220-1202 Practice Test 17 — 15 Questions

Question 1

A help desk ticket states that a user cannot write to a shared directory /data/projects. The directory permissions are drwxr-xr-x and the user is in the 'staff' group. The directory's group owner is 'staff'. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The directory lacks group write permission.. The directory permissions are drwxr-xr-x, which means the owner has read, write, and execute (rwx), the group has read and execute (r-x), and others have read and execute (r-x). Since the user is in the 'staff' group and the directory's group owner is 'staff', the user's effective permissions are the group permissions, which lack write (w). Therefore, the user cannot write to the directory. Option B correctly identifies that the directory lacks group write permission.

Answer

The user does not have read permission on the directory.

Answer

The user is not the owner of the directory.

Answer

The sticky bit is set on the directory.

Question 2

A non-profit organization is upgrading its computers and wants to donate the old ones to a local school. The HDDs contain donor information that must be kept confidential. The organization wants the drives to be reusable. Which method should be used?

Accepted Answer

Perform a full overwrite with zeros using disk-wiping software.. Performing a full overwrite with zeros using disk-wiping software ensures that all data on the HDDs is irrecoverably destroyed while leaving the drives functional for reuse. This method meets the organization's need for confidentiality (donor information) and reusability, as it overwrites every sector of the drive, including hidden areas like the HPA and DCO, with a known pattern (e.g., zeros or random data), making data recovery infeasible with standard tools.

Answer

Use a degausser to erase the drives.

Answer

Physically drill holes through the drive platters.

Answer

Delete all files and empty the recycle bin.

Question 3

A user reports that their laser printer is producing faint, streaky prints and has a strong ozone smell. The printer has been in use for three years. What is the most important safety procedure to follow before attempting to service the printer?

Accepted Answer

Unplug the printer and discharge the high-voltage power supply.. The strong ozone smell indicates a high-voltage issue, likely with the corona wire or power supply. Before servicing, you must unplug the printer and discharge the high-voltage power supply to prevent electric shock, as laser printers store lethal voltages in capacitors even when powered off.

Answer

Replace the toner cartridge immediately.

Answer

Clean the corona wire with isopropyl alcohol.

Answer

Reset the printer to factory defaults.

Question 4

A technician is investigating a security incident where multiple workstations on the same network are showing signs of infection: slow performance, unusual network traffic, and the presence of a file named 'svch0st.exe' in the Startup folder. The technician suspects a worm that spreads through network shares. What is the most effective containment strategy?

Accepted Answer

Disable network shares and isolate infected workstations from the network.. Disabling network shares and isolating infected workstations from the network is the most effective containment strategy because the worm spreads through network shares (SMB protocol). By cutting off the propagation vector (network shares) and isolating infected hosts, you prevent the worm from reaching other workstations, even if the malware is still active locally. This aligns with the immediate containment phase of incident response, which prioritizes stopping the spread over remediation.

Answer

Run a full antivirus scan on all workstations simultaneously.

Answer

Update the antivirus definitions on one workstation and scan it.

Answer

Reboot all workstations into Safe Mode with Networking.

Question 5

A technician is updating the documentation for a server that had its RAID controller replaced. The technician must ensure that future technicians can quickly identify the new hardware configuration. Which type of documentation should be updated?

Accepted Answer

The server's asset inventory record.. The server's asset inventory record (Option C) is the correct documentation to update because it contains the detailed hardware configuration of the server, including the RAID controller model, firmware version, and disk layout. Future technicians rely on this record to quickly identify the exact hardware components without having to physically inspect the server or dig through logs. Updating the asset inventory ensures that the documented configuration matches the actual hardware, which is critical for troubleshooting, warranty claims, and future upgrades.

Answer

The network topology diagram.

Answer

The change management log.

Answer

The knowledge base article for RAID troubleshooting.

Question 6

A user's Windows 10 PC is experiencing random freezes and application crashes. You suspect a corrupted system file. You run sfc /scannow but it reports that it cannot repair some files. What is the next best step to repair the system files using a DISM command?

Accepted Answer

Run DISM /Online /Cleanup-Image /RestoreHealth. The correct next step is to run DISM /Online /Cleanup-Image /RestoreHealth because SFC (System File Checker) relies on a healthy component store (WinSxS) to replace corrupted files. When SFC cannot repair files, it indicates the component store itself may be damaged. DISM repairs the component store by using Windows Update as the source, or a specified repair source, thereby enabling SFC to succeed on a subsequent scan.

Answer

Run chkdsk /f

Answer

Run System Restore

Answer

Run Windows Update

Question 7

A customer reports that their laptop was stolen from their desk over the weekend. The laptop contained sensitive client data. Which physical security control should have been implemented to prevent this theft?

Accepted Answer

Cable lock. A cable lock is a physical security control that physically secures the laptop to a desk or immovable object, preventing unauthorized removal. In this scenario, the laptop was stolen from the desk, so a cable lock would have directly prevented the theft by tethering the device in place.

Answer

Biometric authentication

Answer

Full disk encryption

Answer

Smart card reader

Question 8

A technician is troubleshooting an iPhone that fails to activate after a software update. The phone displays 'Activation Error' and the SIM card is known to be working. Which of the following steps should the technician perform FIRST?

Accepted Answer

Check Apple's System Status page for activation server outages.. The 'Activation Error' after a software update typically indicates that the iPhone cannot reach Apple's activation servers to verify its eligibility. Since the SIM card is known to be working, the most logical first step is to check Apple's System Status page to rule out a server-side outage, which is a common cause of activation failures and can be resolved without any device-side intervention.

Answer

Replace the SIM card with a new one.

Answer

Restore the iPhone using iTunes or Finder.

Answer

Reset the iPhone's network settings.

Question 9

A technician receives an angry email from a user claiming that the technician's previous fix made their computer worse. The technician knows the fix was correct. Which response is MOST professional?

Accepted Answer

Apologize for the inconvenience and schedule a time to revisit the issue.. The most professional response in this scenario is to de-escalate the situation by acknowledging the user's frustration and offering to re-engage on the issue. Even if the technician's fix was technically correct, the user's perception of a problem is a valid concern that must be addressed to maintain trust and service quality. Scheduling a follow-up allows the technician to re-evaluate the system, verify that no other changes have affected the computer, and provide reassurance, which aligns with ITIL best practices for incident management and customer service.

Answer

Reply with a detailed technical explanation proving the fix was right.

Answer

Ignore the email to avoid an argument.

Answer

Forward the email to the user's manager to complain about the user's tone.

Question 10

A user is unable to install a new app on their Android tablet because the device claims there is 'insufficient storage,' even though they have deleted several large files. What is the most likely reason for this error?

Accepted Answer

The deleted files are still in the recycle bin or trash folder, taking up space.. On Android devices, deleted files are moved to a recycle bin or trash folder (e.g., in the Files by Google app or the Gallery app's trash), not permanently erased. The system still counts these files as occupied storage until the trash is emptied, so even after deleting large files, the available space remains unchanged, causing the 'insufficient storage' error during app installation.

Answer

The device's SD card is corrupted.

Answer

The app is incompatible with the Android version.

Answer

The tablet's battery is too low to complete the installation.

Question 11

A technician is configuring a new Windows 10 workstation for a user who is visually impaired. The user needs the screen magnifier to start automatically when they log in, and they want high-contrast themes. Which Control Panel tool should the technician use to enable these accessibility features?

Accepted Answer

Ease of Access Center. The Ease of Access Center in Windows 10 is the dedicated Control Panel tool for configuring accessibility features, including Magnifier and high-contrast themes. It provides settings to enable Magnifier to start automatically at login and to apply high-contrast themes system-wide, directly addressing the user's needs.

Answer

System > Advanced system settings

Answer

Personalization

Answer

Display

Question 12

A technician is preparing to replace a failed hard drive in a server that hosts a critical database. The change requires a planned downtime of two hours. Which documentation must the technician review before proceeding?

Accepted Answer

The approved change request and the backout plan.. Before performing any hardware replacement that requires planned downtime, the technician must review the approved change request to confirm the change has been authorized and to understand the scope, risk, and implementation steps. The backout plan is equally critical as it provides the documented steps to revert the server to its previous state if the replacement fails, ensuring database integrity and minimizing extended downtime. This aligns with ITIL change management best practices and CompTIA A+ 220-1202 objectives for documentation review during hardware maintenance.

Answer

The server's warranty information.

Answer

The network topology diagram.

Answer

The employee handbook.

Question 13

A user calls the help desk claiming they received an urgent email from the CEO asking them to purchase gift cards for a client and reply with the codes. The user is suspicious because the email address looks slightly off. What type of social engineering attack is this?

Accepted Answer

Phishing. This is a phishing attack because the attacker impersonates a trusted entity (the CEO) via email to trick the user into performing a fraudulent action (purchasing gift cards and sharing codes). The suspicious email address indicates a spoofed sender, a common phishing technique that exploits trust and urgency to bypass user skepticism.

Answer

Shoulder surfing

Answer

Tailgating

Answer

Dumpster diving

Question 14

A user reports that their Windows 10 PC displays a 'Low Disk Space' warning on the C: drive. You want to use a built-in tool to delete temporary files and empty the Recycle Bin. Which Settings page should you open?

Accepted Answer

System > Storage. The 'Low Disk Space' warning on the C: drive can be resolved by using the built-in Storage Sense or the manual 'Free up space now' feature, both accessible under System > Storage. This page provides tools to delete temporary files, empty the Recycle Bin, and remove other unnecessary data to reclaim disk space without third-party software.

Answer

System > About

Answer

Apps > Apps & features

Answer

Update & Security > Windows Update

Question 15

A small business is deploying a new accounting application across five workstations. The IT lead creates a detailed change request that includes the purpose, scope, risk assessment, and rollback plan. Which document should the IT lead update immediately after the deployment is successfully completed?

Accepted Answer

The change request form. The change request form is the central document that tracks the entire lifecycle of a change, including planning, approval, implementation, and post-implementation review. Once the deployment is successfully completed, the IT lead must update the change request form to mark it as 'Closed' or 'Completed,' documenting the actual outcome, any deviations, and the final status. This ensures an accurate audit trail for compliance and future troubleshooting, as required by ITIL-based change management processes.

Answer

The firewall configuration log

Answer

The employee handbook

Answer

The backup verification checklist