CompTIA A+ Core 2 220-1202 (220-1202) — Questions 451–495

The Personalization section in Windows Settings is the correct location for modifying the desktop background and other visual elements of the user interface. Here, users can select a specific image, a solid color, or a slideshow as their desktop wallpaper, as well as customize accent colors, lock screen images, and apply various themes. This centralizes all aesthetic customization options, directly addressing the need to change the desktop's appearance during a software deployment or user setup.

Securing all cables to the ceiling grid with proper supports like J-hooks or cable trays is the correct and safest practice. This method ensures compliance with building codes and TIA/EIA cabling standards, preventing cables from becoming fire hazards, interfering with other building systems, or causing ceiling tile collapse. Proper support also maintains cable integrity, reduces signal interference, and simplifies future troubleshooting and maintenance tasks.

The presence of the rotation lock icon directly confirms that the device's orientation lock feature has been activated. This setting, typically accessible through the Control Center by swiping down from the top-right corner, or via a physical side switch on older iPad models, intentionally prevents the screen from rotating. Disabling this software lock will restore the iPad's ability to adjust its display orientation based on accelerometer input.

The RemoteSigned execution policy is a security measure that mandates all PowerShell scripts originating from the internet or network shares must be digitally signed by a trusted publisher to execute. While locally created scripts can run without a signature, PowerShell classifies scripts executed directly from a network location as 'remote.' This policy prevents the execution of unsigned network scripts, often resulting in an 'Access Denied' or similar error, directly addressing the reported issue.

This is the most effective initial remediation strategy. Disconnecting the network cable immediately isolates the infected system, preventing the malware from communicating with external servers, spreading to other devices, or receiving further instructions. Booting into Safe Mode loads only essential system services and drivers, often preventing malware from fully loading and executing, making it easier for antivirus software to detect and remove it without interference. Finally, a full antivirus scan can then thoroughly identify and eradicate the dormant or partially active threats.

Malware frequently modifies Group Policy settings to enforce its presence, restrict user actions, or maintain persistence, such as preventing users from changing their desktop wallpaper. These specific policies, often found under User Configuration > Administrative Templates > Desktop > Desktop in the Local Group Policy Editor (gpedit.msc), can enforce a specific background image or disable the ability to change it. Identifying and then disabling or setting such a policy to 'Not Configured' will restore the user's ability to customize their desktop background.

Windows applies a security measure known as the 'Mark-of-the-Web' (MotW) to files downloaded from the internet, assigning them a 'Zone Identifier' alternate data stream. This security feature prevents immediate execution or access until the user explicitly 'unblocks' the file via its Properties dialog box. This restriction often manifests as a 'cannot access the specified device, path, or file' error, even for administrative users, making 'Unblock' the common resolution.

Reporting the failure to the Change Advisory Board (CAB) and immediately pausing further upgrades is the correct and most responsible course of action. This allows the CAB, as the governing body for changes, to evaluate the identified risk, assess the impact, and collectively decide on the appropriate next steps. They can then modify the rollout plan, investigate a workaround, or halt the change entirely, preventing wider system instability.

The START /WAIT command is specifically designed to launch an external program or command and then pause the execution of the batch script until that launched program terminates. When used with a software installer, this ensures that the batch script will not proceed to subsequent commands until the installation process, including any child processes it spawns, has fully completed and exited, making it ideal for sequential automation of software deployments.

Adding the user to an existing or new group that possesses 'Modify' permission is the most appropriate and secure solution. 'Modify' permission allows the user to read, write, execute, and delete files and subfolders, which directly addresses the need to make changes. This method adheres to the principle of least privilege by granting only the necessary access and simplifies administration through efficient group-based security management.

A corrupted or outdated USB controller driver is a common cause for an external hard drive not being recognized or functioning correctly. The driver acts as the essential software interface between the operating system and the USB hardware, translating commands and enabling communication. If this driver is compromised, the OS cannot properly enumerate or interact with the connected drive, leading to recognition failures that can often be resolved by updating or reinstalling the driver via Device Manager.

