220-1202 Practice Test 24 — 15 Questions

Question 1

A user reports that their Windows 10 PC is running slowly and they suspect a background process is consuming excessive memory. Which command-line tool should you use to identify the process by name and memory usage?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

tasklist. The `tasklist` command displays a list of all currently running processes on a Windows system, including their process ID (PID), session name, session number, and memory usage. By default, it shows memory consumption in kilobytes, allowing you to identify which process is consuming excessive memory by name. This makes it the correct tool for diagnosing a memory-hungry background process.

Answer

ipconfig

Answer

chkdsk

Answer

sfc

Question 2

A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique MAC address. Which security measure should be implemented on the network switch?

Accepted Answer

Configure MAC filtering. MAC filtering on a network switch allows the administrator to create an access control list (ACL) that permits or denies traffic based on the source MAC address. By configuring the switch to allow only the MAC addresses of authorized employee laptops, the small business can restrict file server access to those specific devices, even if they connect via a wired Ethernet port.

Answer

Disable SSID broadcast

Answer

Enable WPA3 encryption

Answer

Change the default admin password

Question 3

A technician writes a batch script to automate software installation across multiple workstations. The script needs to wait for the installer to finish before proceeding to the next line. Which command should be used?

Accepted Answer

START /WAIT. The START /WAIT command launches a specified program or script and pauses execution of the batch file until that process terminates. This is exactly what is needed to ensure the installer completes before the next line runs, making it the correct choice for sequential automation.

Answer

PAUSE

Answer

TIMEOUT

Answer

CALL

Question 4

During a security incident, a technician needs to verify whether a specific application was granted camera and microphone permissions on a macOS computer. Which macOS tool should they use to check these privacy settings?

Accepted Answer

System Settings > Privacy & Security. System Settings > Privacy & Security is the correct tool because macOS centralizes all privacy-related permissions—including camera and microphone access—in this GUI panel. The technician can navigate to the specific application under the Camera and Microphone sub-sections to verify granted permissions. This is the standard, user-facing interface for managing privacy controls on macOS.

Answer

Keychain Access

Answer

Console

Answer

Terminal with 'tccutil' command

Question 5

A technician is configuring a new server rack in a shared office space. Which physical security measure should be applied to prevent unauthorized physical access to the servers?

Accepted Answer

Use rack-mount locks on each server chassis. Rack-mount locks provide a direct physical barrier that prevents unauthorized individuals from opening the server chassis and accessing internal components, such as hard drives, memory, or cables. In a shared office space, this is the most effective measure to deter tampering, theft, or accidental damage at the rack level.

Answer

Install a door alarm on the office entrance

Answer

Enable BitLocker on all server drives

Answer

Configure a strong BIOS password

Question 6

A technician is responding to a security incident where an employee's credentials were used to access a server without authorization. The employee claims they did not perform the action. Which of the following should the technician do first to remediate the compromised account?

Accepted Answer

Disable the account to prevent further access.. The immediate step is to disable the compromised account to prevent further unauthorized access. Then the technician should force a password reset and enable multi-factor authentication (MFA) to secure the account. Logging and investigation follow containment.

Answer

Reset the account password and enable MFA.

Answer

Review the server logs to determine the extent of the breach.

Answer

Notify the employee's manager and HR department.

Question 7

A customer reports that their Windows 10 laptop is displaying pop-up ads even when no browser is open. They suspect a malware infection. Which of the following should you do first to remediate this issue?

Accepted Answer

Disconnect the network cable, boot into Safe Mode, then run a full antivirus scan.. The first step in malware remediation is to disconnect from the network to prevent further communication with command-and-control servers. Then boot into Safe Mode to prevent malicious processes from loading, and run a full antivirus scan. This isolates the threat before attempting removal.

Answer

Run a full antivirus scan while the system is connected to the internet.

Answer

Perform a System Restore to a point before the pop-ups started.

Answer

Immediately reinstall Windows 10 to ensure complete removal.

Question 8

A user reports that their external hard drive is no longer recognized by Windows. They suspect it might be infected with malware from a previous connection. You run a security scan and find no threats. What is the most likely cause of the drive not being recognized?

Accepted Answer

The USB controller driver is corrupted or outdated.. When a drive is not recognized after a suspected malware incident, the issue is often driver-related or due to a corrupted file system, not necessarily malware. Reinstalling or updating the USB controller driver in Device Manager can resolve recognition issues. The correct answer is to check Device Manager for driver issues.

Answer

The drive is permanently damaged by malware.

Answer

The user needs to format the drive to remove malware.

Answer

Windows Firewall is blocking the external drive.

