CompTIA CompTIA Certifications 220-1102 Questions & Answers

• Question 211:

  A technician is preparing to remediate a Trojan virus that was found on a workstation. Which of the following steps should the technician complete BEFORE removing the virus?

  A. Disable System Restore.

  B. Schedule a malware scan.

  C. Educate the end user.

  D. Run Windows Update.

  Correct Answer: A

  Before removing a Trojan virus from a workstation, a technician should disable System Restore. System Restore is a feature that allows users to restore their system to a previous state in case of problems or errors. However, System Restore can also restore infected files or registry entries that were removed by antivirus software or manual actions. By disabling System Restore, a technician can ensure that the Trojan virus is completely removed and does not reappear after a system restore operation. Scheduling a malware scan may help detect and remove some malware but may not be effective against all types of Trojan viruses. Educating the end user may help prevent future infections but does not address the current issue of removing the Trojan virus. Running Windows Update may help patch some security vulnerabilities but does not guarantee that the Trojan virus will be removed. References: CompTIA A+ Core 2 (220-1002) Certification Exam Objectives Version 4.0, Domain 1.3

• Question 212:

  A technician is in the process of installing a new hard drive on a server but is called away to another task. The drive has been unpackaged and left on a desk. Which of the following should the technician perform before leaving?

  A. Ask coworkers to make sure no one touches the hard drive.

  B. Leave the hard drive on the table; it will be okay while the other task is completed.

  C. Place the hard drive in an antistatic bag and secure the area containing the hard drive.

  D. Connect an electrostatic discharge strap to the drive.

  Correct Answer: C

  The technician should place the hard drive in an antistatic bag and secure the area containing the hard drive before leaving. This will protect the hard drive from electrostatic discharge (ESD), dust, moisture, and physical damage. Asking coworkers to make sure no one touches the hard drive is not a reliable or secure way to prevent damage. Leaving the hard drive on the table exposes it to ESD and other environmental hazards. Connecting an electrostatic discharge strap to the drive is not enough to protect it from dust, moisture, and physical damage.

• Question 213:

  A kiosk, which is running Microsoft Windows 10, relies exclusively on a numeric keypad to allow customers to enter their ticket numbers but no other information. If the kiosk is idle for four hours, the login screen locks. Which of the following sign-on options would allow any employee the ability to unlock the kiosk?

  A. Requiring employees to enter their usernames and passwords

  B. Setting up facial recognition for each employee

  C. Using a PIN and providing it to employees

  D. Requiring employees to use their fingerprints

  Correct Answer: C

  The best sign-on option that would allow any employee the ability to unlock the kiosk that relies exclusively on a numeric keypad is to use a PIN and provide it to employees. A PIN is a Personal Identification Number that is a numeric code that can be used as part of authentication or access control. A PIN can be entered using only a numeric keypad and can be easily shared with employees who need to unlock the kiosk. Requiring employees to enter their usernames and passwords may not be feasible or convenient if the kiosk only has a numeric keypad and no other input devices. Setting up facial recognition for each employee may not be possible or secure if the kiosk does not have a camera or biometric sensor. Requiring employees to use their fingerprints may not be possible or secure if the kiosk does not have a fingerprint scanner or biometric sensor. References: CompTIA A+ Core 2 (220-1002) Certification Exam Objectives Version 4.0, Domain 3.3

• Question 214:

  A company is deploying mobile phones on a one-to-one basis, but the IT manager is concerned that users will root/jailbreak their phones. Which of the following technologies can be implemented to prevent this issue?

  A. Signed system images

  B. Antivirus

  C. SSO

  D. MDM

  Correct Answer: D

  MDM stands for Mobile Device Management, and it is a way of remotely managing and securing mobile devices that are used for work purposes. MDM can enforce policies and restrictions on the devices, such as preventing users from installing unauthorized apps, modifying system settings, or accessing root privileges. MDM can also monitor device status, wipe data, lock devices, or locate lost or stolen devices.

• Question 215:

  A SOHO client is having trouble navigating to a corporate website. Which of the following should a technician do to allow access?

  A. Adjust the content filtering.

  B. Unmap port forwarding.

  C. Disable unused ports.

  D. Reduce the encryption strength

  Correct Answer: A

  Content filtering is a process that manages or screens access to specific emails or webpages based on their content categories. Content filtering can be used by organizations to control content access through their firewalls and enforce

  corporate policies around information system management. A SOHO client may have content filtering enabled on their network and may need to adjust it to allow access to a corporate website that is blocked by default. The client can use a

  software program, a hardware device, or a subscription service to configure the content filtering settings and whitelist the desired website.

  References:

  Web content filtering (https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/web-content-filtering?view=o365-worldwide) What is Content Filtering? Definition and Types of Content Filters (https://www.fortinet.com/

  resources/cyberglossary/content-filtering)

• Question 216:

  A technician needs to transfer a large number of files over an unreliable connection. The technician should be able to resume the process if the connection is interrupted. Which of the following tools can be used?

