220-1102 Practice Exam 3 — 20 Questions

Question 1

A security analyst discovers that an attacker has been using a compromised VPN account to access the corporate network. The account belongs to a former employee who was terminated two weeks ago. Which of the following should the analyst do immediately to prevent further unauthorized access?

Accepted Answer

Disable the former employee's VPN account. The immediate priority is to disable the compromised account to stop the attack. This is a critical security incident that requires swift action. While investigating the breach and reviewing logs are important, they come after containing the threat. Changing the VPN server password is not sufficient if the account itself is still active.

Answer

Review the VPN logs to determine the extent of the breach

Answer

Change the VPN server's shared secret

Answer

Notify the former employee about the security incident

Question 2

A company requires that all remote access sessions be recorded for compliance purposes. The current VPN solution does not support session recording. Which of the following additional technologies can be integrated to capture and store remote desktop sessions?

Accepted Answer

Implement a Remote Desktop Gateway with session recording software. A Remote Desktop Gateway (RD Gateway) can be configured to broker and log RDP sessions, and when combined with a session recording solution, it can capture all activity. VPN alone does not provide session recording, and other methods like VNC or SSH typically lack built-in recording features.

Answer

Use SSH tunneling for all remote access

Answer

Configure the VPN to use PPTP instead of L2TP

Answer

Deploy a VNC server on each remote workstation

Question 3

A user reports that a scheduled backup script on their Windows 10 workstation runs every day but fails to complete. The script uses PowerShell to copy files to a network share. When the user runs the script manually from an elevated PowerShell prompt, it works. What is the most likely cause of the failure?

Accepted Answer

The scheduled task is not set to run with highest privileges.. Scheduled tasks often run with limited permissions, so if the script requires administrative rights, it will fail when triggered automatically. The correct answer highlights the need to configure the task to run with highest privileges.

Answer

The script file extension is .ps1 instead of .bat.

Answer

The network share is mapped as a drive letter, which is not available during system startup.

Answer

PowerShell execution policy is set to Restricted for the SYSTEM account.

Question 4

A technician is troubleshooting a PowerShell script that collects system information and writes it to a log file. The script runs without errors but the log file is empty. The script uses Out-File to write data. What is the most likely issue?

Accepted Answer

The command before Out-File does not produce any output.. If a PowerShell command does not produce output, piping it to Out-File will result in an empty file. The issue is that the command used does not generate any output.

Answer

The script is not running with administrative privileges.

Answer

The Out-File cmdlet is misspelled.

Answer

The log file path contains a forward slash instead of a backslash.

Question 5

A technician is writing a batch script to automate the installation of a software package on multiple Windows workstations. The script needs to check if the software is already installed before attempting installation. Which scripting construct should the technician use?

Accepted Answer

An if statement. This tests knowledge of conditional logic in scripting. An 'if' statement allows the script to check a condition (e.g., existence of a registry key or file) and execute code only if the condition is true or false. Loops are for repetition, and variables store data, not control flow.

Answer

A for loop

Answer

A variable

Answer

A while loop

Question 6

A system administrator is deploying a PowerShell script to 100 computers to change the local administrator password. The script must run once per computer and then exit. Which scripting technique ensures the script runs exactly once on each machine?

Accepted Answer

Write a registry key after successful execution. This question covers idempotency and run-once mechanisms. Using a registry key or a marker file to record that the script has executed prevents it from running again on reboot or reapplication. Loops and parameters don't enforce a single execution.

Answer

Use a for loop to run the script 100 times

Answer

Use a parameter to pass the computer name

Answer

Schedule the script to run daily

Question 7

A user reports that a scheduled task running a VBScript fails every time the computer is rebooted. The script works when run manually. The technician checks the task properties and sees the task is set to run with the user's credentials. Which scripting-related issue is most likely causing the failure?

Accepted Answer

The task is set to run only when the user is logged on. This tests understanding of script execution context and permissions. When a script runs under a user account, it may not have the necessary permissions to access network resources or system files after reboot if the user isn't logged on. The 'run whether user is logged on or not' option requires the password to be stored, and if the password changes or is not provided, the task fails.

