CompTIA A+ Core 2 220-1202 practice test

During a Windows 10 deployment, you need to ensure that a specific Group Policy setting is applied to a computer before any user logs on. Which policy processing mode should you configure?

Trap 1: Loopback processing mode

Loopback processing is used to apply user policies based on the computer's location (e.g., in a specific OU), but it does not change the timing of policy application; it still requires a user logon.

Trap 2: User Configuration

User Configuration policies apply only when a user logs on, so they would not be in effect before the first user logs in.

Trap 3: Administrative Templates

Administrative Templates are a type of policy setting, not a processing mode. They can exist under both Computer and User Configuration.

A
Loopback processing mode
Why wrong: Loopback processing is used to apply user policies based on the computer's location (e.g., in a specific OU), but it does not change the timing of policy application; it still requires a user logon.
B
Computer Configuration
Policies under Computer Configuration are applied during system startup, before any user logs in. This ensures the setting is in effect for all users and at the login screen.
C
User Configuration
Why wrong: User Configuration policies apply only when a user logs on, so they would not be in effect before the first user logs in.
D
Administrative Templates
Why wrong: Administrative Templates are a type of policy setting, not a processing mode. They can exist under both Computer and User Configuration.

Question 2easymultiple choice

After installing a new printer driver, a user's Windows 11 computer crashes with a blue screen error every time they try to print. The computer works fine otherwise. Which boot option should be used to restore functionality without affecting user data?

Trap 1: Use Last Known Good Configuration to revert driver changes.

Last Known Good Configuration is available only for registry and driver changes that prevented boot, but it may not be effective if the system boots but crashes later.

Trap 2: Run System Restore from the recovery environment.

System Restore could work, but Safe Mode is quicker and more targeted for driver issues.

Trap 3: Perform a clean installation of Windows 11.

Clean installation is excessive and destructive; it should only be used when other recovery options fail.

A
Boot into Safe Mode and uninstall the printer driver.
Safe Mode loads minimal drivers, allowing the technician to remove the faulty driver without the crash occurring.
B
Use Last Known Good Configuration to revert driver changes.
Why wrong: Last Known Good Configuration is available only for registry and driver changes that prevented boot, but it may not be effective if the system boots but crashes later.
C
Run System Restore from the recovery environment.
Why wrong: System Restore could work, but Safe Mode is quicker and more targeted for driver issues.
D
Perform a clean installation of Windows 11.
Why wrong: Clean installation is excessive and destructive; it should only be used when other recovery options fail.

Question 3mediummultiple choice

A user reports that their Windows 10 computer is infected with a virus that keeps reinstalling itself after removal. What should you do to remediate this persistent infection?

Trap 1: Run a system restore to a previous restore point

System Restore may not remove all components, and the virus could persist in restore points or system files.

Trap 2: Disable System Restore and then run an antivirus scan in normal mode

While disabling System Restore helps, scanning in normal mode may still allow the virus to hide or reinfect.

Trap 3: Reinstall Windows from the recovery partition

Reinstalling is a last resort; booting from rescue media is less disruptive and often effective.

A
Run a system restore to a previous restore point
Why wrong: System Restore may not remove all components, and the virus could persist in restore points or system files.
B
Boot from a rescue disc or USB and run an antivirus scan
Booting from trusted media bypasses the infected OS, enabling thorough removal without the virus interfering.
C
Disable System Restore and then run an antivirus scan in normal mode
Why wrong: While disabling System Restore helps, scanning in normal mode may still allow the virus to hide or reinfect.
D
Reinstall Windows from the recovery partition
Why wrong: Reinstalling is a last resort; booting from rescue media is less disruptive and often effective.

Question 4hardmultiple choice

During a routine check, a technician finds that a user's Windows 10 computer has an outdated antivirus that hasn't updated in 3 months. The user claims they never saw any update prompts. What is the most likely reason and the appropriate remediation?

Trap 1: The antivirus subscription has expired; renew it

While possible, the question states no prompts were seen; a disabled update service is a common cause that also explains the lack of prompts.

Trap 2: The user has manually set the antivirus to manual update mode

Manual mode would still show prompts or notifications; the lack of any prompts points to a service-level issue.

Trap 3: The computer is infected with a virus that blocks updates

Infection could block updates, but the technician found no other symptoms; the update service being disabled is a simpler and more common cause.

A
The antivirus subscription has expired; renew it
Why wrong: While possible, the question states no prompts were seen; a disabled update service is a common cause that also explains the lack of prompts.
B
The Windows Update service is disabled; re-enable it and set to automatic
If the Windows Update service is disabled, the antivirus cannot receive updates, and the user would not see prompts. Enabling it resolves the issue.
C
The user has manually set the antivirus to manual update mode
Why wrong: Manual mode would still show prompts or notifications; the lack of any prompts points to a service-level issue.
D
The computer is infected with a virus that blocks updates
Why wrong: Infection could block updates, but the technician found no other symptoms; the update service being disabled is a simpler and more common cause.

Question 5hardmultiple choice

A company's security policy requires that all USB storage devices be blocked on company workstations to prevent data exfiltration. A manager needs to temporarily use a USB drive for a presentation. What is the best way to remediate this while maintaining security?

Trap 1: Disable the USB blocking Group Policy for the entire domain

Disabling the policy for the whole domain exposes all workstations to risk, not just the manager's.

Trap 2: Give the manager a company-approved USB drive and tell them to use…

Without changing the block policy, the drive will still be blocked; instructions alone do not remediate the technical restriction.

Trap 3: Create a local admin account on the manager's workstation and…

Local changes can be overridden by Group Policy and create a security gap; it is better to manage via policy.

A
Disable the USB blocking Group Policy for the entire domain
Why wrong: Disabling the policy for the whole domain exposes all workstations to risk, not just the manager's.
B
Use a Group Policy to allow only the specific USB device by hardware ID, then remove the allowance after use
This maintains security by only allowing a known device, and you can revert the policy afterward.
C
Give the manager a company-approved USB drive and tell them to use it only once
Why wrong: Without changing the block policy, the drive will still be blocked; instructions alone do not remediate the technical restriction.
D
Create a local admin account on the manager's workstation and disable the USB block locally
Why wrong: Local changes can be overridden by Group Policy and create a security gap; it is better to manage via policy.

Question 6easymultiple choice

A customer reports that their Windows 10 laptop is displaying pop-up ads even when no browser is open. They suspect a malware infection. Which of the following should you do first to remediate this issue?

Trap 1: Run a full antivirus scan while the system is connected to the…

Running a scan while connected may allow malware to communicate with its source, potentially downloading more payloads or evading detection.

Trap 2: Perform a System Restore to a point before the pop-ups started.

System Restore may not remove all malware, especially if it has infected system restore points or persists in user data.

Trap 3: Immediately reinstall Windows 10 to ensure complete removal.

Reinstalling is a last resort after less drastic remediation steps have failed or if the infection is severe; it is not the first step.

A
Run a full antivirus scan while the system is connected to the internet.
Why wrong: Running a scan while connected may allow malware to communicate with its source, potentially downloading more payloads or evading detection.
B
Disconnect the network cable, boot into Safe Mode, then run a full antivirus scan.
This is the correct sequence: disconnecting the network stops remote communication, Safe Mode limits malware activity, and scanning identifies and removes the threat.
C
Perform a System Restore to a point before the pop-ups started.
Why wrong: System Restore may not remove all malware, especially if it has infected system restore points or persists in user data.
D
Immediately reinstall Windows 10 to ensure complete removal.
Why wrong: Reinstalling is a last resort after less drastic remediation steps have failed or if the infection is severe; it is not the first step.