220-1102 Practice Test 25 — 15 Questions

Question 1

A customer complains that after a recent Windows update, their default web browser keeps resetting to Microsoft Edge. They want to set Google Chrome as the default. Where in the Settings app would you configure this?

Accepted Answer

Apps > Default apps. Option C is correct because the 'Default apps' page under Apps in the Settings app is the specific location where you can change the default web browser from Microsoft Edge to Google Chrome. This setting controls which application handles protocols like HTTP and HTTPS, and it allows you to set Chrome as the default by selecting it from the list of installed browsers.

Answer

Apps > Apps & features

Answer

Personalization > Start

Answer

Update & Security > Windows Update

Question 2

A technician is configuring a new Windows 10 workstation for a user who is visually impaired. The user needs the screen magnifier to start automatically when they log in, and they want high-contrast themes. Which Control Panel tool should the technician use to enable these accessibility features?

Accepted Answer

Ease of Access Center. The Ease of Access Center in Windows 10 is the dedicated Control Panel tool for configuring accessibility features, including Magnifier and high-contrast themes. It provides settings to enable Magnifier to start automatically at login and to apply high-contrast themes system-wide, directly addressing the user's needs.

Answer

System > Advanced system settings

Answer

Personalization

Answer

Display

Question 3

A user calls the help desk because their Windows 10 PC is not showing any sound icon in the system tray, and audio is not working. You suspect the audio service is disabled. Which Control Panel applet would you use to check and restart the Windows Audio service?

Accepted Answer

Administrative Tools. The Windows Audio service is a background service that must be running for audio to function. The Administrative Tools applet provides access to the Services console (services.msc), where you can check the status of the Windows Audio service and restart it if it is disabled or stopped. This is the correct tool because the Sound applet only configures playback devices and volume, not service states.

Answer

Sound

Answer

Device Manager

Answer

System

Question 4

A security incident occurred where an unauthorized user accessed a workstation. You need to review the event logs to determine when the breach happened. Which Control Panel applet would you use to launch the Event Viewer?

Accepted Answer

Administrative Tools. Administrative Tools is the Control Panel applet that provides access to advanced system tools, including Event Viewer. To investigate a security breach, you would open Administrative Tools and then launch Event Viewer to review security logs for unauthorized access events. This is the correct path because Event Viewer is not directly listed in the main Control Panel categories; it is nested within Administrative Tools.

Answer

System

Answer

Security and Maintenance

Answer

Device Manager

Question 5

A customer is frustrated because every time they plug in a USB flash drive, Windows automatically opens the folder and plays any media files. They want to stop this behavior. Which Control Panel tool should you use to change the default action?

Accepted Answer

AutoPlay. AutoPlay is the Windows Control Panel tool specifically designed to manage the default behavior when removable media like USB flash drives are connected. By configuring AutoPlay, you can set the system to 'Take no action' instead of automatically opening the folder and playing media files. This directly addresses the customer's frustration by stopping the automatic playback and folder opening.

Answer

File Explorer Options

Answer

Device Manager

Answer

Default Programs

Question 6

A user reports that their Windows 10 PC is running slowly and the hard drive light is constantly active. You suspect the indexing service is consuming resources. Which Control Panel applet allows you to modify which folders are indexed, or to rebuild the index?

Accepted Answer

Indexing Options. The Indexing Options applet (C) is the correct Control Panel tool for managing the Windows Search index. It allows you to add or remove folders from the index and provides a button to rebuild the index, which can resolve performance issues caused by a corrupted or overly broad index. The constantly active hard drive light indicates the indexing service is actively processing files, and modifying or rebuilding the index directly addresses this resource consumption.

Answer

File Explorer Options

Answer

System > Advanced system settings > Performance

Answer

Administrative Tools > Services

Question 7

A technician is tasked with securing a legacy web application that only supports HTTP, not HTTPS. The application is critical for internal operations but must be accessible remotely. What is the best way to secure the traffic without modifying the application?

Accepted Answer

Use a VPN to access the internal network.. Option B is correct because a VPN creates an encrypted tunnel between the remote user and the internal network, securing all HTTP traffic without any modification to the legacy application. Since the application only supports HTTP, it cannot serve HTTPS natively, and a VPN provides transport-layer encryption (e.g., IPsec or TLS-based VPN) that protects data in transit over untrusted networks.

Answer

Install a self-signed SSL certificate on the server.

Answer

Enable HTTP Strict Transport Security (HSTS) on the server.

Answer

Configure the browser to use a proxy server.

Question 8

A company policy requires that all web traffic be filtered to block known malicious sites. You need to implement this on the network without installing software on each client. What should you configure?

Accepted Answer

Configure a DNS filtering service on the router or DNS server. A DNS filtering service works at the network level by resolving domain names against a blocklist of known malicious sites. By configuring this on the router or DNS server, all client traffic is filtered transparently without requiring any software installation on individual workstations, which satisfies the policy requirement.

Answer

Enable Windows Defender Firewall on each workstation

Answer

Install a browser extension on all computers

Answer

Set the browser security level to high

Question 9

A user reports that their browser displays a warning saying 'Your connection is not private' when visiting a frequently used banking site. After checking, you see the certificate error is for a different domain. What is the most likely cause?

