220-1102 Practice Test 16 — 15 Questions

Question 1

A technician is troubleshooting an Android phone that cannot send or receive SMS messages, but can make and receive calls and use mobile data. The phone is on a corporate plan with a new SIM card. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The SMS message center number is incorrect or missing.. The SMS message center number (SMSC) is a required parameter stored on the SIM card or phone that tells the device where to route outgoing SMS messages for delivery. If this number is incorrect or missing, the phone cannot send or receive SMS, but voice calls and mobile data remain unaffected because they use separate signaling paths (CSFB for calls and packet-switched data for mobile data). A new SIM card may have a misconfigured or missing SMSC, which is the most likely cause given the symptom pattern.

Answer

The phone's IMEI is blacklisted.

Answer

The mobile data APN settings are incorrect.

Answer

The phone is in airplane mode.

Question 2

After a recent Windows update, a user's printer stopped working. You suspect the update changed the default print spooler service startup type. Which Control Panel tool should you use to verify and correct the service startup type?

Accepted Answer

Administrative Tools > Services. The Print Spooler service is a Windows service that manages print jobs sent to the printer. Its startup type (e.g., Automatic, Manual, Disabled) is configured in the Services console, which is accessed via Administrative Tools > Services. Device Manager and Printers & scanners do not provide service startup type settings, and System > Advanced system settings deals with performance and user profiles, not services.

Answer

Device Manager

Answer

Printers & scanners

Answer

System > Advanced system settings

Question 3

During a security audit, a technician discovers that an employee's company-issued iPhone has been jailbroken. The employee claims they only did it to customize the home screen. Which security risk is most directly associated with a jailbroken device in a corporate environment?

Accepted Answer

It bypasses app sandbox restrictions, potentially exposing corporate data.. Jailbreaking removes the iOS sandbox restrictions that normally isolate each app's data and prevent unauthorized access to the file system. Without these restrictions, a malicious or compromised app on the jailbroken device can read, copy, or exfiltrate corporate data stored by other apps (e.g., email, VPN certificates, MDM profiles), directly violating data confidentiality in a corporate environment.

Answer

The device cannot receive iOS updates.

Answer

It voids the warranty.

Answer

The device will perform slower.

Question 4

During a printer toner replacement, a technician accidentally spills toner powder on the carpet. What is the proper cleanup procedure?

Accepted Answer

Blot the toner with a cold, damp cloth and then use a HEPA-filter vacuum.. Toner powder is extremely fine and can become airborne if mishandled. Blotting with a cold, damp cloth prevents the toner from spreading, and using a HEPA-filter vacuum ensures that microscopic toner particles are trapped without being exhausted back into the environment. Standard vacuum cleaners lack HEPA filtration and can release toner dust into the air, causing respiratory hazards.

Answer

Use a vacuum cleaner with a standard bag to suck up the toner.

Answer

Wipe the toner with a damp cloth using hot water.

Answer

Sweep the toner into a dustpan and dispose of it in the trash.

Question 5

A technician is called to a warehouse where a forklift accidentally struck a rack containing several desktop PCs. The rack is leaning, and one PC has fallen and is sparking. What is the technician's first priority for safety?

Accepted Answer

Evacuate the area and report the incident to the safety officer or call 911.. The immediate priority when a PC is sparking and a rack is unstable is life safety. Evacuating the area and reporting the incident (to a safety officer or by calling 911) ensures no one is exposed to potential electrical fire, arc flash, or structural collapse. Attempting to unplug or extinguish the sparking PC while the rack is leaning could result in electrocution, burns, or being struck by falling equipment.

Answer

Quickly unplug the sparking PC to prevent a fire.

Answer

Use a fire extinguisher on the sparking PC to prevent ignition.

Answer

Stabilize the rack with a nearby pallet to prevent further collapse.

Question 6

A technician is replacing a power supply in a desktop computer. After unplugging the unit, what additional step should be taken to ensure personal safety before touching internal components?

Accepted Answer

Press and hold the power button for 10 seconds.. After unplugging the power supply, pressing and holding the power button for 10 seconds discharges residual electrical charge stored in the system's capacitors (especially in the power supply and motherboard). This step, often called a 'parasitic drain,' ensures that no stored voltage remains that could cause an electric shock or damage components when touched. It is a standard safety practice before working inside a desktop computer.

Answer

Wear an anti-static wrist strap.

Answer

Remove the CMOS battery.

Answer

Unplug all peripheral cables.

Question 7

A technician is disposing of a stack of CDs and DVDs that contain backup data from a medical office. The media are labeled with patient information. Which method should the technician use to destroy the data?

Accepted Answer

Use a cross-cut shredder that accepts optical discs.. A cross-cut shredder that accepts optical discs physically destroys the media into small pieces, making data recovery impossible. This method is compliant with HIPAA requirements for destroying protected health information (PHI) on CDs and DVDs, as it renders the data irrecoverable through physical destruction.

Answer

Use a degausser on each disc.

Answer

Scratch the surface of each disc with a key.

Answer

Place the discs in a microwave for 10 seconds.

Question 8

A technician is writing a PowerShell script to check the status of a Windows service on multiple remote computers. The script must output the service name and status for each computer where the service is running. Which cmdlet combination should the technician use to achieve this?

Accepted Answer

Get-Service -ComputerName $computers | Where-Object {$_.Status -eq 'Running'}. Get-Service with the -ComputerName parameter can query multiple remote computers directly, and piping its output to Where-Object with the condition {$_.Status -eq 'Running'} filters only services whose Status property equals 'Running'. This meets the requirement to output the service name and status for each computer where the service is running, as Get-Service returns objects containing both Name and Status properties by default.

