220-1202 Practice Test 13 — 15 Questions

Question 1

A user reports that their Windows 10 PC is running slowly and they suspect a background process is consuming too much memory. You need to identify the process and its memory usage without installing any additional tools. Which command-line tool should you use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

tasklist. B is correct because the `tasklist` command displays a list of all currently running processes on a Windows system, including their memory usage (in kilobytes) under the 'Mem Usage' column. This built-in command-line tool allows you to identify which process is consuming excessive memory without installing any third-party software, directly addressing the user's need to diagnose a slow PC.

Answer

ipconfig

Answer

chkdsk

Answer

sfc /scannow

Question 2

A graphic designer needs to create a bootable macOS installer on an external SSD to deploy macOS Sonoma to multiple iMacs in the office. They have the 'Install macOS Sonoma.app' file. Which built-in macOS tool should they use to create the bootable drive?

Accepted Answer

Terminal with the 'createinstallmedia' command.. The correct tool is Terminal with the 'createinstallmedia' command because it is the built-in macOS utility specifically designed to create a bootable installer from the 'Install macOS Sonoma.app' file. This command writes the necessary boot files and installer data to the target volume, ensuring the external SSD can boot and install macOS on multiple iMacs.

Answer

Disk Utility to restore the .app file to the SSD.

Answer

System Information to verify the SSD is bootable.

Answer

Migration Assistant to copy the app to the SSD.

Question 3

A user complains that their Windows 11 laptop's battery drains quickly even when idle. They have checked the Task Manager and no unusual processes are running. Which built-in tool should you use to generate a detailed report of battery usage and health?

Accepted Answer

Powercfg /batteryreport. Powercfg /batteryreport is the correct built-in tool because it generates a comprehensive HTML report detailing battery capacity history, usage patterns, and estimated life. This command analyzes the system's power efficiency and battery health, which directly addresses the user's complaint of rapid drain even when idle, without relying on running processes visible in Task Manager.

Answer

Resource Monitor

Answer

Performance Monitor

Answer

Windows Memory Diagnostic

Question 4

A user reports that after a recent software update, their inventory management application crashes on launch. The change log shows the update was applied last night by a junior technician. What is the first step the technician should take according to change management best practices?

Accepted Answer

Check the change log for the update details and rollback procedure.. Change management best practices require that before any action is taken, the technician should first consult the change log to understand what was changed and identify the documented rollback procedure. This ensures a controlled, reversible approach rather than risking data loss or further instability by acting without full knowledge of the update's scope.

Answer

Restore the user’s system from a backup taken before the update.

Answer

Uninstall the update immediately to restore functionality.

Answer

Escalate the issue to the IT manager for a decision.

Question 5

A technician is installing a new power supply in a desktop computer. After connecting all cables, the computer will not power on. What is the most likely safety-related oversight?

Accepted Answer

The voltage selector switch on the power supply is set to the wrong voltage.. The voltage selector switch on the power supply must match the local mains voltage (typically 115V in North America or 230V in Europe). If set to 230V while plugged into a 115V outlet, the power supply will receive insufficient voltage to start, causing the computer to appear completely dead. This is a common safety-related oversight because the switch is often overlooked during installation.

Answer

The power supply is not compatible with the motherboard.

Answer

The power cord is not securely plugged into the power supply.

Answer

The power supply fan is blocked by debris.

Question 6

A company's security policy requires that all workstations use a host-based firewall to block incoming connections except for specific allowed applications. A technician needs to configure this on a Windows 10 PC. Which tool should they use?

Accepted Answer

Windows Defender Firewall with Advanced Security. The Windows Defender Firewall with Advanced Security (wf.msc) is the correct tool because it provides granular control over inbound rules, allowing the technician to block all incoming connections by default and then create explicit allow rules for specific applications. This meets the security policy requirement for a host-based firewall that blocks incoming traffic except for permitted applications.

Answer

Windows Defender Antivirus settings

Answer

Group Policy Editor

Answer

Network and Sharing Center

Question 7

A technician is troubleshooting a PC that repeatedly shuts down. The user mentions the computer is plugged into a power strip that also has a space heater and a laser printer. What is the most likely cause of the shutdowns?

Accepted Answer

The power strip is overloaded and cannot supply stable voltage.. The most likely cause is that the power strip is overloaded because it is simultaneously supplying power to a space heater (a high-wattage resistive load), a laser printer (which draws significant current during fuser warm-up), and the PC. This overload causes the power strip's circuit breaker to trip or the voltage to sag below the PC's power supply tolerance, resulting in repeated shutdowns. Option B is correct because the combined current draw exceeds the power strip's rated capacity, leading to unstable voltage delivery.

Answer

The computer's power supply is failing.

Answer

The space heater is emitting electrical interference.

Answer

The laser printer needs a toner replacement.

Question 8

A small business has no formal change management process. A technician installs a new antivirus program on a server, which later conflicts with the existing backup software, causing backups to fail. Which principle of change management was most clearly violated?

Accepted Answer

The change was not documented or communicated to stakeholders. The scenario describes a small business with no formal change management process. The core failure is that the technician installed new antivirus software without documenting the change or communicating it to stakeholders (such as the backup administrator or other IT staff). If the change had been documented and communicated, the potential conflict with the existing backup software could have been identified and avoided. This directly violates the principle that all changes must be documented and communicated to relevant parties, even in the absence of a formal CAB or staging environment.

