CompTIA CompTIA Certifications 220-1102 Questions & Answers

• Question 401:

  Which of the following is a proprietary Cisco AAA protocol?

  A. TKIP

  B. AES

  C. RADIUS

  D. TACACS+

  Correct Answer: D

  TACACS+ is a proprietary Cisco AAA protocol

• Question 402:

  Which of the following Linux commands would be used to install an application?

  A. yum

  B. grep

  C. Is

  D. sudo

  Correct Answer: D

  The Linux command used to install an application is sudo. The sudo command allows users to run programs with the security privileges of another user, such as the root user. This is necessary to install applications because it requires administrative privileges

• Question 403:

  A change advisory board did not approve a requested change due to the lack of alternative actions if implementation failed. Which of the following should be updated before requesting approval again?

  A. Scope of change

  B. Risk level

  C. Rollback plan

  D. End user acceptance

  Correct Answer: C

  The rollback plan should be updated before requesting approval again. A rollback plan is a plan for undoing a change if it causes problems, and it is an important part of any change management process. If the change advisory board did not approve the requested change due to the lack of alternative actions if implementation failed, then updating the rollback plan would be the best way to address this concern.

• Question 404:

  Which of the following is a data security standard for protecting credit cards?

  A. PHI

  B. NIST

  C. PCI

  D. GDPR

  Correct Answer: C

  The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that ALL companies that accept, process, store or transmit credit card information maintain a secure environment.

• Question 405:

  Upon downloading a new ISO, an administrator is presented with the following string: 59d15a16ce90cBcc97fa7c211b767aB

  Which of the following BEST describes the purpose of this string?

  A. XSS verification

  B. AES-256 verification

  C. Hash verification

  D. Digital signature verification

  Correct Answer: C

  Hash verification is a process that verifies the integrity of a file by comparing the hash value of the downloaded file to the hash value provided by the source

• Question 406:

  A help desk technician is troubleshooting a workstation in a SOHO environment that is running above normal system baselines. The technician discovers an unknown executable with a random string name running on the system. The technician terminates the process, and the system returns to normal operation. The technician thinks the issue was an infected file, but the antivirus is not detecting a threat. The technician is concerned other machines may be infected with this unknown virus. Which of the following is the MOST effective way to check other machines on the network for this unknown threat?

  A. Run a startup script that removes files by name.

  B. Provide a sample to the antivirus vendor.

  C. Manually check each machine.

  D. Monitor outbound network traffic.

  Correct Answer: C

  The most effective way to check other machines on the network for this unknown threat is to manually check each machine. This can help to identify any other machines that may be infected with the unknown virus and allow them to be cleaned.

• Question 407:

  A user is unable to log in to the domain with a desktop PC, but a laptop PC is working properly on the same network. A technician logs in lo the desktop PC with a local account but is unable to browse to the secure intranet site to get troubleshooting tools. Which of the following is the MOST likely cause of the issue?

  A. Time drift

  B. Dual in-line memory module failure

  C. Application crash

  D. Filesystem errors

  Correct Answer: A

  The most likely cause of the issue is a "time drift". Time drift occurs when the clock on a computer is not synchronized with the clock on the domain controller. This can cause authentication problems when a user tries to log in to the domain. The fact that the technician is unable to browse to the secure intranet site to get troubleshooting tools suggests that there may be a problem with the network connection or the firewall settings on the desktop PC

• Question 408:

  A technician wants to enable BitLocker on a Windows 10 laptop and is unable to find the BitLocker Drive Encryption menu item in Control Panel. Which of the following explains why the technician unable to find this menu item?

  A. The hardware does not meet BitLocker's minimum system requirements.

  B. BitLocker was renamed for Windows 10.

  C. BitLocker is not included on Windows 10 Home.

  D. BitLocker was disabled in the registry of the laptop

  Correct Answer: C

  BitLocker is only available on Windows 10 Pro, Enterprise, and Education editions1. Therefore, the technician is unable to find the BitLocker Drive Encryption menu item in Control Panel because it is not included in the Windows 10 Home edition1.

• Question 409:

  A technician is working with a company to determine the best way to transfer sensitive personal information between offices when conducting business. The company currently uses USB drives and is resistant to change. The company's compliance officer states that all media at rest must be encrypted. Which of the following would be the BEST way to secure the current workflow?

  A. Deploy a secondary hard drive with encryption on the appropriate workstation

  B. Configure a hardened SFTP portal for file transfers between file servers

  C. Require files to be individually password protected with unique passwords

  D. Enable BitLocker To Go with a password that meets corporate requirements

  Correct Answer: D

  The BEST way to secure the current workflow of transferring sensitive personal information between offices when conducting business is to enable BitLocker To Go with a password that meets corporate requirements. This is because BitLocker To Go is a full-disk encryption feature that encrypts all data on a USB drive, which is what the company currently uses, and requires a password to access the data.

• Question 410:

  A technician at a customer site is troubleshooting a laptop A software update needs to be downloaded but the company's proxy is blocking traffic to the update site. Which of the following should the technician perform?

  A. Change the DNS address to 1.1.1.1

  B. Update Group Policy

  C. Add the site to the client's exceptions list

  D. Verity the software license is current.

  Correct Answer: C

  The technician should add the update site to the client's exceptions list to bypass the proxy. This can be done through the client's web browser settings, where the proxy settings can be configured. By adding the update site to the exceptions list, the client will be able to access the site and download the software update.