220-1102 Practice Exam 4 — 20 Questions

Question 1

A technician is configuring a Windows 10 kiosk machine that will run a single web application in full-screen mode. The machine must not allow users to access the desktop, taskbar, or other apps. Which Windows security feature should be used to accomplish this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assigned Access (Kiosk Mode). Assigned Access (Kiosk Mode) is the correct Windows security feature because it locks down the device to run a single Universal Windows Platform (UWP) app or a web browser in full-screen mode, preventing users from accessing the desktop, taskbar, or other applications. This feature is specifically designed for kiosk scenarios and enforces a restricted user experience by configuring a local or domain user account to launch only the designated app upon sign-in.

Answer

Local Group Policy to hide the taskbar.

Answer

User Account Control set to 'Always notify.'

Answer

Windows Defender Application Guard

Question 2

A user on an Android tablet reports that the Google Play Store is not downloading any apps, showing an error message about insufficient storage. The device's storage settings show 2GB free. What should you do first?

Accepted Answer

Clear the cache and data of the Google Play Store app.. Clearing the cache and data of the Google Play Store app is the correct first step because the error message about insufficient storage, despite 2GB free, often indicates a corrupted cache or data within the Play Store itself. This corruption can cause the Play Store to misreport storage availability or fail to initialize downloads. Clearing these app-specific files forces the Play Store to rebuild its state, resolving the false positive without affecting user data or requiring additional free space.

Answer

Factory reset the tablet.

Answer

Uninstall large apps to free up more storage.

Answer

Check for a system update.

Question 3

A user cannot run a command because they get 'permission denied' even though they are in the sudoers file. The command is located in /opt/custom/bin. Which command will list the file in long format, showing its permissions, owner, group, size, and modification date?

Accepted Answer

ls -l /opt/custom/bin/command. The 'ls -l' command displays the file's permissions (e.g., -rwxr-xr-x), ownership (user and group), and other metadata in a long-format listing. This directly shows whether the file is executable and who owns it, which is essential for diagnosing a 'permission denied' error despite sudoers membership. While 'stat' also reports permissions and ownership, it does not produce a long-format listing, so it does not satisfy the question's requirement.

Answer

stat /opt/custom/bin/command

Answer

file /opt/custom/bin/command

Answer

chmod /opt/custom/bin/command

Question 4

A user reports that their Windows 10 laptop takes a very long time to boot and shows a 'Preparing Automatic Repair' message before eventually loading the desktop. They mention this started after a power outage. Which Windows tool should you use first to diagnose and attempt to fix the boot issue?

Accepted Answer

Startup Repair. Startup Repair (option B) is the correct first tool because the user reports a boot failure with 'Preparing Automatic Repair' after a power outage, which often corrupts critical boot configuration data (BCD) or the Master Boot Record (MBR). Startup Repair is designed to automatically diagnose and fix these specific boot-related issues without affecting user files, making it the most appropriate initial step.

Answer

System Restore

Answer

Reset this PC

Answer

System File Checker (sfc /scannow)

Question 5

During a security audit, it is discovered that an old server's hard drives were simply deleted and the server was sold to a recycler. The recycler later reported finding readable files on the drives. Which data disposal standard was violated?

Accepted Answer

NIST SP 800-88. NIST SP 800-88 provides guidelines for media sanitization, including clear, purge, and destroy methods. Simply deleting files only removes directory pointers, leaving data recoverable until overwritten. The recycler's ability to read files indicates that the drives were not sanitized according to NIST SP 800-88 standards, which require overwriting or physical destruction for sensitive data.

Answer

PCI DSS

Answer

HIPAA

Answer

ISO 27001

Question 6

A small business owner wants to ensure that all company laptops have their hard drives encrypted in case of theft. The laptops run Windows 10 Pro. Which technology should the technician enable to meet this requirement?

Accepted Answer

BitLocker Drive Encryption. BitLocker Drive Encryption (option C) is the correct technology because it provides full-disk encryption for Windows 10 Pro, ensuring that all data on the laptop's hard drive is encrypted at rest. This protects against data exposure if the device is stolen, as the drive cannot be accessed without the decryption key (e.g., a PIN, USB key, or TPM-based authentication). BitLocker is built into Windows 10 Pro and is specifically designed for whole-drive encryption, meeting the requirement for all company laptops.

Answer

EFS (Encrypting File System)

Answer

Windows Defender Antivirus

Answer

TPM (Trusted Platform Module)

Question 7

A technician is deploying a new virtual machine on a Type 1 hypervisor. The VM will run a Linux web server and needs to be isolated from the corporate network except for HTTPS traffic. Which networking configuration should the technician implement?

Accepted Answer

Use a virtual switch set to host-only mode and configure port forwarding for HTTPS. A host-only virtual switch creates an isolated network between the host and the VM, preventing direct access from the corporate network. By configuring port forwarding on the host, the technician can selectively allow only HTTPS traffic (TCP/443) to reach the VM while keeping it otherwise isolated. This meets the requirement of isolation except for HTTPS.

