220-1202 Practice Test 13 — 15 Questions

Question 1

A technician is tasked with decommissioning a RAID array of SSDs that stored proprietary source code. The company policy requires that the drives be reused in another department. Which method ensures data is securely removed while preserving the SSDs?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use the drive manufacturer's secure erase utility.. The drive manufacturer's secure erase utility (e.g., ATA Secure Erase) issues a hardware-level command that triggers the SSD's internal controller to cryptographically erase all data by resetting the encryption key, which is instantaneous and preserves the drive's health. This method is specifically designed for SSDs because traditional overwriting (like zero-filling) is ineffective on SSDs due to wear-leveling and garbage collection, which can leave data remnants in over-provisioned or reallocated sectors.

Answer

Run a full format on each SSD.

Answer

Degauss the SSDs.

Answer

Overwrite the drives with zeros three times.

Question 2

A security incident has occurred: a user's Mac running macOS Ventura was infected with malware that modified system files. The technician needs to boot the Mac into a mode that loads only essential Apple-signed kernel extensions and prevents third-party software from loading, in order to safely remove the malware. Which startup mode should they use?

Accepted Answer

Safe Mode (Shift key during startup).. Safe Mode (Shift key during startup) is correct because it forces macOS to load only essential kernel extensions that are signed by Apple, disables all third-party startup items and login items, and runs a directory integrity check. This minimal environment prevents the malware from loading its own kernel extensions or other malicious code, allowing the technician to safely remove the infected files without interference.

Answer

Single-user mode (Command + S).

Answer

Verbose mode (Command + V).

Answer

Target Disk Mode (T key).

Question 3

A user reports that they cannot connect to the company's internal file server from home using the provided VPN client. They can access the internet without issues. Which of the following is the most likely cause of this problem?

Accepted Answer

The VPN client is configured for split tunneling, and the file server's IP range is not in the allowed routes.. Split tunneling allows the VPN client to route only specific traffic (e.g., corporate subnets) through the encrypted tunnel, while all other traffic goes directly to the internet. If the file server's IP range is not included in the allowed routes, traffic to that server will bypass the VPN and be sent unencrypted to the user's local gateway, which cannot reach the internal server. This matches the symptom: internet works, but the file server is unreachable.

Answer

The user's home router is blocking VPN traffic on port 443.

Answer

The file server is powered off or experiencing a hardware failure.

Answer

The user's VPN client software is outdated and needs to be reinstalled.

Question 4

A small business wants to reduce its environmental footprint by properly managing old computer equipment. They ask which components must be handled separately due to hazardous materials. What should you identify?

Accepted Answer

CRT monitors. CRT monitors contain leaded glass in the cathode ray tube and significant amounts of lead in the solder and phosphor coating, making them hazardous electronic waste that must be handled separately under regulations like the EPA's RCRA and the EU's WEEE Directive. Unlike LCDs, which may contain mercury in backlights but are often managed differently, CRTs require specialized recycling to prevent lead leaching into groundwater.

Answer

LCD monitors

Answer

Keyboard and mouse

Answer

Ethernet cables

Question 5

A technician needs to configure a Windows 10 kiosk machine that runs a single full-screen application for public use. They want to prevent users from accessing the desktop, taskbar, or any other system functions. Which Settings page should they use to set up this restricted user experience?

Accepted Answer

Settings > Accounts > Other users > Set up a kiosk. The 'Set up a kiosk' option under Settings > Accounts > Other users is the dedicated Windows 10 feature for configuring an assigned access kiosk. This setting restricts the user to a single full-screen Universal Windows Platform (UWP) app and blocks access to the desktop, taskbar, and other system functions, meeting the exact requirement for a public-facing kiosk.

Answer

Settings > Personalization > Start

Answer

Control Panel > User Accounts > Manage User Accounts

Answer

Local Group Policy Editor > Computer Configuration > Windows Settings > Security Settings

Question 6

A technician is troubleshooting a Windows 10 PC that shows a black screen with a movable mouse cursor after boot. The user can press Ctrl+Alt+Del and launch Task Manager. Which Control Panel or Settings tool should be used to repair the system files that may be corrupted?