  A. afc

  B. ehkdsk

  C. git clone

  D. zobocopy

  Correct Answer: A

  The technician should use afc to transfer a large number of files over an unreliable connection and be able to resume the process if the connection is interrupted

• Question 217:

  A customer called the help desk to report that a machine that was recently updated is no longer working. The support technician checks the latest logs to see what updates were deployed, but nothing was deployed in more than three weeks. Which of the following should the support technician do to BEST resolve the situation?

  A. Offer to wipe and reset the device for the customer.

  B. Advise that the help desk will investigate and follow up at a later date.

  C. Put the customer on hold and escalate the call to a manager.

  D. Use open-ended questions to further diagnose the issue.

  Correct Answer: D

  Open-ended questions are questions that require more than a yes or no answer and encourage the customer to provide more details and information. Using open-ended questions can help the support technician to understand the problem

  better, identify the root cause, and find a suitable solution. Some examples of open-ended questions are:

  What exactly is not working on your machine?

  When did you notice the problem?

  How often does the problem occur?

  What were you doing when the problem happened?

  What have you tried to fix the problem?

  Offering to wipe and reset the device for the customer is not a good option, as it may result in data loss and inconvenience for the customer. It should be used as a last resort only if other troubleshooting steps fail. Advising that the help desk

  will investigate and follow up at a later date is not a good option, as it may leave the customer unsatisfied and frustrated. It should be used only if the problem requires further research or escalation and cannot be resolved on the first call.

  Putting the customer on hold and escalating the call to a manager is not a good option, as it may waste time and resources. It should be used only if the problem is beyond the support technician's scope or authority and requires managerial

  intervention.

• Question 218:

  A Windows workstation that was recently updated with approved system patches shut down instead of restarting. Upon reboot, the technician notices an alert stating the workstation has malware in the root OS folder. The technician promptly performs a System Restore and reboots the workstation, but the malware is still detected. Which of the following BEST describes why the system still has malware?

  A. A system patch disabled the antivirus protection and host firewall.

  B. The system updates did not include the latest anti-malware definitions.

  C. The system restore process was compromised by the malware.

  D. The malware was installed before the system restore point was created.

  Correct Answer: D

  The best explanation for why the system still has malware after performing a System Restore is that the malware was installed before the system restore point was created. A system restore point is a snapshot of the system settings and configuration at a certain point in time. A System Restore is a feature that allows users to restore their system to a previous state in case of problems or errors. However, a System Restore does not affect personal files or folders, and it may not remove malware that was already present on the system before the restore point was created. A system patch disabling the antivirus protection and host firewall may increase the risk of malware infection, but it does not explain why the malware persists after a System Restore. The system updates not including the latest anti-malware definitions may reduce the effectiveness of malware detection and removal, but it does not explain why the malware persists after a System Restore. The system restore process being compromised by the malware may prevent a successful System Restore, but it does not explain why the malware persists after a System Restore. References: CompTIA A+ Core 2 (220-1002) Certification Exam Objectives Version 4.0, Domain 1.3

• Question 219:

  A technician is installing a program from an ISO file. Which of the following steps should the technician take?

  A. Mount the ISO and run the installation file.

  B. Copy the ISO and execute on the server.

  C. Copy the ISO file to a backup location and run the ISO file.

  D. Unzip the ISO and execute the setup.exe file.

  Correct Answer: A

  Mounting the ISO and running the installation file is the correct way to install a program from an ISO file. An ISO file is an image of a disc that contains all the files and folders of a program. Mounting the ISO means creating a virtual drive that can access the ISO file as if it were a physical disc. Running the installation file means executing the setup program that will install the program on the computer

• Question 220:

  A mobile phone user has downloaded a new payment application that allows payments to be made with a mobile device. The user attempts to use the device at a payment terminal but is unable to do so successfully. The user contacts a help desk technician to report the issue. Which of the following should the technician confirm NEXT as part of the troubleshooting process?

  A. If airplane mode is enabled

  B. If Bluetooth is disabled

  C. If NFC is enabled

  D. If WiFi is enabled

  E. If location services are disabled

  Correct Answer: C

  NFC stands for Near Field Communication, and it is a wireless technology that allows your phone to act as a contactless payment device, among other things . Payment applications that allow payments to be made with a mobile device

  usually rely on NFC to communicate with the payment terminal. Therefore, if NFC is disabled on the phone, the payment will not work. To enable NFC on an Android phone, you need to follow these steps:

  On your Android device, open the Settings app.

  Select Connected devices.

  Tap on Connection preferences.

  You should see the NFC option. Toggle it on.

  The other options are not directly related to using a payment application with a mobile device. Airplane mode is a setting that disables all wireless communication on the phone, including NFC, but it also affects calls, texts, and internet access.

  Bluetooth is a wireless technology that allows you to connect your phone with other devices such as headphones or speakers, but it is not used for contactless payments. Wi-Fi is a wireless technology that allows you to access the internet or

  a local network, but it is also not used for contactless payments. Location services are a feature that allows your phone to determine your geographic location using GPS or other methods, but they are not required for contactless payments.