How to Use This App
Welcome to the Cyberpunk Chicago Netrunner Academy — your A+ Core 2 exam sprint tool.
Saving Your Progress
Your progress is automatically saved in your browser after every answer. However, browser storage can be cleared by cache wipes, different browsers, or private/incognito mode — and it does not sync across devices.
To keep your progress safe, always export a save file before closing:
- Click Export Save File in the left sidebar.
- Save the downloaded
.jsonfile somewhere you can find it. - Next time you open the app, click Import Save File and select that file to restore everything.
If you close without exporting and your browser storage is intact, your progress may still be there — but do not count on it.
What Each Section Does
Daily missions, XP level, readiness score, and weak areas at a glance.
Professor Messer A/B/C practice exam question banks. Timed or untimed.
15-question drills per CompTIA objective section, standard and hard mode.
Simulate a full or partial exam with randomized questions from all banks.
Every missed question lands here. Answer it correctly 3 times to clear it.
Type the command from memory. Builds muscle memory for CLI questions.
Flip-card review of key terms and concepts by objective.
Full Professor Messer lesson notes with search. Use when you miss a question.
You are ready. Click Dashboard to begin.
Cyberpunk Chicago Netrunner Academy
CompTIA A+ Core 2 sprint plan for your July 7 exam. Study fast, track weak areas, and only count answers when they are actually correct.
Daily Missions
Weak Areas
Quiz Grid
Quiz bank replaced with Professor Messer Practice Exam A/B/C questions only. Correct answer = green. Wrong answer = red. Wrong choices never count as correct.
Practice Exam Mode
Choose how many Professor Messer questions you want to practice. References stay visible so you can study the Messer answer section and open Research (PM) or Deeper Research (CM) when you miss one.
Wrong answers are saved automatically. If you answer a wrong-answer item correctly 3 times, it clears from the Wrong Answers deck.
Flashcards
Command Trainer
Choose a category, then type the command you would use.
Troubleshooting Scenarios
Table of Contents
Use TOC (PM) for Professor Messer course-note study sections and TOC (CM) for CertMaster deeper study sections. Click any topic to open the notes above the list.
Select a TOC item
Clicked sections will open here with the matching reference summary, keywords, and study guidance.
Wrong Answers Deck
Every wrong quiz or practice exam answer lands here. Get a missed question correct 3 times and it disappears from this deck.
Personal Notes
Saved automatically in this browser on this device.
VISUAL REFERENCE
Key tables and concept panels from all 4 exam domains + Password Attacks deep dive.
Defence in Depth — 6 Layers
Authentication — 3 Factors
- Something You Know — password, PIN, passphrase
- Something You Have — smart card, token, OTP, mobile app
- Something You Are — fingerprint, retina, face, voice
- MFA — combine two or more different factor types
- SSO — one auth, many services (SAML, OAuth, OIDC, Kerberos)
- Windows Hello — face/fingerprint/PIN backed by TPM
Active Directory
- ADDS — database of the entire network
- Objects — users, computers, printers, groups, OUs
- Kerberos — ticket-based authentication protocol
- GPOs — pushed domain-wide to all joined machines
- OUs — group objects; apply different GPOs per OU
- Domain join: Control Panel → System (needs Pro+)
Physical Controls (2.1)
- Mantraps/Airlocks — two-door entry; one person at a time
- Badge readers / RFID — proximity cards; access logs
- Biometrics — fingerprint, retina, face
- CCTV + Guards — deterrence + response capability
- Cable locks — Kensington locks for laptops
- Disposal — chain of custody document required
Logical Controls (2.1)
- Least Privilege — minimum access needed for the job
- ACLs — per-file/folder permission entries
- Account lockout — N failed attempts → lock
- Password policy — length, complexity, history, expiry
- Login time restrictions — business hours only
- Port security — disable unused switch ports
Wireless Encryption Standards (2.3) — WEP → WPA3
| Protocol | Encryption | Auth | Key Size | Status |
|---|---|---|---|---|
| WEP | RC4 | Open / Shared Key | 64/128-bit | ❌ BROKEN — never use |
| WPA | TKIP (RC4) | PSK or 802.1X | 128-bit | ⚠️ Weak — avoid |
| WPA2-Personal | AES-CCMP | Pre-Shared Key | 128-bit | ✅ Acceptable |
| WPA2-Enterprise | AES-CCMP | 802.1X / RADIUS | 128-bit | ✅ Strong — per-user |
| WPA3-Personal | AES-GCMP | SAE (replaces PSK) | 128-bit | ✅ Latest — forward secrecy |
| WPA3-Enterprise | AES-GCMP | 802.1X / RADIUS | 192-bit | ✅ Highest — 192-bit |
RADIUS / AAA: Authentication + Authorisation + Accounting. Enterprise WiFi uses RADIUS so each user authenticates individually via 802.1X — revoke one person without changing PSK for everyone.