Answer

Bridge the VM directly to the physical network adapter

Answer

Attach the VM to a NAT network without any port forwarding

Answer

Assign the VM an IP from the corporate DHCP scope

Question 8

A user on Windows 11 is trying to install a new application, but receives the error 'Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.' The user is a local administrator. What is the most likely cause?

Accepted Answer

The file has been blocked by Windows because it was downloaded from the internet.. When a file is downloaded from the internet, Windows attaches a Zone.Identifier alternate data stream marking it as originating from the 'Internet' zone. Even as a local administrator, the user cannot execute or install it until the block is removed via the file's Properties dialog ('Unblock' checkbox) or PowerShell's Unblock-File cmdlet. The error message about permissions is misleading — it is a Mark-of-the-Web restriction, not an NTFS ACL problem.

Answer

The file is corrupted and needs to be re-downloaded.

Answer

User Account Control (UAC) is blocking the installation.

Answer

The user does not have 'Read & Execute' permissions on the file.

Question 9

During a network upgrade, a technician finds a box of old NICs, cables, and small electronic components that are no longer needed. The company has no formal e-waste policy. What should the technician do?

Accepted Answer

Research local e-waste recycling facilities and present a disposal plan to the manager for approval.. In the absence of a formal e-waste policy, the technician must act responsibly by researching local e-waste recycling facilities and presenting a disposal plan to the manager for approval. This aligns with environmental best practices and regulatory compliance, as improper disposal of electronic components can violate local laws and harm the environment. The technician should not unilaterally dispose of or sell the items without management authorization.

Answer

Throw the items in the dumpster since they are small and the company has no policy.

Answer

Store the items indefinitely in a closet until a policy is created.

Answer

Sell the items online as a lot to a recycler.

Question 10

During a software deployment, you need to ensure that a legacy application always runs with administrative privileges, even for standard users. How can you configure this using Windows built-in tools?

Accepted Answer

Set the application's shortcut to 'Run as administrator' in the Compatibility tab. The Compatibility tab in a shortcut's properties allows you to set the 'Run as administrator' flag, which embeds a compatibility manifest that prompts for elevation via UAC when the application is launched. This ensures the legacy application always runs with administrative privileges, even for standard users, by triggering a credential prompt for an administrator account.

Answer

Disable User Account Control (UAC) in the Control Panel

Answer

Add the user to the local Administrators group

Answer

Use the 'Run as different user' option from the Shift+right-click menu

Question 11

During a corporate device deployment, a technician configures an iPhone for a new employee. The employee later reports that they cannot receive emails on the native Mail app, but can access the webmail interface in Safari. What is the most likely misconfiguration?

Accepted Answer

The incoming mail server settings are incorrect.. The user can access webmail via Safari but cannot receive emails in the native Mail app. This indicates the email account credentials are valid and the network connection is working, but the incoming mail server (POP3/IMAP) settings are misconfigured. Incorrect incoming server hostname, port, or SSL/TLS settings would prevent the Mail app from downloading new messages while leaving webmail unaffected.

Answer

The email account password was entered incorrectly.

Answer

The outgoing mail server (SMTP) settings are wrong.

Answer

The device's date and time are set incorrectly.

Question 12

A small business owner reports that after upgrading their wireless router to a newer model, several older laptops running Windows 7 can no longer connect to the Wi-Fi network. The new router is configured to use WPA3. What is the most likely reason for the connection failures?

Accepted Answer

The laptops have outdated wireless drivers that do not support WPA3.. WPA3 is a newer security protocol that requires both the router and the client device to support it. Older laptops running Windows 7 typically have wireless network adapters and drivers that were designed before WPA3 was standardized (2018), so they only support WPA2 or earlier protocols. Without updated drivers that include WPA3 support, these laptops cannot authenticate with the router, causing the connection failures.

Answer

The router's firewall is blocking the older laptops' MAC addresses.

Answer

The laptops are using an incompatible encryption cipher like TKIP.

Answer

The router's SSID is hidden, and the laptops cannot discover it.

Question 13

A user's iPhone 13 suddenly shows a black screen with a spinning gear icon after an iOS update. The device does not respond to touch or button presses. What is the most likely cause and the correct first step?

Accepted Answer

Force restart the iPhone by pressing and releasing Volume Up, then Volume Down, then holding the Side button until the Apple logo appears.. The black screen with a spinning gear icon after an iOS update indicates the device is stuck in a boot loop or update process, not a hardware failure. A force restart (Volume Up, Volume Down, hold Side button) is the correct first step because it forces the iPhone to reboot without erasing data, often resolving temporary software hangs. This sequence is specific to iPhone 7 and later models, including the iPhone 13, and bypasses unresponsive touch or button inputs.

Answer

The battery is dead; connect to a charger and wait.

Answer

Place the device in DFU mode and restore via Finder.

Answer

The screen is damaged; replace the display assembly.

Question 14

A technician is troubleshooting a Windows 10 system that fails to boot with a 'Bootmgr is missing' error. They need to repair the boot configuration data (BCD) from the Windows Recovery Environment. Which command should they use?

