220-1202 Practice Test 5 — 25 Questions

Question 1

A technician is updating the documentation for a network printer that was moved to a different floor. The technician updates the asset tag in the inventory system. Which additional documentation should the technician also update to ensure accurate records?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The network diagram showing device locations and connections. When a network printer is moved to a different floor, its physical location and network connectivity change. The network diagram is the authoritative document that records device locations, switch ports, IP addresses, and cabling paths. Updating it ensures that troubleshooting, asset tracking, and future moves remain accurate, directly supporting change management and documentation best practices.

Answer

The user manual for the printer

Answer

The company’s acceptable use policy

Answer

The printer’s warranty information

Question 2

During a security audit, a technician finds that a user's workstation was infected with malware after the user inserted a USB drive found in the parking lot. The drive was labeled 'Employee Salary Info Q4'. What social engineering principle did the attacker exploit?

Accepted Answer

Baiting. Baiting is the correct answer because the attacker exploited the victim's curiosity by leaving a malware-infected USB drive in a visible location, labeled with an enticing message ('Employee Salary Info Q4'). When the user inserted the drive, the malware executed automatically (e.g., via Autorun.inf in Windows), compromising the workstation. This is a classic baiting attack, which relies on offering something desirable to trick the victim into performing a risky action.

Answer

Scarcity

Answer

Pretexting

Answer

Tailgating

Question 3

A user's iPhone is running iOS 15 and they are unable to install a new app from the App Store. The error message says 'Unable to Download App. This app requires iOS 16 or later.' However, the user's iPhone model supports iOS 16. Which built-in iOS feature should the technician use to resolve this?

Accepted Answer

Update iOS via Settings > General > Software Update.. The error message explicitly states that the app requires iOS 16 or later, and the user's iPhone model supports iOS 16. The correct resolution is to update the device's operating system via Settings > General > Software Update, which is the built-in mechanism for installing iOS updates. This directly addresses the compatibility requirement by upgrading the OS to a version that meets the app's minimum deployment target.

Answer

Offload the app and reinstall it.

Answer

Clear the App Store cache by force-closing the app.

Answer

Perform a factory reset.

Question 4

A user reports that a scheduled task runs a VBScript every morning, but the script fails with an 'ActiveX component can't create object' error. The script uses a COM object to interact with an application. What is the most likely cause of this error?

Accepted Answer

The COM object's DLL is not registered or the application is not installed. The 'ActiveX component can't create object' error occurs when the VBScript's CreateObject call fails because the COM class it references is not available. This typically means the DLL that implements the COM object is not registered (e.g., via regsvr32) or the application that provides the object is not installed on the system. Without the registered COM component, the script cannot instantiate the object, leading to this specific runtime error.

Answer

The script is running with insufficient permissions to create files

Answer

The script contains a syntax error in the CreateObject line

Answer

The scheduled task is set to run when the user is not logged in

Question 5

A company has a policy that all workstations must automatically lock after 10 minutes of inactivity. A user complains that their computer does not lock automatically. Which setting should you check and remediate?

Accepted Answer

Verify that the screen saver is enabled and set to 'On resume, display logon screen' with a 10-minute wait. The automatic lock behavior in Windows is controlled by the screen saver settings. When 'On resume, display logon screen' is enabled with a 10-minute wait, the screen saver triggers after inactivity and locks the workstation by requiring authentication upon resume. This is the standard mechanism for enforcing a lock timeout, not the power plan sleep timeout.

Answer

Check the power plan settings for sleep timeout

Answer

Ensure Windows Update is fully installed

Answer

Disable the Fast Startup feature

Question 6

A company policy requires that all USB flash drives be automatically scanned for malware when inserted. Which Windows security setting should be configured to enforce this?

Accepted Answer

Enable Windows Defender Real-time Protection. Windows Defender Real-time Protection (now part of Microsoft Defender Antivirus) automatically scans removable media, including USB flash drives, for malware upon insertion. This setting enforces the company policy by ensuring that any file accessed or executed from the drive is checked against known threat signatures in real time, without requiring manual scans.

Answer

Configure BitLocker To Go

Answer

Enable Windows Firewall

Answer

Set User Account Control to Always Notify

Question 7

A company policy requires that all workstations must have Windows Firewall enabled. You check a user's PC and find the firewall is off. Which Control Panel applet would you use to turn it back on?

Accepted Answer

Windows Defender Firewall. The Windows Defender Firewall applet (Option B) is the dedicated Control Panel interface for managing Windows Firewall settings, including turning the firewall on or off. Since the question specifically asks which applet to use to enable the firewall, this is the correct tool. Other applets may display firewall status but do not provide the direct toggle to enable or disable the firewall.