Answer

The script has a syntax error

Answer

The script uses absolute paths that change after reboot

Answer

The script is blocked by antivirus software

Question 8

A technician is troubleshooting a batch script that is supposed to delete temporary files older than 30 days. The script runs without errors but does not delete any files. The technician suspects the script's logic is flawed. Which part of the script is most likely incorrect?

Accepted Answer

The script uses 'forfiles' with the wrong date syntax. This tests understanding of file management commands and conditionals in batch scripting. The FORFILES command with date filtering is commonly used for this. If the script uses a simple 'del' without date checking, it will delete all files or none. The issue is likely that the script does not properly compare file dates.

Answer

The script uses the 'del' command without a path

Answer

The script runs as a standard user without admin rights

Answer

The script uses 'echo' instead of 'del'

Question 9

A technician is writing a Python script to automate the cleanup of user profiles on a Windows server. The script must iterate through all user profile folders in 'C:\Users', check the last modified date, and delete profiles older than 90 days. Which scripting concept is essential for this task?

Accepted Answer

A for loop to iterate over folders. This question tests understanding of loops, conditionals, and file system operations in a scripting language. A 'for' loop is needed to iterate through each folder, combined with an 'if' statement to check the date condition. Without a loop, the script would only process one folder. Error handling is important but not the core concept for iteration.

Answer

Error handling with try-except

Answer

A while loop with a counter

Answer

A function to calculate date difference

Question 10

A user reports that their Windows 10 computer runs a script every time they log in that maps a network drive, but the drive mapping fails intermittently. The script uses the 'net use' command. Which scripting element should be added to handle the failure gracefully and retry the mapping?

Accepted Answer

An exit code check and a loop to retry the mapping. This question tests basic error handling in scripting. Adding error-checking logic, such as checking the exit code of 'net use' and retrying if it fails, makes the script more robust. A simple 'if errorlevel' or 'if %errorlevel% neq 0' construct allows the script to retry the command instead of failing silently.

Answer

A comment line explaining the net use syntax

Answer

A variable to store the drive letter

Answer

A 'pause' command after the net use line

Question 11

A technician needs to write a batch script that will copy a configuration file from a network share to the local system32 directory only if the file on the share is newer than the local copy. Which command should the technician use to perform this conditional copy?

Accepted Answer

xcopy \server\share\config.txt C:\Windows\System32\ /d /y. The 'xcopy' command with the /d switch copies files only if the source is newer than the destination. This is a common requirement for updating configuration files without overwriting newer local versions. The /y switch suppresses confirmation prompts.

Answer

copy /y \server\share\config.txt C:\Windows\System32\

Answer

robocopy \server\share C:\Windows\System32 config.txt /mir

Answer

move /y \server\share\config.txt C:\Windows\System32\

Question 12

A customer calls to report that their laptop won't turn on. The technician suspects a dead battery. Which of the following responses demonstrates proper troubleshooting and professionalism?

Accepted Answer

Ask the customer to plug in the charger and see if any lights appear.. A systematic approach to troubleshooting shows competence. Starting with simple checks and explaining each step keeps the customer informed and involved.

Answer

Tell the customer to buy a new battery immediately.

Answer

Say that the motherboard is likely dead and needs replacement.

Answer

Tell the customer to bring the laptop to the shop without further questions.

Question 13

A user calls the help desk frustrated because their laptop will not connect to the company Wi-Fi. They say they have tried restarting the laptop but it still does not work. The technician suspects the wireless adapter driver may be corrupt. What is the best first step for the technician to take?

Accepted Answer

Ask the user if they see any error messages or if other devices connect to the Wi-Fi.. This question tests the concept of active listening and gathering information before jumping to solutions. The correct answer is to ask clarifying questions to understand the issue fully, which ensures the technician does not waste time on incorrect assumptions.

Answer

Remotely reinstall the wireless adapter driver.

Answer

Tell the user to bring the laptop to the IT office for a physical inspection.

Answer

Escalate the ticket to the network team immediately.

Question 14

A customer reports that their computer is running very slowly after they installed a new screensaver. The technician suspects the screensaver may be consuming excessive resources. Which of the following is the most professional way to address this?