Configuring shared drive permissions using security groups is the most appropriate and secure solution. This method allows the technician to grant specific access levels (e.g., read, write) to defined groups of users, ensuring that only authorized personnel can access the drive without sharing individual credentials. It enforces the principle of least privilege, maintains individual accountability for actions, and simplifies management by centralizing access control, directly addressing the need for shared access securely.

This approach leverages written communication, which effectively bypasses potential verbal accent barriers or auditory comprehension issues, ensuring precise capture of critical information like error messages or command outputs. By asking the user to type, the technician obtains an exact record of the problem details, minimizing misinterpretation and facilitating more accurate troubleshooting. This method demonstrates resourcefulness and respect for the user's communication style, aligning with professional customer service practices.

Implementing a biometric fingerprint reader provides a highly secure and personalized access control solution for a server room. This method authenticates individuals based on their unique physiological characteristics, making it inherently difficult to share or transfer credentials. Since the 'credential' is part of the individual, there are no physical tokens to be lost, stolen, or forgotten, significantly reducing administrative tasks associated with credential reissuance or recovery and enhancing overall security posture.

Resource Monitor provides a real-time, granular view of disk I/O operations, detailing which processes are actively reading from or writing to the disk. It displays critical metrics such as total disk activity, read/write speeds, and importantly, the disk queue length, which indicates how many I/O requests are pending. This immediate insight allows an administrator to quickly identify specific applications or services causing excessive disk utilization and potential bottlenecks leading to system freezes.

Persistence mechanisms allow malware to reinstall itself after removal. The technician must identify and delete these triggers in Task Scheduler, registry, or startup folders.

This is the correct and safest course of action. Immediately shutting down the laptop removes power from the compromised battery, mitigating further heat generation and reducing the risk of thermal runaway. Disconnecting the battery, if it can be done without force or further damage, isolates the hazard. The swollen battery must then be replaced and disposed of properly as hazardous electronic waste.

A high average disk queue length indicates that the disk is overwhelmed with requests, which is a classic symptom of excessive paging on a system with insufficient RAM and a slow HDD. This is the best counter to confirm the bottleneck.

Reviewing Windows Defender Firewall rules for 'File and Printer Sharing' is the most appropriate first step. Major Windows updates frequently modify or reset firewall configurations, potentially blocking the necessary inbound and outbound network traffic for the Server Message Block (SMB) protocol, which underpins file and printer sharing. If the firewall rule allowing 'File and Printer Sharing' is disabled or restricted, network clients will be unable to establish connections to access shared resources, directly causing the reported issue.

Phishing is a cybercrime that employs fraudulent electronic communications, most commonly emails, to deceive individuals into divulging sensitive information like usernames, passwords, credit card details, or performing actions such as transferring funds or purchasing gift cards. Attackers impersonate legitimate entities to gain trust, making the deceptive email the primary vector for this social engineering attack. This directly aligns with a user receiving a deceptive email.

Wearing nitrile gloves is crucial for protecting the technician's skin from direct contact with the corrosive capacitor electrolyte. Placing the compromised switches into a sealed bag effectively contains the hazardous leakage, preventing environmental contamination and further exposure during transport. Labeling for e-waste recycling ensures that the devices are handled by certified facilities equipped to safely process hazardous materials, complying with environmental regulations.

Insufficient disk space is a common reason for backup failures. Deleting temporary files, clearing system caches, or emptying the Recycle Bin are standard and effective initial troubleshooting steps to reclaim necessary storage. Successfully freeing up space and completing the backup ensures compliance with the change management policy, providing a critical recovery point before proceeding with the patch installation.

System Protection, accessible via System Properties, is the correct choice because it enables System Restore. System Restore allows a technician to revert the operating system's critical files, registry settings, and installed programs to a previous working state, effectively undoing recent changes that might have introduced corruption or instability. This process is invaluable for resolving issues like system crashes or unbootable states caused by faulty updates or software installations, without affecting personal user data.