Answer

Security and Maintenance

Answer

Network and Sharing Center

Answer

System

Question 8

A small business owner asks you to configure their office computers so that employees cannot install unauthorized browser extensions. Which policy setting should you implement?

Accepted Answer

Use Group Policy to block extension installation and whitelist approved extensions.. Group Policy allows centralized management of browser settings in a domain environment. By configuring the 'Configure the list of force-installed extensions' and 'Block external extensions' policies, an administrator can whitelist approved extensions and prevent users from installing any others. This directly addresses the requirement to block unauthorized browser extensions.

Answer

Disable the browser's developer mode in the settings.

Answer

Set the browser to always use private browsing mode.

Answer

Install a pop-up blocker on each computer.

Question 9

A user reports that their computer is sending out a large amount of network traffic even when they are not using the internet. The antivirus detects a file named 'expl0rer.exe' in the startup folder. What type of malware is most likely causing this behavior?

Accepted Answer

Botnet. The file name 'expl0rer.exe' mimics the legitimate 'explorer.exe' but uses a zero in place of the 'o', a common obfuscation technique. The symptom of high outbound network traffic without user activity, combined with the file's presence in the startup folder, strongly indicates the computer is part of a botnet. Botnet malware connects to a command-and-control (C2) server to receive instructions, often used for DDoS attacks or spam relays, which generates constant network activity.

Answer

Spyware

Answer

Virus

Answer

Trojan

Question 10

A technician is configuring a remote desktop solution for a user who needs to access a Linux server from a Windows 10 workstation. The technician wants to use a secure, encrypted connection. Which remote access technology should the technician configure on the Linux server?

Accepted Answer

SSH. SSH (Secure Shell) is the correct choice because it provides encrypted, authenticated remote shell access to Linux/Unix servers over an insecure network. It uses TCP port 22 and supports strong encryption algorithms (e.g., AES, ChaCha20) and public-key authentication, making it the standard secure remote access protocol for Linux systems.

Answer

RDP

Answer

VNC

Answer

Telnet

Question 11

During a security audit, you find that a user's browser has an outdated version of Adobe Flash Player installed. What is the primary security risk associated with this finding?

Accepted Answer

Attackers can exploit known vulnerabilities in the plugin to install malware.. Outdated Adobe Flash Player versions contain publicly known vulnerabilities (CVEs) that attackers can exploit via drive-by downloads or malicious advertisements. Exploiting these flaws allows arbitrary code execution, enabling malware installation without user interaction. This is the primary security risk because unpatched plugins are a common entry point for ransomware, spyware, and botnets.

Answer

The browser will run slower and may crash frequently.

Answer

The user will be unable to view some web content.

Answer

The browser will automatically disable the plugin.

Question 12

A technician is helping a remote user configure a VPN connection. The user is not very technical and is getting frustrated. The technician uses jargon like 'authentication protocol' and 'tunnel endpoint'. Which of the following is the BEST way to improve communication?

Accepted Answer

Use simple analogies like 'a secure tunnel for your data' and guide them step by step.. It replaces confusing jargon with a simple analogy ('secure tunnel') and provides step-by-step guidance, which directly addresses the user's frustration and lack of technical knowledge. This approach aligns with the CompTIA A+ objective of adapting communication style to the audience, ensuring the user understands the VPN concept without needing to know terms like 'authentication protocol' or 'tunnel endpoint'.

Answer

Continue using technical terms to educate the user.

Answer

Ask the user to share their screen so the technician can do it remotely.

Answer

Send the user a written guide and end the call.

Question 13

A technician is configuring a VPN for a remote user. The user's home router uses NAT, and the technician wants to ensure the VPN traffic is encapsulated and encrypted. Which VPN protocol should the technician choose for the best balance of security and compatibility?

Accepted Answer

OpenVPN. OpenVPN is the correct choice because it provides a robust balance of security and compatibility, especially for remote users behind NAT. It uses SSL/TLS for encryption and can operate over a single UDP or TCP port (typically 1194), which easily traverses NAT without requiring additional configuration. Unlike L2TP/IPsec, OpenVPN does not rely on IPsec's NAT-sensitive protocols like ESP, making it more reliable across home routers.

Answer

PPTP

Answer

L2TP/IPsec

Answer

SSTP

Question 14

A company’s change management policy requires that all changes be categorized as standard, emergency, or normal. During a server migration, a technician discovers a critical security patch must be applied immediately to prevent a data breach. Which type of change should the technician request?

