220-1102 Practice Test 22 — 15 Questions

Question 1

A technician is preparing to deploy a security patch to 50 workstations. The change request has been approved, and the patch has been tested on a pilot group. During the deployment, five workstations fail to install the patch. What should the technician do next according to change management best practices?

Accepted Answer

Halt the deployment and execute the rollback plan for the failed workstations. According to change management best practices, when a deployment encounters failures, the immediate priority is to halt the deployment to prevent further issues and then execute the rollback plan to restore the failed workstations to their previous known-good state. This ensures stability and minimizes disruption, as the rollback plan was already defined and approved as part of the change request. Continuing or forcing the patch could lead to system instability or security vulnerabilities.

Answer

Continue deploying to the remaining workstations and troubleshoot the failures later

Answer

Force the patch to install using administrative tools

Answer

Submit a new change request for the failed workstations

Question 2

During a hardware upgrade, a technician spills a small amount of liquid from a leaking CMOS battery on the workbench. What is the first step the technician should take?

Accepted Answer

Use a neutralizing agent or absorbent material recommended for alkaline spills, and dispose of the waste as hazardous.. A CMOS battery contains alkaline chemicals that can damage equipment and harm skin or eyes. The correct first step is to use a neutralizing agent or absorbent material specifically designed for alkaline spills, then dispose of the waste as hazardous material, following proper environmental safety protocols. This prevents chemical burns, equipment damage, and environmental contamination.

Answer

Wipe it up with a paper towel and continue working.

Answer

Ignore it and let it evaporate.

Answer

Pour water on the spill to dilute it.

Question 3

A user reports that after a recent software update, their inventory management application crashes on launch. The change log shows the update was applied last night by a junior technician. What is the first step the technician should take according to change management best practices?

Accepted Answer

Check the change log for the update details and rollback procedure.. Option B is correct because change management best practices require that before any action is taken, the technician should first consult the change log to understand what was changed and identify the documented rollback procedure. This ensures a controlled, reversible approach rather than risking data loss or further instability by acting without full knowledge of the update's scope.

Answer

Restore the user’s system from a backup taken before the update.

Answer

Uninstall the update immediately to restore functionality.

Answer

Escalate the issue to the IT manager for a decision.

Question 4

A user wants to encrypt a USB flash drive so that if it is lost, the data cannot be read on another computer. The USB drive will be used on both Windows 10 and Windows 11 devices. Which Windows feature should be used?

Accepted Answer

BitLocker To Go. BitLocker To Go is the correct choice because it provides full-disk encryption specifically designed for removable drives like USB flash drives. It encrypts the entire drive using AES encryption, and when the drive is inserted into another Windows 10 or Windows 11 computer, the user must enter the password or use a smart card/recovery key to access the data. This ensures that if the drive is lost, the data remains unreadable on any other system.

Answer

EFS (Encrypting File System)

Answer

Windows Defender Encryption

Answer

Secure Boot

Question 5

A technician is tasked with installing a security patch on 50 company laptops. The change management process requires a full system backup before any patch installation. During the backup of the first laptop, the backup fails due to insufficient disk space. What should the technician do?

Accepted Answer

Free up disk space by deleting temporary files and retry the backup.. Option B is correct because the change management process explicitly requires a full system backup before patch installation. Deleting temporary files is a standard, low-risk method to free disk space and retry the backup, ensuring compliance without violating policy. This approach maintains data integrity and follows the established procedure.

Answer

Skip the backup for this laptop and proceed with the patch installation.

Answer

Install the patch anyway and create a manual restore point.

Answer

Report the failure to the change manager and request an exception.

Question 6

A user is traveling and needs to access a file on their office computer. They have a dynamic IP address at the hotel. Which remote access technology should the technician recommend for a secure connection?

Accepted Answer

Set up a Virtual Private Network (VPN) client on the user's laptop to connect to the office network.. Option B is correct because a VPN client creates an encrypted tunnel between the user's laptop and the office network, allowing secure access to files regardless of the user's dynamic IP address. VPNs authenticate the user and encrypt all traffic, protecting data over untrusted networks like hotel Wi-Fi.

Answer

Configure a direct RDP connection using the user's home IP address.

Answer

Use a remote desktop gateway that requires a static IP on the user's end.

Answer

Email the file to the user as an attachment.

Question 7

A company is implementing a remote access solution for employees using personal smartphones. They need to ensure that corporate email and documents are accessible but that no corporate data remains on the device if it is lost or wiped. Which technology should they use?

Accepted Answer

Mobile Device Management (MDM) with a containerized work profile.. Mobile Device Management (MDM) with a containerized work profile creates a separate, encrypted sandbox on the smartphone that stores corporate email and documents. This container can be remotely wiped by the administrator without affecting the user's personal data, ensuring no corporate data remains on a lost or wiped device.

Answer

Virtual Private Network (VPN) with split tunneling.

Answer

Remote Desktop Protocol (RDP) to a virtual desktop.

Answer

Third-party remote access software like LogMeIn.

Question 8

A small business has no formal change management process. A technician installs a new antivirus program on a server, which later conflicts with the existing backup software, causing backups to fail. Which principle of change management was most clearly violated?

Accepted Answer

The change was not documented or communicated to stakeholders. The scenario describes a small business with no formal change management process. The core failure is that the technician installed new antivirus software without documenting the change or communicating it to stakeholders (such as the backup administrator or other IT staff). If the change had been documented and communicated, the potential conflict with the existing backup software could have been identified and avoided. This directly violates the principle that all changes must be documented and communicated to relevant parties, even in the absence of a formal CAB or staging environment.

