220-1102 Practice Test 23 — 15 Questions

Question 1

A company is implementing a new policy that requires users to authenticate using both a password and a one-time code sent to their mobile phone. What type of authentication factor is the one-time code?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Something you have. Authentication factors are categorized as something you know (password), something you have (token or phone), and something you are (biometrics). A one-time code sent to a mobile phone is considered 'something you have' because access to the phone is required. This question tests the classification of multi-factor authentication components.

Answer

Something you are

Answer

Something you know

Answer

Somewhere you are

Question 2

A user reports that their Windows 10 desktop is running very slowly, especially when opening multiple applications. They have 8 GB of RAM and a traditional hard drive. Task Manager shows that memory usage is consistently at 90% or higher. Which component is most likely the bottleneck and what is the best upgrade?

Accepted Answer

The RAM is the bottleneck; add more RAM.. High memory usage (90%+) with 8 GB of RAM indicates that the system is running out of physical memory, causing it to use the hard drive as virtual memory, which is very slow. The best upgrade is to add more RAM to reduce reliance on the slow hard drive paging.

Answer

The CPU is the bottleneck; upgrade to a faster processor.

Answer

The hard drive is the bottleneck; upgrade to an SSD.

Answer

The graphics card is the bottleneck; upgrade to a dedicated GPU.

Question 3

A technician needs to deploy a custom Windows 10 image to 50 identical workstations. The image must include specific drivers, applications, and settings. Which tool should the technician use to create and manage the deployment image?

Accepted Answer

System Preparation Tool (Sysprep). System Preparation Tool (Sysprep) is used to generalize a Windows installation so it can be imaged and deployed to multiple computers. DISM is used to capture and apply images, but Sysprep is required to prepare the OS for imaging. Windows PE is a minimal OS for deployment tasks, not for creating the image. Windows ADK includes deployment tools but Sysprep is the specific tool for image preparation.

Answer

Deployment Image Servicing and Management (DISM)

Answer

Windows Preinstallation Environment (Windows PE)

Answer

Windows Assessment and Deployment Kit (Windows ADK)

Question 4

A small business owner wants to allow a remote employee to access their office desktop from home, but is concerned about security. They currently have a standard router with a public IP. Which of the following is the most secure method to enable this access?

Accepted Answer

Configure a VPN server on the office network and have the employee connect via VPN before using RDP.. Exposing RDP directly to the internet is risky due to brute-force attacks. A VPN creates an encrypted tunnel, authenticating the user before allowing access to the internal network, making it far more secure. This is the recommended best practice.

Answer

Enable port forwarding on the router for TCP 3389 to the desktop's IP address.

Answer

Use a third-party remote desktop service like TeamViewer without additional configuration.

Answer

Change the RDP port to a non-standard port number and enable port forwarding.

Question 5

A customer reports that their computer shuts down unexpectedly after a few minutes of use. The system feels hot to the touch, and the fan is running loudly. What is the most appropriate first step for a technician to take to ensure safety while diagnosing the issue?

Accepted Answer

Unplug the computer, let it cool for 30 minutes, then inspect for dust or fan failure.. This question tests knowledge of electrical safety and proper handling of overheated equipment. The correct answer is to unplug the computer to prevent electrical shock or fire, then allow it to cool before inspecting internal components. Attempting to open a hot system or ignoring the heat can lead to injury or further damage.

Answer

Immediately open the case and touch the CPU heatsink to check temperature.

Answer

Spray compressed air into the vents while the system is running to clear dust.

Answer

Replace the power supply unit immediately to fix the overheating.

Question 6

A company is experiencing a security incident where an attacker gained access to the internal network via a compromised VPN account. The technician must prevent future attacks. Which two-factor authentication method should the technician implement for VPN access?

Accepted Answer

Implement a time-based one-time password (TOTP) via an authenticator app. Two-factor authentication (2FA) adds a second factor beyond the password, such as a one-time code from an authenticator app. This significantly reduces the risk of account compromise even if the password is stolen.

Answer

Require a complex password with a minimum length of 20 characters

Answer

Restrict VPN access to specific IP addresses

Answer

Enable single sign-on (SSO) with Active Directory

Question 7

A software deployment script fails because it cannot write to the /opt/app directory. The directory currently has permissions drwxr-xr-x and is owned by root. The script runs as a non-root user. Which command would allow the script to write files without compromising security more than necessary?

Accepted Answer

chmod o+w /opt/app. Chmod o+w /opt/app adds write permission for 'others' (the non-root user), which is the minimal change needed. The script runs as a non-root user, so this grants write access without affecting group permissions.

Answer

chmod 777 /opt/app

Answer

chown user:user /opt/app

Answer

chmod g+w /opt/app

Question 8

During a network upgrade, a technician needs to run new Ethernet cables through a drop ceiling. The technician notices that some existing cables are resting on the ceiling tiles and are not secured. What safety concern should the technician address?

