220-1202 Practice Test 4 — 25 Questions

Question 1

Your company's security policy requires that all workstations have the latest Windows security updates installed. You need to verify the update history on a user's Windows 10 PC to ensure no critical updates are missing. Which tool should you use?

Accepted Answer

Windows Update. Windows Update settings (in Settings app or old Control Panel) shows update history, including installed updates and their dates. This is the standard way to check which updates have been applied.

Answer

Event Viewer

Answer

System Information

Answer

Reliability Monitor

Question 2

A user's Windows 10 PC is experiencing random freezes and application crashes. You suspect a corrupted system file. You run sfc /scannow but it reports that it cannot repair some files. What is the next best step to repair the system files using a DISM command?

Accepted Answer

Run DISM /Online /Cleanup-Image /RestoreHealth. The correct next step is to run DISM /Online /Cleanup-Image /RestoreHealth because SFC (System File Checker) relies on a healthy component store (WinSxS) to replace corrupted files. When SFC cannot repair files, it indicates the component store itself may be damaged. DISM repairs the component store by using Windows Update as the source, or a specified repair source, thereby enabling SFC to succeed on a subsequent scan.

Answer

Run chkdsk /f

Answer

Run System Restore

Answer

Run Windows Update

Question 3

A technician is troubleshooting a Windows 10 PC that fails to boot with a 'Bootmgr is missing' error. They need to repair the boot configuration. Which administrative tool should be used from the Windows Recovery Environment (WinRE)?

Accepted Answer

Command Prompt to run bootrec /rebuildbcd.. The Command Prompt in WinRE allows running bootrec.exe and bcdedit.exe to repair the boot configuration. System Restore and Startup Repair are also in WinRE but do not directly rebuild the BCD. The other options are not available in WinRE.

Answer

System Restore to revert to a previous restore point.

Answer

Device Manager to update the disk driver.

Answer

Local Security Policy to adjust boot options.

Question 4

A customer reports that their Windows 11 PC is displaying a 'Low Disk Space' warning on the C: drive. You need to quickly free up space by removing temporary files and system cache. Which administrative tool should you use?

Accepted Answer

Disk Cleanup to delete temporary files and system cache.. Disk Cleanup (cleanmgr.exe) is the built-in tool for removing temporary files, system cache, and other unnecessary data. Storage Sense can automate this, but Disk Cleanup is the direct tool for manual cleanup. The other options do not clean temporary files.

Answer

Defragment and Optimize Drives to consolidate free space.

Answer

Computer Management > Disk Management to shrink the volume.

Answer

Event Viewer to clear application logs.

Question 5

A technician is troubleshooting a Mac that fails to connect to a Wi-Fi network. The network is visible, but entering the correct password results in an 'unable to join the network' error. The technician wants to delete the saved network configuration to start fresh. Which macOS tool or location should they use?

Accepted Answer

System Settings > Network > Wi-Fi > Details > Remove this network.. Option A is correct because macOS stores Wi-Fi network configurations (including SSID, security type, and saved passwords) in the system's network preferences. By navigating to System Settings > Network > Wi-Fi, clicking Details next to the network, and selecting 'Remove This Network', the technician completely deletes the saved configuration, forcing macOS to treat the network as new on the next connection attempt. This resolves issues where a corrupted or outdated saved configuration prevents successful authentication despite entering the correct password.

Answer

Keychain Access and delete the Wi-Fi password entry.

Answer

Terminal with the 'networksetup -setairportnetwork' command.

Answer

System Information > Network > Wi-Fi.

Question 6

A security incident has occurred: a user's Mac running macOS Ventura was infected with malware that modified system files. The technician needs to boot the Mac into a mode that loads only essential Apple-signed kernel extensions and prevents third-party software from loading, in order to safely remove the malware. Which startup mode should they use?

Accepted Answer

Safe Mode (Shift key during startup).. Safe Mode (Shift key during startup) is correct because it forces macOS to load only essential kernel extensions that are signed by Apple, disables all third-party startup items and login items, and runs a directory integrity check. This minimal environment prevents the malware from loading its own kernel extensions or other malicious code, allowing the technician to safely remove the infected files without interference.

Answer

Single-user mode (Command + S).

Answer

Verbose mode (Command + V).

Answer

Target Disk Mode (T key).

Question 7

A user on a Mac running macOS Big Sur needs to share a folder on their local network with a Windows colleague. The user wants the folder to appear as a network drive on the Windows machine without installing additional software. Which macOS feature should they enable and configure?