Accepted Answer

System Properties > System Protection. The black screen with a movable mouse cursor after boot, combined with the ability to launch Task Manager via Ctrl+Alt+Del, indicates that the Windows shell (explorer.exe) may be failing to load due to corrupted system files. System Properties > System Protection provides access to System Restore, which can revert system files and registry settings to a previous known-good state, effectively repairing corruption without affecting user data. This tool leverages Volume Shadow Copy snapshots to restore critical system files, making it the appropriate choice for this scenario.

Answer

Device Manager

Answer

Administrative Tools > Computer Management

Answer

Settings > Update & Security > Troubleshoot

Question 7

During a remote troubleshooting session, a technician uses a tool that allows them to view the user's screen and control the mouse and keyboard. The user reports that the session is extremely laggy, with noticeable delay between the technician's actions and the screen update. Which of the following is the most likely cause of this lag?

Accepted Answer

The network connection between the technician and the user has high latency or low bandwidth.. The lag described is a classic symptom of network latency or insufficient bandwidth, which directly impacts the responsiveness of remote desktop protocols like RDP or VNC. These protocols transmit screen updates and input events in real time; high latency delays the round-trip of packets, while low bandwidth can cause frame drops or compression artifacts, resulting in the noticeable delay between the technician's actions and the screen update.

Answer

The remote desktop software is using an outdated encryption protocol.

Answer

The user's computer has insufficient RAM to handle remote desktop sessions.

Answer

The technician's computer is running a different operating system than the user's.

Question 8

A technician is creating a PowerShell script that must be deployed via Group Policy to all workstations. The script should run in the user context and display a message if the user's password is about to expire within 7 days. The script must not show any PowerShell console window. Which scripting technique should be used?

Accepted Answer

Use a VBScript with a pop-up message box. VBScript's `MsgBox` function creates a pop-up message box that runs in the user context without a console window, making it ideal for displaying password-expiry warnings via Group Policy. PowerShell scripts, even with `-WindowStyle Hidden`, briefly flash a console window unless compiled into an executable, which violates the requirement to show no console window. VBScript natively integrates with Windows Script Host (WSH) to produce a GUI pop-up without any console overhead.

Answer

Use the 'Write-Host' cmdlet to display the message

Answer

Use the '-NoProfile' parameter when starting PowerShell

Answer

Use a scheduled task with 'Run whether user is logged on or not'

Question 9

A company's IT policy requires that all disposed hard drives be physically destroyed to prevent data breaches. Which method has the least environmental impact while ensuring data destruction?

Accepted Answer

Shred the hard drive using an industrial shredder and then recycle the metal fragments.. Industrial shredding physically destroys the platters into small fragments, making data recovery impossible, and the resulting metal fragments can be recycled, minimizing environmental impact. Unlike degaussing or drilling, shredding ensures complete destruction without leaving large e-waste components, and the recycling of ferrous and non-ferrous metals reduces raw material extraction.

Answer

Use a degausser to erase the drive and then recycle it.

Answer

Drill holes through the platters and then dispose of the drive in e-waste.

Answer

Overwrite the drive with zeros multiple times and then donate it.

Question 10

A small business owner wants to ensure that only authorized users can access their iMac. They need to set up separate accounts for three employees, each with a username and password, and restrict one employee from installing software. Which macOS feature should they use to create and manage these user accounts?

Accepted Answer

System Settings > Users & Groups.. The 'Users & Groups' pane in System Settings (macOS Ventura and later) is the native graphical interface for creating, editing, and managing local user accounts, including setting passwords and controlling administrative privileges. It allows the owner to create separate accounts for each employee and restrict one from installing software by setting that account as a 'Standard' user rather than an 'Administrator'.

Answer

Terminal with the 'dscl' command.

Answer

System Information > Software > Installations.