Malware Types (2.4) — Know All 8
Attaches to files; requires user action to run/spread. Corrupts files, opens backdoors.
Self-replicates across networks without user action. Exploits OS/app vulnerabilities.
Looks legitimate. User installs it. Opens backdoors. Does NOT self-replicate.
Encrypts files; demands crypto. Double extortion: exfiltrate first. Spreads via phishing or RDP.
Silent background monitor. Captures keystrokes, passwords, credit cards, browsing habits.
Remote Access Trojan gives full control. Infected PCs join botnet for DDoS, spam, cryptomining.
Hides in OS, bootloader, or kernel. Extremely hard to detect. May survive reinstall if in firmware.
Dormant code triggered by date, event, or user action. Planted by insiders. Wipes data on trigger.
7-Step Malware Removal — Memorise In Order
Research type. Symptoms: unusual processes, encrypted files, pop-ups, high network activity, disabled security tools.
Physically disconnect cable AND disable WiFi. Stops spread and C&C communication.
Prevents malware hiding in restore points. Turn off on all infected volumes.
Reboot to Safe Mode. Run multiple anti-malware tools. Check startup items, scheduled tasks, registry run keys.
Update OS patches, anti-malware definitions, all apps. Schedule recurring scans. Change all passwords.
Re-enable on now-clean system. Create fresh restore point as clean baseline.
Explain how infection occurred. Train on phishing recognition, safe downloads, USB safety.
Social Engineering (2.5)
- Phishing — deceptive email; steal credentials or deliver malware
- Spear phishing — targeted, personalised phishing
- Whaling — phishing targeting CEO/CFO/C-suite
- Vishing — voice call phishing; fake IT support
- Smishing — SMS phishing; fake delivery alerts
- Impersonation — pose as IT staff / vendor
- Shoulder surfing — physically watch PIN entry
- Dumpster diving — recover credentials from trash
- Tailgating — follow authorised person through door
Technical Attacks (2.5)
- DoS/DDoS — overwhelm resources; DDoS uses botnet
- On-path (MITM) — intercept traffic; ARP poisoning
- Spoofing — forge IP, MAC, DNS, email identity
- Zero-day — exploit before patch; most dangerous
- SQL injection — malicious SQL in web forms
- XSS — inject scripts into trusted web pages
- Supply chain — compromise vendor software/hardware
- BEC — impersonate exec for wire transfers
SOHO Hardening (2.10)
- Change default router admin credentials immediately
- Update router firmware regularly
- WPA3 minimum (never WEP/WPA)
- Disable WPS — vulnerable to PIN brute-force
- Change default SSID name
- Enable guest network for IoT and visitors
- Disable remote management from internet
- Review port-forwarding rules
Data Destruction (2.9)
- Overwriting — DoD 5220.22-M (7 passes); HDDs only
- Degaussing — magnetic field; HDDs only; drive unusable after
- Cryptographic erase — destroy key; SSDs/NVMe; instant
- Physical shredding — NSA-certified; any media
- Incineration — highest security; certificate of destruction
- ⚠️ Overwrite does NOT reliably work on SSDs
- Document all disposal: chain of custody
Password Strength Guide
| Length | Charset | Crack Time |
|---|---|---|
| 6 chars | lowercase | Instant |
| 8 chars | lowercase | ~2 hours |
| 8 chars | mixed + symbols | ~8 hours |
| 10 chars | mixed + symbols | ~5 years |
| 12 chars | mixed + symbols | ~34,000 years |
| 16 chars | mixed + symbols | Centuries+ |
Key Vocabulary
- Hash
- One-way function converting password to fixed-length string
- Salt
- Random data added before hashing — defeats rainbow tables
- NTLM
- Windows auth protocol using MD4 hashes; vulnerable to Pass-the-Hash
- LSASS
- Windows process storing credential hashes in memory; Mimikatz target
- Credential Guard
