220-1202 Practice Test 15 — 15 Questions

Question 1

A technician receives a ticket from a user who says their email is not working. The technician remotely connects and sees that the user's Outlook profile is corrupt. The user is in the middle of an important project. What is the best way to communicate the necessary steps?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Explain that the Outlook profile is corrupt and needs to be rebuilt, which may cause a brief interruption.. It balances transparency with professionalism: the technician clearly explains the issue (corrupt Outlook profile) and the necessary action (rebuild), while proactively managing expectations about a brief interruption. This approach respects the user's need to stay informed during an important project, aligning with ITIL best practices for incident management and user communication.

Answer

Tell the user that you will fix it and they should not worry about the details.

Answer

Use technical terms like 'PST file corruption' and 'registry repair' to sound knowledgeable.

Answer

Rebuild the profile without informing the user to avoid worrying them.

Question 2

A technician is troubleshooting an Android device that is unable to connect to a corporate Wi-Fi network using WPA2-Enterprise with a username and password. The device connects successfully to other open Wi-Fi networks. Which Android setting should the technician check first to resolve the authentication failure?

Accepted Answer

Check if a CA certificate is installed and selected in the Wi-Fi network's advanced settings.. WPA2-Enterprise with username/password authentication typically requires a CA certificate to validate the RADIUS server's identity. Without a trusted CA certificate installed and selected in the Wi-Fi network's advanced security settings, the Android device will reject the connection attempt, even though the credentials are correct. This is the most common cause of authentication failure in enterprise Wi-Fi environments.

Answer

Verify that the device's IP address is set to DHCP.

Answer

Disable the proxy settings for that Wi-Fi network.

Answer

Configure a static MAC address on the device.

Question 3

A user reports that a script they run daily now fails with 'Permission denied' even though they haven't changed any permissions. The script is located in /usr/local/bin/script.sh and has permissions -rwxr-xr-x. The user is in the 'users' group. What is the most likely issue?

Accepted Answer

The /usr/local/bin partition is mounted with the noexec option.. The script has execute permissions for the user (rwxr-xr-x), so the 'Permission denied' error is not due to missing execute bits. The most likely cause is that the /usr/local/bin filesystem is mounted with the 'noexec' option, which prevents execution of any binary or script regardless of its permission bits. This is a common administrative security measure that blocks execution from specific partitions, and it would cause the script to fail with 'Permission denied' even though the file permissions appear correct.

Answer

The script's shebang line is incorrect.

Answer

The user does not have read permission on the script.

Answer

The script has been replaced with a directory.

Question 4

A technician is called to a server room where a UPS battery is emitting a strong sulfur smell and the casing feels warm. What immediate action should the technician take?

Accepted Answer

Disconnect the UPS from the mains and move it outside to a safe area.. A strong sulfur smell and warm casing from a UPS battery indicate thermal runaway, a condition where internal chemical reactions generate excessive heat, potentially leading to fire or explosion. The immediate priority is to disconnect the UPS from mains power to stop charging and remove it to a safe, well-ventilated outdoor area to mitigate the risk of toxic gas release or catastrophic failure.

Answer

Open the UPS to ventilate the battery compartment.

Answer

Continue monitoring the UPS until it shuts down automatically.

Answer

Spray the UPS with a fire extinguisher as a precaution.

Question 5

A user reports that a shared file on a Linux server is not accessible to their team. The file permissions are -rwxr----- and the user is a member of the group 'staff'. The file's group owner is 'admin'. Which command should the administrator run to allow the staff group to read the file?

Accepted Answer

chgrp staff file. The file's current permissions (-rwxr-----) grant the owner full access and the group 'admin' read-only access, but the user is in the 'staff' group, not 'admin'. To allow the 'staff' group to read the file, the file's group owner must be changed to 'staff' using `chgrp staff file`. This ensures that the group read permission (r--) applies to members of the 'staff' group.

Answer

chmod 755 file

Answer

chmod g+r file

Answer

chown user:staff file

Question 6

A technician is tasked with securing a legacy web application that only supports HTTP, not HTTPS. The application is critical for internal operations but must be accessible remotely. What is the best way to secure the traffic without modifying the application?

Accepted Answer

Use a VPN to access the internal network.. A VPN creates an encrypted tunnel between the remote user and the internal network, securing all HTTP traffic without any modification to the legacy application. Since the application only supports HTTP, it cannot serve HTTPS natively, and a VPN provides transport-layer encryption (e.g., IPsec or TLS-based VPN) that protects data in transit over untrusted networks.

Answer

Install a self-signed SSL certificate on the server.

Answer

Enable HTTP Strict Transport Security (HSTS) on the server.

Answer

Configure the browser to use a proxy server.

Question 7

After installing a new application, a user reports that their default web browser keeps changing to a different one without their consent. Which Windows feature can you use to prevent applications from changing file associations and default programs?

Accepted Answer

Local Group Policy Editor. The Local Group Policy Editor (gpedit.msc) allows administrators to configure the 'Set a default associations configuration file' policy under Computer Configuration > Administrative Templates > Windows Components > File Explorer. When enabled, this policy prevents applications from changing file associations and default programs by locking the association file, overriding any user or application changes. This is the correct tool for enforcing system-wide control over default programs in Windows 10/11 Pro, Enterprise, or Education editions.

Answer

Programs and Features

Answer

Default Programs (Control Panel)

Answer

Registry Editor

Question 8

A company deploys a new remote access solution using a VPN concentrator. After setup, users report that they can connect to the VPN but cannot access internal file servers. Other internal resources like email are accessible. Which of the following is the most likely cause?