Answer

Keychain Access to create user passwords.

Question 11

A technician receives a ticket from a user who says their email is 'broken.' Upon investigation, the technician finds that the user's mailbox is full. The user is known for being confrontational. Which response best demonstrates professionalism?

Accepted Answer

"Your mailbox is full. Delete some emails and empty your trash. Let me know if that fixes it.". It directly addresses the root cause (full mailbox) with a clear, actionable solution (delete emails and empty trash) while maintaining a neutral, professional tone. The technician avoids blaming the user or escalating the situation, which is critical when dealing with a confrontational user. This response focuses on resolving the issue without unnecessary commentary, aligning with CompTIA's emphasis on professionalism and effective communication.

Answer

"This is a common issue when people don't manage their inbox. Please clean it up."

Answer

"I'll increase your mailbox quota so you don't have to delete anything."

Answer

"Your email isn't broken; you just have too many messages."

Question 12

A technician is reviewing a PowerShell script that was used in a ransomware attack. The script contains a line that downloads and executes a payload from a remote server. The script uses a technique to bypass execution policy. Which scripting technique is most likely used to bypass the execution policy?

Accepted Answer

Using the '-ExecutionPolicy Bypass' parameter when launching PowerShell. The '-ExecutionPolicy Bypass' parameter when launching PowerShell tells the PowerShell engine to bypass the execution policy for that session only, allowing any script to run without restriction. This is a common technique used by attackers because it does not require administrative privileges or permanent policy changes, making it stealthy and effective for executing malicious payloads.

Answer

Using the 'Set-ExecutionPolicy' cmdlet to change the policy to Unrestricted

Answer

Using the 'powershell.exe -Command' syntax with an encoded command

Answer

Signing the script with a self-signed certificate

Question 13

A technician is writing a PowerShell script to retrieve the IP configuration of all computers in a domain and output the results to a CSV file. The script must run on a management workstation and target remote machines. Which cmdlet should the technician use to execute commands on remote computers?

Accepted Answer

Invoke-Command. Invoke-Command is the correct cmdlet because it is designed to execute PowerShell commands or script blocks on one or more remote computers and return the results to the local session. This allows the technician to run the IP configuration retrieval script against all domain computers from the management workstation and then pipe the output to Export-Csv.

Answer

Enter-PSSession

Answer

Get-WmiObject

Answer

Out-File

Question 14

A user reports that their Windows 10 PC is running slowly and the hard drive light is constantly active. You suspect the indexing service is consuming resources. Which Control Panel applet allows you to modify which folders are indexed, or to rebuild the index?

Accepted Answer

Indexing Options. The Indexing Options applet (C) is the correct Control Panel tool for managing the Windows Search index. It allows you to add or remove folders from the index and provides a button to rebuild the index, which can resolve performance issues caused by a corrupted or overly broad index. The constantly active hard drive light indicates the indexing service is actively processing files, and modifying or rebuilding the index directly addresses this resource consumption.

Answer

File Explorer Options

Answer

System > Advanced system settings > Performance

Answer

Administrative Tools > Services

Question 15

A user's Windows 11 PC displays a 'Critical Process Died' blue screen error after a recent Windows Update. The system boots into a recovery loop. Which advanced startup option should be used to remove the problematic update?

Accepted Answer

Boot into Safe Mode from the recovery environment and uninstall the latest update.. Booting into Safe Mode from the Windows Recovery Environment (WinRE) allows you to access the desktop with minimal drivers and services, then use Settings > Windows Update > Update History > Uninstall updates to remove the problematic cumulative update. This directly addresses the 'Critical Process Died' bugcheck (0x000000EF), which often results from a corrupted system file or driver conflict introduced by a recent update, and Safe Mode bypasses the crash loop to enable the uninstall.

Answer

Use System Restore to revert to a point before the update.

Answer

Run the Windows Memory Diagnostic tool to check for RAM issues.

Answer

Perform a clean installation of Windows 11 using the recovery USB.