220-1202 Practice Test 17 — 15 Questions

Question 1

A company policy requires that all web traffic from employee computers be filtered to block known malicious sites. You need to implement this without installing client software on each machine. Which approach should you use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Implement a DNS-based content filtering service on the network's DNS server.. DNS-based content filtering operates at the network level, blocking resolution of domains known to host malicious content. This approach requires no client software, as all DNS queries from employee computers are intercepted and filtered by the network's DNS server, enforcing the policy transparently.

Answer

Configure each browser's proxy settings to use a filtering proxy server.

Answer

Enable Windows Defender SmartScreen on each computer via Group Policy.

Answer

Install a third-party browser extension on all browsers to block malicious sites.

Question 2

A customer calls saying their home Wi-Fi network suddenly stopped working after they changed the router's security mode from WPA2-PSK to WPA2-Enterprise. All their devices previously connected fine. What is the most likely cause of the problem?

Accepted Answer

The router is now requiring a username and password from a RADIUS server, which the home network lacks.. WPA2-Enterprise uses 802.1X authentication, which requires a RADIUS server to validate credentials (username and password). Home routers typically lack a built-in RADIUS server, so after changing to WPA2-Enterprise, the router cannot authenticate any client, causing all devices to fail to connect. The previous WPA2-PSK mode used a simple pre-shared key, which worked without any external server.

Answer

The router's firmware is outdated.

Answer

The devices do not support the new encryption cipher.

Answer

The SSID was changed during the configuration.

Question 3

During a network equipment upgrade, a technician finds several old switches with visibly leaking capacitors on the circuit boards. What is the correct procedure for handling these switches?

Accepted Answer

Wear nitrile gloves, place the switches in a sealed bag, and label for e-waste recycling.. Leaking capacitors often contain hazardous materials such as electrolytes or polychlorinated biphenyls (PCBs), which require special handling to prevent environmental contamination and personal injury. The correct procedure is to wear nitrile gloves (to avoid skin contact with corrosive or toxic substances), place the switches in a sealed bag to contain any leaked material, and label them for e-waste recycling, ensuring compliance with environmental regulations like the WEEE Directive or RCRA.

Answer

Power them on to see if they still function before disposal.

Answer

Use compressed air to blow out the leaked substance and then recycle the switches.

Answer

Dispose of the switches in the regular office recycling bin.

Question 4

A user reports that their Windows 10 PC is running slowly and they suspect too many programs are starting automatically. They want to disable a few startup items without uninstalling them. Which tool should you use to manage these startup programs?

Accepted Answer

Task Manager > Startup tab. Task Manager's Startup tab provides a straightforward interface to enable or disable startup programs without uninstalling them. It displays each startup item's name, publisher, status, and startup impact, allowing users to selectively disable unwanted entries. This is the correct tool for managing startup programs in Windows 10.

Answer

Services.msc

Answer

Control Panel > Programs and Features

Answer

Settings > Apps > Startup

Question 5

A technician is configuring a new Windows 10 workstation for a remote employee. The employee will use the laptop to access company resources via VPN. Which security setting should be configured to ensure the VPN connection is always used when accessing the internet?

Accepted Answer

Disable split tunneling to force all traffic through the VPN.. Disabling split tunneling ensures that all network traffic, including internet-bound traffic, is routed through the VPN tunnel. This forces the VPN connection to be always used when accessing the internet, which is essential for enforcing security policies and ensuring that company resources are protected even when the remote employee accesses external websites.

Answer

Enable split tunneling to improve performance.

Answer

Configure the VPN to use PPTP protocol.

Answer

Set the VPN to connect only when accessing internal websites.

Question 6

A technician is configuring a new Mac mini for a kiosk application. The kiosk should run only a single web browser in full-screen mode, and users should not be able to exit the app or access the desktop. Which macOS feature should be used to enforce this?

Accepted Answer

Configure a user account with Parental Controls set to allow only the browser app. MacOS Parental Controls (now part of Screen Time) can restrict a standard user account to a single app, such as a web browser. When configured to 'Allow only this app,' the system prevents the user from switching apps, accessing the desktop, or exiting the browser, which is exactly what a kiosk requires.

Answer

Enable Guided Access in Accessibility settings

Answer

Use the 'Single App Mode' setting in System Settings

Answer

Set the browser as a Login Item for a standard user

Question 7

An organization is moving to a cloud-based system and needs to dispose of several tape backup cartridges that contain years of financial data. The tapes are LTO-5 and are still readable. Which destruction method is most appropriate?

Accepted Answer

Overwrite the tapes with a bulk eraser or degausser.. A degausser or bulk eraser generates a powerful magnetic field that disrupts the magnetic domains on the LTO-5 tape media, rendering the previously stored data unrecoverable. This method is the most appropriate for LTO-5 tapes because it physically destroys the magnetic encoding without requiring a compatible tape drive, and it is faster and more reliable than attempting to overwrite the entire tape. For secure disposal of magnetic media containing sensitive financial data, degaussing is the industry-standard approach when physical destruction is not mandated.

Answer

Perform a quick format of the tapes using a tape drive.

Answer

Reuse the tapes for non-sensitive data after deleting the files.

Answer

Burn the tapes in an industrial incinerator.

Question 8

A technician is troubleshooting an Android phone that cannot send or receive SMS messages, but can make and receive calls and use mobile data. The phone is on a corporate plan with a new SIM card. What is the most likely cause?