- Windows feature isolating LSASS with virtualization-based security
- HSTS
- HTTP Strict Transport Security — forces HTTPS connections only
- bcrypt / Argon2
- Slow hash algorithms by design — resist brute-force attacks
⚡ Exam Quick Tips
- Dictionary ≠ Brute Force: Dictionary uses wordlists; brute force tries ALL combinations
- Credential stuffing requires prior breach data; password spraying does NOT
- Rainbow tables defeated by SALTING — not by password length
- Pass-the-Hash bypasses cracking — password complexity doesn't help
- Spear phishing is targeted; regular phishing is mass/opportunistic
- Keyloggers are passive during capture but active during installation
- FIDO2 keys are phishing-resistant — they verify the server's origin
- bcrypt/Argon2/scrypt are slow hashes by design — a feature, not a bug
Top 10 Defenses
- Use MFA (preferably FIDO2)
- Unique passwords per site
- Use a password manager
- Enable breach monitoring
- Use long passphrases (12+ chars)
- Rate-limit login attempts
- Salt & hash with bcrypt/Argon2
- Security awareness training
- HTTPS + HSTS everywhere
- Least-privilege access model
Attack Comparison Table
| Attack | Category | Skill | Detection | MFA Effect | Primary Defense |
|---|---|---|---|---|---|
| Dictionary | Technical-Offline | Beginner | Medium | High | Avoid common words; complexity |
| Brute Force | Technical-Offline | Beginner | Easy | High | Long passphrases; lockout; MFA |
| Hybrid | Technical-Offline | Intermediate | Medium | High | Avoid predictable mutations |
| Credential Stuffing | Technical-Online | Beginner | Hard | High | Unique passwords; MFA; bot detect |
| Password Spraying | Technical-Online | Intermediate | Hard | High | Block common passwords; MFA |
| Phishing | Human-Based | Beginner | Medium | Partial | Awareness training; FIDO2 |
| Spear Phishing | Human-Based | Advanced | Hard | Partial | Verify via second channel |
| Keylogging | Technical-Online | Intermediate | Hard | Partial | EDR; hardware security keys |
| MitM | Technical-Online | Intermediate | Medium | Partial | HTTPS + HSTS; cert pinning |
| Rainbow Table | Technical-Offline | Intermediate | Easy | None | Salt hashes; use bcrypt/Argon2 |
| Social Engineering | Human-Based | Beginner | Hard | Partial | Verification procedures; training |
| Shoulder Surfing | Physical | Beginner | Hard | Low | Privacy screens; awareness |
| Dumpster Diving | Physical | Beginner | Hard | None | Shredding; clean-desk; drive wipe |
| Pass-the-Hash | Technical-Online | Advanced | Hard | Low | Credential Guard; disable NTLM |
File Systems (1.1)
| File System | OS / Use | Key Facts |
|---|---|---|
| NTFS | Windows primary | Quotas, EFS encryption, compression, symbolic links, ACLs. Limited cross-OS write support. |
| FAT32 | Legacy cross-platform | Max file: 4 GB. Max volume: 2 TB. No permissions or journaling. Readable on all major OSes. |
| exFAT | Flash drives / USB | No 4 GB file limit. Win/macOS/Linux compatible. Ideal for USB sticks. No journaling. |
| ReFS | Windows Server | Self-healing integrity. RAID-like redundancy. No chkdsk needed. Huge storage arrays. |
| ext4 | Linux / Android | Default Linux FS. Journaling, large volume support. Update of ext3. |
| APFS | macOS / iOS | Optimised for SSDs. Encryption, snapshots. macOS High Sierra+, iOS, iPadOS. |
Windows Editions Comparison (1.3)
| Edition | Domain Join | BitLocker | RDP Host | Group Policy | Max RAM |
|---|---|---|---|---|---|
| Home | ✗ | ✗ (Device Encrypt only) | Client only | ✗ | 128 GB |
| Pro | ✓ | ✓ | Host + Client | ✓ | 2 TB |
| Pro Workstations | ✓ | ✓ | Host + Client | ✓ | 6 TB |
| Enterprise | ✓ | ✓ | Host + Client | ✓ | 6 TB |
Win 11 requires TPM 2.0 + UEFI Secure Boot. Win 10 EOL: October 14, 2025. Enterprise also includes AppLocker, BranchCache, MDM/MAM.