Accepted Answer

Secure all cables to the ceiling grid using appropriate cable supports.. Unsecured cables on ceiling tiles can cause the tiles to fall, creating a head injury risk and damaging equipment. Cables should be secured to the building structure using J-hooks or cable trays. This also prevents tripping hazards and maintains fire code compliance.

Answer

Leave the cables as they are and run the new cables alongside them.

Answer

Use zip ties to attach the cables to the sprinkler pipes for stability.

Answer

Remove the existing cables and replace them with the new ones.

Question 9

A change advisory board (CAB) approves a network switch replacement, but the technician discovers during implementation that the new switch requires a different firmware version than documented. The change plan does not include a rollback for this scenario. What is the best course of action?

Accepted Answer

Stop the implementation and contact the CAB for a revised change plan.. When an undocumented deviation occurs during a change, the technician should halt the implementation and contact the CAB for guidance. Proceeding without approval risks network instability, and the CAB can provide a revised plan or approve the firmware change.

Answer

Proceed with the firmware update and document the change afterward.

Answer

Use the old switch firmware on the new switch to match the documentation.

Answer

Implement the switch and create a separate change request for the firmware.

Question 10

A customer reports that their desktop computer is running extremely slowly, and they see frequent pop-up advertisements even when no browser is open. Task Manager shows a process named 'svch0st.exe' consuming 95% CPU. Which type of malware is most likely causing these symptoms?

Accepted Answer

Adware. Adware displays unwanted advertisements and often masquerades as legitimate processes. The misspelled 'svch0st.exe' mimics a Windows system process, a common adware tactic. This malware type is best removed using a dedicated anti-malware tool.

Answer

Ransomware

Answer

Rootkit

Answer

Spyware

Question 11

A security incident occurred where an employee's workstation was infected with ransomware. The IT manager wants to ensure that all future workstations have Controlled Folder Access enabled to protect critical data from unauthorized changes. Which Windows Security applet should be used to configure this?

Accepted Answer

Windows Security > Virus & threat protection > Manage ransomware protection. Controlled Folder Access is a feature of Windows Defender Exploit Guard, found in the Windows Security app under Virus & threat protection > Manage ransomware protection. It must be enabled and configured with protected folders and allowed apps.

Answer

Windows Security > Firewall & network protection

Answer

Windows Security > App & browser control

Answer

Windows Security > Device security

Question 12

A technician is configuring a kiosk computer that will be used by the public to access a specific website. The technician wants to prevent users from navigating to other sites or changing browser settings. Which browser feature should be enabled?

Accepted Answer

Enable kiosk mode.. Kiosk mode locks the browser to a specific site or set of sites, hides the address bar, and disables settings access. This is ideal for public terminals. Other options like private browsing or parental controls do not provide the same level of restriction.

Answer

Enable private browsing mode.

Answer

Enable parental controls.

Answer

Disable the address bar via group policy.

Question 13

A technician is setting up remote access for a salesperson who frequently works from coffee shops. The company uses a VPN with two-factor authentication (2FA). The salesperson reports that after entering their username and password, they receive a prompt for a code but do not have their token. What should the technician do to resolve this?

Accepted Answer

Provide the user with a one-time bypass code from the administrator console.. This scenario tests knowledge of 2FA troubleshooting. The user has a token but does not have it available. The correct action is to provide a temporary bypass code, which is a standard feature of 2FA systems for such situations. Disabling 2FA would weaken security, and other options are not appropriate.

Answer

Disable two-factor authentication for the user's account temporarily.

Answer

Instruct the user to reset their password and try again.

Answer

Ask the user to connect from a different network location.

Question 14

After deploying a new application to 50 workstations, several users report that the application crashes on launch. You need to quickly check if the application is running on a remote computer. Which command should you use?

Accepted Answer

tasklist /S remotePC. The `tasklist /S remotePC` command lists all running processes on the specified remote computer. If the application's process appears in the list, it indicates that the application is running. This is a quick way to verify execution status without needing to inspect DLL registration manually. The other options either run locally (`regsvr32`, `ipconfig`, `chkdsk`) or perform unrelated tasks.

Answer

regsvr32 /s C:\App\core.dll

Answer

ipconfig /flushdns

Answer

chkdsk C:

Question 15

A technician is troubleshooting a remote user's inability to connect to the corporate network via VPN. The user can ping the VPN server's public IP address. Which step should the technician take next to isolate the issue?

Accepted Answer

Check the VPN client logs for errors. Since the user can reach the VPN server, the issue is likely at the authentication or configuration layer. Checking the VPN client logs provides detailed error messages that can pinpoint the problem.

Answer

Reboot the user's modem

Answer

Disable the user's firewall

Answer

Reinstall the VPN client software