Answer

The change was not tested in a staging environment

Answer

The change was not approved by the change advisory board

Answer

The technician did not create a rollback plan

Question 9

During a security audit, you discover that a Windows 10 workstation has a weak local administrator password. The company policy requires all local admin passwords to be at least 12 characters with complexity. Which tool can enforce this policy for all future password changes on that workstation?

Accepted Answer

Local Security Policy (secpol.msc). B is correct because the Local Security Policy (secpol.msc) includes the 'Password Policy' settings under Account Policies, where you can configure minimum password length (12 characters) and password complexity requirements. These settings are enforced by the Local Security Authority (LSA) for all future password changes on the workstation, directly aligning with the company policy.

Answer

Local Users and Groups (lusrmgr.msc)

Answer

Registry Editor (regedit)

Answer

Windows Defender Firewall with Advanced Security

Question 10

A technician is deploying a new application to 20 sales laptops. The change management plan requires a pilot test on 2 laptops before full deployment. After testing, the technician finds the application works but conflicts with the VPN client. What should the technician do?

Accepted Answer

Document the conflict and submit a revised change request with a resolution plan.. Option B is correct because the change management process requires that any issues discovered during pilot testing be formally documented and addressed before full deployment. Since the application conflicts with the VPN client, the technician must submit a revised change request that includes a resolution plan (e.g., updating the application, modifying VPN configuration, or scheduling a coordinated deployment). This ensures compliance with organizational change control policies and minimizes risk to production systems.

Answer

Deploy the application to all laptops and disable the VPN client on each.

Answer

Continue with the deployment and note the conflict in the change log.

Answer

Uninstall the VPN client from all laptops and reinstall after the deployment.

Question 11

A security incident occurs when an unauthorized user gains access to a server because a technician left a default password unchanged after a system rebuild. The rebuild was documented, but the password change was not. What documentation failure does this highlight?

Accepted Answer

The change log did not list the specific configuration changes made.. Option B is correct because the documentation failure is that the change log did not list the specific configuration changes made. In this scenario, the system rebuild was documented, but the critical detail of changing the default password was omitted. Proper change management requires that every configuration change, including password updates, be explicitly recorded in the change log to ensure accountability and traceability. Without this record, the security incident occurred due to an undocumented deviation from security best practices.

Answer

The change log did not include a rollback plan.

Answer

The change request was not approved by the change advisory board.

Answer

The technician did not perform a post-implementation review.

Question 12

A technician is tasked with creating a PowerShell script that will parse a CSV file containing user information and create local user accounts on a Windows 10 machine. The CSV has columns: 'Username', 'FullName', 'Password'. The script must skip any row where the 'Username' is empty. Which control structure should the technician use to handle this requirement?

Accepted Answer

An 'if' statement to test whether the Username property is not empty. Option C is correct because the requirement is to conditionally skip rows based on a property value. An 'if' statement in PowerShell allows you to test whether the 'Username' property is empty or null using a condition like `if ($_.Username -ne '')` and then skip the row with `continue` or simply not process it. This is the most direct and efficient control structure for a simple boolean check on each row.

Answer

A 'for' loop with a counter to skip empty rows

Answer

A 'switch' statement to match usernames

Answer

A 'try/catch' block to handle errors when creating the account

Question 13

A customer reports that after a recent software update, their accounting application crashes every time they try to generate a report. The technician checks the change log and finds no record of any update being approved for that application. What should the technician do first?

Accepted Answer

Document the unauthorized change and escalate it to the change advisory board.. The technician found an unauthorized change (the update) with no approval record. The first step in change management is to document and escalate the unauthorized change to the Change Advisory Board (CAB) to assess impact, determine root cause, and authorize remediation. Restoring or reinstalling without CAB approval could violate change control policies and introduce additional risks.

Answer

Restore the application from the last known good backup.

Answer

Uninstall the update and reinstall the previous version of the application.

Answer

Contact the software vendor to request a patch for the crash.

Question 14

A company’s change management policy requires that all changes be categorized as standard, emergency, or normal. During a server migration, a technician discovers a critical security patch must be applied immediately to prevent a data breach. Which type of change should the technician request?

Accepted Answer

Emergency change. The scenario describes a critical security patch that must be applied immediately to prevent a data breach, which aligns with the definition of an emergency change. Emergency changes are pre-approved or fast-tracked to address urgent threats or service outages, bypassing the normal change advisory board (CAB) review process. This ensures the patch can be deployed without delay to mitigate the risk.

Answer

Standard change

Answer

Normal change

Answer

Service request

Question 15

A technician is reviewing the change management log and finds that a previous change to the email server was marked as 'completed' but the email service has been intermittent since then. The technician suspects the change was not fully tested. Which step in the change management process was most likely skipped?

Accepted Answer

A post-implementation review was not conducted. Option C is correct because a post-implementation review (PIR) is the step where the change is verified to have met its objectives without causing adverse effects. Since the email service became intermittent after the change was marked 'completed', the lack of a PIR means the change was not validated in production, allowing the underlying issue to go undetected. In the CompTIA change management process, the PIR ensures that the change has been fully tested and that any residual problems are identified and addressed before the change is closed.

Answer

The change request was not submitted

Answer

The change was not approved by the CAB

Answer

The rollback plan was not documented