220-1102 Practice Test 30 — 15 Questions

Question 1

A technician is troubleshooting a wireless network where users report intermittent connectivity and slow speeds. The network uses WPA2-Enterprise with EAP-TLS and certificate-based authentication. The technician notices that the RADIUS server logs show frequent certificate validation failures. What is the most likely root cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Client devices have expired or untrusted certificates.. The RADIUS server logs show frequent certificate validation failures, which directly points to an issue with the certificates presented by the clients during EAP-TLS authentication. In WPA2-Enterprise with EAP-TLS, both the server and client must present valid certificates; if client certificates are expired or untrusted, the RADIUS server will reject the authentication, causing intermittent connectivity and slow speeds as clients fail to re-authenticate or roam.

Answer

The access point's firmware is outdated, causing packet loss.

Answer

The RADIUS server's certificate has expired.

Answer

The wireless channel is overlapping with neighboring networks.

Question 2

A user calls the help desk because they cannot access a shared folder on the network. The user's account is part of the 'Sales' group, which has 'Read' permission, but the user needs to modify files. What is the most efficient way to grant the required access?

Accepted Answer

Add the user to a group that has 'Modify' permission. Adding the user to a group with 'Modify' permissions is efficient because it avoids individual permission assignments and follows the principle of group-based access control. This ensures the user can edit files without overcomplicating permissions.

Answer

Assign 'Full Control' to the user's account directly

Answer

Change the folder's sharing settings to 'Everyone' with 'Read/Write'

Answer

Remove the user from the Sales group and add them to a new group with 'Read' permission

Question 3

A technician needs to deploy a virtual machine for a client who requires a specific operating system that is not supported by the hypervisor's default settings. The technician has the ISO file for the OS. What should the technician do to install the OS on the VM?

Accepted Answer

Mount the ISO file as a virtual CD/DVD drive and boot from it.. Mounting the ISO file as a virtual CD/DVD drive is the correct method because hypervisors emulate optical drives for VM boot devices. By attaching the ISO to the virtual drive and setting the boot order to CD/DVD first, the VM can boot from the ISO and begin the OS installation process. This approach works regardless of whether the OS is in the hypervisor's default supported list, as the installation media is presented directly to the guest.

Answer

Copy the ISO file directly to the virtual hard disk.

Answer

Use a USB flash drive with the ISO and plug it into the host.

Answer

Change the hypervisor's default settings to support the OS.

Question 4

A user reports that Windows automatically installs a generic driver for a new graphics card that causes display issues. You need to change Windows settings to prevent automatic driver downloads from Windows Update. Which Control Panel tool allows you to change this behavior?

Accepted Answer

System > Advanced system settings > Hardware > Device Installation Settings. Windows provides Device Installation Settings under System > Advanced system settings > Hardware, where you can control whether Windows automatically downloads manufacturer apps and custom icons for devices. Changing this setting to 'No' prevents Windows Update from automatically installing drivers, allowing you to install the correct graphics driver manually. This is the Control Panel tool that governs automatic driver downloads.

Answer

Device Manager

Answer

Programs and Features > Turn Windows features on or off

Answer

Administrative Tools > Services

Question 5

A customer reports that their Windows 11 PC is experiencing intermittent application crashes and you suspect file corruption. You need to run a system file check without using the full Windows interface. Which administrative tool can you launch from the Run dialog to open a command prompt with the necessary permissions?

Accepted Answer

Type 'cmd' in the Run dialog and press Ctrl+Shift+Enter. Pressing Ctrl+Shift+Enter while typing 'cmd' in the Run dialog launches Command Prompt with administrator privileges, which is required to run the System File Checker (sfc /scannow) to repair file corruption. This bypasses the full Windows interface and provides the necessary elevated permissions.

Answer

Type 'cmd' in the Run dialog and press Enter

Answer

Type 'powershell' in the Run dialog and press Enter

Answer

Type 'msconfig' in the Run dialog and press Enter

Question 6

A user's Windows 10 PC is infected with ransomware that has encrypted their Documents folder. You need to restore the files from a previous version that was saved by File History. Where do you access the 'Previous Versions' feature to restore these files?

Accepted Answer

File Explorer > Properties > Previous Versions tab. The 'Previous Versions' tab is accessible via File Explorer by right-clicking a file or folder, selecting Properties, and then clicking the Previous Versions tab. This tab lists shadow copies or File History backups of the selected item, allowing you to restore an earlier version. In this scenario, since File History was enabled, the previous versions of the Documents folder will appear here for restoration.

Answer

Control Panel > File History > Restore personal files

Answer

Settings > Update & Security > Backup

Answer

Computer Management > Storage > Disk Management

Question 7

A company’s change management policy states that all changes must be reviewed by the CAB. An urgent security vulnerability is discovered that requires an immediate patch to a critical database server. The CAB is not available for 24 hours. What is the best course of action?

Accepted Answer

Apply the patch immediately and document it as an emergency change. The change management policy includes an emergency change process for urgent security vulnerabilities. Applying the patch immediately and documenting it as an emergency change aligns with ITIL best practices and the company's policy, ensuring the vulnerability is mitigated without delay while maintaining compliance through post-implementation review.

Answer

Wait for the CAB to meet and approve the change

Answer

Apply the patch but do not document it to avoid policy violation

Answer

Disconnect the server from the network until the CAB meets

Question 8

A technician is troubleshooting an Android device that has a corporate email account configured. The user can send emails but cannot receive any. The email server uses IMAP. The technician has verified the username and password are correct. What should the technician check next?

