ve identified security issues or other problems, you need to take action to resolve them. The previous section, ?Removing Malware?, provided several steps you can take to remove known malware. However, there are times when you might need to take additional steps to overcome the problems.

? Spam. If a user is receiving an excessive amount of spam, you can show the user how to mark email as junk or spam so that it is automatically moved into the junk mail folder. Unsubscribing isn?t always effective. If the user tries to unsubscribe to email sent by an illegal spammer, the unsubscribe request confirms the email address to the spammer. The result is more spam for the user.

? Renamed system files. If malware renames system files, you need to either restore the original file, or rename it. You can also use the sfc /scannow command described in Chapter 14 to verify and repair all system files.

? Files disappearing. If files are disappearing, you need to first take steps to remove all malware on your system. Once you do, you can restore the files.

? File permission changes. Some malware attempts to protect itself by modifying permissions. For example, it might give itself full permission and block other access including the ability to delete it. One way you can resolve this is by booting into Safe Mode with the administrator account. You?ll then be able to restore the permissions from within Safe Mode.

? Hijacked email. A hijacked email account is one that is being used by an unauthorized person or by malware. In most cases, the attacker discovers the original password and starts using the email to send spam or malicious email to others. Users are typically informed by their friends that they are receiving spam from the hijacked account. The solution is to change the password of the account to something different and use a strong, complex password.

To cover the following exam objectives:
4.7 Given a scenario, troubleshoot common security issues with appropriate tools and best practices.
- Best practices for malware removal
o Remediate infected systems
? Update anti-virus software
? Scan and removal techniques (safe mode, pre-installation environment)

Amend item 4 (Remediate infected system) to read:

4. Remediate infected system. Update anti-virus software and remove malware from the system.
a. Update anti-virus software. Ensure that the antivirus software is up to date. If necessary, you might need to copy definition files from an uninfected system, but you
do not want to connect the infected system to the network or to the Internet.
b. Use scan and removal techniques. Next, use antivirus tools to scan and remove the malware. In some cases, the malware protects itself when the system is booted normally. If the antivirus software cannot remove the malware, boot into Safe Mode or a preinstallation environment as described earlier.