220-1202 Practice Test 26 — 15 Questions

Question 1

A technician is helping a customer configure a new laptop. The customer mentions they received a pop-up on their old computer warning of a virus and a phone number to call for support. The customer called the number and gave remote access to a 'technician' who then installed several programs. What social engineering attack occurred?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Tech support scam. This is a classic tech support scam, a form of social engineering where attackers use fake virus warnings to gain remote access. The pop-up is designed to scare the user into calling a fraudulent support number. Once access is granted, the attacker can install malware or steal data.

Answer

Shoulder surfing

Answer

Phishing

Answer

Dumpster diving

Question 2

A small business owner reports that all their Microsoft Office documents are now encrypted with a '.crypt' extension and a ransom note demands payment in cryptocurrency. They have a backup from last week stored on an external drive that was disconnected after the backup. What is the best recovery strategy?

Accepted Answer

Restore the files from the disconnected external backup after removing the malware.. Since the backup is offline and not encrypted, restoring from it is the safest and most reliable recovery method. Paying the ransom is discouraged as it funds criminals and may not work. The system should be cleaned of malware before restoration.

Answer

Pay the ransom to obtain the decryption key.

Answer

Run a decryptor tool downloaded from a random website.

Answer

Use System Restore to revert the system to a previous state.

Question 3

A customer calls the help desk stating that their computer displays 'Bootmgr is missing' and will not start Windows. You suspect the Boot Configuration Data (BCD) is corrupted. Which command-line tool should you use from the Windows Recovery Environment to repair the BCD?

Accepted Answer

bootrec /rebuildbcd. `bootrec /rebuildbcd`, which scans for Windows installations and rebuilds the BCD store. This is a standard repair for boot manager issues. Other commands are for disk checking, system file repair, or partition management.

Answer

chkdsk /r

Answer

sfc /scannow

Answer

diskpart

Question 4

A technician is troubleshooting a PowerShell script that collects system information and writes it to a log file. The script runs without errors but the log file is empty. The script uses Out-File to write data. What is the most likely issue?

Accepted Answer

The command before Out-File does not produce any output.. If a PowerShell command does not produce output, piping it to Out-File will result in an empty file. The issue is that the command used does not generate any output.

Answer

The script is not running with administrative privileges.

Answer

The Out-File cmdlet is misspelled.

Answer

The log file path contains a forward slash instead of a backslash.

Question 5

A customer reports that their laptop battery is swelling and the case is cracking. They ask if it's safe to continue using it plugged in. What should the technician advise?

Accepted Answer

Shut down the laptop immediately, disconnect the battery if safely possible, and replace the battery as soon as possible.. A swelling lithium-ion battery indicates internal chemical breakdown and gas generation, which can lead to thermal runaway, fire, or explosion. The immediate risk is physical rupture of the battery casing and potential short-circuiting. The correct action is to shut down the laptop, disconnect the battery if it can be done safely without puncturing it, and replace it as soon as possible to eliminate the hazard.

Answer

It's fine to keep using it plugged in as long as the battery is removed.

Answer

Continue using it but only on battery power to avoid overheating the charger.

Answer

Place the laptop in a freezer to reduce swelling, then continue using it.

Question 6

A small business is deploying Windows 11 to 20 new workstations. During the setup, you need to ensure that each computer receives a unique computer name and joins the domain automatically. Which Windows deployment tool should you use to automate this process?

Accepted Answer

Windows Deployment Services (WDS). Windows Deployment Services (WDS) is the correct tool because it is designed to deploy Windows operating systems over a network using Preboot Execution Environment (PXE) boot. It can be configured with answer files to automatically assign unique computer names (via naming policies or a prestaged computer accounts in Active Directory) and join the domain without manual intervention, making it ideal for deploying 20 workstations simultaneously.

Answer

Windows System Image Manager (Windows SIM)

Answer

Microsoft Deployment Toolkit (MDT)

Answer

Sysprep

Question 7

A customer complains that their computer is running slowly and they keep seeing pop-ups offering free antivirus software. They admit they clicked 'OK' on one pop-up. Which type of social engineering attack has likely occurred?

Accepted Answer

Baiting. Aiting. In this scenario, the user clicked 'OK' on a pop-up offering free antivirus software, which is a classic baiting attack. Baiting lures victims with a false promise (e.g., free software) to trick them into executing malware or revealing credentials. Unlike phishing, which typically uses deceptive emails or websites to steal sensitive information, baiting relies on the allure of a free item or service to trigger a malicious download.

Answer

Phishing

Answer

Pretexting

Answer

Shoulder surfing

Question 8

A technician is decommissioning a server that contains a lithium-ion battery backup module. The battery is not swollen but is several years old. What is the proper disposal procedure?

