220-1102 Practice Test 44 — 15 Questions

Question 1

A user reports that their Windows 10 laptop shows a 'Your license will expire soon' watermark on the desktop, even though they purchased a retail license key. You need to resolve the activation issue. Which Control Panel applet should you use first?

Accepted Answer

System. The System applet (Control Panel > System) provides direct access to the Windows activation status and the 'Change product key' option. Since the user already has a retail license key, the first troubleshooting step is to verify the current activation state and re-enter the key via this applet, which triggers a re-activation with Microsoft's licensing servers.

Answer

Device Manager

Answer

Programs and Features

Answer

User Accounts

Question 2

After a recent Windows update, a user's printer stopped working. You suspect the update changed the default print spooler service startup type. Which Control Panel tool should you use to verify and correct the service startup type?

Accepted Answer

Administrative Tools > Services. The Print Spooler service is a Windows service that manages print jobs sent to the printer. Its startup type (e.g., Automatic, Manual, Disabled) is configured in the Services console, which is accessed via Administrative Tools > Services. Device Manager and Printers & scanners do not provide service startup type settings, and System > Advanced system settings deals with performance and user profiles, not services.

Answer

Device Manager

Answer

Printers & scanners

Answer

System > Advanced system settings

Question 3

A user reports that their Windows 10 PC is infected with malware that prevents the Task Manager from opening. You need to terminate a suspicious process from the command line. Which command should you use to forcefully end a process by its name?

Accepted Answer

taskkill /IM malware.exe /F. Option B is correct because the `taskkill` command with the `/IM` (image name) parameter targets a process by its executable name, and the `/F` flag forcefully terminates it. This is the appropriate tool when Task Manager is disabled by malware, as it directly ends the process from the command line without relying on GUI interaction.

Answer

tasklist /v

Answer

shutdown /r /t 0

Answer

regedit /e backup.reg

Question 4

A company's security policy mandates that all remote access connections must be authenticated using two different factors. A technician is configuring VPN access for teleworkers. Which combination meets this requirement?

Accepted Answer

Smart card and PIN.. Option B (smart card + PIN) uses something you have and something you know, while option C (biometric fingerprint + PIN) uses something you are and something you know. Both combinations satisfy the mandate for two different authentication factors, making both correct. The question does not prioritize one over the other based on practical implementation.

Answer

Username and password only.

Answer

Two different passwords.

Question 5

A security analyst discovers that a user's workstation has been compromised by a rootkit that hides its processes from Task Manager. The rootkit is not detected by the installed antivirus. Which step is most effective for remediation?

Accepted Answer

Boot from a rescue disk and perform an offline antivirus scan.. Option C is correct because a rootkit that hides its processes from Task Manager and evades the installed antivirus operates at a deep level within the operating system, often in kernel mode. Booting from a rescue disk (e.g., a live CD/USB with an offline scanner) loads a clean operating system environment, preventing the rootkit from loading and allowing the antivirus to scan the infected system's files without interference. This offline approach is the most effective remediation step when the rootkit is actively hiding from the installed AV in the normal OS context.

Answer

Run a full antivirus scan in Safe Mode.

Answer

Use System Restore to revert to a previous state.

Answer

Reinstall the operating system from the recovery partition.

Question 6

A user reports that their laptop frequently disconnects from the office Wi-Fi and reconnects after a few seconds. The network uses WPA2-Enterprise with PEAP-MSCHAPv2. Other users do not experience this issue. What is the most likely cause?

Accepted Answer

The laptop's wireless driver is outdated.. The most likely cause is an outdated or incompatible wireless driver. This can cause intermittent connectivity issues on a single device. Other users are unaffected, and since the network uses WPA2-Enterprise with PEAP-MSCHAPv2, which relies on username/password authentication, the RADIUS server does not reject client certificates. Channel congestion would affect multiple users, and power saving mode typically turns off the adapter after inactivity, not causing frequent reconnects.

Answer

The RADIUS server is rejecting the laptop's certificate intermittently.

Answer

The office Wi-Fi channel is congested.

Answer

The laptop's power saving mode is turning off the Wi-Fi adapter.

Question 7

A user's Android phone is running extremely slowly after installing a new launcher app. They want to revert to the default launcher without losing data. What is the correct procedure?

Accepted Answer

Go to Settings > Apps > Default apps > Home app and select the default launcher.. Option C is correct because Android allows users to change the default home app via Settings > Apps > Default apps > Home app without uninstalling the new launcher or losing any data. This procedure simply reassigns the default launcher to the system's built-in launcher, preserving all installed apps, settings, and user data.

Answer

Uninstall the new launcher app via the Play Store.

Answer

Perform a factory reset from Recovery Mode.

Answer

Clear the cache partition from Recovery Mode.

Question 8

A security incident occurred where an attacker modified a PowerShell script on a file server to include malicious commands. The script is executed daily by a scheduled task. Which scripting security best practice could have prevented this attack?

Accepted Answer

Use a digital signature to sign the script and enforce execution policy. Option C is correct because enforcing an execution policy that requires scripts to be digitally signed ensures that only scripts signed by a trusted publisher can run. If the attacker modified the script, the digital signature would become invalid, and the execution policy would block the script from running, preventing the malicious commands from executing.

Answer

Store the script in a hidden folder

Answer

Set the script file to read-only

Answer

Compile the script into an executable

Question 9

A technician needs to copy a directory tree from /home/user/docs to a backup location /backup/docs, preserving all permissions, ownership, and timestamps. Which command should they use?