Accepted Answer

The VPN concentrator lacks a route to the file server's subnet. The VPN concentrator must have a route to the file server's subnet to forward traffic from VPN clients. Without this route, packets destined for the file server are dropped, while other resources (like email) remain accessible if their subnets are reachable. This is a classic routing issue in remote access VPN deployments.

Answer

The VPN client is using an incorrect DNS server

Answer

The file server is not on the same VLAN as the VPN concentrator

Answer

The users do not have permission to log on locally to the file server

Question 9

A user reports that their Windows 10 laptop is running slowly and frequently shows a 'Low Memory' warning. They have 8 GB of RAM and are not running any unusual applications. Which built-in Windows tool should you use to determine if a specific process is leaking memory?

Accepted Answer

Task Manager. Task Manager (Option B) is the correct tool because it provides a real-time view of per-process memory usage, including the 'Memory (Active Private Working Set)' column, which can identify a process that is consuming an abnormally increasing amount of RAM over time—indicative of a memory leak. Unlike other tools, Task Manager allows you to quickly sort processes by memory usage and observe growth without needing to configure counters or parse logs.

Answer

Performance Monitor

Answer

Event Viewer

Answer

System Configuration (msconfig)

Question 10

A user calls the help desk, frustrated that their laptop 'keeps freezing' during video conferences. They admit they have 15 browser tabs open, are running a resource-heavy design app, and have not restarted the laptop in three weeks. The technician needs to recommend a solution while maintaining professionalism. What should the technician say first?

Accepted Answer

"I understand that's frustrating. Let's look at what might be causing this. Have you noticed it happens when certain programs are open?". It first validates the user's frustration (professionalism) and then uses a probing question to gather diagnostic data about the specific conditions causing the freezing. This aligns with the CompTIA A+ troubleshooting methodology (identify the problem) and maintains rapport, which is critical for customer satisfaction. The technician avoids premature blame or dismissal, instead focusing on correlating the symptom (freezing) with resource contention from the browser tabs and design app.

Answer

"You need to close some tabs and restart your laptop immediately."

Answer

"That's because you never restart your computer. You should do that weekly."

Answer

"Let me transfer you to our advanced support team for this issue."

Question 11

A user reports that after a technician recycled an old computer by simply deleting the user profile, the next user found personal documents in the 'Recycle Bin'. Which step was missed in the data disposal process?

Accepted Answer

The technician should have used a data wiping tool that overwrites the free space.. Deleting a user profile only removes the user's registry and profile folder, but personal documents remain in the Recycle Bin because the Recycle Bin is a system-protected hidden folder that is not cleared by profile deletion. A data wiping tool that overwrites free space is required to securely erase the contents of the Recycle Bin and any other residual data, ensuring that deleted files cannot be recovered.

Answer

The technician should have performed a quick format.

Answer

The technician should have removed the hard drive and stored it.

Answer

The technician should have disabled the Recycle Bin.

Question 12

A technician is configuring a new Windows 10 workstation for a remote employee who will handle sensitive customer data. Which security feature should be enabled to ensure that if the laptop is lost, the data remains protected?

Accepted Answer

BitLocker Drive Encryption. BitLocker Drive Encryption (C) is the correct choice because it provides full-disk encryption using AES encryption algorithms, ensuring that if the laptop is lost or stolen, the sensitive customer data remains inaccessible without the recovery key or TPM authentication. This directly addresses the requirement to protect data at rest on a lost device.

Answer

Windows Defender Firewall

Answer

User Account Control (UAC)

Answer

Windows Hello for Business

Question 13

A system administrator configures a new VPN server for remote employees. The requirement is that all traffic from the remote user's device must be routed through the corporate network to enforce security policies. Which VPN protocol setting should the administrator enable?

Accepted Answer

Disable split tunneling. Disabling split tunneling ensures that all traffic from the remote user's device is routed through the corporate VPN tunnel, enforcing security policies such as content filtering and intrusion detection. When split tunneling is enabled, only traffic destined for the corporate network goes through the VPN, while internet-bound traffic bypasses it, violating the requirement. This setting is typically configured in the VPN client or server profile (e.g., using the 'DisableSplitTunneling' registry key on Windows or the 'tunnel-all' directive in OpenVPN).

Answer

Enable split tunneling

Answer

Use PPTP instead of L2TP

Answer

Increase the MTU size

Question 14

A user calls the help desk saying their PC suddenly displays a ransom note demanding payment in Bitcoin to unlock their files. They cannot open any documents or images. What is the first action you should take?

Accepted Answer

Disconnect the PC from the network.. The correct first action is to disconnect the PC from the network (Option C). This immediately isolates the infected system, preventing the ransomware from communicating with its command-and-control (C2) server to exfiltrate data or encrypt additional network shares. It also stops the ransomware from spreading laterally to other devices on the same LAN, which is critical for containment before any remediation steps are taken.

Answer

Pay the ransom to get the decryption key.

Answer

Run a full antivirus scan immediately.

Answer

Restore files from a recent backup without disconnecting.

Question 15

A technician is investigating a security incident where a user's corporate email account was accessed from an unknown device. The user's iPhone shows no suspicious apps, and the password was recently changed. Which of the following is the MOST likely cause?

Accepted Answer

An OAuth token or app-specific password was stolen and used to access the account.. OAuth tokens or app-specific passwords bypass the need for the primary password, allowing persistent access even after a password change. Since the user's iPhone shows no suspicious apps and the password was recently changed, a stolen token is the most plausible vector for unauthorized email access via Exchange ActiveSync or modern authentication.

Answer

The user's iCloud account was compromised, and the email is synced via Exchange.

Answer

The user's iPhone has a jailbreak that hides malicious apps.

Answer

The corporate email server has a backdoor account.