The System Preparation Tool (Sysprep) is a critical utility for preparing a Windows installation for imaging and subsequent deployment to multiple computers. It generalizes the operating system by removing system-specific data, such as unique Security Identifiers (SIDs) and hardware-specific drivers, making the image hardware-independent. This process ensures that all deployed machines start with a unique identity and avoid conflicts on a network, making it the indispensable first step before capturing a deployable image.

This is the correct approach for a tech support scam, which typically involves browser-based pop-ups or installed scareware designed to trick users into calling fake support numbers. Booting into Safe Mode with Networking loads only essential drivers and services, preventing the scam's malicious processes from fully executing and allowing network access for anti-malware updates. Running a comprehensive anti-malware scan can then effectively identify and remove the associated files, browser extensions, and registry entries.

This is the most professional and effective approach, demonstrating a technician's commitment to both client satisfaction and robust security. By translating complex technical risks into understandable language, the technician empowers the manager to make informed decisions regarding their system's security posture. Proposing a secure alternative ensures the system's operational requirements are met while mitigating potential vulnerabilities, thereby protecting sensitive data and the business's reputation.

The chmod 640 /etc/app/config.cfg command correctly sets the file permissions using octal notation. The '6' grants the file owner read and write access (4+2), allowing them to modify the configuration. The '4' assigns read-only access to the file's group, enabling applications running under that group to read the necessary settings. Finally, the '0' ensures that all other users have no access whatsoever, adhering to the principle of least privilege for sensitive configuration data.

A malicious proxy or DNS hijacking attack can redirect a user's traffic from the legitimate website to a fraudulent, imposter site controlled by an attacker. When the browser attempts to establish an HTTPS connection with this fake site, the attacker presents an SSL certificate that either belongs to a completely different domain or is self-signed and untrusted. This mismatch between the expected domain and the domain listed on the presented certificate is a strong indicator of a man-in-the-middle attack, alerting the user to potential data interception or phishing.

UPS units, especially larger models, contain heavy batteries and transformers, making them exceptionally weighty. Utilizing a lifting team of at least two individuals or a specialized mechanical lift, such as a server lift or rack lift, is crucial to prevent severe back injuries, muscle strains, or the accidental dropping and damaging of the expensive equipment. This practice adheres to fundamental workplace safety protocols for handling heavy loads.

Checking and cleaning startup entries using utilities like MSConfig (System Configuration) or the more comprehensive Autoruns by Sysinternals is a crucial step in malware removal. Many malware strains establish persistence by adding entries to the Windows registry's Run keys, startup folders, or scheduled tasks, ensuring they automatically execute every time the system boots. Removing these malicious entries prevents the malware from reactivating after a reboot, effectively disrupting its ability to maintain control over the system.

A bulk eraser, or degausser, generates a powerful alternating magnetic field that randomizes the magnetic domains on the tape's surface. This process effectively scrambles all recorded data, rendering it irrecoverable and ensuring complete data destruction. It is the industry-standard and most secure method for sanitizing magnetic media like tapes, as it physically alters the magnetic alignment across the entire medium.

Using a degausser capable of accommodating the entire array chassis is the most effective and efficient method for securely destroying data on magnetic hard drives within a RAID array. A degausser generates a powerful magnetic field that permanently randomizes the magnetic domains on all platters simultaneously, rendering all data unrecoverable. This process ensures comprehensive data destruction without requiring disassembly of the array, which aligns with policies for secure decommissioning and disposal of integrated systems.

The Windows Defender Firewall applet is the dedicated control panel for managing all aspects of the operating system's built-in firewall. It provides granular control over inbound and outbound connection rules, allowing administrators to define exceptions for specific applications, ports, and protocols. This interface is essential for configuring firewall profiles for different network types (Domain, Private, Public) to meet security policies, such as ensuring the firewall is active and properly configured on all workstations.

Resetting the browser settings to their default configuration is the most effective and direct solution for adware that alters browser behavior, such as changing the homepage, default search engine, or injecting unwanted extensions. This action specifically targets and reverts all user-defined and malicious modifications within the browser's profile, restoring its original state without affecting the operating system or other applications. It efficiently eliminates the persistent symptoms of the adware infection.