Accepted Answer

Discharge the battery using a proper load, then recycle it through a certified lithium battery recycler.. Lithium-ion batteries, even if not visibly swollen, degrade over time and can still pose a fire or chemical hazard if improperly disposed. The proper procedure is to safely discharge the battery using a certified load to remove residual energy, then recycle it through a certified lithium battery recycler to comply with environmental regulations and safety standards.

Answer

Remove the battery and place it in the regular trash since it is not swollen.

Answer

Short the terminals to fully discharge the battery before disposal.

Answer

Store the battery in a metal container and return it to the manufacturer for disposal.

Question 9

A technician is configuring power settings for a server room that houses critical equipment. The UPS battery backup needs to be tested monthly. What is the most environmentally sound way to conduct the test?

Accepted Answer

Use the UPS management software to run a self-test that checks battery health without full discharge.. Using UPS management software to run a self-test checks battery health without a full discharge, which conserves battery cycle life and avoids unnecessary waste. This method typically performs a brief impedance or load test that verifies the battery's ability to hold a charge without stressing it, aligning with environmental best practices by reducing battery replacement frequency and energy consumption.

Answer

Unplug the server from the UPS to simulate a power failure.

Answer

Disconnect the UPS from mains power and let the battery drain completely.

Answer

Replace the UPS battery every month to avoid testing.

Question 10

A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique MAC address. Which security measure should be implemented on the network switch?

Accepted Answer

Configure MAC filtering. MAC filtering on a network switch allows the administrator to create an access control list (ACL) that permits or denies traffic based on the source MAC address. By configuring the switch to allow only the MAC addresses of authorized employee laptops, the small business can restrict file server access to those specific devices, even if they connect via a wired Ethernet port.

Answer

Disable SSID broadcast

Answer

Enable WPA3 encryption

Answer

Change the default admin password

Question 11

A user's iPad will not rotate the screen when turned sideways, even though the rotation lock is off in the Control Center. The screen remains in portrait mode. What should you check next?

Accepted Answer

Check the physical mute/orientation lock switch on the side of the iPad.. Many iPad models (particularly older ones like iPad 2 through iPad 4, and some iPad mini models) include a physical switch on the side edge that can be configured to act as a mute/orientation lock toggle. Even if the software rotation lock in Control Center is off, this hardware switch can independently lock the screen orientation, overriding the software setting. Checking this physical switch is the logical next step before attempting more invasive troubleshooting.

Answer

Check if the app has its own orientation lock setting.

Answer

Perform a hard reset of the iPad.

Answer

Update the iPadOS to the latest version.

Question 12

A technician writes a batch script to automate software installation across multiple workstations. The script needs to wait for the installer to finish before proceeding to the next line. Which command should be used?

Accepted Answer

START /WAIT. The START /WAIT command launches a specified program or script and pauses execution of the batch file until that process terminates. This is exactly what is needed to ensure the installer completes before the next line runs, making it the correct choice for sequential automation.

Answer

PAUSE

Answer

TIMEOUT

Answer

CALL

Question 13

A technician is troubleshooting a recurring network outage that occurs every Tuesday at 3 PM. After reviewing the change log, the technician finds that a scheduled backup job runs at that time. What is the best course of action?

Accepted Answer

Document the correlation and propose a change to the backup schedule.. This question tests the ability to correlate documented changes with incidents. The best action is to update the documentation to reflect the impact and then work with the change advisory board to reschedule the backup or mitigate the outage.

Answer

Disable the backup job immediately to restore network stability.

Answer

Increase the network bandwidth to accommodate the backup traffic.

Answer

Ignore the issue since the backup is a critical process.

Question 14

During a security incident, a technician needs to verify whether a specific application was granted camera and microphone permissions on a macOS computer. Which macOS tool should they use to check these privacy settings?

Accepted Answer

System Settings > Privacy & Security. System Settings > Privacy & Security is the correct tool because macOS centralizes all privacy-related permissions—including camera and microphone access—in this GUI panel. The technician can navigate to the specific application under the Camera and Microphone sub-sections to verify granted permissions. This is the standard, user-facing interface for managing privacy controls on macOS.

Answer

Keychain Access

Answer

Console

Answer

Terminal with 'tccutil' command

Question 15

A technician is configuring a new server rack in a shared office space. Which physical security measure should be applied to prevent unauthorized physical access to the servers?

Accepted Answer

Use rack-mount locks on each server chassis. Rack-mount locks provide a direct physical barrier that prevents unauthorized individuals from opening the server chassis and accessing internal components, such as hard drives, memory, or cables. In a shared office space, this is the most effective measure to deter tampering, theft, or accidental damage at the rack level.

Answer

Install a door alarm on the office entrance

Answer

Enable BitLocker on all server drives

Answer

Configure a strong BIOS password