220-1102 Practice Test 33 — 15 Questions

Question 1

During a routine security audit, you find that several workstations have the same local administrator password. The company policy requires unique passwords for each machine. Which tool or method should you use to enforce unique local administrator passwords across the domain?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Deploy Microsoft LAPS (Local Administrator Password Solution).. Microsoft LAPS (Local Administrator Password Solution) is the correct tool because it automatically manages local administrator passwords on domain-joined computers, storing them in Active Directory and rotating them to unique values per machine. This directly enforces the policy of unique local admin passwords without manual intervention, using the `AdmPwd` extension and Group Policy to configure password complexity and rotation intervals.

Answer

Use Group Policy to set a standard local admin password.

Answer

Enable BitLocker on each workstation.

Answer

Disable the local administrator account on all workstations.

Question 2

A receptionist holds the door for a person carrying a large box, assuming they work in the building. Later, that person is seen plugging a USB drive into a workstation in the finance department. Which social engineering technique was most likely used to gain initial access?

Accepted Answer

Tailgating. Tailgating involves an unauthorized person gaining physical access to a secure area by following an authorized individual. In this scenario, the receptionist held the door for the person carrying a large box, assuming they worked in the building, which allowed the attacker to bypass physical security controls without authentication.

Answer

Phishing

Answer

Pretexting

Answer

Baiting

Question 3

After installing a new printer driver, a user's Windows 11 computer crashes with a blue screen error every time they try to print. The computer works fine otherwise. Which boot option should be used to restore functionality without affecting user data?

Accepted Answer

Boot into Safe Mode and uninstall the printer driver.. The problem is caused by a faulty driver, and the safest way to recover is to boot into Safe Mode, which loads only essential drivers. From Safe Mode, the technician can uninstall the problematic printer driver. This tests understanding of Safe Mode as a troubleshooting environment for driver conflicts.

Answer

Use Last Known Good Configuration to revert driver changes.

Answer

Run System Restore from the recovery environment.

Answer

Perform a clean installation of Windows 11.

Question 4

During a software installation, a technician receives a pop-up warning that the application requires administrator privileges. The user is logged in with a standard account. What is the most appropriate action for the technician to take?

Accepted Answer

Right-click the installer and select 'Run as administrator', then enter admin credentials.. The technician can use the 'Run as administrator' feature to supply administrative credentials for a one-time elevated installation without changing the user's account type. This adheres to the principle of least privilege, maintaining security by not permanently elevating the standard user's rights.

Answer

Ask the user to log in with an administrator account and install the software.

Answer

Temporarily add the user to the Administrators group, install, then remove them.

Answer

Cancel the installation and escalate to a senior technician.

Question 5

A user reports that their smartphone cannot connect to the office Wi-Fi, but other devices can. The network uses WPA2-Enterprise with PEAP-MSCHAPv2. The technician checks the phone's settings and sees that it is configured for WPA2-PSK. What is the most likely reason for the connection failure?

Accepted Answer

The phone is using the wrong security protocol.. The phone is configured for WPA2-PSK (Pre-Shared Key), but the office network uses WPA2-Enterprise with PEAP-MSCHAPv2. WPA2-Enterprise requires 802.1X authentication with a RADIUS server, using EAP methods like PEAP-MSCHAPv2, while WPA2-PSK uses a single shared passphrase. The mismatch in security protocols prevents the phone from completing the 4-way handshake, causing the connection failure.

Answer

The phone's Wi-Fi antenna is damaged.

Answer

The router's SSID is hidden.

Answer

The phone's MAC address is filtered.

Question 6

After a power outage, a Windows 10 computer boots to a black screen with the message 'Bootmgr is missing'. The technician has a Windows installation USB. Which repair command should be used to rebuild the Boot Configuration Data (BCD)?

Accepted Answer

Run 'bootrec /rebuildbcd'.. The 'Bootmgr is missing' error indicates that the Boot Configuration Data (BCD) store is corrupted or missing. The 'bootrec /rebuildbcd' command scans all disks for Windows installations and prompts you to add them to a new BCD store, directly rebuilding the BCD. This is the correct repair for a missing or corrupt BCD, which is the specific cause of this error.

Answer

From the recovery command prompt, run 'bootrec /fixmbr'.

Answer

Run 'bootrec /fixboot'.

Answer

Run 'sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows'.

Question 7

A technician is investigating a computer that has been sending spam emails from the user's account without their knowledge. The user has not installed any new software recently. The technician finds a process running that matches a known botnet client. Which two steps should the technician take first to mitigate the threat?

Accepted Answer

Disconnect the computer from the network and terminate the malicious process.. The immediate priority is to disconnect the computer from the network to stop the botnet communication and prevent further spam. Then, the technician should identify and terminate the malicious process. Scanning without disconnecting may allow continued data exfiltration.

Answer

Run a full antivirus scan and then update the firewall rules.

Answer

Change the user's email password and run a malware scan.

Answer

Reboot the computer into Safe Mode and then run a scan.