Windows CLI Commands (1.5)
| Command | Function | Key Flags |
|---|---|---|
ipconfig | View/refresh IP configuration | /all · /release · /renew · /flushdns |
ping | Test ICMP reachability | -t continuous · -n N count · -l packet size |
tracert | Trace route; map hops | -d skips DNS; uses ICMP TTL exceeded |
pathping | tracert + per-hop stats | Phase 1 = map, Phase 2 = latency/loss per hop |
netstat | Active connections + ports | -a all · -b binaries · -n no DNS |
nslookup | DNS query tool | nslookup google.com · nslookup 8.8.8.8 |
net use / net user | Map shares / manage users | net use h: \\server\share · net user admin * /domain |
chkdsk | Check + repair disk errors | /f fix errors · /r bad sectors (implies /f) |
sfc /scannow | Repair corrupt OS files | Run as Admin; scans all protected Windows files |
diskpart | Full disk partitioning CLI | ⚠️ list disk → select disk N → clean → convert gpt |
gpupdate /force | Force Group Policy update | gpresult /r — show effective policies |
shutdown | Shutdown or restart | /s /t 0 · /r /t 0 · /a abort |
Linux Permissions & Key Files (1.9)
| # | Permission | r | w | x |
|---|---|---|---|---|
| 7 | Read Write Execute | ✓ | ✓ | ✓ |
| 6 | Read Write | ✓ | ✓ | - |
| 5 | Read Execute | ✓ | - | ✓ |
| 4 | Read only | ✓ | - | - |
| 0 | None | - | - | - |
chmod 744 script.sh = owner:rwx | group:r | others:r
chown user:group file — change owner and group
Key config files:
/etc/passwd — registered users (username:pw:UID:GID:info:home:shell)
/etc/shadow — encrypted password hashes + policy
/etc/hosts — local hostname→IP override; checked first
/etc/fstab — filesystem table; auto-mount on boot
/etc/resolv.conf — DNS server config
CompTIA 6-Step Troubleshooting Methodology — Never Skip Steps
Never change more than one variable at a time when testing. Document every step.
Boot Problems (3.1)
- WinRE — Windows Recovery Environment; Shift+Restart or install media
bootrec /fixmbr— repair Master Boot Recordbootrec /fixboot— write new boot sectorbootrec /scanos— scan for Windows installsbootrec /rebuildbcd— rebuild BCD store- Startup Repair — automated fix in WinRE
- Safe Mode — minimal drivers (F8 or msconfig)
- Last Known Good Config — last working registry state
BSOD Troubleshooting
- Note the STOP error code (e.g. IRQL_NOT_LESS_OR_EQUAL)
- Event Viewer → Windows Logs → System
- Check recent driver or hardware changes
mdsched.exe— memory diagnostic on next rebootchkdsk C: /f /r— check disk integrity- Check CPU/GPU temperatures — overheating causes BSODs
- WinDbg — analyse minidump at C:\Windows\Minidump
Performance Issues
- Task Manager → top CPU/RAM/Disk hogs
- Startup tab — disable high-impact programs
- Run Windows Update
- Full malware scan — cryptominer causes slowdown
- Defrag HDD only (NEVER SSD)
- Low disk space <10% → very slow; clean up
- Check thermal paste / clean fans
Network Connectivity Steps
- 1.
ipconfig— valid IP? 169.254.x.x = APIPA = no DHCP - 2.
ping 127.0.0.1— TCP/IP stack working? - 3.
ping [gateway]— local network working? - 4.
ping 8.8.8.8— internet working? - 5.
ping google.com— DNS working? - 6.
ipconfig /flushdns— clear DNS cache - 7.
netsh winsock reset— fix corrupt TCP/IP
App Crashes
- Event Viewer → Windows Logs → Application
- Update or reinstall the application
- Compatibility mode (right-click → Properties)
- Run as Administrator — permission issue
- Create new user profile — may be corrupt profile
sfc /scannow— fix corrupt OS files apps depend on
Diagnostic Toolkit
msconfig— boot options, safe boot, selective startupeventvwr— Application/System/Security logsresmon— per-process disk/net/RAM detailmdsched— RAM test next bootsfc /scannow— repair protected OS filesdism /online /cleanup-image /restorehealthchkdsk /f /r— disk error repair
Mobile Device Troubleshooting (3.2–3.4)
| Problem | Likely Cause | Fix |
|---|---|---|
| App crashing | Corrupted cache, storage full | Force stop → clear cache → uninstall/reinstall |
| Battery drain | Runaway app, old battery, radios active | Check battery usage per app; disable BT/NFC/GPS |
| Overheating | Runaway app, cryptominer, direct sunlight | Remove case; close background apps; scan for malware |
| High data usage | Malware calling home, rogue app | Check per-app data; scan for malware; revoke access |
| Ransomware lockout | Ransomware installed | Factory reset (if backup available); contact MDM admin |
| Unauthorized access | Compromised credentials | Change password immediately; enable MFA; revoke sessions |
| Unusual permissions | Malicious app | Deny permission; uninstall app; report to store |
Jailbreaking/Rooting: removes ALL security controls. MDM detects and can block corporate access. Sideloaded apps bypass store vetting — major malware risk.
