220-1202 Practice Test 26 — 15 Questions

Question 1

During a macOS deployment, you need to create a bootable USB installer for macOS Sonoma to upgrade multiple iMacs. You have the 'Install macOS Sonoma' app in the Applications folder. Which command-line tool should you use to create the installer?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

createinstallmedia. The `createinstallmedia` command is the official Apple tool for creating a bootable USB installer from the 'Install macOS Sonoma' app. It is located inside the app bundle at `/Applications/Install macOS Sonoma.app/Contents/Resources/createinstallmedia` and is specifically designed for this purpose, ensuring the USB drive is properly formatted and the installer is written correctly for UEFI boot.

Answer

diskutil

Answer

asr

Answer

hdiutil

Question 2

A customer calls saying that after installing a new printer, their Windows 10 computer now takes much longer to shut down. They have uninstalled the printer software, but the slow shutdown persists. Which tool should you use to identify the cause of the shutdown delay?

Accepted Answer

Event Viewer. Event Viewer is the correct tool because Windows logs shutdown and service-stop events (including the notorious 'The program X stopped responding' and service timeout entries) in the System log, which reveals which driver, service, or application is delaying shutdown. The printer software likely left a service or driver that times out during shutdown, and Event Viewer's System and Application logs record those timeouts.

Answer

Task Manager

Answer

Performance Monitor

Answer

Disk Cleanup

Question 3

A system administrator is deploying a PowerShell script to 100 computers to change the local administrator password. The script must run once per computer and then exit. Which scripting technique ensures the script runs exactly once on each machine?

Accepted Answer

Write a registry key after successful execution. Writing a registry key after successful execution is the standard idempotency technique in PowerShell scripting. The script checks for the presence of the registry key at startup; if the key exists, the script exits without making changes, ensuring it runs exactly once per machine. This pattern is commonly used in login scripts, SCCM packages, and configuration management.

Answer

Use a for loop to run the script 100 times

Answer

Use a parameter to pass the computer name

Answer

Schedule the script to run daily

Question 4

A user reports that their Windows 10 PC is running slowly after they installed a new program. You need to identify which service or startup program is consuming the most CPU resources to troubleshoot the issue. Which administrative tool should you use?

Accepted Answer

Task Manager. Task Manager's Processes and Startup tabs show real-time CPU, memory, disk, and network usage per process and per startup item, making it the fastest tool to identify which newly installed program or service is consuming CPU. The user can sort by CPU column and immediately see the offending process, then disable it from the Startup tab if needed. This directly matches the troubleshooting goal of identifying a resource-hungry service or startup program.

Answer

Event Viewer

Answer

Services.msc

Answer

Performance Monitor

Question 5

A customer needs to transfer their user profile, documents, and application settings from an old Windows 7 PC to a new Windows 10 PC. Which Windows tool is specifically designed for this purpose?

Accepted Answer

User State Migration Tool (USMT). The User State Migration Tool (USMT) is a command-line utility designed for IT professionals to automate large-scale user state migrations, including user profiles, documents, and application settings, from one Windows OS to another. It supports migration from Windows 7 to Windows 10 and provides granular control over what is transferred via XML configuration files.

Answer

Windows Easy Transfer

Answer

File History

Answer

Windows Backup and Restore

Question 6

A customer reports that their computer is running very slowly after they installed a new screensaver. The technician suspects the screensaver may be consuming excessive resources. Which of the following is the most professional way to address this?

Accepted Answer

Explain that you will check the system resources to identify the cause of the slowness.. It demonstrates a professional, systematic troubleshooting approach. Instead of prematurely blaming the screensaver, the technician will use Task Manager (or Resource Monitor) to verify if the screensaver process is consuming excessive CPU, memory, or disk resources. This aligns with CompTIA's troubleshooting methodology: identify the problem by gathering data before forming a conclusion.

Answer

Tell the customer that the screensaver is likely the problem and they should uninstall it.

Answer

Blame the screensaver and suggest the customer stop using decorative software.

Answer

Ignore the screensaver and run a full virus scan.

Question 7

A small business owner wants to prevent employees from changing system time, installing printers, and modifying power settings on their Windows 10 workstations. They do not want to remove local admin rights entirely. Which Windows security tool should be used to apply these restrictions?

Accepted Answer

Local Group Policy Editor (gpedit.msc). The Local Group Policy Editor (gpedit.msc) allows administrators to configure granular security settings for users and computers without removing local admin rights. Specifically, it can enforce restrictions on system time changes (via 'Change the system time' user right), printer installation (via 'Device Installation Restrictions'), and power settings (via 'Power Management' policies) through Computer Configuration or User Configuration nodes. This tool applies these settings via Group Policy objects that are processed locally, making it the correct choice for non-domain workstations.

Answer

Windows Defender Security Center

Answer

Local Users and Groups (lusrmgr.msc)

Answer

Registry Editor (regedit)

Question 8

A technician needs to deploy a custom configuration profile to 50 macOS devices in a lab. The profile must restrict access to System Settings and disable iCloud. Which tool is most appropriate for this task?

Accepted Answer

Apple Configurator. Apple Configurator is the correct tool because it is designed for bulk deployment and management of configuration profiles on macOS and iOS devices. It allows a technician to create a single profile that restricts System Settings and disables iCloud, then apply it to multiple devices simultaneously via USB or network, making it ideal for lab environments with 50 machines.