Question 8

A malicious script is suspected to have changed permissions on critical system files. The administrator needs to restore the /etc/passwd file to its default permissions, which are 644. The file is currently 777. Which command will set the correct permissions?

Accepted Answer

chmod 644 /etc/passwd. Chmod 644 /etc/passwd sets the permissions to rw-r--r--, which is the standard for /etc/passwd. This removes the world-writable and executable bits.

Answer

chmod 600 /etc/passwd

Answer

chmod 755 /etc/passwd

Answer

chmod 444 /etc/passwd

Question 9

A technician is troubleshooting a network switch that has stopped working. Upon arrival, the technician notices a strong smell of burnt plastic and sees that the power cable is melted near the connector. What is the most appropriate safety action?

Accepted Answer

Turn off the circuit breaker supplying the outlet.. The strong smell of burnt plastic and melted power cable indicate an electrical fault that could cause a fire or electric shock. Turning off the circuit breaker (Option B) is the most appropriate safety action because it disconnects power at the source, eliminating the risk of arcing or electrocution before any physical contact is made with the damaged equipment.

Answer

Unplug the power cable from the switch.

Answer

Replace the power cable with a new one.

Answer

Spray the cable with a Class C fire extinguisher.

Question 10

A technician is troubleshooting an Android tablet that cannot connect to a corporate Wi-Fi network. Other devices connect fine. The tablet shows 'Saved, secured' but no IP address. What is the most likely cause?

Accepted Answer

The tablet has a static IP address configured that conflicts with the network.. The tablet shows 'Saved, secured' but has no IP address, indicating it successfully associated and authenticated with the Wi-Fi network but failed to obtain an IP address via DHCP. A static IP configuration that conflicts with the network's DHCP scope or subnet prevents the device from receiving a valid lease, causing the IP assignment failure while other devices using DHCP connect normally.

Answer

The Wi-Fi adapter is faulty.

Answer

The corporate network requires a VPN profile that is missing.

Answer

The tablet's MAC address is blocked by the router.

Question 11

A small business owner wants to ensure that only authorized users can log into their Windows 10 workstations. They need a tool to create and manage user accounts and set password policies. Which administrative tool should you use?

Accepted Answer

Local Users and Groups. Local Users and Groups (lusrmgr.msc) is the snap-in for managing user accounts, groups, and local security policies on a standalone Windows system. It allows creating, modifying, and deleting users and setting password requirements.

Answer

Computer Management

Answer

Group Policy Editor

Answer

Task Scheduler

Question 12

A customer reports that their office printer is emitting a strong, acrid smell and producing distorted prints. The printer uses a fuser unit that has been in service for five years. What should you recommend as the most environmentally responsible action?

Accepted Answer

Replace only the fuser unit and recycle the old one through a certified e-waste recycler.. The fuser unit is a consumable component that degrades over time, and replacing only the faulty fuser while recycling the old one through a certified e-waste recycler minimizes electronic waste. This approach addresses the root cause (a worn-out fuser) without discarding the entire printer, which would generate unnecessary e-waste and violate environmental best practices.

Answer

Replace the entire printer with a new Energy Star model.

Answer

Continue using the printer until it fails completely.

Answer

Disassemble the printer and dispose of all parts in the general trash.

Question 13

A customer reports that after a recent software update, their accounting application crashes every time they try to generate a report. The technician checks the change log and finds no record of any update being approved for that application. What should the technician do first?

Accepted Answer

Document the unauthorized change and escalate it to the change advisory board.. The technician found an unauthorized change (the update) with no approval record. The first step in change management is to document and escalate the unauthorized change to the Change Advisory Board (CAB) to assess impact, determine root cause, and authorize remediation. Restoring or reinstalling without CAB approval could violate change control policies and introduce additional risks.

Answer

Restore the application from the last known good backup.

Answer

Uninstall the update and reinstall the previous version of the application.

Answer

Contact the software vendor to request a patch for the crash.

Question 14

A company is upgrading its network switches and has 10 old switches that still work. The local school district has requested donations of working equipment. What should the technician do?

Accepted Answer

Donate the switches to the school district.. Donating the switches to the school district aligns with the principle of reuse, which is the most environmentally responsible option before recycling or disposal. The switches are still functional, so extending their lifecycle reduces e-waste and benefits the community. This practice supports the waste hierarchy: reduce, reuse, recycle.

Answer

Throw the switches in the company dumpster.

Answer

Send the switches to a recycler even though they work.

Answer

Keep the switches in storage indefinitely.

Question 15

A user reports that their Windows 10 laptop shows a 'Your license will expire soon' watermark on the desktop. They recently replaced the motherboard. Which Control Panel applet should you use to re-activate Windows?

Accepted Answer

System. The System applet (also known as 'System Properties' or 'About' in Settings) is the correct Control Panel location to view and manage Windows activation status. After replacing the motherboard, Windows 10 detects a significant hardware change and may require re-activation. The System applet provides a 'Change product key' or 'Activate Windows' link to enter a new or existing license key, or to use the activation troubleshooter to re-activate with a digital license tied to a Microsoft account.

Answer

Device Manager

Answer

User Accounts

Answer

Network and Sharing Center