Accepted Answer

Check the incoming mail server settings (IMAP).. Since the user can send emails but not receive them, the issue is isolated to the incoming mail path. IMAP uses port 143 (or 993 for SSL/TLS) to retrieve messages, and the incoming server settings (server address, port, security type) must match the corporate email configuration. Incorrect IMAP settings would prevent the device from connecting to the server to download new emails, while SMTP (outgoing) settings remain unaffected, explaining the send-only symptom.

Answer

Check if the device's date and time are correct.

Answer

Check if the email account has exceeded its storage quota.

Answer

Check if the device is in power-saving mode.

Question 9

A technician is decommissioning a server that contained highly sensitive financial data. The server has multiple HDDs in a RAID array. The company policy requires data destruction to be certified. Which approach is most efficient and secure?

Accepted Answer

Remove each drive and wipe them individually using a secure erase tool.. Secure erase tools (e.g., ATA Secure Erase) perform a cryptographic or full overwrite at the drive firmware level, ensuring each HDD is individually sanitized and can be certified. In a RAID array, the controller may cache or stripe data, so wiping the logical volume (Option A) or reformatting (Option D) does not guarantee all physical sectors on every drive are overwritten, leaving residual data recoverable. Degaussing (Option C) destroys the drives' magnetic media but is impractical for a full chassis and may not provide certified destruction for mixed media.

Answer

Perform a single overwrite on the RAID logical volume.

Answer

Degauss the entire server chassis.

Answer

Reformat the RAID array and reinstall the OS.

Question 10

A technician is troubleshooting a printer that is not printing. The user insists that the printer was working yesterday and nothing has changed. The technician finds that the printer's IP address has changed due to a DHCP lease renewal. What is the best way to explain this to the user?

Accepted Answer

Explain that the printer's IP address changed because of DHCP, and that you will assign a static IP to prevent future issues.. It directly addresses the root cause (DHCP lease renewal changing the printer's IP) and provides a clear, non-technical explanation to the user while outlining the solution (assigning a static IP). This demonstrates effective communication and professionalism by taking ownership of the issue and preventing recurrence, aligning with CompTIA's troubleshooting methodology.

Answer

Tell the user that the network changed the printer's address and it is not your fault.

Answer

Use technical jargon like 'DHCP lease expiration' and 'subnet mask misconfiguration' to sound authoritative.

Answer

Say that the printer is faulty and needs to be replaced.

Question 11

A customer calls to report that their laptop won't turn on. The technician suspects a dead battery. Which of the following responses demonstrates proper troubleshooting and professionalism?

Accepted Answer

Ask the customer to plug in the charger and see if any lights appear.. A systematic approach to troubleshooting shows competence. Starting with simple checks and explaining each step keeps the customer informed and involved.

Answer

Tell the customer to buy a new battery immediately.

Answer

Say that the motherboard is likely dead and needs replacement.

Answer

Tell the customer to bring the laptop to the shop without further questions.

Question 12

A user is trying to install a legacy application on Windows 10, but the installer fails with a message about 'incompatible version'. The application is known to work on Windows 7. Which compatibility settings should you try first to allow the installation to proceed?

Accepted Answer

Right-click the installer, go to Properties > Compatibility, and check 'Run this program in compatibility mode for: Windows 7'.. Windows 10 includes compatibility modes that emulate older versions of Windows. Running the installer in compatibility mode for Windows 7 can often resolve version-check errors, as it tricks the application into thinking it is running on a compatible OS.

Answer

Set the installer to run as an administrator.

Answer

Enable the 'Reduced color mode' compatibility setting.

Answer

Use the Program Compatibility Troubleshooter from the Control Panel.

Question 13

A user complains that their computer is running slowly and they see a USB drive they don't recognize plugged into the front port. What is the first step a technician should take to address this potential security issue?

Accepted Answer

Ask the user to unplug the USB drive immediately.. The immediate priority is to contain the potential security threat by physically removing the unknown USB drive. This follows the principle of least privilege and incident response best practices: isolate the suspect device before performing any analysis or remediation. Unplugging the drive stops any ongoing data exfiltration or malware installation, which is the first step in a security incident response.

Answer

Run a full antivirus scan on the computer.

Answer

Check the USB drive's contents to see what it contains.

Answer

Disable the USB ports in the BIOS.

Question 14

A company is relocating and needs to dispose of 50 old desktop computers with HDDs that contain sensitive client data. The policy requires data destruction to be verifiable and the drives to be physically destroyed. Which method meets these requirements?

Accepted Answer

Send the drives to a certified e-waste recycler for shredding.. Physical destruction methods like shredding or crushing provide verifiable destruction (e.g., through a certificate of destruction) and ensure the drives cannot be reused, meeting strict security policies. Degaussing also destroys data but may not physically destroy the drive.

Answer

Use a degausser and then donate the drives to a school.

Answer

Overwrite each drive with three passes of random data.

Answer

Reformat each drive and install a fresh OS for reuse.

Question 15

A technician receives an email from what appears to be the company's CEO, asking for a list of all employee passwords for a 'security audit'. The email address is correct, but the tone and request are unusual. The technician suspects a social engineering attack. What is the best course of action?

Accepted Answer

Forward the email to the security team and do not respond.. Forwarding the email to the security team ensures that the incident is handled by the appropriate personnel who can investigate the potential phishing or social engineering attack without engaging the attacker. Responding to the email, even for confirmation, could validate the technician's email address as active and potentially expose the organization to further attacks. The security team can analyze headers, links, and attachments using tools like email security gateways or SIEM systems to determine the legitimacy of the request.

Answer

Reply to the email asking for more details to confirm the request.

Answer

Provide the list as requested, since the CEO has authority.

Answer

Call the CEO immediately to verify the request.