Answer

The change was not tested in a staging environment

Answer

The change was not approved by the change advisory board

Answer

The technician did not create a rollback plan

Question 9

A technician receives a ticket from a user who says their email is not working. The technician remotely connects and sees that the user's Outlook profile is corrupt. The user is in the middle of an important project. What is the best way to communicate the necessary steps?

Accepted Answer

Explain that the Outlook profile is corrupt and needs to be rebuilt, which may cause a brief interruption.. It balances transparency with professionalism: the technician clearly explains the issue (corrupt Outlook profile) and the necessary action (rebuild), while proactively managing expectations about a brief interruption. This approach respects the user's need to stay informed during an important project, aligning with ITIL best practices for incident management and user communication.

Answer

Tell the user that you will fix it and they should not worry about the details.

Answer

Use technical terms like 'PST file corruption' and 'registry repair' to sound knowledgeable.

Answer

Rebuild the profile without informing the user to avoid worrying them.

Question 10

A technician is troubleshooting an Android device that is unable to connect to a corporate Wi-Fi network using WPA2-Enterprise with a username and password. The device connects successfully to other open Wi-Fi networks. Which Android setting should the technician check first to resolve the authentication failure?

Accepted Answer

Check if a CA certificate is installed and selected in the Wi-Fi network's advanced settings.. WPA2-Enterprise with username/password authentication typically requires a CA certificate to validate the RADIUS server's identity. Without a trusted CA certificate installed and selected in the Wi-Fi network's advanced security settings, the Android device will reject the connection attempt, even though the credentials are correct. This is the most common cause of authentication failure in enterprise Wi-Fi environments.

Answer

Verify that the device's IP address is set to DHCP.

Answer

Disable the proxy settings for that Wi-Fi network.

Answer

Configure a static MAC address on the device.

Question 11

A user reports that a script they run daily now fails with 'Permission denied' even though they haven't changed any permissions. The script is located in /usr/local/bin/script.sh and has permissions -rwxr-xr-x. The user is in the 'users' group. What is the most likely issue?

Accepted Answer

The /usr/local/bin partition is mounted with the noexec option.. The script has execute permissions for the user (rwxr-xr-x), so the 'Permission denied' error is not due to missing execute bits. The most likely cause is that the /usr/local/bin filesystem is mounted with the 'noexec' option, which prevents execution of any binary or script regardless of its permission bits. This is a common administrative security measure that blocks execution from specific partitions, and it would cause the script to fail with 'Permission denied' even though the file permissions appear correct.

Answer

The script's shebang line is incorrect.

Answer

The user does not have read permission on the script.

Answer

The script has been replaced with a directory.

Question 12

A technician is called to a server room where a UPS battery is emitting a strong sulfur smell and the casing feels warm. What immediate action should the technician take?

Accepted Answer

Disconnect the UPS from the mains and move it outside to a safe area.. A strong sulfur smell and warm casing from a UPS battery indicate thermal runaway, a condition where internal chemical reactions generate excessive heat, potentially leading to fire or explosion. The immediate priority is to disconnect the UPS from mains power to stop charging and remove it to a safe, well-ventilated outdoor area to mitigate the risk of toxic gas release or catastrophic failure.

Answer

Open the UPS to ventilate the battery compartment.

Answer

Continue monitoring the UPS until it shuts down automatically.

Answer

Spray the UPS with a fire extinguisher as a precaution.

Question 13

A user reports that a shared file on a Linux server is not accessible to their team. The file permissions are -rwxr----- and the user is a member of the group 'staff'. The file's group owner is 'admin'. Which command should the administrator run to allow the staff group to read the file?

Accepted Answer

chgrp staff file. The file's current permissions (-rwxr-----) grant the owner full access and the group 'admin' read-only access, but the user is in the 'staff' group, not 'admin'. To allow the 'staff' group to read the file, the file's group owner must be changed to 'staff' using `chgrp staff file`. This ensures that the group read permission (r--) applies to members of the 'staff' group.

Answer

chmod 755 file

Answer

chmod g+r file

Answer

chown user:staff file

Question 14

A technician is tasked with securing a legacy web application that only supports HTTP, not HTTPS. The application is critical for internal operations but must be accessible remotely. What is the best way to secure the traffic without modifying the application?

Accepted Answer

Use a VPN to access the internal network.. A VPN creates an encrypted tunnel between the remote user and the internal network, securing all HTTP traffic without any modification to the legacy application. Since the application only supports HTTP, it cannot serve HTTPS natively, and a VPN provides transport-layer encryption (e.g., IPsec or TLS-based VPN) that protects data in transit over untrusted networks.

Answer

Install a self-signed SSL certificate on the server.

Answer

Enable HTTP Strict Transport Security (HSTS) on the server.

Answer

Configure the browser to use a proxy server.

Question 15

After installing a new application, a user reports that their default web browser keeps changing to a different one without their consent. Which Windows feature can you use to prevent applications from changing file associations and default programs?

Accepted Answer

Local Group Policy Editor. The Local Group Policy Editor (gpedit.msc) allows administrators to configure the 'Set a default associations configuration file' policy under Computer Configuration > Administrative Templates > Windows Components > File Explorer. When enabled, this policy prevents applications from changing file associations and default programs by locking the association file, overriding any user or application changes. This is the correct tool for enforcing system-wide control over default programs in Windows 10/11 Pro, Enterprise, or Education editions.

Answer

Programs and Features

Answer

Default Programs (Control Panel)

Answer

Registry Editor