220-1202 Practice Test 29 — 15 Questions

Question 1

During a routine security walkthrough, you notice that an employee has propped open a secured door to the server room with a doorstop to allow easy access for a cleaning crew. What is the most immediate action you should take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Remove the doorstop and close the door.. The immediate priority is to restore the physical security control by removing the doorstop and closing the door. A propped-open door bypasses the access control system (e.g., card reader, electronic lock), allowing unauthorized entry to the server room. This action directly mitigates the active vulnerability without delay.

Answer

Document the incident and report it to the security manager.

Answer

Reprimand the employee who propped the door.

Answer

Install a door alarm that sounds if the door is open too long.

Question 2

A user reports that their browser frequently redirects to a search page they never set, and they see unfamiliar toolbars. After running a malware scan that found nothing, what should the technician do next to resolve the issue?

Accepted Answer

Reset the browser settings to default.. The symptoms—unwanted redirects and unfamiliar toolbars—are classic signs of browser hijacking, often caused by a malicious extension or a changed proxy configuration. Since a malware scan found nothing, the next logical step is to reset the browser settings to default, which removes all extensions, restores the homepage and search engine, and clears cached data that may be enforcing the redirects. This action directly addresses the most common vector for such behavior without resorting to hardware or OS-level changes.

Answer

Replace the network cable.

Answer

Update the network adapter driver.

Answer

Reinstall the operating system.

Question 3

A technician is writing a Python script to automate the installation of software on multiple Windows machines. The script needs to check if the software is already installed by looking for a specific registry key. If the key exists, the script should skip the installation. Which Python library and method should the technician use to read the registry?

Accepted Answer

Use the 'winreg' module with 'OpenKey' and 'QueryValueEx'. The `winreg` module is the standard Python library for accessing the Windows registry. `OpenKey` opens a specified registry key, and `QueryValueEx` retrieves the value data and type for a given value name. This allows the script to check for the software's registry key and conditionally skip installation if it exists.

Answer

Use the 'os' module with 'os.regread'

Answer

Use the 'subprocess' module to run 'reg query'

Answer

Use the 'sys' module to access registry via system calls

Question 4

A small business owner wants to ensure that employees cannot install browser extensions or add-ons without administrator approval. Which method should the technician use to enforce this restriction across all company computers?

Accepted Answer

Use Group Policy to disable extension installation.. Group Policy (specifically the Administrative Templates for Google Chrome, Microsoft Edge, or Firefox) provides a centralized method to enforce browser settings across all domain-joined computers. By configuring the 'Block external extensions' or 'ExtensionInstallBlockList' policy, the technician can prevent users from installing extensions without administrator approval, ensuring consistent enforcement without manual intervention on each machine.

Answer

Configure each browser's settings manually on every computer.

Answer

Install a third-party firewall to block extension downloads.

Answer

Set the browser to private browsing mode.

Question 5

A technician is troubleshooting a DNS resolution issue on a Windows 10 workstation. The user can ping an IP address but not a domain name. Which command should be used to clear the local DNS cache?

Accepted Answer

ipconfig /flushdns. The `ipconfig /flushdns` command clears the local DNS resolver cache on a Windows 10 workstation. When a user can ping an IP address but not a domain name, it often indicates a stale or corrupted DNS cache entry. Flushing the cache forces the system to query the DNS server for fresh resolution, resolving the issue.

Answer

nslookup example.com

Answer

netstat -r

Answer

ping -a 192.168.1.1

Question 6

A technician is setting up a virtual machine for a software developer who needs to test an application on multiple operating systems. The host runs Windows 10 Pro with 32 GB of RAM and a quad-core CPU. The developer wants the VM to have direct access to a USB security dongle. Which configuration step is essential to meet this requirement?

Accepted Answer

Enable USB controller passthrough in the VM settings.. USB passthrough (or USB controller passthrough) allows the virtual machine to directly access and control a physical USB device, such as a security dongle, bypassing the host operating system. This is essential for applications that require direct hardware-level communication with the dongle for licensing or authentication.

Answer

Configure the VM to use dynamic memory.

Answer

Enable virtualization extensions (VT-x/AMD-V) in the host BIOS.

Answer

Install the guest additions or integration services in the VM.

Question 7

A customer complains that their new smartphone connects to their home Wi-Fi but has no internet access. The router is configured with WPA2-PSK and a 64-character pre-shared key. Other devices work fine. What is the most likely cause?

Accepted Answer

The smartphone is using a wrong or mistyped Wi-Fi password.. The most likely cause is a mistyped or incorrect Wi-Fi password. Since the smartphone connects to the Wi-Fi network (association and authentication succeed at Layer 2) but has no internet access, the device is likely using a wrong pre-shared key that still allows partial connectivity due to WPA2-PSK's four-way handshake behavior—if the key is incorrect, the handshake fails, but some implementations may show a 'connected' status without proper encryption. Other devices work fine, ruling out router-side issues like DHCP exhaustion or DNS misconfiguration.

Answer

The smartphone's Wi-Fi antenna is faulty.

Answer

The router's DHCP server has run out of IP addresses.

Answer

The smartphone's DNS settings are misconfigured.

Question 8

A user reports that their Windows 10 PC is unable to connect to shared network folders on the office server. You need to verify that the necessary network discovery and file sharing services are running. Which administrative tool should you open to check the status of services like 'Function Discovery Resource Publication' and 'SSDP Discovery'?