Accepted Answer

A malicious proxy or DNS hijacking is redirecting traffic to a fake site. The certificate error for a different domain indicates that the browser is being directed to a server whose SSL certificate does not match the expected banking site's domain. This is a classic sign of a man-in-the-middle attack, often caused by malicious proxy or DNS hijacking, where traffic is redirected to a fraudulent server presenting a certificate for a different domain.

Answer

The user's system date and time are incorrect

Answer

The website's SSL certificate has expired

Answer

The browser needs to be updated to the latest version

Question 10

A technician is troubleshooting a computer that has been infected with ransomware. The ransomware encrypted files and left a note demanding payment. After removing the malware, what is the most important step to prevent future infections?

Accepted Answer

Implement a strict backup policy and educate users on phishing. Option C is correct because ransomware often enters through phishing emails or unpatched vulnerabilities. While removing the malware is necessary, preventing future infections requires a combination of user education to avoid phishing attempts and a strict backup policy to ensure data can be restored without paying the ransom. Without addressing the root cause (user behavior and data resilience), the system remains vulnerable to reinfection.

Answer

Reinstall the operating system

Answer

Update all software to the latest versions

Answer

Disable all browser plugins

Question 11

A company is migrating to new laptops and needs to dispose of 50 old hard drives securely. The drives contain proprietary software and client data. The IT manager wants a method that is both environmentally friendly and compliant with data protection laws. Which disposal method should be chosen?

Accepted Answer

Use a certified e-waste recycler that offers secure destruction and recycling.. Option B is correct because certified e-waste recyclers follow strict data destruction standards (e.g., NIST SP 800-88) and environmental regulations (e.g., R2 or e-Stewards certification). This ensures the drives are physically destroyed or degaussed to prevent data recovery, while responsibly recycling materials, meeting both security and compliance requirements.

Answer

Donate the drives to a local charity after wiping them with a free tool.

Answer

Physically break the drives with a drill and dispose of them in the regular trash.

Answer

Perform a quick format and sell the drives online.

Question 12

A user's browser is infected with a malicious extension that steals credentials. The extension was installed via a drive-by download from a compromised website. After removing the extension, what additional step should you take to ensure the credentials are not compromised?

Accepted Answer

Change all passwords that were entered while the extension was active. Option D is correct because a malicious browser extension that steals credentials has already exfiltrated any passwords entered while it was active. Removing the extension stops further theft, but the compromised credentials remain exposed. Changing all passwords ensures that stolen credentials are invalidated, preventing unauthorized access to accounts.

Answer

Clear the browser cache and cookies

Answer

Run a full antivirus scan

Answer

Reset the browser settings to default

Question 13

A company uses a web application for internal communication. A security audit reveals that the application is vulnerable to cross-site scripting (XSS). Which browser security feature can help mitigate the risk for users while the application is being patched?

Accepted Answer

Implement Content Security Policy (CSP) headers on the web server. Option C is correct because Content Security Policy (CSP) is a browser security mechanism that allows a web server to specify which sources of content (scripts, styles, images, etc.) are trusted. By implementing CSP headers (e.g., Content-Security-Policy: script-src 'self'), the server instructs the browser to block inline scripts and other potentially malicious content, effectively mitigating XSS attacks even before the application code is patched. CSP operates as a defense-in-depth layer that the browser enforces, reducing the attack surface for users.

Answer

Enable pop-up blocker

Answer

Configure the browser to use a proxy server

Answer

Disable JavaScript in the browser

Question 14

A technician is tasked with disposing of a large batch of optical discs (CD-Rs and DVD-Rs) that contain archived customer records. The company policy requires data to be unrecoverable. Which disposal method is most appropriate?

Accepted Answer

Shred the discs using an industrial cross-cut shredder.. Option C is correct because industrial cross-cut shredding physically destroys the optical discs (CD-Rs and DVD-Rs), rendering the data unrecoverable. Unlike magnetic media, optical discs store data as physical pits in a dye layer, so degaussing or overwriting is ineffective. Shredding ensures compliance with data destruction policies requiring unrecoverable data.

Answer

Use a degausser to demagnetize the discs.

Answer

Overwrite the discs with a disk-wiping tool.

Answer

Perform a quick format on the discs.

Question 15

An organization is moving to a cloud-based system and needs to dispose of several tape backup cartridges that contain years of financial data. The tapes are LTO-5 and are still readable. Which destruction method is most appropriate?

Accepted Answer

Overwrite the tapes with a bulk eraser or degausser.. A degausser or bulk eraser generates a powerful magnetic field that disrupts the magnetic domains on the LTO-5 tape media, rendering the previously stored data unrecoverable. This method is the most appropriate for LTO-5 tapes because it physically destroys the magnetic encoding without requiring a compatible tape drive, and it is faster and more reliable than attempting to overwrite the entire tape. For secure disposal of magnetic media containing sensitive financial data, degaussing is the industry-standard approach when physical destruction is not mandated.

Answer

Perform a quick format of the tapes using a tape drive.

Answer

Reuse the tapes for non-sensitive data after deleting the files.

Answer

Burn the tapes in an industrial incinerator.