The Account lockout threshold policy directly specifies the maximum number of consecutive unsuccessful login attempts permitted before a user account is automatically locked out. Once this threshold is met, the system prevents further login attempts for that account, typically for a defined duration or until an administrator intervenes. This policy is precisely designed to mitigate brute-force attacks by preventing an attacker from making unlimited login attempts.

This response effectively combines empathy with a structured diagnostic approach, which is crucial for effective technical support. Acknowledging the user's frustration builds rapport, while immediately asking about specific program usage helps narrow down potential causes, such as resource-intensive applications, memory leaks, or software conflicts. This collaborative inquiry is a foundational step in troubleshooting, guiding the technician toward a more precise solution rather than guessing or making assumptions.

The "Default Apps" section within Windows Settings is the designated interface for users to configure which applications open specific file types, protocols, or perform common tasks like web browsing or email. This centralized location allows for granular control over application associations, ensuring that user preferences for default programs are correctly registered and ideally maintained across system updates, although occasional resets can occur. It directly addresses the problem of default application settings being altered.

The bootrec /rebuildbcd command is specifically designed to scan all hard drives for compatible Windows installations and then reconstruct the Boot Configuration Data (BCD) store. This process effectively creates a new BCD store, incorporating any found Windows operating systems, which is critical for resolving boot failures caused by a corrupted or missing BCD. It directly addresses the boot configuration, enabling the Windows Boot Manager to locate and load the operating system.

A scheduled task can be configured to run with stored administrator credentials and launch the application without any UAC prompt. This is the supported method for standard users to run legacy apps that require elevation.

Phishing is a highly prevalent social engineering attack where cybercriminals send fraudulent communications, typically emails, designed to appear as if they originate from a legitimate and trustworthy source. The primary objective is to deceive recipients into revealing sensitive information, such as login credentials or financial details, or to perform harmful actions like purchasing gift cards. The scenario involving deceptive emails prompting gift card purchases perfectly aligns with the definition and common tactics of a phishing attack.

A worm is a standalone malicious program that replicates itself to spread to other computers, often exploiting network vulnerabilities or sending copies via email attachments. Unlike viruses, worms do not need to attach to an existing program and can operate independently. They are designed to self-propagate across networks, consuming bandwidth and system resources, making them a highly effective method for widespread infection without direct user intervention beyond the initial compromise.

Utilizing a Virtual Private Network (VPN) establishes an encrypted tunnel between the client and the remote network before any RDP traffic is sent. All data, including the RDP session, is encapsulated and encrypted within this secure tunnel, making it unreadable to unauthorized parties even if intercepted. This comprehensive encryption protects the entire RDP session from end-to-end, ensuring confidentiality and integrity against eavesdropping and tampering.

Booting the Android phone into Safe Mode is the most appropriate next diagnostic step because it loads the operating system with only essential system applications and services, temporarily disabling all third-party applications. If the screen's touch functionality works correctly in Safe Mode, it strongly indicates that a recently installed or updated third-party application is interfering with the device's display or input system, allowing for targeted uninstallation or troubleshooting.

Checking the change log is the most appropriate first step because it provides critical documentation regarding the software update. This log details the changes implemented, any known issues, and, most importantly, the approved and tested rollback procedure. Following the documented rollback plan minimizes the risk of further system instability or data corruption, aligning with best practices for incident resolution and change management.

BitLocker with a Trusted Platform Module (TPM) and PIN protector is a robust full-disk encryption solution that directly addresses the security requirement for laptops. The TPM provides a hardware-based root of trust, verifying the system's integrity before releasing the encryption key to unlock the drive. Adding a PIN protector requires the user to enter a specific code before the operating system even begins to load, providing a crucial second factor of authentication (something you know) in addition to the TPM's hardware validation (something you have), thereby securing data even if the laptop is stolen or the TPM is tampered with.