220-1102 Practice Test 39 — 15 Questions

Question 1

A technician is updating the documentation for a network printer that was moved to a different floor. The technician updates the asset tag in the inventory system. Which additional documentation should the technician also update to ensure accurate records?

Accepted Answer

The network diagram showing device locations and connections. When a network printer is moved to a different floor, its physical location and network connectivity change. The network diagram is the authoritative document that records device locations, switch ports, IP addresses, and cabling paths. Updating it ensures that troubleshooting, asset tracking, and future moves remain accurate, directly supporting change management and documentation best practices.

Answer

The user manual for the printer

Answer

The company’s acceptable use policy

Answer

The printer’s warranty information

Question 2

During a major software rollout, a technician discovers that the deployment script modifies a registry key that is also used by a legacy application. The change was not included in the original change request. What should the technician do?

Accepted Answer

Stop the deployment and submit a new change request for the registry modification.. Option C is correct because any unapproved change to a system, even if necessary, must follow the change management process. The technician discovered that the deployment script modifies a registry key shared with a legacy application, which was not included in the original change request. Stopping the deployment and submitting a new change request ensures proper review, risk assessment, and approval before altering a shared resource that could impact the legacy application.

Answer

Proceed with the deployment since the registry change is necessary for the new software.

Answer

Modify the script to skip the registry change and continue.

Answer

Document the registry change after the deployment is complete.

Question 3

A technician is updating the documentation for a server that had its RAID controller replaced. The technician must ensure that future technicians can quickly identify the new hardware configuration. Which type of documentation should be updated?

Accepted Answer

The server's asset inventory record.. The server's asset inventory record (Option C) is the correct documentation to update because it contains the detailed hardware configuration of the server, including the RAID controller model, firmware version, and disk layout. Future technicians rely on this record to quickly identify the exact hardware components without having to physically inspect the server or dig through logs. Updating the asset inventory ensures that the documented configuration matches the actual hardware, which is critical for troubleshooting, warranty claims, and future upgrades.

Answer

The network topology diagram.

Answer

The change management log.

Answer

The knowledge base article for RAID troubleshooting.

Question 4

A user reports that their workstation cannot connect to the company file server after a scheduled network maintenance window last night. The technician checks the change management records and finds no mention of any changes to the file server. What is the most likely cause of the issue?

Accepted Answer

The maintenance window affected a network switch that the file server relies on. The scheduled network maintenance window is the key clue: it likely involved changes to network infrastructure such as switches, routers, or VLAN configurations. If a network switch that the file server depends on was modified or rebooted during maintenance, the workstation would lose connectivity even though the file server itself was untouched. Change management records only track changes to the file server, not to network devices, so the absence of file server changes does not rule out a network-level cause.

Answer

The file server requires a firmware update

Answer

The user’s account password has expired

Answer

The file server’s hard drive has failed

Question 5

A help desk technician receives a complaint that a user’s custom software application stopped working after a Windows update was installed automatically overnight. The technician checks the system and finds the update is not in the approved change log. What should the technician do next?

Accepted Answer

Roll back the Windows update and document the incident. Option B is correct because the update was installed without authorization (not in the approved change log), violating change management policy. The technician should immediately roll back the update to restore application functionality and then document the incident to ensure proper change control procedures are followed. This aligns with the CompTIA A+ change management process: identify the unauthorized change, reverse it, and report it.

Answer

Reinstall the custom application immediately

Answer

Leave the update in place and submit a new change request for the application

Answer

Disable Windows Update on the workstation permanently

Question 6

A technician is tasked with replacing a faulty power supply in a desktop computer that is part of a critical patient record system at a clinic. Before starting, the technician reviews the change management policy. Which step should the technician perform first?

Accepted Answer

Submit a change request to the change advisory board (CAB). Option B is correct because the change management policy requires that any modification to a system handling critical patient records must first be formally approved via a change request submitted to the Change Advisory Board (CAB). This ensures that risks are assessed, downtime is scheduled, and compliance with healthcare data regulations (e.g., HIPAA) is maintained before any physical work begins.

Answer

Power off the workstation and disconnect all cables

Answer

Back up the patient records to an external drive

Answer

Notify the clinic staff that the system will be offline

Question 7

A company’s change management policy states that all changes must be reviewed by the CAB. An urgent security vulnerability is discovered that requires an immediate patch to a critical database server. The CAB is not available for 24 hours. What is the best course of action?

Accepted Answer

Apply the patch immediately and document it as an emergency change. Option B is correct because the change management policy includes an emergency change process for urgent security vulnerabilities. Applying the patch immediately and documenting it as an emergency change aligns with ITIL best practices and the company's policy, ensuring the vulnerability is mitigated without delay while maintaining compliance through post-implementation review.

Answer

Wait for the CAB to meet and approve the change

Answer

Apply the patch but do not document it to avoid policy violation

Answer

Disconnect the server from the network until the CAB meets

Question 8

A user reports that they cannot connect to the company's internal file server from home using the provided VPN client. They can access the internet without issues. Which of the following is the most likely cause of this problem?

