220-1102 Practice Test 3 — 10 Questions

Question 1

A company’s change management policy requires all changes to be approved by the Change Advisory Board (CAB) before implementation. A technician applies an emergency security patch to a critical server without CAB approval because the vulnerability is being actively exploited. What should the technician do after applying the patch?

Accepted Answer

Document the change and submit an emergency change request for retroactive approval.. Even in emergency changes, documentation and retroactive approval are required. The technician must document the change and notify the CAB as soon as possible to obtain retroactive approval, ensuring compliance with change management policies.

Answer

Wait for the next CAB meeting to report the change.

Answer

Revert the patch and wait for CAB approval.

Answer

Delete the change log entry to avoid accountability.

Question 2

A change advisory board (CAB) approves a network switch replacement, but the technician discovers during implementation that the new switch requires a different firmware version than documented. The change plan does not include a rollback for this scenario. What is the best course of action?

Accepted Answer

Stop the implementation and contact the CAB for a revised change plan.. When an undocumented deviation occurs during a change, the technician should halt the implementation and contact the CAB for guidance. Proceeding without approval risks network instability, and the CAB can provide a revised plan or approve the firmware change.

Answer

Proceed with the firmware update and document the change afterward.

Answer

Use the old switch firmware on the new switch to match the documentation.

Answer

Implement the switch and create a separate change request for the firmware.

Question 3

A technician is performing a routine software update on a finance department server. The change management documentation specifies that the update must be applied during a maintenance window from 2:00 AM to 4:00 AM. At 3:30 AM, the update fails with an error. The technician has no rollback plan documented. What should the technician do?

Accepted Answer

Leave the server in its current state and escalate the issue to the change manager.. Option B is correct because the technician has no documented rollback plan, and the change management process requires that any deviation from the approved plan—such as a failed update—must be escalated to the change manager for a decision. Attempting an undocumented rollback or continuing to troubleshoot without authorization risks data corruption, service disruption, or violating compliance policies. The technician’s primary duty is to preserve the server’s current state and follow the escalation path defined in the change management policy.

Answer

Attempt to roll back the update using the server’s built-in recovery options.

Answer

Continue troubleshooting until the maintenance window ends, then document the failure.

Answer

Reboot the server to clear the error and retry the update.

Question 4

A small business is deploying a new time-tracking application to five workstations. The technician needs to ensure the installation is standardized and repeatable. Which documentation should the technician create before starting the deployment?

Accepted Answer

A step-by-step installation guide with screenshots.. This question focuses on the importance of creating a deployment plan or runbook before performing installations. Standardized documentation ensures consistency and reduces errors across multiple machines.

Answer

A list of user passwords for the application.

Answer

A detailed network topology diagram.

Answer

A copy of the software license agreement.

Question 5

A technician is tasked with upgrading the operating system on ten identical workstations. The change advisory board has approved the upgrade. After completing the first workstation, the technician notices the new OS causes a critical line-of-business application to fail. What should the technician do next?

Accepted Answer

Report the failure to the change advisory board and pause further upgrades.. This question tests the change management process when an approved change causes unexpected issues. The correct action is to stop the rollout and document the problem so the CAB can reassess the change.

Answer

Continue upgrading the remaining workstations since the change was approved.

Answer

Restore the first workstation to the previous OS and complete the rest without changes.

Answer

Research a hotfix for the application and apply it to all workstations.

Question 6

A technician is troubleshooting a recurring network outage that occurs every Tuesday at 3 PM. After reviewing the change log, the technician finds that a scheduled backup job runs at that time. What is the best course of action?

Accepted Answer

Document the correlation and propose a change to the backup schedule.. This question tests the ability to correlate documented changes with incidents. The best action is to update the documentation to reflect the impact and then work with the change advisory board to reschedule the backup or mitigate the outage.

Answer

Disable the backup job immediately to restore network stability.

Answer

Increase the network bandwidth to accommodate the backup traffic.

Answer

Ignore the issue since the backup is a critical process.

Question 7

A small business owner wants to allow a remote employee to access their office desktop from home, but is concerned about security. They currently have a standard router with a public IP. Which of the following is the most secure method to enable this access?

Accepted Answer

Configure a VPN server on the office network and have the employee connect via VPN before using RDP.. Exposing RDP directly to the internet is risky due to brute-force attacks. A VPN creates an encrypted tunnel, authenticating the user before allowing access to the internal network, making it far more secure. This is the recommended best practice.

Answer

Enable port forwarding on the router for TCP 3389 to the desktop's IP address.

Answer

Use a third-party remote desktop service like TeamViewer without additional configuration.

Answer

Change the RDP port to a non-standard port number and enable port forwarding.

Question 8

A technician is setting up remote access for a salesperson who frequently works from coffee shops. The company uses a VPN with two-factor authentication (2FA). The salesperson reports that after entering their username and password, they receive a prompt for a code but do not have their token. What should the technician do to resolve this?

Accepted Answer

Provide the user with a one-time bypass code from the administrator console.. This scenario tests knowledge of 2FA troubleshooting. The user has a token but does not have it available. The correct action is to provide a temporary bypass code, which is a standard feature of 2FA systems for such situations. Disabling 2FA would weaken security, and other options are not appropriate.

Answer

Disable two-factor authentication for the user's account temporarily.

Answer

Instruct the user to reset their password and try again.

Answer

Ask the user to connect from a different network location.

Question 9

A technician is troubleshooting a remote user's inability to connect to the corporate network via VPN. The user can ping the VPN server's public IP address. Which step should the technician take next to isolate the issue?

Accepted Answer

Check the VPN client logs for errors. Since the user can reach the VPN server, the issue is likely at the authentication or configuration layer. Checking the VPN client logs provides detailed error messages that can pinpoint the problem.

Answer

Reboot the user's modem

Answer

Disable the user's firewall

Answer

Reinstall the VPN client software

Question 10

A company is experiencing a security incident where an attacker gained access to the internal network via a compromised VPN account. The technician must prevent future attacks. Which two-factor authentication method should the technician implement for VPN access?

Accepted Answer

Implement a time-based one-time password (TOTP) via an authenticator app. Two-factor authentication (2FA) adds a second factor beyond the password, such as a one-time code from an authenticator app. This significantly reduces the risk of account compromise even if the password is stolen.

Answer

Require a complex password with a minimum length of 20 characters

Answer

Restrict VPN access to specific IP addresses

Answer

Enable single sign-on (SSO) with Active Directory