Accepted Answer

Explain that you will check the system resources to identify the cause of the slowness.. This question emphasizes respectful communication and avoiding blame. The correct answer focuses on investigating the issue without accusing the user.

Answer

Tell the customer that the screensaver is likely the problem and they should uninstall it.

Answer

Blame the screensaver and suggest the customer stop using decorative software.

Answer

Ignore the screensaver and run a full virus scan.

Question 15

A technician is troubleshooting a network issue and needs to access the user's computer remotely. The user is in a different city and speaks with a heavy accent, making communication difficult. The technician has trouble understanding the user's description of the error. What is the best approach?

Accepted Answer

Ask the user to type the error message in a chat window to avoid miscommunication.. This question tests adaptability and respectful communication when language barriers exist. The correct answer uses a collaborative, patient approach to ensure understanding without causing embarrassment.

Answer

Speak slowly and loudly, repeating each question until the user understands.

Answer

Ask the user to transfer the call to a colleague who speaks English more clearly.

Answer

Proceed with remote access without further communication, assuming you can diagnose the issue visually.

Question 16

A customer needs to transfer their user profile, documents, and application settings from an old Windows 7 PC to a new Windows 10 PC. Which Windows tool is specifically designed for this purpose?

Accepted Answer

User State Migration Tool (USMT). The User State Migration Tool (USMT) is a command-line tool designed for large-scale migrations of user profiles and settings. It is included in the Windows Assessment and Deployment Kit (ADK). For simpler transfers, Windows Easy Transfer was used in older versions, but USMT is the enterprise-grade solution.

Answer

Windows Easy Transfer

Answer

File History

Answer

Windows Backup and Restore

Question 17

You are configuring a new Windows 10 workstation for a remote employee who will connect to the corporate VPN. The user should not be able to install software or change system settings. Which tool should you use to enforce these restrictions?

Accepted Answer

Local Group Policy Editor. Local Group Policy Editor (gpedit.msc) allows you to configure security and restriction policies on a standalone computer. You can disable the ability to install software by setting the 'Disable Windows Installer' policy and restrict access to Control Panel settings. This is the appropriate tool for a non-domain joined machine.

Answer

User Account Control (UAC) settings

Answer

Device Manager

Answer

Registry Editor

Question 18

You are troubleshooting a Windows 10 PC that fails to boot with the error 'Boot Configuration Data is missing.' Which built-in tool can you use from the Windows Recovery Environment to rebuild the BCD store?

Accepted Answer

Bootrec.exe. Bootrec.exe is the correct built-in tool for rebuilding the Boot Configuration Data (BCD) store from the Windows Recovery Environment (WinRE). The specific command 'bootrec /rebuildbcd' scans all disks for Windows installations and allows you to rebuild the BCD store, directly addressing the 'Boot Configuration Data is missing' error. Other tools like SFC, Diskpart, and CHKDSK do not have the capability to reconstruct the BCD store.

Answer

System File Checker (sfc /scannow)

Answer

Diskpart

Answer

CHKDSK

Question 19

A customer calls saying that after installing a new application, their Windows 11 desktop icons are scattered and the taskbar keeps disappearing. They need a quick way to restore the default desktop layout and taskbar behavior without affecting personal files. Which built-in tool should you guide them to use?

Accepted Answer

System Restore from the System Protection tab.. The System Restore tool rolls back system files and registry settings to a previous restore point, which can undo changes made by the problematic application. It does not affect personal files. The other options either don't target system changes or are too drastic.

Answer

Reset this PC with the 'Keep my files' option.

Answer

Refresh the desktop by right-clicking and selecting 'Refresh'.

Answer

Use the Deployment Imaging Service and Management Tool (DISM) to repair the system image.

Question 20

During a routine security audit, you discover that several user accounts on a Windows 10 workstation have local administrator privileges when they should only be standard users. You need to quickly review and modify user account types from the command line. Which built-in tool should you use?

Accepted Answer

net localgroup. The 'net localgroup' command allows you to view and modify local group memberships, such as adding or removing users from the Administrators group. The other options are either for different purposes (like disk management) or require a GUI.

Answer

lusrmgr.msc (Local Users and Groups MMC)

Answer

net user

Answer

diskpart