Answer

Terminal with 'profiles' command

Answer

System Preferences > Profiles

Answer

Remote Desktop

Question 9

A school IT administrator needs to remotely lock a lost MacBook and display a custom message with contact information. The MacBook is enrolled in the school’s MDM and has an internet connection. Which macOS feature should they use?

Accepted Answer

Find My Mac. Find My Mac is the correct feature because it is specifically designed to locate, lock, and display a custom message on a lost Apple device that is enrolled in MDM and connected to the internet. It leverages Apple's Activation Lock and MDM integration to remotely lock the Mac and present a contact message on the Lock screen, fulfilling the administrator's requirement without needing physical access.

Answer

Remote Desktop

Answer

FileVault

Answer

Terminal command 'sudo pmset'

Question 10

A small business uses a cloud-based accounting application. Several employees report that they can no longer access the application, and they receive a message stating that the service is temporarily unavailable. The business's internet connection is working, and other cloud services are accessible. What is the most likely cause of this issue?

Accepted Answer

The cloud service provider is experiencing an outage.. The scenario describes a service-specific outage: the cloud-based accounting application is inaccessible while other cloud services and the internet connection remain functional. This pattern—one application failing while others work—strongly indicates that the issue is isolated to that particular cloud service provider, not the local network or user accounts. A provider outage would cause the 'temporarily unavailable' message, as the application's servers are unreachable.

Answer

The user's browser cache is corrupted.

Answer

The business's firewall is blocking the accounting application.

Answer

The employees' user accounts have been disabled.

Question 11

During a security audit, you find that a configuration file /etc/app/config.cfg has permissions -rwxrwxrwx. What command should you run to restrict it so only the owner can read and write, and the group can read, while others have no access?

Accepted Answer

chmod 640 /etc/app/config.cfg. The requirement is to set permissions so the owner can read and write (6), the group can read (4), and others have no access (0). The octal representation 640 achieves exactly this: 6 (rw-) for owner, 4 (r--) for group, and 0 (---) for others. This matches the security policy of restricting access to only the owner and group read access.

Answer

chmod 750 /etc/app/config.cfg

Answer

chmod 644 /etc/app/config.cfg

Answer

chmod 600 /etc/app/config.cfg

Question 12

During a security audit, you discover that a supply closet containing spare hard drives has a door that can be opened with a standard paperclip. What is the most appropriate recommendation to address this vulnerability?

Accepted Answer

Upgrade the lock to a tamper-resistant electronic lock.. The vulnerability is a weak physical lock that can be bypassed with a simple tool. Upgrading to a tamper-resistant electronic lock, such as one with a keypad or biometric reader, significantly increases the difficulty of unauthorized entry. This directly addresses the core issue of inadequate access control for sensitive assets like spare hard drives.

Answer

Replace the door with a solid-core door and install a deadbolt.

Answer

Install a privacy filter on the closet door window.

Answer

Place a sign on the door warning of security cameras.

Question 13

A technician needs to write a batch script that will copy a configuration file from a network share to the local system32 directory only if the file on the share is newer than the local copy. Which command should the technician use to perform this conditional copy?

Accepted Answer

xcopy \server\share\config.txt C:\Windows\System32\ /d /y. The `xcopy` command with the `/d` switch copies files only if the source file is newer than the destination file, and `/y` suppresses confirmation prompts. This meets the requirement of a conditional copy based on file timestamp comparison.

Answer

copy /y \server\share\config.txt C:\Windows\System32\

Answer

robocopy \server\share C:\Windows\System32 config.txt /mir

Answer

move /y \server\share\config.txt C:\Windows\System32\

Question 14

A customer complains that their computer emits a strong chemical smell and is unusually hot. After inspection, you find the power supply is failing and leaking a brown, oily substance. How should you handle the power supply disposal?

Accepted Answer

Put the power supply in an anti-static bag, seal it, and label it as hazardous e-waste.. A failing power supply leaking a brown, oily substance (typically from swollen or ruptured capacitors) is classified as hazardous e-waste due to toxic materials like lead, cadmium, and electrolyte fluids. Placing it in an anti-static bag prevents short circuits during transport, and labeling it as hazardous ensures proper disposal per environmental regulations such as the Resource Conservation and Recovery Act (RCRA) or local e-waste directives.

Answer

Place the power supply in a standard trash bag and throw it in the dumpster.

Answer

Clean the power supply with isopropyl alcohol and then recycle it normally.

Answer

Disassemble the power supply to remove the leaking capacitor and then dispose of the rest.

Question 15

A user installs a new application and immediately receives a 'The application was unable to start correctly (0xc000007b)' error. The application worked on another computer with the same Windows version. Which component is most likely causing this error?

Accepted Answer

The Visual C++ Redistributable package is missing or corrupted.. Error code 0xc000007b is a STATUS_INVALID_IMAGE_FORMAT error, typically indicating a mismatch between 32-bit and 64-bit binaries. The most common cause is a missing or corrupted Visual C++ Redistributable package, which provides essential runtime libraries (e.g., MSVCR120.dll) that the application depends on. Without these libraries, the application cannot load correctly, even if the Windows version matches.

Answer

The application requires a newer version of DirectX.

Answer

The user does not have administrative privileges.

Answer

The hard drive has bad sectors affecting the application files.