How should I use these Operational Procedures practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Operational Procedures questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Operational Procedures domain.

220-1202 · topic practice

Operational Procedures practice questions

Practise CompTIA A+ Core 2 220-1202 Operational Procedures practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

6 questionsDomain: Operational Procedures

Practice 10 questions Browse domain →

What the exam tests

What to know about Operational Procedures

Operational Procedures questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Operational Procedures exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Operational Procedures questions

6 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice

Read the full NAT/PAT explanation →

A company is moving to a new office and wants to secure its server room against both unauthorized entry and environmental hazards. Which combination of physical controls should be implemented?

Trap 1: A key lock and a fire extinguisher

A key lock provides basic access control but lacks auditability; a fire extinguisher is safety, not environmental monitoring.

Trap 2: A biometric scanner and a security camera

Both are security-focused; environmental hazards like temperature or humidity are not addressed.

Trap 3: A combination lock and a humidity monitor

Combination locks lack audit trails and can be shared; humidity monitor is good but not paired with a robust access control.

Study all Operational Procedures common traps →

A
A key lock and a fire extinguisher
Why wrong: A key lock provides basic access control but lacks auditability; a fire extinguisher is safety, not environmental monitoring.
B
An electronic badge reader and a temperature sensor
The badge reader controls and logs access; the temperature sensor monitors environmental conditions to prevent overheating.
C
A biometric scanner and a security camera
Why wrong: Both are security-focused; environmental hazards like temperature or humidity are not addressed.
D
A combination lock and a humidity monitor
Why wrong: Combination locks lack audit trails and can be shared; humidity monitor is good but not paired with a robust access control.

Full breakdown with real-world context →

Question 2mediummultiple choice

Read the full Operational Procedures explanation →

A user complains that their computer is running slowly and they see a USB drive they don't recognize plugged into the front port. What is the first step a technician should take to address this potential security issue?

Trap 1: Run a full antivirus scan on the computer.

Scanning is important but should be done after removing the device to prevent further compromise.

Trap 2: Check the USB drive's contents to see what it contains.

Opening the drive could trigger malware; it should be isolated first.

Trap 3: Disable the USB ports in the BIOS.

Disabling ports is a longer-term fix but does not address the immediate threat of the unknown device.

Study all Operational Procedures common traps →

A
Run a full antivirus scan on the computer.
Why wrong: Scanning is important but should be done after removing the device to prevent further compromise.
B
Check the USB drive's contents to see what it contains.
Why wrong: Opening the drive could trigger malware; it should be isolated first.
C
Ask the user to unplug the USB drive immediately.
Removing the device stops any ongoing malicious activity and is the first step in containment.
D
Disable the USB ports in the BIOS.
Why wrong: Disabling ports is a longer-term fix but does not address the immediate threat of the unknown device.

Full breakdown with real-world context →

Question 3hardmultiple choice

Read the full Operational Procedures explanation →

An organization experiences a data breach when an attacker physically removes hard drives from a decommissioned server that was placed in a storage area without being properly sanitized. What physical security control should have been implemented?

Trap 1: Install a surveillance camera in the storage area.

Cameras can deter theft but do not protect the data if drives are taken; the data is still readable.

Trap 2: Require a smart card to access the storage area.

Access control limits who can enter but does not address the vulnerability of readable drives.

Trap 3: Apply tamper-evident seals to the server chassis.

Seals show if the server was opened but do not protect data on drives that are removed.

Study all Operational Procedures common traps →

A
Install a surveillance camera in the storage area.
Why wrong: Cameras can deter theft but do not protect the data if drives are taken; the data is still readable.
B
Require a smart card to access the storage area.
Why wrong: Access control limits who can enter but does not address the vulnerability of readable drives.
C
Use a degausser to erase the hard drives before disposal.
Degaussing renders the data unrecoverable, eliminating the risk even if drives are stolen.
D
Apply tamper-evident seals to the server chassis.
Why wrong: Seals show if the server was opened but do not protect data on drives that are removed.

Full breakdown with real-world context →

Question 4hardmultiple choice

Read the full Operational Procedures explanation →

During a security audit, a technician discovers that an unauthorized person accessed a restricted server room by pretending to be a fire inspector. The person had a fake ID and clipboard. Which social engineering technique was used, and what is the best mitigation?

Trap 1: Tailgating; install mantraps at entrances.

Tailgating involves following someone in, not using a fake identity. Mantraps prevent tailgating but not pretexting.

Trap 2: Phishing; implement email filtering.

Phishing is digital; email filtering does not prevent physical impersonation.

Trap 3: Baiting; disable USB ports on workstations.

Baiting involves luring with an offer; disabling USB ports does not address physical impersonation.

Study all Operational Procedures common traps →

A
Tailgating; install mantraps at entrances.
Why wrong: Tailgating involves following someone in, not using a fake identity. Mantraps prevent tailgating but not pretexting.
B
Phishing; implement email filtering.
Why wrong: Phishing is digital; email filtering does not prevent physical impersonation.
C
Pretexting; enforce visitor check-in and verification procedures.
Pretexting uses a fabricated identity; verifying visitors against official records and requiring escorts prevents this.
D
Baiting; disable USB ports on workstations.
Why wrong: Baiting involves luring with an offer; disabling USB ports does not address physical impersonation.

