220-1202 Practice Test 14 — 15 Questions

Question 1

During a software deployment, a user reports that a stranger in a delivery uniform asked to use their computer to 'check a shipment status' and then quickly left. Later, the user notices unusual network activity. What should the technician investigate first?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Scan the workstation for malware and review recent system changes.. The scenario describes a classic social engineering attack where an unauthorized individual gains physical access to a workstation under a pretext. The immediate technical priority is to scan the workstation for malware and review recent system changes because the attacker may have installed a backdoor, keylogger, or remote access trojan (RAT) that explains the unusual network activity. This aligns with incident response best practices: isolate and analyze the affected system first to contain potential data exfiltration or lateral movement.

Answer

Check the user's email for phishing messages.

Answer

Verify the delivery person's identity with the shipping company.

Answer

Disable the user's network access permanently.

Question 2

A user on a Windows 10 computer is unable to install a new application because they receive an error that 'Windows cannot verify the publisher of this driver software.' The application is from a trusted vendor. Which tool should you use to temporarily disable driver signature enforcement to complete the installation?

Accepted Answer

Advanced Startup Options (Disable driver signature enforcement). The error 'Windows cannot verify the publisher of this driver software' indicates that the driver lacks a valid digital signature, which is required by default on 64-bit Windows 10. The Advanced Startup Options menu provides a direct way to boot with 'Disable driver signature enforcement' temporarily, allowing the unsigned driver to load for the current session without permanently altering the system's security policy.

Answer

Device Manager

Answer

System Configuration (msconfig)

Answer

Command Prompt with bcdedit /set testsigning on

Question 3

A user is unable to print to a network printer after a Windows update. Other users on the same network can print successfully. Which Windows tool should you use to view detailed error messages related to the print spooler service?

Accepted Answer

Event Viewer. Event Viewer (C) is the correct tool because it logs detailed error messages from the print spooler service (spoolsv.exe) under 'Windows Logs > System' or 'Applications and Services Logs > Microsoft > Windows > PrintService'. When a Windows update breaks printing for a single user, Event Viewer captures spooler errors such as access denied, driver conflicts, or RPC failures that are not shown in other tools.

Answer

Device Manager

Answer

Services.msc

Answer

Performance Monitor

Question 4

A customer reports that their workstation is running slowly after a recent group policy update. The change log indicates the update added new security settings. What is the most appropriate documentation step for the technician to take after resolving the issue?

Accepted Answer

Note the resolution in the change log and close the ticket.. After resolving the issue, the technician must document the resolution in the change log to maintain an accurate audit trail of changes and their outcomes. This aligns with change management best practices, ensuring that future technicians can see what was done to fix the problem and avoid repeating the same troubleshooting steps. Closing the ticket after documenting the resolution completes the incident management lifecycle.

Answer

Delete the change log entry to avoid confusion.

Answer

Send an email to the user explaining the fix.

Answer

Create a new change request to revert the group policy.

Question 5

A technician is replacing a damaged power supply in a desktop PC. After removing the old unit, the technician notices a large capacitor on the motherboard is bulging. What should the technician do to safely handle this situation?

Accepted Answer

Wear insulated gloves and carefully remove the motherboard for replacement.. A bulging capacitor indicates a failed or failing component that can leak electrolyte, cause further damage, or even burst. The safest course is to wear insulated gloves to avoid electric shock or chemical exposure and replace the entire motherboard, as the capacitor cannot be safely repaired in the field. Ignoring it or attempting makeshift fixes risks short circuits, fire, or injury.

Answer

Proceed with installing the new power supply and ignore the bulging capacitor.

Answer

Use a screwdriver to short the capacitor leads to discharge it.

Answer

Apply electrical tape over the bulging capacitor to contain it.

Question 6

A customer reports that their laptop battery drains quickly and the device gets very hot. They want to know the safest way to dispose of the old battery after replacement. What should you advise?

Accepted Answer

Take the battery to a certified e-waste recycling center.. Lithium-ion and lithium-polymer batteries contain hazardous materials that can leak and cause environmental damage if disposed of improperly. Certified e-waste recycling centers have the specialized equipment and processes to safely extract and recycle these materials, preventing toxic exposure and complying with environmental regulations like the Resource Conservation and Recovery Act (RCRA).

Answer

Throw the battery in the regular trash bin.

Answer

Burn the battery in an open area to neutralize it.

Answer

Store the battery in a metal container until it stops holding a charge.

Question 7

A technician needs to create a bootable USB drive that can run Windows PE to deploy a custom Windows 10 image to multiple laptops. Which Windows tool should they use to create this bootable media?

Accepted Answer

Windows ADK (Assessment and Deployment Kit). The Windows Assessment and Deployment Kit (Windows ADK) includes the Deployment Tools, which contain the necessary utilities (such as `copype.cmd` and `MakeWinPEMedia`) to create a bootable Windows PE USB drive. This is the correct tool for building custom WinPE media to deploy a Windows 10 image to multiple laptops, as it provides the full environment for customizing and generating the bootable image.

Answer

Windows Media Creation Tool

Answer

Windows System Image Manager (Windows SIM)

Answer

Disk Management

Question 8

A user reports that their Windows 10 PC is running slowly and they suspect a background process is consuming too much memory. You need to identify the process and its memory usage without installing any additional tools. Which command-line tool should you use?