Accepted Answer

File Sharing in System Settings > Sharing, and ensure SMB is enabled.. Option B is correct because File Sharing in macOS Big Sur includes the ability to enable SMB (Server Message Block) sharing, which is the native file-sharing protocol used by Windows. By turning on File Sharing and checking the SMB option, the Mac acts as an SMB server, allowing the Windows colleague to map the shared folder as a network drive without any additional software.

Answer

Screen Sharing in System Settings > Sharing.

Answer

Internet Sharing in System Settings > Sharing.

Answer

Remote Login in System Settings > Sharing.

Question 8

A user calls the help desk saying that after upgrading to macOS Ventura, the 'Documents' folder in the sidebar keeps disappearing after every reboot. They need it to stay visible. Which macOS feature or tool should you use to fix this?

Accepted Answer

Finder > Preferences > Sidebar. Option B is correct because the visibility of folders like 'Documents' in the Finder sidebar is controlled directly through Finder's own preferences, not through global system settings. By opening Finder > Preferences > Sidebar, you can check the 'Documents' checkbox, which persists the folder's visibility across reboots. This setting is stored per-user in the Finder plist and is not affected by macOS upgrades.

Answer

System Settings > Desktop & Dock

Answer

Terminal command 'defaults write com.apple.finder ShowSidebar -bool true'

Answer

Spotlight Preferences

Question 9

A small business owner wants to restrict app installations on company Macs to only the Mac App Store to prevent employees from downloading unapproved software. Which macOS security feature should you configure?

Accepted Answer

Gatekeeper. Gatekeeper controls where apps can be installed from. Setting it to 'App Store' restricts installations to only Mac App Store apps, meeting the business requirement.

Answer

FileVault

Answer

System Integrity Protection (SIP)

Answer

Parental Controls

Question 10

During a security incident, a technician needs to verify whether a specific application was granted camera and microphone permissions on a macOS computer. Which macOS tool should they use to check these privacy settings?

Accepted Answer

System Settings > Privacy & Security. System Settings > Privacy & Security is the correct tool because macOS centralizes all privacy-related permissions—including camera and microphone access—in this GUI panel. The technician can navigate to the specific application under the Camera and Microphone sub-sections to verify granted permissions. This is the standard, user-facing interface for managing privacy controls on macOS.

Answer

Keychain Access

Answer

Console

Answer

Terminal with 'tccutil' command

Question 11

A small business uses a shared iMac for customer check-ins. The manager wants to restrict which apps users can open and prevent changes to system settings without creating separate user accounts. Which macOS feature should you configure to meet this requirement?

Accepted Answer

Configure Parental Controls (Screen Time) for the user account. Parental Controls (Screen Time) allows administrators to restrict app usage and system settings changes on a per-user basis without creating separate user accounts. This feature can limit which applications a user can open and prevent modifications to system preferences, meeting the manager's requirement directly.

Answer

Enable FileVault full-disk encryption

Answer

Use the Guest User account

Answer

Apply a firmware password

Question 12

During a security audit, a Linux server is found to have a configuration file that is world-writable. The file /etc/app/config.cfg must only be readable and writable by the root user. Which command should the administrator run?

Accepted Answer

chmod 600 /etc/app/config.cfg. Option C is correct because `chmod 600` sets the file permissions to read and write for the owner (root) and no permissions for group or others. This satisfies the requirement that only root can read and write `/etc/app/config.cfg`, as root is the owner of the file.

Answer

chmod 777 /etc/app/config.cfg

Answer

chmod 644 /etc/app/config.cfg

Answer

chmod 400 /etc/app/config.cfg

Question 13

A software deployment script fails because it cannot write to the /opt/app directory. The directory currently has permissions drwxr-xr-x and is owned by root. The script runs as a non-root user. Which command would allow the script to write files without compromising security more than necessary?

Accepted Answer

chmod o+w /opt/app. The correct answer is A because chmod o+w /opt/app adds write permission for 'others' (the non-root user), which is the minimal change needed. The script runs as a non-root user, so this grants write access without affecting group permissions.

Answer

chmod 777 /opt/app

Answer

chown user:user /opt/app

Answer

chmod g+w /opt/app

Question 14

A user reports that a shared file on a Linux server is not accessible to their team. The file permissions are -rwxr----- and the user is a member of the group 'staff'. The file's group owner is 'admin'. Which command should the administrator run to allow the staff group to read the file?