Full breakdown with real-world context →

Question 5mediummultiple choice

Read the full Operational Procedures explanation →

During a security incident investigation, a technician finds that an attacker called the help desk, pretended to be a new employee who forgot their password, and successfully reset it. The attacker knew the employee's name and department. Which social engineering technique was used?

Trap 1: Phishing

Phishing involves digital communication, not a direct phone call with a fabricated story.

Trap 2: Tailgating

Tailgating is physical access, not a phone-based social engineering attack.

Trap 3: Shoulder surfing

Shoulder surfing requires visual observation, not applicable here.

Study all Operational Procedures common traps →

A
Phishing
Why wrong: Phishing involves digital communication, not a direct phone call with a fabricated story.
B
Pretexting
Pretexting is the correct term, as the attacker created a false identity and scenario to gain the help desk's trust.
C
Tailgating
Why wrong: Tailgating is physical access, not a phone-based social engineering attack.
D
Shoulder surfing
Why wrong: Shoulder surfing requires visual observation, not applicable here.

Full breakdown with real-world context →

Question 6mediummultiple choice

Read the full Operational Procedures explanation →

A user calls the help desk saying that every time they click a link in an email, their browser opens a page that says 'Your computer is infected! Call this number.' They are unable to close the page normally. What type of attack is this, and what is the first step you should take?

Trap 1: Phishing attack; immediately change the user's email password

Phishing typically aims to steal credentials, not display a fake alert. Changing password is premature.

Trap 2: Browser hijacker; run a full antivirus scan immediately

While a scan is needed, the immediate step is to close the browser to stop the scareware.

Trap 3: Drive-by download; disconnect the computer from the network

A drive-by download installs malware silently; this scenario involves a visible fake alert.

Study all Operational Procedures common traps →

A
Phishing attack; immediately change the user's email password
Why wrong: Phishing typically aims to steal credentials, not display a fake alert. Changing password is premature.
B
Browser hijacker; run a full antivirus scan immediately
Why wrong: While a scan is needed, the immediate step is to close the browser to stop the scareware.
C
Tech support scam; force close the browser using Task Manager, then run a security scan
This matches the scenario: a fake alert designed to trick the user into calling a scam number. Force closing stops the attack.
D
Drive-by download; disconnect the computer from the network
Why wrong: A drive-by download installs malware silently; this scenario involves a visible fake alert.

Full breakdown with real-world context →

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Operational Procedures sessions

Start a Operational Procedures only practice session

Every question in these sessions is drawn from the Operational Procedures domain — nothing else.

10 questions 20 questions 30 questions 50 questions

Browse all Operational Procedures questions →Mixed 220-1202 session

Frequently asked questions

What does the 220-1202 exam test about Operational Procedures?: Operational Procedures questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?: Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Operational Procedures questions in a focused session?: Yes — the session launcher on this page draws every question from the Operational Procedures domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 220-1202 topics?: Use the topic links above to move to related areas, or go back to the 220-1202 question bank to see all topics.
Are these real exam questions or dumps?: These are original practice questions written to test the same concepts the 220-1202 exam covers. They are not copied from any real exam or dump site.

Operational Procedures only

10 questions 20 questions 30 questions 50 questions

Mixed 220-1202 session

Track your progress

A free account saves results across sessions and highlights which topics need work.

Study resources

All 220-1202 questions Operational Procedures domain overview 220-1202 exam guide

Exam traps to avoid

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Operational Procedures practice questions

What to know about Operational Procedures

Common Operational Procedures exam traps

Operational Procedures questions

A company is moving to a new office and wants to secure its server room against both unauthorized entry and environmental hazards. Which combination of physical controls should be implemented?

A user complains that their computer is running slowly and they see a USB drive they don't recognize plugged into the front port. What is the first step a technician should take to address this potential security issue?

An organization experiences a data breach when an attacker physically removes hard drives from a decommissioned server that was placed in a storage area without being properly sanitized. What physical security control should have been implemented?

During a security audit, a technician discovers that an unauthorized person accessed a restricted server room by pretending to be a fire inspector. The person had a fake ID and clipboard. Which social engineering technique was used, and what is the best mitigation?

During a security incident investigation, a technician finds that an attacker called the help desk, pretended to be a new employee who forgot their password, and successfully reset it. The attacker knew the employee's name and department. Which social engineering technique was used?

A user calls the help desk saying that every time they click a link in an email, their browser opens a page that says 'Your computer is infected! Call this number.' They are unable to close the page normally. What type of attack is this, and what is the first step you should take?

Track your progress over time

Start a Operational Procedures only practice session

Related 220-1202 topic practice pages

Windows OS Features and Tools practice questions

Windows Settings and Control Panel practice questions

Windows Command-Line Tools practice questions

Windows Administrative Tools practice questions

macOS Features and Tools practice questions

Linux Commands and File Permissions practice questions

Mobile OS Features and Tools practice questions

Virtualization and Cloud Technologies practice questions

Physical Security Controls practice questions

Logical Security Concepts practice questions

Wireless Security Protocols practice questions

Malware Types and Removal practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid