220-1202 Practice Test 23 — 15 Questions

Question 1

A user reports that their web browser's homepage has changed to an unfamiliar search engine, and new toolbars have appeared without their consent. They have not installed any new software recently. Which type of malware is most likely responsible?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Browser hijacker. The symptoms—unwanted homepage changes, unfamiliar search engine, and new toolbars—are classic signs of a browser hijacker. This malware modifies browser settings (e.g., via registry keys or extension policies) without user consent, often bundled with freeware or installed through drive-by downloads. Unlike other malware types, it specifically targets the browser's configuration to redirect traffic and generate ad revenue.

Answer

Trojan horse

Answer

Worm

Answer

Ransomware

Question 2

A technician is configuring a new workstation for an executive who requested specific software. The executive's assistant says the executive is very busy and wants the setup done quickly without any questions. What is the most professional response?

Accepted Answer

Ask the assistant to confirm the exact software list and any version requirements before starting.. It demonstrates professional due diligence: confirming the exact software list and version requirements prevents misconfigurations that could waste the executive's time later. A technician must verify requirements before installation to avoid compatibility issues or missing critical features, which is a core communication skill in the CompTIA A+ 220-1202 domain.

Answer

Proceed with the installation as requested to respect the executive's time.

Answer

Install the software that is most commonly used by other executives.

Answer

Tell the assistant that you cannot proceed without talking to the executive directly.

Question 3

A user's browser is infected with a malicious extension that steals credentials. The extension was installed via a drive-by download from a compromised website. After removing the extension, what additional step should you take to ensure the credentials are not compromised?

Accepted Answer

Change all passwords that were entered while the extension was active. A malicious browser extension that steals credentials has already exfiltrated any passwords entered while it was active. Removing the extension stops further theft, but the compromised credentials remain exposed. Changing all passwords ensures that stolen credentials are invalidated, preventing unauthorized access to accounts.

Answer

Clear the browser cache and cookies

Answer

Run a full antivirus scan

Answer

Reset the browser settings to default

Question 4

After a security incident, a forensic analyst needs to review the event logs on a Windows 10 system to determine when a specific user account was created. The logs are intact. Which Windows security setting must be enabled to ensure that account creation events are recorded?

Accepted Answer

Enable 'Audit Account Management' in Advanced Audit Policy.. User account creation is an account management event, not a logon event. In Windows 10, the 'Audit Account Management' policy under Advanced Audit Policy Configuration must be enabled to record Security Event ID 4720 (a user account was created). This setting logs all changes to user and group accounts, including creation, modification, and deletion.

Answer

Enable 'Audit Logon Events' in Local Security Policy.

Answer

Turn on 'File and Printer Sharing' in Network and Sharing Center.

Answer

Configure Windows Defender to scan for new accounts.

Question 5

A small office has several old CRT monitors that need to be replaced. The office manager asks the technician to simply place them in the dumpster. What should the technician do?

Accepted Answer

Contact a licensed e-waste recycler to pick up the monitors for proper disposal.. CRT monitors contain hazardous materials such as lead, mercury, and cadmium, and are classified as electronic waste (e-waste). Proper disposal requires contacting a licensed e-waste recycler who can handle and recycle the hazardous components in compliance with environmental regulations. Simply dumping them is illegal in most jurisdictions.

Answer

Comply with the manager's request to avoid conflict.

Answer

Break the monitors down to salvage the copper, then discard the glass.

Answer

Donate the monitors to a local school.

Question 6

You are configuring a new Windows 10 workstation for a remote employee who will connect to the corporate VPN. The user should not be able to install software or change system settings. Which tool should you use to enforce these restrictions?

Accepted Answer

Local Group Policy Editor. Local Group Policy Editor is the correct tool because it allows an administrator to enforce restrictions on user accounts, such as preventing software installation and system settings changes. It provides granular control over user rights and permissions through Group Policy Objects (GPOs). This is the standard method for applying such restrictions in a Windows environment.

Answer

User Account Control (UAC) settings

Answer

Device Manager

Answer

Registry Editor

Question 7

During a network upgrade, a technician needs to run new Ethernet cables through a drop ceiling. The technician notices that some existing cables are resting on the ceiling tiles and are not secured. What safety concern should the technician address?

Accepted Answer

Secure all cables to the ceiling grid using appropriate cable supports.. Cables resting on ceiling tiles are a fire and safety hazard because they can be damaged, impede airflow, and violate fire codes. The correct action is to secure all cables to the ceiling grid or structure using appropriate cable supports (J-hooks, bridle rings, or cable trays) so they are properly supported and out of the way.

Answer

Leave the cables as they are and run the new cables alongside them.

Answer

Use zip ties to attach the cables to the sprinkler pipes for stability.

Answer

Remove the existing cables and replace them with the new ones.

Question 8

A technician needs to deploy a PowerShell script to 50 Windows 10 workstations that will install a security update silently. The script must run with administrative privileges. Which method should the technician use to ensure the script executes properly without user interaction?

Accepted Answer

Run the script via 'powershell.exe -ExecutionPolicy Bypass -File script.ps1' from an elevated command prompt. Running 'powershell.exe -ExecutionPolicy Bypass -File script.ps1' from an elevated command prompt bypasses PowerShell's execution policy for that session and ensures the script runs with administrative privileges. This combination allows silent, unattended execution of the security update installation across multiple workstations without user interaction.