Accepted Answer

bootrec /rebuildbcd. The 'Bootmgr is missing' error indicates that the Boot Configuration Data (BCD) store is corrupted or missing. The `bootrec /rebuildbcd` command scans all disks for Windows installations and allows you to rebuild the BCD store from scratch, which directly resolves this issue. In contrast, `bootrec /fixmbr` and `bootrec /fixboot` repair the master boot record and boot sector, respectively, but do not rebuild the BCD store.

Answer

bootrec /fixmbr

Answer

bootrec /fixboot

Answer

sfc /scannow

Question 15

A security incident occurred when an employee disposed of a hard drive by throwing it in the trash. The hard drive contained unencrypted customer data. Which two practices should have been followed to prevent this environmental and security breach? (Choose two.)

Accepted Answer

Degauss the hard drive before disposal.. Option A is correct because degaussing exposes the drive to a strong magnetic field that destroys the magnetic domains holding the data, rendering the hard drive's contents unrecoverable before disposal. Option B is correct because placing the drive in a secure shredding bin for e-waste ensures the media is physically destroyed by an approved vendor, preventing both data remanence and improper environmental disposal. Option C is not sufficient because a quick format only rewrites file system metadata and leaves the underlying data blocks recoverable with forensic tools. Option D is also inadequate because deleting files and emptying the Recycle Bin only removes references to the data, not the data itself, so the unencrypted customer information would still be recoverable from the discarded drive.

Answer

Perform a quick format of the drive before disposal.

Answer

Delete the files and empty the Recycle Bin.

Question 16

A user reports that they cannot execute a custom shell script they created in their home directory. The script is owned by the user and has permissions set to 644. Which command should be used to allow the owner to execute the script?

Accepted Answer

chmod u+x script.sh. The script has permissions 644, which means the owner has read/write (6) but not execute. To allow the owner to execute the script, you need to add the execute permission for the owner. The command `chmod u+x script.sh` adds execute permission for the user (owner) only, which is the correct and minimal change to resolve the issue.

Answer

chmod 755 script.sh

Answer

chmod 644 script.sh

Answer

chown user:user script.sh

Question 17

A user's laptop running Windows 10 Pro connects to the corporate Wi-Fi but cannot access internal resources. The network uses WPA2-Enterprise with PEAP-MSCHAPv2. The laptop's wireless profile is configured correctly. Other users in the same office can access resources. What is the most likely cause?

Accepted Answer

The user's domain account is locked or the password has expired.. The user can connect to Wi-Fi but cannot access internal resources, and other users are unaffected. Since the wireless profile is correct and WPA2-Enterprise uses PEAP-MSCHAPv2 for authentication, the most likely cause is that the user's domain account is locked or the password has expired. This would prevent successful authentication against the RADIUS server, blocking access to internal resources even though the client associates with the access point.

Answer

The laptop's wireless adapter is faulty.

Answer

The access point is broadcasting on a congested channel.

Answer

The laptop has an incorrect IP address from DHCP.

Question 18

A technician is decommissioning a server that contained encrypted patient health records. The organization's policy requires data to be destroyed beyond recovery, but the server must be returned to the leasing company. Which method should the technician use?

Accepted Answer

Remove the hard drives and physically shred them, then return the server without drives.. Physically shredding the hard drives ensures the encrypted patient health records are destroyed beyond any possible recovery, which satisfies the organization's policy. Returning the server without drives complies with the leasing company's requirement to return the server chassis, as the drives are typically owned by the organization or can be removed per lease terms. This method is the only one that guarantees data destruction at the physical media level, bypassing any residual data on the encrypted drives.

Answer

Perform a full format of all drives.

Answer

Use a degausser on the entire server chassis.

Answer

Run a disk cleanup and delete all files.

Question 19

A technician is replacing the thermal paste on a CPU. After cleaning the old paste, the technician accidentally touches the CPU contacts with bare fingers. What is the primary concern?

Accepted Answer

The CPU contacts may become contaminated with oils from the skin.. Touching the CPU contacts with bare fingers transfers natural oils and contaminants from the skin onto the gold-plated contact pads. These oils can cause corrosion over time or create an insulating layer that impedes proper electrical connectivity, leading to intermittent failures or permanent damage. The primary concern is contamination, not ESD, overheating, or physical pressure.

Answer

The CPU may be damaged by electrostatic discharge (ESD).

Answer

The CPU may overheat due to improper thermal paste application.

Answer

The CPU may be physically damaged by the pressure of the touch.

Question 20

A technician is installing a new UPS (Uninterruptible Power Supply) in a server rack. The UPS is heavy and must be mounted securely. What is the most important safety consideration during installation?

Accepted Answer

Use a lifting team or mechanical lift to position the UPS.. The UPS is a heavy piece of equipment, and improper lifting can cause serious injury or damage. Using a lifting team or mechanical lift ensures safe handling and prevents back strain, crush injuries, or dropping the unit, which is the primary safety concern during physical installation.

Answer

Ensure the UPS is connected to a grounded outlet before mounting.

Answer

Verify that the UPS batteries are charged before installation.

Answer

Install the UPS at the top of the rack for better airflow.