Accepted Answer

chgrp staff file. The file's current permissions (-rwxr-----) grant the owner full access and the group 'admin' read-only access, but the user is in the 'staff' group, not 'admin'. To allow the 'staff' group to read the file, the file's group owner must be changed to 'staff' using `chgrp staff file`. This ensures that the group read permission (r--) applies to members of the 'staff' group.

Answer

chmod 755 file

Answer

chmod g+r file

Answer

chown user:staff file

Question 15

A malicious script is suspected to have changed permissions on critical system files. The administrator needs to restore the /etc/passwd file to its default permissions, which are 644. The file is currently 777. Which command will set the correct permissions?

Accepted Answer

chmod 644 /etc/passwd. The correct answer is A because chmod 644 /etc/passwd sets the permissions to rw-r--r--, which is the standard for /etc/passwd. This removes the world-writable and executable bits.

Answer

chmod 600 /etc/passwd

Answer

chmod 755 /etc/passwd

Answer

chmod 444 /etc/passwd

Question 16

A user reports that an application fails to start because a configuration file is owned by root with permissions 644, but the application runs as user 'appuser'. Which command will allow 'appuser' to edit the file without changing ownership?

Accepted Answer

chgrp appgroup config.cfg && chmod g+w config.cfg. This tests understanding of file permissions and groups. By adding 'appuser' to the file's group and granting group write permission, the user can edit without being owner.

Answer

chmod 666 config.cfg

Answer

chown appuser config.cfg

Answer

setfacl -m u:appuser:rw config.cfg

Question 17

A customer reports that their Android phone's screen is unresponsive to touch after a drop. They can still hear notifications and see the display. Which built-in tool should you use to test the touchscreen functionality without relying on third-party apps?

Accepted Answer

Diagnostics Mode (e.g., *#0*#). This question tests knowledge of Android's built-in diagnostic tools. The correct answer is the 'Diagnostics' or 'Test' mode, often accessed via the dialer code or settings, which allows hardware testing without third-party apps. This is a standard feature for verifying touchscreen integrity after physical damage.

Answer

Safe Mode

Answer

Developer Options

Answer

Factory Reset

Question 18

During a security audit, a technician discovers that an employee's company-issued iPhone has been jailbroken. The employee claims they only did it to customize the home screen. Which security risk is most directly associated with a jailbroken device in a corporate environment?

Accepted Answer

It bypasses app sandbox restrictions, potentially exposing corporate data.. Jailbreaking removes the iOS sandbox restrictions that normally isolate each app's data and prevent unauthorized access to the file system. Without these restrictions, a malicious or compromised app on the jailbroken device can read, copy, or exfiltrate corporate data stored by other apps (e.g., email, VPN certificates, MDM profiles), directly violating data confidentiality in a corporate environment.

Answer

The device cannot receive iOS updates.

Answer

It voids the warranty.

Answer

The device will perform slower.

Question 19

A technician is tasked with deploying 50 Android tablets for a field sales team. The tablets need to have a consistent set of apps, settings, and security policies. The technician wants to avoid manually configuring each device. Which Android feature should the technician use?

Accepted Answer

Android Enterprise (Zero-Touch Enrollment). Android Enterprise Zero-Touch Enrollment allows IT administrators to provision devices automatically by associating them with a management provider (e.g., Samsung Knox, VMware Workspace ONE) via the manufacturer's portal. When the tablets are powered on and connected to Wi-Fi, they download a policy that enforces apps, settings, and security configurations without any manual intervention. This is the correct solution for deploying 50 tablets consistently.

Answer

Samsung DeX

Answer

Google Backup

Answer

Developer Options > OEM Unlocking

Question 20

An iOS user complains that their iPhone will not connect to a known Wi-Fi network, but other devices on the same network work fine. Which iOS-specific troubleshooting step should you perform first to resolve this issue without erasing any personal data?

Accepted Answer

Use the 'Reset Network Settings' option in Settings > General > Reset.. The correct step is to use the 'Reset Network Settings' option in iOS, which clears saved Wi-Fi networks, VPN configurations, and other network-related settings without affecting personal data like photos or contacts. This often resolves stubborn Wi-Fi connection issues. A full factory reset or iCloud restore would be excessive and data-destructive.

Answer

Reset All Settings from the General > Reset menu.

Answer

Erase All Content and Settings to start fresh.

Answer

Restore the iPhone from an iCloud backup.