Backup Types (4.3)
| Type | Backs Up | Archive Bit | Backup Speed | Restore Speed |
|---|---|---|---|---|
| Full | ALL data every time | Cleared | Slowest | Fastest (1 set only) |
| Incremental | Changes since last backup (any type) | Cleared | Fastest | Slowest (full + ALL incrementals) |
| Differential | Changes since last FULL backup | NOT cleared | Medium | Fast (full + latest diff only) |
3-2-1 Rule: 3 copies · 2 different media types · 1 copy offsite.
RAID is NOT a backup — ransomware and accidental deletion hit all mirrors simultaneously.
GFS Rotation: Son=daily incrementals (Mon–Thu) · Father=weekly full (Friday) · Grandfather=monthly full (last Friday of month)
ESD + Fire Safety (4.4–4.5)
- Humans feel ESD at ~3,000V; chips die at ~10V
- Anti-static wrist strap — must connect to ground
- Anti-static bags — grey/silver for storage/transport
- Humidity 40–60% — too low increases static
- Class C (Electrical) — CO2 / dry chem — NEVER water!
- Class A (ordinary combustibles) → water OK
- Class B (flammable liquids) → CO2
- Server rooms: clean-agent (FM-200, Novec 1230)
- Data centre temp: 65–80°F (18–27°C)
Remote Access Technologies (4.9) — Know the Ports
| Technology | Port | Use Case | Security |
|---|---|---|---|
| RDP | TCP 3389 | Full Windows desktop remote control | Enable NLA; use VPN; restrict by IP; MFA |
| VNC | TCP 5900 | Cross-platform screen sharing | Always tunnel via SSH or VPN |
| SSH | TCP 22 | Secure CLI to Linux/network devices | Key-based auth; disable root; fail2ban |
| Telnet | TCP 23 | ❌ Legacy plaintext CLI — never use | Replace with SSH immediately |
| OpenVPN | 1194 UDP | Encrypted VPN tunnel to corporate network | Best practice: VPN → then RDP; MFA on VPN |
| IPSec VPN | 500/4500 UDP | IKE key exchange / NAT traversal | Enterprise-grade; hardware VPN concentrators |
| RDP Gateway | TCP 443 | RDP wrapped in HTTPS through firewall | Firewall-friendly; requires TLS certificate |
Scripting Languages (4.8)
Script Security: Never run scripts from unknown sources. Sign enterprise scripts. Run with least privilege. Log all executions. Obfuscated scripts = suspicious.
Change Management (4.2)
- Submit RFC — what, why, when, who, rollback plan
- Risk Assessment — impact analysis, test in non-prod
- CAB Approval — Change Advisory Board; standard vs emergency
- Implement — execute during maintenance window, step-by-step
- Verify + Close — test all systems; update docs; lessons learned
Emergency changes bypass CAB but still require post-review documentation. Undocumented changes = #1 cause of IT outages.
Compliance & Regulations (4.7)
- GDPR — EU data; 72h breach notification; right to be forgotten; up to €20M fine
- HIPAA — US healthcare PHI; up to $1.9M penalties per category
- PCI-DSS — payment card; 12 requirements; mandatory for card processing
- NIST SP 800-63B — min 8 chars; no forced rotation if no breach; allow paste
- Software licensing: OEM · Retail · Volume · Subscription · Open-source
3D ULTRA VISUAL
Full interactive reference — all 4 Core 2 domains with 3D visuals.
PASSWORD ATTACKS
Full interactive deep-dive — 14 attack types, study sheet, mind map, and comparison table.
SECTION DRILLS
Study one objective at a time. Watch the video → take the drill → earn XP.