Question 9

A security incident occurred where an unauthorized user accessed a workstation. You need to review the event logs to determine when the breach happened. Which Control Panel applet would you use to launch the Event Viewer?

Accepted Answer

Administrative Tools. Administrative Tools is the Control Panel applet that provides access to advanced system tools, including Event Viewer. To investigate a security breach, you would open Administrative Tools and then launch Event Viewer to review security logs for unauthorized access events. This is the correct path because Event Viewer is not directly listed in the main Control Panel categories; it is nested within Administrative Tools.

Answer

System

Answer

Security and Maintenance

Answer

Device Manager

Question 10

A company's security policy requires that all Windows 10 workstations automatically install critical updates as soon as they are released. However, users must not be forced to restart during work hours. Which Windows Update setting should you configure to meet these requirements?

Accepted Answer

Set Active Hours to cover the workday. Configuring Active Hours in Windows Update allows you to specify the time range during which the system should not automatically restart after installing updates. By setting Active Hours to cover the entire workday, critical updates can be downloaded and installed automatically, but the required restart is deferred until outside those hours, meeting both the security policy and the user experience requirement.

Answer

Defer feature updates

Answer

Set the connection as metered

Answer

Configure Windows Update to 'Notify to schedule restart'

Question 11

A user reports that their cloud-based virtual desktop (VDI) is disconnecting frequently. The user's internet connection is stable, and other cloud services work fine. The technician checks the VDI's resource usage and finds that the virtual machine's RAM is consistently at 95% usage. What should the technician do to resolve the disconnections?

Accepted Answer

Increase the amount of RAM allocated to the VDI.. This scenario tests advanced troubleshooting of VDI performance. High memory usage can cause the VM to become unresponsive, leading to disconnections. Increasing the VM's RAM allocation directly addresses the resource bottleneck. Reducing RAM would worsen the problem, and network or GPU issues are not indicated.

Answer

Reduce the amount of RAM allocated to the VDI.

Answer

Reinstall the VDI client software on the user's device.

Answer

Enable GPU acceleration for the VDI.

Question 12

During a software deployment, you need to create a script that runs automatically every time a user logs into their Windows 10 domain-joined computer. Which tool should you use to configure this task?

Accepted Answer

Task Scheduler. Task Scheduler is the correct tool because it allows you to create a task that triggers on a specific event, such as user logon. You can set the trigger to 'At log on' for any user or a specific user, and the task will run automatically each time the user logs into the Windows 10 domain-joined computer. This is the native Windows mechanism for scheduling scripts or programs to run at logon without requiring additional configuration.

Answer

Group Policy Management Console

Answer

Local Group Policy Editor

Answer

Windows PowerShell ISE

Question 13

A user reports that their Windows 11 laptop's battery drains quickly even when idle. They have already checked for background apps and power-hungry processes. Which single Settings page can you use to generate a detailed battery usage report showing which apps and hardware have consumed the most power over the last 24 hours?

Accepted Answer

Settings > System > Power & battery > Battery usage. The correct tool is 'Battery usage' under Settings > System > Power & battery. This page provides a graph and detailed list of app and hardware power consumption, which can help identify the cause of rapid drain.

Answer

Settings > System > Power & battery > Battery saver

Answer

Control Panel > Power Options > Edit Plan Settings

Answer

Settings > Privacy & security > Diagnostics & feedback

Question 14

A small business owner wants to ensure that all company laptops are protected in case of theft. They need a solution that encrypts the entire hard drive and requires a pre-boot PIN. Which security feature should you implement?

Accepted Answer

Enable BitLocker with a TPM + startup PIN.. BitLocker with a TPM + startup PIN provides full-disk encryption and requires a pre-boot authentication PIN, meeting the requirement to protect the entire hard drive in case of theft. The TPM validates system integrity, and the PIN must be entered before the OS loads, preventing unauthorized access even if the drive is removed.

Answer

Enable EFS (Encrypting File System) on the Documents folder.

Answer

Set a BIOS password.

Answer

Install a third-party antivirus with encryption.

Question 15

A customer reports that their printer is not working after a recent Windows update. The technician suspects a driver issue. Which of the following is the BEST way to handle this situation while maintaining customer satisfaction?

Accepted Answer

Say you will research the issue and call them back within an hour with steps.. It demonstrates professional communication and sets realistic expectations. The technician acknowledges the issue, commits to researching the specific driver compatibility problem caused by the Windows update, and promises a follow-up within a defined timeframe. This approach maintains customer trust and avoids making promises or taking actions without a clear plan.

Answer

Tell the customer that Windows updates often break things and they should avoid updates.

Answer

Ask the customer to try unplugging the printer and plugging it back in.

Answer

Immediately remote into their computer and start checking settings without explaining.