Accepted Answer

The VPN client is configured for split tunneling, and the file server's IP range is not in the allowed routes.. Split tunneling allows the VPN client to route only specific traffic (e.g., corporate subnets) through the encrypted tunnel, while all other traffic goes directly to the internet. If the file server's IP range is not included in the allowed routes, traffic to that server will bypass the VPN and be sent unencrypted to the user's local gateway, which cannot reach the internal server. This matches the symptom: internet works, but the file server is unreachable.

Answer

The user's home router is blocking VPN traffic on port 443.

Answer

The file server is powered off or experiencing a hardware failure.

Answer

The user's VPN client software is outdated and needs to be reinstalled.

Question 9

A technician is troubleshooting a remote user's inability to connect to the office network via VPN. The user can ping the VPN server's public IP address but the VPN connection fails after entering credentials. The VPN logs show an authentication error. What should the technician check next?

Accepted Answer

Check if the user's account is locked out or if the password has expired.. The VPN logs show an authentication error, which indicates the failure occurs during the credential validation phase, not during network connectivity. Since the user can ping the VPN server's public IP, Layer 3 connectivity is intact, and the issue is likely with the user's account status. Checking if the account is locked out or the password has expired directly addresses the authentication failure.

Answer

Verify that the VPN server's firewall is allowing UDP port 500 and 4500.

Answer

Reinstall the VPN client software on the user's computer.

Answer

Configure the VPN to use a different encryption protocol.

Question 10

A small business owner wants to allow their remote employees to securely access a specific internal application without giving them full network access. Which remote access technology should the technician recommend?

Accepted Answer

Application gateway. An application gateway (reverse proxy) is the correct choice because it provides granular, application-layer access control, allowing remote employees to reach a specific internal application without granting them full network-level access. Unlike VPNs that create a tunnel to the entire network, an application gateway authenticates and proxies only the designated application traffic, often using protocols like HTTPS and enforcing policies at Layer 7.

Answer

Site-to-site VPN

Answer

Remote Desktop Services

Answer

SSH tunneling

Question 11

During a security audit, a technician discovers that an employee has been using a third-party remote desktop tool without IT approval. The employee claims it was necessary to access a legacy application. Which security risk is most directly associated with unauthorized remote access tools?

Accepted Answer

Man-in-the-middle attacks. Unauthorized remote desktop tools often lack the encryption and authentication controls found in approved solutions like SSH or RDP with Network Level Authentication. This exposes the connection to man-in-the-middle attacks, where an attacker can intercept, decrypt, or modify the traffic between the employee's workstation and the legacy application server, potentially capturing credentials or sensitive data.

Answer

Increased bandwidth usage

Answer

Compatibility issues with the operating system

Answer

Increased licensing costs

Question 12

A company wants to allow external contractors to access a specific internal web application without installing any client software. Which remote access technology best meets this requirement?

Accepted Answer

Reverse proxy. A reverse proxy is the correct choice because it allows external contractors to access a specific internal web application through a public-facing proxy server without requiring any client software installation. The reverse proxy terminates the external connection and forwards requests to the internal web server, handling authentication and encryption at the proxy layer, which meets the requirement of zero client-side setup.

Answer

VPN with a client

Answer

Remote Desktop Protocol

Answer

SSH

Question 13

A technician is setting up remote access for a user who will be traveling internationally. The user needs to access files on a Windows server using RDP. Which additional security measure should the technician implement to protect the RDP session?

Accepted Answer

Use a VPN to encrypt all traffic before initiating RDP. B is correct because RDP traffic is encrypted but not authenticated at the transport layer, making it vulnerable to man-in-the-middle attacks, especially over untrusted international networks. A VPN (e.g., IPsec or OpenVPN) provides an additional layer of encryption and authentication for the entire session before RDP traffic is sent, ensuring confidentiality and integrity even if the RDP protocol itself is compromised.

Answer

Enable Network Level Authentication (NLA) on the server

Answer

Change the RDP port to a non-standard number

Answer

Disable clipboard redirection in the RDP session

Question 14

A technician is configuring a remote desktop solution for a user who needs to access a Linux server from a Windows 10 workstation. The technician wants to use a secure, encrypted connection. Which remote access technology should the technician configure on the Linux server?

Accepted Answer

SSH. SSH (Secure Shell) is the correct choice because it provides encrypted, authenticated remote shell access to Linux/Unix servers over an insecure network. It uses TCP port 22 and supports strong encryption algorithms (e.g., AES, ChaCha20) and public-key authentication, making it the standard secure remote access protocol for Linux systems.

Answer

RDP

Answer

VNC

Answer

Telnet

Question 15

A help desk technician needs to remotely control a user's Windows 10 workstation to install a software update. The user is not technically savvy and needs simple instructions. Which built-in Windows tool should the technician instruct the user to launch to allow remote control?

Accepted Answer

Windows Remote Assistance. Windows Remote Assistance (option B) is the correct built-in tool because it allows a user to invite a technician to remotely control their Windows 10 workstation via an invitation file or Easy Connect, using Remote Desktop Protocol (RDP) on TCP port 3389 but with a session-sharing model that requires the user's consent. This is ideal for a non-technical user, as they can launch it from the Start menu and follow simple prompts to generate an invitation or use a Microsoft account to share a code.

Answer

Remote Desktop Connection

Answer

Quick Assist

Answer

Task Manager