Accepted Answer

cp -a /home/user/docs /backup/docs. Option B is correct because the `cp -a` (archive) command preserves all file attributes, including permissions, ownership, and timestamps, while recursively copying the entire directory tree. This is the most comprehensive single command for duplicating a directory with full metadata integrity.

Answer

cp -r /home/user/docs /backup/docs

Answer

cp -p /home/user/docs /backup/docs

Answer

rsync -r /home/user/docs /backup/docs

Question 10

A technician is configuring a company-issued Android tablet for a kiosk mode in a retail store. The tablet must only run the store's inventory app and prevent users from accessing other apps or settings. Which built-in Android feature should the technician use?

Accepted Answer

Screen Pinning. Screen Pinning is the correct built-in Android feature for kiosk mode because it allows the technician to lock the tablet to a single app (the inventory app) and block access to the home screen, recent apps, notifications, and system settings. When enabled, the user cannot exit the app without entering a PIN or password, which satisfies the requirement of preventing access to other apps or settings.

Answer

Guest Mode

Answer

Developer Options > Force GPU Rendering

Answer

Do Not Disturb

Question 11

A technician is troubleshooting an Android phone that cannot connect to Wi-Fi networks, even though other devices connect fine. The technician notices that the phone's MAC address is displayed as '02:00:00:00:00:00' in the Wi-Fi settings. Which feature is likely causing this, and how should it be resolved?

Accepted Answer

The phone has a randomized MAC address enabled; disable it for the network.. The MAC address '02:00:00:00:00:00' is a well-known randomized MAC address (the second hex digit '2' indicates a locally administered, unicast address per IEEE 802 standards). Android devices use MAC randomization by default to enhance privacy, but this can cause connectivity issues on networks that filter or authenticate by MAC address. Disabling randomization for the specific network allows the phone to use its permanent MAC address, resolving the connection problem.

Answer

The phone is using a static IP configuration; change it to DHCP.

Answer

The Wi-Fi hardware is faulty; the phone needs repair.

Answer

The phone is in Airplane Mode; turn it off.

Question 12

A technician is configuring an Android phone for a user who frequently travels internationally. The user wants to ensure that data roaming is disabled to avoid high charges, but still wants to receive calls and texts while abroad. Which setting should the technician configure?

Accepted Answer

Turn off Data Roaming in the mobile network settings.. Option C is correct because disabling Data Roaming in the mobile network settings prevents the device from using cellular data on foreign networks, which avoids expensive roaming charges, while still allowing voice calls and SMS (which use the cellular voice and signaling channels, not the data channel). This setting is specific to roaming scenarios and does not affect the phone's ability to connect to a visited network for non-data services.

Answer

Enable Airplane Mode and turn on Wi-Fi.

Answer

Disable Mobile Data entirely.

Answer

Set the network mode to 2G only.

Question 13

A user reports that their Android phone is running slowly and the battery drains quickly. They have many apps installed. Which built-in Android feature should you use to identify and stop a misbehaving app that is consuming excessive CPU and battery resources?

Accepted Answer

Check the Battery Usage menu in Settings to see which app is using the most power.. The Battery Usage menu in Android Settings (found under Settings > Battery > Battery Usage) provides a detailed breakdown of power consumption by app and system components. It shows CPU, network, and sensor usage, allowing you to identify an app that is misbehaving by consuming excessive resources. From this menu, you can force stop the app, clear its cache, or uninstall it directly, which is the correct built-in approach for diagnosing and stopping a resource-hungry app without third-party tools or destructive resets.

Answer

Use a third-party Task Killer app to automatically close background processes.

Answer

Perform a factory reset from the Recovery Mode menu.

Answer

Enable Developer Options and increase the background process limit.

Question 14

A technician is troubleshooting an Android device that cannot receive SMS messages, though data and calls work fine. The user recently installed a messaging app from an unknown source. Which mobile OS feature should be checked first?

Accepted Answer

Check the 'Default SMS app' setting in Apps & Notifications. The core issue is that SMS messages are not being received, while data and calls work fine. On Android, SMS routing is handled by a designated 'Default SMS app.' If a third-party messaging app from an unknown source was recently installed, it may have claimed this role, but misconfigured or lacks the necessary permissions (e.g., SMS permissions) to properly receive messages. Checking the 'Default SMS app' setting under Apps & Notifications is the first logical step to ensure the correct app is assigned to handle SMS, as Android will only deliver incoming SMS to the designated default app.

Answer

Verify that the device is not in Airplane Mode

Answer

Clear the cache of the Phone app

Answer

Disable Google Play Protect

Question 15

A company is upgrading its fleet of laptops and needs to securely erase data from the old hard drives before disposal. The drives are magnetic (HDDs). Which method is both environmentally sound and ensures data destruction?

Accepted Answer

Use a degausser to demagnetize the drives, then recycle them as e-waste.. Option B is correct because degaussing uses a strong magnetic field to randomize the magnetic domains on the platters, rendering all data unrecoverable. This method is environmentally sound as the drives can then be responsibly recycled as e-waste, avoiding landfill contamination.

Answer

Perform a quick format and then donate the drives.

Answer

Overwrite the drives with zeros once and then throw them in the trash.

Answer

Drill holes through the platters and then place them in the regular recycling bin.