When a technician is investigating the who, what, when, where, and why of an issue, they are at the step of researching the issue. This involves gathering all relevant information about the problem to ensure that the subsequent steps in the troubleshooting methodology are informed and effective.
Reference:
According to the CompTIA IT Fundamentals troubleshooting section, thorough research is critical to understand an issue deeply before formulating a plan of action or testing theories.

The scenario where an attacker is using subversive tactics to gain the trust of a target in order to obtain entry to a location or access to confidential information is best described as social engineering. Social engineering is a type of attack that exploits human psychology and behavior to manipulate people into performing actions or revealing information that benefits the attacker. Social engineering can take various forms, such as phishing, vishing, baiting, quid pro quo, pretexting, or tailgating. Phishing attack is a type of social engineering attack that involves sending fraudulent emails or messages that appear to come from legitimate sources to trick recipients into clicking on malicious links or attachments, or providing personal or financial information. On-path attack is a type of network attack that involves intercepting or modifying data packets that are transmitted between two parties on a network. Eavesdropping is a type of network attack that involves listening to or capturing data packets that are transmitted between two parties on a network. References: The Official CompTIA IT Fundamentals (ITF+) Student Guide (Exam FC0-U61), Chapter 7: Security Concepts1

This scenario represents availability concerns. The CEO's decision to place the new data center 500 miles from the existing one is intended to ensure that both datacenters remain operational in case of a natural disaster. Ensuring data availability means that systems and information remain accessible, even in the event of a disaster, by having geographically separated redundancy.
A . Confidentiality concerns involve protecting data from unauthorized access.
B . Integrity concerns refer to ensuring the accuracy and consistency of data.
C . Replication concerns involve copying data across systems but are not directly tied to the geographic separation mentioned in this example.
Reference:
CompTIA Security+ Certification Exam Guide
Official CompTIA IT Fundamentals (ITF+) Certification Training

A wireless access point (WAP) is a device that allows wireless devices to connect to a wired network using Wi-Fi or Bluetooth. A WAP usually has a default configuration that is set by the manufacturer, which may include a default password, SSID (service set identifier), encryption type, and wireless standard. The default password is often weak or well-known, which makes the WAP vulnerable to unauthorized access or hacking. Therefore, the first thing that a user should do when setting up a new WAP is to change the default password to a strong and unique one. This will help secure the WAP and prevent unwanted changes or attacks. Changing the SSID to a unique name, enabling WPA2 encryption, and enabling the highest available wireless standard are also important steps to improve the security and performance of the WAP, but they should be done after changing the default password.