Answer

Double-click the script file on each workstation

Answer

Use the 'Start-Process' cmdlet without elevation

Answer

Copy the script to the Startup folder

Question 9

A technician is troubleshooting a PowerShell script that collects system information and writes it to a log file. The script runs without errors but the log file is empty. The script uses Out-File to write data. What is the most likely issue?

Accepted Answer

The command before Out-File does not produce any output.. The most likely issue is that the command preceding Out-File does not produce any output. Out-File writes whatever is piped to it; if the preceding command returns nothing (e.g., due to an error, empty result, or incorrect syntax), the log file will be empty even though the script runs without errors.

Answer

The script is not running with administrative privileges.

Answer

The Out-File cmdlet is misspelled.

Answer

The log file path contains a forward slash instead of a backslash.

Question 10

A customer reports that their laptop battery is swelling and the case is cracking. They ask if it's safe to continue using it plugged in. What should the technician advise?

Accepted Answer

Shut down the laptop immediately, disconnect the battery if safely possible, and replace the battery as soon as possible.. A swelling lithium-ion battery indicates internal chemical breakdown and gas generation, which can lead to thermal runaway, fire, or explosion. The immediate risk is physical rupture of the battery casing and potential short-circuiting. The correct action is to shut down the laptop, disconnect the battery if it can be done safely without puncturing it, and replace it as soon as possible to eliminate the hazard.

Answer

It's fine to keep using it plugged in as long as the battery is removed.

Answer

Continue using it but only on battery power to avoid overheating the charger.

Answer

Place the laptop in a freezer to reduce swelling, then continue using it.

Question 11

A customer reports that their browser shows a 'Your connection is not private' warning when visiting their online banking site, but other websites work fine. What is the most likely cause?

Accepted Answer

The bank's SSL certificate has expired or is misconfigured.. The 'Your connection is not private' warning indicates a TLS/SSL certificate validation failure. Since only the banking site is affected, the issue is specific to that site's certificate, not a system-wide problem. The most common cause is that the bank's SSL certificate has expired, is self-signed, or does not match the domain name, triggering the browser's certificate trust check.

Answer

The user's system date and time are incorrect.

Answer

The user's browser is infected with a man-in-the-middle proxy.

Answer

The user's anti-virus is blocking the connection.

Question 12

A small business is deploying Windows 11 to 20 new workstations. During the setup, you need to ensure that each computer receives a unique computer name and joins the domain automatically. Which Windows deployment tool should you use to automate this process?

Accepted Answer

Windows Deployment Services (WDS). Windows Deployment Services (WDS) is the correct tool because it is designed to deploy Windows operating systems over a network using Preboot Execution Environment (PXE) boot. It can be configured with answer files to automatically assign unique computer names (via naming policies or a prestaged computer accounts in Active Directory) and join the domain without manual intervention, making it ideal for deploying 20 workstations simultaneously.

Answer

Windows System Image Manager (Windows SIM)

Answer

Microsoft Deployment Toolkit (MDT)

Answer

Sysprep

Question 13

A customer complains that their computer is running slowly and they keep seeing pop-ups offering free antivirus software. They admit they clicked 'OK' on one pop-up. Which type of social engineering attack has likely occurred?

Accepted Answer

Baiting. Aiting. In this scenario, the user clicked 'OK' on a pop-up offering free antivirus software, which is a classic baiting attack. Baiting lures victims with a false promise (e.g., free software) to trick them into executing malware or revealing credentials. Unlike phishing, which typically uses deceptive emails or websites to steal sensitive information, baiting relies on the allure of a free item or service to trigger a malicious download.

Answer

Phishing

Answer

Pretexting

Answer

Shoulder surfing

Question 14

A technician is decommissioning a server that contains a lithium-ion battery backup module. The battery is not swollen but is several years old. What is the proper disposal procedure?

Accepted Answer

Discharge the battery using a proper load, then recycle it through a certified lithium battery recycler.. Lithium-ion batteries, even if not visibly swollen, degrade over time and can still pose a fire or chemical hazard if improperly disposed. The proper procedure is to safely discharge the battery using a certified load to remove residual energy, then recycle it through a certified lithium battery recycler to comply with environmental regulations and safety standards.

Answer

Remove the battery and place it in the regular trash since it is not swollen.

Answer

Short the terminals to fully discharge the battery before disposal.

Answer

Store the battery in a metal container and return it to the manufacturer for disposal.

Question 15

A technician is configuring power settings for a server room that houses critical equipment. The UPS battery backup needs to be tested monthly. What is the most environmentally sound way to conduct the test?

Accepted Answer

Use the UPS management software to run a self-test that checks battery health without full discharge.. Using UPS management software to run a self-test checks battery health without a full discharge, which conserves battery cycle life and avoids unnecessary waste. This method typically performs a brief impedance or load test that verifies the battery's ability to hold a charge without stressing it, aligning with environmental best practices by reducing battery replacement frequency and energy consumption.

Answer

Unplug the server from the UPS to simulate a power failure.

Answer

Disconnect the UPS from mains power and let the battery drain completely.

Answer

Replace the UPS battery every month to avoid testing.