Accepted Answer

Services.msc. The 'Services.msc' (Services console) is the dedicated Microsoft Management Console (MMC) snap-in used to start, stop, and configure Windows services. To verify that 'Function Discovery Resource Publication' (which publishes the machine's resources for network discovery) and 'SSDP Discovery' (which implements the Simple Service Discovery Protocol for UPnP devices) are running, you must open the Services console. Network and Sharing Center only shows connection status and sharing settings, not the underlying service state.

Answer

Network and Sharing Center

Answer

Device Manager

Answer

Task Manager

Question 9

A technician needs to dispose of several old CRT monitors from an office. What is the proper disposal method according to environmental safety regulations?

Accepted Answer

Take them to a certified e-waste recycling center.. CRT monitors contain hazardous materials such as lead, phosphor, and other heavy metals that are harmful to the environment if disposed of in landfills. Certified e-waste recycling centers follow strict environmental regulations to safely dismantle and recycle these components, preventing toxic substances from contaminating soil and groundwater.

Answer

Place them in the regular dumpster for bulk trash pickup.

Answer

Smash the glass and separate the components for metal recycling.

Answer

Donate them to a local school for reuse.

Question 10

A client wants to upgrade their entire office of 50 computers and asks for advice on environmentally friendly disposal of the old units. Which approach best aligns with environmental best practices?

Accepted Answer

Contract a certified e-waste recycling company to handle the disposal.. Certified e-waste recycling companies follow strict environmental regulations (e.g., the Basel Convention and local e-waste laws) to ensure hazardous materials like lead, mercury, and cadmium are safely extracted and disposed of, while also securely destroying data through methods such as degaussing or physical shredding. This approach minimizes environmental harm and aligns with the EPA's recommended practices for responsible electronics recycling.

Answer

Donate the computers to a local school without wiping data.

Answer

Sell the computers to a scrap metal dealer.

Answer

Have employees take the computers home for personal use.

Question 11

During a software installation, a technician receives an error that the system does not meet the minimum requirements. The technician decides to override the check by modifying the registry. What safety procedure should be followed before making registry changes?

Accepted Answer

Create a system restore point.. Creating a system restore point before modifying the registry is the correct safety procedure because it captures the current system state, including registry keys, drivers, and system files. If the registry edit causes instability or boot failure, the restore point allows the technician to revert the system to its previous working configuration without data loss. This is a standard best practice for any registry modification, as even minor errors can render the system unbootable.

Answer

Disable User Account Control (UAC).

Answer

Run the installation as an administrator.

Answer

Close all other running applications.

Question 12

A technician is troubleshooting a server that repeatedly trips the circuit breaker in the data center. The server is plugged into a power strip that is also serving two other high-power devices. What is the most appropriate safety and troubleshooting step?

Accepted Answer

Move one of the other high-power devices to a different circuit and plug the server directly into a wall outlet on its own circuit.. The repeated tripping indicates the circuit is overloaded. The safest and most effective step is to redistribute the load by moving one high-power device to a different circuit and plugging the server directly into a dedicated wall outlet. This isolates the server's power draw and prevents overloading the shared circuit, addressing the root cause without bypassing safety limits.

Answer

Replace the power strip with a higher-rated one and reset the breaker.

Answer

Reset the breaker and use a UPS with a higher wattage rating.

Answer

Install a larger circuit breaker in the panel to handle the load.

Question 13

A security incident occurs when an unauthorized user gains access to a server because a technician left a default password unchanged after a system rebuild. The rebuild was documented, but the password change was not. What documentation failure does this highlight?

Accepted Answer

The change log did not list the specific configuration changes made.. The documentation failure is that the change log did not list the specific configuration changes made. In this scenario, the system rebuild was documented, but the critical detail of changing the default password was omitted. Proper change management requires that every configuration change, including password updates, be explicitly recorded in the change log to ensure accountability and traceability. Without this record, the security incident occurred due to an undocumented deviation from security best practices.

Answer

The change log did not include a rollback plan.

Answer

The change request was not approved by the change advisory board.

Answer

The technician did not perform a post-implementation review.

Question 14

An employee finds a USB drive labeled 'Employee Salary Info Q4' in the parking lot. Out of curiosity, they plug it into their work computer to see the contents. What type of social engineering attack is this an example of?

Accepted Answer

Baiting. Baiting is a social engineering attack that exploits human curiosity or greed by offering something enticing, such as a USB drive labeled 'Employee Salary Info Q4.' When the employee plugs the USB into their work computer, they may inadvertently install malware (e.g., a keylogger or backdoor) that compromises the system. This attack relies on physical media as the delivery vector, distinguishing it from other social engineering methods.

Answer

Phishing

Answer

Tailgating

Answer

Pretexting

Question 15

A user reports that their workstation is running slowly and they see a pop-up claiming their files are encrypted and a ransom must be paid. They cannot open any documents. What type of malware is most likely responsible?

Accepted Answer

Ransomware. Ransomware encrypts files and demands payment for decryption. This scenario describes classic ransomware behavior, where the user is locked out of their data and a ransom note is displayed.

Answer

Spyware

Answer

Trojan horse

Answer

Rootkit