Accepted Answer

Emergency change. The scenario describes a critical security patch that must be applied immediately to prevent a data breach, which aligns with the definition of an emergency change. Emergency changes are pre-approved or fast-tracked to address urgent threats or service outages, bypassing the normal change advisory board (CAB) review process. This ensures the patch can be deployed without delay to mitigate the risk.

Answer

Standard change

Answer

Normal change

Answer

Service request

Question 15

A user complains that their Android phone's battery drains extremely fast after a recent OS update. They have already tried restarting the device. What is the most likely cause and solution?

Accepted Answer

The device is performing background indexing; wait a day or two.. After a major OS update, Android devices often perform background indexing of files, media, and app data to optimize search and performance. This process is CPU- and I/O-intensive, causing increased battery drain for 24–48 hours. The correct solution is to wait a day or two for indexing to complete, as restarting alone does not stop this background task.

Answer

The update installed a malware app; perform a factory reset.

Answer

The update reset battery optimization settings; re-enable them.

Answer

The battery is failing due to the update; replace the battery.

Question 16

A technician is called to a user's desk for a 'printer issue.' Upon arrival, the user is on a phone call and waves dismissively at the technician. The technician waits for two minutes, but the user continues their call. What should the technician do?

Accepted Answer

Leave a note on the desk saying you were there and will return later, then check back in 15 minutes.. It demonstrates professional respect for the user's current activity while ensuring the issue is addressed. Leaving a note and returning in 15 minutes maintains a service-level commitment without disrupting the user's call, aligning with CompTIA's best practices for customer communication and time management in a support scenario.

Answer

Stand silently until the user finishes the call, even if it takes a long time.

Answer

Interrupt the call to say you'll come back later.

Answer

Close the ticket as 'user not available' and move on to the next task.

Question 17

A technician is troubleshooting a Windows 10 computer that exhibits strange behavior: system files are missing, and the computer fails to boot normally. A boot-time virus scan detects a virus that infected the Master Boot Record (MBR). Which tool should the technician use to repair the MBR?

Accepted Answer

Bootrec.exe /FixMbr. The Bootrec.exe /FixMbr command writes a new Master Boot Record (MBR) to the system partition, overwriting the infected boot code without affecting the existing partition table. This is the correct tool for repairing a virus-compromised MBR that prevents normal booting on Windows 10.

Answer

System Restore

Answer

SFC /Scannow

Answer

CHKDSK /F

Question 18

After a security incident, a Windows 10 workstation is suspected of having malware that prevents the Task Manager and Command Prompt from opening. You need to run a system scan. Which tool can you use from the Windows Recovery Environment (WinRE) to perform an offline antivirus scan?

Accepted Answer

Microsoft Defender Offline Scan. Microsoft Defender Offline Scan is designed to run from the Windows Recovery Environment (WinRE) to scan the system before Windows starts, which bypasses malware that blocks tools like Task Manager or Command Prompt. It uses the same antivirus engine as Windows Defender but runs in a pre-boot environment, allowing it to detect and remove persistent threats that load early or hide from the normal OS. This makes it the correct tool for an offline antivirus scan when the system is suspected of being compromised.

Answer

System File Checker (sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows)

Answer

Windows Memory Diagnostic

Answer

Diskpart

Question 19

A user reports that their cloud-synced files are not appearing on their laptop after a recent OS reinstall. The technician verifies that the cloud storage account is active and the internet connection works. Which of the following is the most likely reason for the missing files?

Accepted Answer

The local sync client is configured for selective sync and not downloading all folders. The most likely reason is that the cloud sync client is configured for selective sync, which allows the user to choose which folders are synced locally. After an OS reinstall, the client may default to selective sync or the user may have previously set it to not download all folders, so files appear missing. Other options are less likely because the account is active and internet works, and hard drive full would typically cause errors, not silent missing files.

Answer

The cloud storage provider has deleted the files due to inactivity

Answer

The user's account is not licensed for the cloud service

Answer

The laptop's hard drive is full

Question 20

A user reports that their iPad will not rotate the screen when they turn the device sideways. The rotation lock icon appears in the status bar. What is the most likely cause?

Accepted Answer

Rotation lock is enabled in Control Center or via the side switch.. The rotation lock icon visible in the iPad status bar is the definitive indicator that Rotation Lock is currently enabled, either through Control Center or the physical side switch (on older iPads). When Rotation Lock is active, iOS suppresses the accelerometer-driven orientation change regardless of how the device is physically turned. Disabling it via Control Center (or flipping the side switch) restores normal screen rotation behavior.

Answer

The accelerometer is faulty.

Answer

The app being used does not support rotation.

Answer

The device needs a software update to fix a rotation bug.