Answer

Invoke-Command -ComputerName $computers -ScriptBlock {Get-Service} | Select-Object Status

Answer

Get-WmiObject Win32_Service -ComputerName $computers | Where-Object {$_.State -eq 'Running'}

Answer

Get-Service -Name * -ComputerName $computers | Format-Table -AutoSize

Question 9

A user reports that their MacBook Pro running macOS Monterey frequently displays a message saying 'Your system has run out of application memory.' They have 16 GB of RAM and are only using Safari and Mail. Which macOS tool should you use to investigate the cause?

Accepted Answer

Activity Monitor. Activity Monitor is the correct tool because it provides real-time, graphical monitoring of memory pressure, process-specific memory usage, and the 'Memory' tab's 'Memory Pressure' graph directly indicates whether the system is under memory strain. Since the user has 16 GB of RAM and is only using Safari and Mail, the 'out of application memory' error typically indicates a memory leak or excessive memory consumption by a specific process, which Activity Monitor can pinpoint by sorting processes by memory usage.

Answer

System Information

Answer

Terminal with 'vm_stat' command

Answer

Console

Question 10

A user's browser is displaying a warning that the website's certificate is not trusted, even though the URL is correct. The technician checks the date and time on the computer and finds it is set to 2019. What is the most likely cause of the certificate warning?

Accepted Answer

The system date is incorrect, causing certificate validation to fail.. The system date is set to 2019, which is outside the certificate's validity period. SSL/TLS certificates have a specific notBefore and notAfter date range; when the client's clock is outside this range, the browser rejects the certificate as untrusted. This is the most direct and common cause of the warning given the symptom and the technician's finding.

Answer

The website's SSL certificate has been revoked.

Answer

The browser's certificate store is corrupted.

Answer

The user is connected to a malicious proxy.

Question 11

A technician is troubleshooting a user's slow computer. The user mentions they received a call from 'Windows Support' saying their computer had a virus. The user gave the caller remote access to 'fix' it. Now, the computer is running slower and has strange pop-ups. What is the most likely consequence of this social engineering attack?

Accepted Answer

The attacker installed a keylogger to steal credentials and sensitive data.. The attacker gained remote access to the user's computer under the guise of tech support. Once in, they installed a keylogger to capture keystrokes, which is a common payload in such social engineering attacks. This allows the attacker to steal credentials, banking information, and other sensitive data, explaining the continued slow performance and pop-ups.

Answer

The computer is now part of a botnet used for DDoS attacks.

Answer

The computer's BIOS has been corrupted.

Answer

The hard drive has been physically damaged.

Question 12

A small business owner wants to prevent employees from installing any software on their Windows 10 workstations without administrator approval. Which Control Panel or Settings feature should you configure to enforce this restriction?

Accepted Answer

User Accounts > Change User Account Control settings. User Account Control (UAC) settings, accessed via User Accounts in Control Panel, allow you to control when and how users are prompted for permission before making system changes, including software installations. By setting UAC to the highest level, you ensure that any installation attempt triggers an administrator approval prompt, effectively preventing unauthorized software installations on Windows 10 workstations.

Answer

Windows Defender Firewall

Answer

System > Advanced system settings > Performance

Answer

Ease of Access > Make the keyboard easier to use

Question 13

A technician is configuring a new Windows 10 workstation for a user who requires access to files stored on an encrypted USB drive. The drive uses BitLocker To Go. What must the technician do to ensure the user can access the drive on this computer?

Accepted Answer

Provide the user with the drive's password or recovery key. BitLocker To Go encrypts removable drives with a password or recovery key. To access the drive on a new Windows 10 workstation, the technician must provide the user with the drive's password or recovery key, as the drive is already encrypted and requires authentication at mount time. No additional configuration is needed on the workstation beyond entering the correct credentials.

Answer

Enable BitLocker on the workstation's internal drive

Answer

Format the USB drive to NTFS

Answer

Install the BitLocker Drive Encryption feature from Control Panel

Question 14

A technician needs to install a new hard drive in a computer that is under a strict security policy requiring all drives to be sanitized before disposal. The old drive will be replaced. What is the most secure method to ensure data cannot be recovered from the old drive?

Accepted Answer

Use a degausser to erase the magnetic fields.. A degausser generates a powerful magnetic field that physically randomizes the magnetic domains on the platters, effectively destroying all stored data and rendering the drive unusable. This is the only method listed that meets the strict security policy requirement for sanitization, as it prevents any possible data recovery even with advanced forensic tools.

Answer

Perform a quick format of the drive.

Answer

Run the Windows Disk Cleanup tool.

Answer

Delete all partitions using Disk Management.

Question 15

During a security audit, you find that several employees have been using the same weak password for their domain accounts. Which remediation should you implement first?

Accepted Answer

Configure a password policy in Group Policy requiring complexity and minimum length. The most effective first step to prevent weak passwords is to enforce a strong password policy via Group Policy. This centrally mandates complexity requirements (e.g., uppercase, lowercase, digits, special characters) and a minimum length (typically 8–14 characters), which directly blocks the use of simple, common passwords at the domain level. Unlike awareness campaigns or reactive measures, this technical control proactively enforces security standards across all domain accounts.

Answer

Disable the user accounts and require a manager to re-enable them

Answer

Send a company-wide email reminding users to choose strong passwords

Answer

Install a third-party password manager for all employees