Accepted Answer

tasklist. B is correct because the `tasklist` command displays a list of all currently running processes on a Windows system, including their memory usage (in kilobytes) under the 'Mem Usage' column. This built-in command-line tool allows you to identify which process is consuming excessive memory without installing any third-party software, directly addressing the user's need to diagnose a slow PC.

Answer

ipconfig

Answer

chkdsk

Answer

sfc /scannow

Question 9

A graphic designer needs to create a bootable macOS installer on an external SSD to deploy macOS Sonoma to multiple iMacs in the office. They have the 'Install macOS Sonoma.app' file. Which built-in macOS tool should they use to create the bootable drive?

Accepted Answer

Terminal with the 'createinstallmedia' command.. The correct tool is Terminal with the 'createinstallmedia' command because it is the built-in macOS utility specifically designed to create a bootable installer from the 'Install macOS Sonoma.app' file. This command writes the necessary boot files and installer data to the target volume, ensuring the external SSD can boot and install macOS on multiple iMacs.

Answer

Disk Utility to restore the .app file to the SSD.

Answer

System Information to verify the SSD is bootable.

Answer

Migration Assistant to copy the app to the SSD.

Question 10

A user complains that their Windows 11 laptop's battery drains quickly even when idle. They have checked the Task Manager and no unusual processes are running. Which built-in tool should you use to generate a detailed report of battery usage and health?

Accepted Answer

Powercfg /batteryreport. Powercfg /batteryreport is the correct built-in tool because it generates a comprehensive HTML report detailing battery capacity history, usage patterns, and estimated life. This command analyzes the system's power efficiency and battery health, which directly addresses the user's complaint of rapid drain even when idle, without relying on running processes visible in Task Manager.

Answer

Resource Monitor

Answer

Performance Monitor

Answer

Windows Memory Diagnostic

Question 11

A user reports that after a recent software update, their inventory management application crashes on launch. The change log shows the update was applied last night by a junior technician. What is the first step the technician should take according to change management best practices?

Accepted Answer

Check the change log for the update details and rollback procedure.. Change management best practices require that before any action is taken, the technician should first consult the change log to understand what was changed and identify the documented rollback procedure. This ensures a controlled, reversible approach rather than risking data loss or further instability by acting without full knowledge of the update's scope.

Answer

Restore the user’s system from a backup taken before the update.

Answer

Uninstall the update immediately to restore functionality.

Answer

Escalate the issue to the IT manager for a decision.

Question 12

A technician is installing a new power supply in a desktop computer. After connecting all cables, the computer will not power on. What is the most likely safety-related oversight?

Accepted Answer

The voltage selector switch on the power supply is set to the wrong voltage.. The voltage selector switch on the power supply must match the local mains voltage (typically 115V in North America or 230V in Europe). If set to 230V while plugged into a 115V outlet, the power supply will receive insufficient voltage to start, causing the computer to appear completely dead. This is a common safety-related oversight because the switch is often overlooked during installation.

Answer

The power supply is not compatible with the motherboard.

Answer

The power cord is not securely plugged into the power supply.

Answer

The power supply fan is blocked by debris.

Question 13

A company's security policy requires that all workstations use a host-based firewall to block incoming connections except for specific allowed applications. A technician needs to configure this on a Windows 10 PC. Which tool should they use?

Accepted Answer

Windows Defender Firewall with Advanced Security. The Windows Defender Firewall with Advanced Security (wf.msc) is the correct tool because it provides granular control over inbound rules, allowing the technician to block all incoming connections by default and then create explicit allow rules for specific applications. This meets the security policy requirement for a host-based firewall that blocks incoming traffic except for permitted applications.

Answer

Windows Defender Antivirus settings

Answer

Group Policy Editor

Answer

Network and Sharing Center

Question 14

A technician is troubleshooting a PC that repeatedly shuts down. The user mentions the computer is plugged into a power strip that also has a space heater and a laser printer. What is the most likely cause of the shutdowns?

Accepted Answer

The power strip is overloaded and cannot supply stable voltage.. The most likely cause is that the power strip is overloaded because it is simultaneously supplying power to a space heater (a high-wattage resistive load), a laser printer (which draws significant current during fuser warm-up), and the PC. This overload causes the power strip's circuit breaker to trip or the voltage to sag below the PC's power supply tolerance, resulting in repeated shutdowns. Option B is correct because the combined current draw exceeds the power strip's rated capacity, leading to unstable voltage delivery.

Answer

The computer's power supply is failing.

Answer

The space heater is emitting electrical interference.

Answer

The laser printer needs a toner replacement.

Question 15

A small business has no formal change management process. A technician installs a new antivirus program on a server, which later conflicts with the existing backup software, causing backups to fail. Which principle of change management was most clearly violated?

Accepted Answer

The change was not documented or communicated to stakeholders. The scenario describes a small business with no formal change management process. The core failure is that the technician installed new antivirus software without documenting the change or communicating it to stakeholders (such as the backup administrator or other IT staff). If the change had been documented and communicated, the potential conflict with the existing backup software could have been identified and avoided. This directly violates the principle that all changes must be documented and communicated to relevant parties, even in the absence of a formal CAB or staging environment.

Answer

The change was not tested in a staging environment

Answer

The change was not approved by the change advisory board

Answer

The technician did not create a rollback plan