Accepted Answer

The SMS message center number is incorrect or missing.. The SMS message center number (SMSC) is a required parameter stored on the SIM card or phone that tells the device where to route outgoing SMS messages for delivery. If this number is incorrect or missing, the phone cannot send or receive SMS, but voice calls and mobile data remain unaffected because they use separate signaling paths (CSFB for calls and packet-switched data for mobile data). A new SIM card may have a misconfigured or missing SMSC, which is the most likely cause given the symptom pattern.

Answer

The phone's IMEI is blacklisted.

Answer

The mobile data APN settings are incorrect.

Answer

The phone is in airplane mode.

Question 9

After a recent Windows update, a user's printer stopped working. You suspect the update changed the default print spooler service startup type. Which Control Panel tool should you use to verify and correct the service startup type?

Accepted Answer

Administrative Tools > Services. The Print Spooler service is a Windows service that manages print jobs sent to the printer. Its startup type (e.g., Automatic, Manual, Disabled) is configured in the Services console, which is accessed via Administrative Tools > Services. Device Manager and Printers & scanners do not provide service startup type settings, and System > Advanced system settings deals with performance and user profiles, not services.

Answer

Device Manager

Answer

Printers & scanners

Answer

System > Advanced system settings

Question 10

During a security audit, a technician discovers that an employee's company-issued iPhone has been jailbroken. The employee claims they only did it to customize the home screen. Which security risk is most directly associated with a jailbroken device in a corporate environment?

Accepted Answer

It bypasses app sandbox restrictions, potentially exposing corporate data.. Jailbreaking removes the iOS sandbox restrictions that normally isolate each app's data and prevent unauthorized access to the file system. Without these restrictions, a malicious or compromised app on the jailbroken device can read, copy, or exfiltrate corporate data stored by other apps (e.g., email, VPN certificates, MDM profiles), directly violating data confidentiality in a corporate environment.

Answer

The device cannot receive iOS updates.

Answer

It voids the warranty.

Answer

The device will perform slower.

Question 11

During a printer toner replacement, a technician accidentally spills toner powder on the carpet. What is the proper cleanup procedure?

Accepted Answer

Blot the toner with a cold, damp cloth and then use a HEPA-filter vacuum.. Toner powder is extremely fine and can become airborne if mishandled. Blotting with a cold, damp cloth prevents the toner from spreading, and using a HEPA-filter vacuum ensures that microscopic toner particles are trapped without being exhausted back into the environment. Standard vacuum cleaners lack HEPA filtration and can release toner dust into the air, causing respiratory hazards.

Answer

Use a vacuum cleaner with a standard bag to suck up the toner.

Answer

Wipe the toner with a damp cloth using hot water.

Answer

Sweep the toner into a dustpan and dispose of it in the trash.

Question 12

A technician is called to a warehouse where a forklift accidentally struck a rack containing several desktop PCs. The rack is leaning, and one PC has fallen and is sparking. What is the technician's first priority for safety?

Accepted Answer

Evacuate the area and report the incident to the safety officer or call 911.. The immediate priority when a PC is sparking and a rack is unstable is life safety. Evacuating the area and reporting the incident (to a safety officer or by calling 911) ensures no one is exposed to potential electrical fire, arc flash, or structural collapse. Attempting to unplug or extinguish the sparking PC while the rack is leaning could result in electrocution, burns, or being struck by falling equipment.

Answer

Quickly unplug the sparking PC to prevent a fire.

Answer

Use a fire extinguisher on the sparking PC to prevent ignition.

Answer

Stabilize the rack with a nearby pallet to prevent further collapse.

Question 13

A technician is replacing a power supply in a desktop computer. After unplugging the unit, what additional step should be taken to ensure personal safety before touching internal components?

Accepted Answer

Press and hold the power button for 10 seconds.. After unplugging the power supply, pressing and holding the power button for 10 seconds discharges residual electrical charge stored in the system's capacitors (especially in the power supply and motherboard). This step, often called a 'parasitic drain,' ensures that no stored voltage remains that could cause an electric shock or damage components when touched. It is a standard safety practice before working inside a desktop computer.

Answer

Wear an anti-static wrist strap.

Answer

Remove the CMOS battery.

Answer

Unplug all peripheral cables.

Question 14

A technician is disposing of a stack of CDs and DVDs that contain backup data from a medical office. The media are labeled with patient information. Which method should the technician use to destroy the data?

Accepted Answer

Use a cross-cut shredder that accepts optical discs.. A cross-cut shredder that accepts optical discs physically destroys the media into small pieces, making data recovery impossible. This method is compliant with HIPAA requirements for destroying protected health information (PHI) on CDs and DVDs, as it renders the data irrecoverable through physical destruction.

Answer

Use a degausser on each disc.

Answer

Scratch the surface of each disc with a key.

Answer

Place the discs in a microwave for 10 seconds.

Question 15

A technician is writing a PowerShell script to check the status of a Windows service on multiple remote computers. The script must output the service name and status for each computer where the service is running. Which cmdlet combination should the technician use to achieve this?

Accepted Answer

Get-Service -ComputerName $computers | Where-Object {$_.Status -eq 'Running'}. Get-Service with the -ComputerName parameter can query multiple remote computers directly, and piping its output to Where-Object with the condition {$_.Status -eq 'Running'} filters only services whose Status property equals 'Running'. This meets the requirement to output the service name and status for each computer where the service is running, as Get-Service returns objects containing both Name and Status properties by default.

Answer

Invoke-Command -ComputerName $computers -ScriptBlock {Get-Service} | Select-Object Status

Answer

Get-WmiObject Win32_Service -ComputerName $computers | Where-Object {$_.State -eq 'Running'}

Answer

Get-Service -Name * -ComputerName $computers | Format-Table -AutoSize