220-1202 Practice Test 5 — 10 Questions

Question 1

A security analyst discovers that an attacker has been using a compromised VPN account to access the corporate network. The account belongs to a former employee who was terminated two weeks ago. Which of the following should the analyst do immediately to prevent further unauthorized access?

Accepted Answer

Disable the former employee's VPN account. The immediate priority is to disable the compromised account to stop the attack. This is a critical security incident that requires swift action. While investigating the breach and reviewing logs are important, they come after containing the threat. Changing the VPN server password is not sufficient if the account itself is still active.

Answer

Review the VPN logs to determine the extent of the breach

Answer

Change the VPN server's shared secret

Answer

Notify the former employee about the security incident

Question 2

A company requires that all remote access sessions be recorded for compliance purposes. The current VPN solution does not support session recording. Which of the following additional technologies can be integrated to capture and store remote desktop sessions?

Accepted Answer

Implement a Remote Desktop Gateway with session recording software. A Remote Desktop Gateway (RD Gateway) can be configured to broker and log RDP sessions, and when combined with a session recording solution, it can capture all activity. VPN alone does not provide session recording, and other methods like VNC or SSH typically lack built-in recording features.

Answer

Use SSH tunneling for all remote access

Answer

Configure the VPN to use PPTP instead of L2TP

Answer

Deploy a VNC server on each remote workstation

Question 3

A user reports that a scheduled backup script on their Windows 10 workstation runs every day but fails to complete. The script uses PowerShell to copy files to a network share. When the user runs the script manually from an elevated PowerShell prompt, it works. What is the most likely cause of the failure?

Accepted Answer

The scheduled task is not set to run with highest privileges.. Scheduled tasks often run with limited permissions, so if the script requires administrative rights, it will fail when triggered automatically. The correct answer highlights the need to configure the task to run with highest privileges.

Answer

The script file extension is .ps1 instead of .bat.

Answer

The network share is mapped as a drive letter, which is not available during system startup.

Answer

PowerShell execution policy is set to Restricted for the SYSTEM account.

Question 4

A technician is troubleshooting a PowerShell script that collects system information and writes it to a log file. The script runs without errors but the log file is empty. The script uses Out-File to write data. What is the most likely issue?

Accepted Answer

The command before Out-File does not produce any output.. If a PowerShell command does not produce output, piping it to Out-File will result in an empty file. The issue is that the command used does not generate any output.

Answer

The script is not running with administrative privileges.

Answer

The Out-File cmdlet is misspelled.

Answer

The log file path contains a forward slash instead of a backslash.

Question 5

A technician is writing a batch script to automate the installation of a software package on multiple Windows workstations. The script needs to check if the software is already installed before attempting installation. Which scripting construct should the technician use?

Accepted Answer

An if statement. This tests knowledge of conditional logic in scripting. An 'if' statement allows the script to check a condition (e.g., existence of a registry key or file) and execute code only if the condition is true or false. Loops are for repetition, and variables store data, not control flow.

Answer

A for loop

Answer

A variable

Answer

A while loop

Question 6

A system administrator is deploying a PowerShell script to 100 computers to change the local administrator password. The script must run once per computer and then exit. Which scripting technique ensures the script runs exactly once on each machine?

Accepted Answer

Write a registry key after successful execution. This question covers idempotency and run-once mechanisms. Using a registry key or a marker file to record that the script has executed prevents it from running again on reboot or reapplication. Loops and parameters don't enforce a single execution.

Answer

Use a for loop to run the script 100 times

Answer

Use a parameter to pass the computer name

Answer

Schedule the script to run daily

Question 7

A user reports that a scheduled task running a VBScript fails every time the computer is rebooted. The script works when run manually. The technician checks the task properties and sees the task is set to run with the user's credentials. Which scripting-related issue is most likely causing the failure?

Accepted Answer

The task is set to run only when the user is logged on. This tests understanding of script execution context and permissions. When a script runs under a user account, it may not have the necessary permissions to access network resources or system files after reboot if the user isn't logged on. The 'run whether user is logged on or not' option requires the password to be stored, and if the password changes or is not provided, the task fails.

Answer

The script has a syntax error

Answer

The script uses absolute paths that change after reboot

Answer

The script is blocked by antivirus software

Question 8

A technician is troubleshooting a batch script that is supposed to delete temporary files older than 30 days. The script runs without errors but does not delete any files. The technician suspects the script's logic is flawed. Which part of the script is most likely incorrect?

Accepted Answer

The script uses 'forfiles' with the wrong date syntax. This tests understanding of file management commands and conditionals in batch scripting. The FORFILES command with date filtering is commonly used for this. If the script uses a simple 'del' without date checking, it will delete all files or none. The issue is likely that the script does not properly compare file dates.

Answer

The script uses the 'del' command without a path

Answer

The script runs as a standard user without admin rights

Answer

The script uses 'echo' instead of 'del'

Question 9

A technician is writing a Python script to automate the cleanup of user profiles on a Windows server. The script must iterate through all user profile folders in 'C:\Users', check the last modified date, and delete profiles older than 90 days. Which scripting concept is essential for this task?

Accepted Answer

A for loop to iterate over folders. This question tests understanding of loops, conditionals, and file system operations in a scripting language. A 'for' loop is needed to iterate through each folder, combined with an 'if' statement to check the date condition. Without a loop, the script would only process one folder. Error handling is important but not the core concept for iteration.

Answer

Error handling with try-except

Answer

A while loop with a counter

Answer

A function to calculate date difference

Question 10

A user reports that their Windows 10 computer runs a script every time they log in that maps a network drive, but the drive mapping fails intermittently. The script uses the 'net use' command. Which scripting element should be added to handle the failure gracefully and retry the mapping?

Accepted Answer

An exit code check and a loop to retry the mapping. This question tests basic error handling in scripting. Adding error-checking logic, such as checking the exit code of 'net use' and retrying if it fails, makes the script more robust. A simple 'if errorlevel' or 'if %errorlevel% neq 0' construct allows the script to retry the command instead of failing silently.

Answer

A comment line explaining the net use syntax

Answer

A variable to store the drive letter

Answer

A 'pause' command after the net use line