CompTIA CompTIA Certifications 220-1102 Questions & Answers

• Question 601:

  A user opened an infected email. A security administrator responded to the malicious event, successfully mitigated the situation, and returned the machine to service

  Which of the following needs to be completed before this event is considered closed?

  A. Acceptable use policy

  B. Incident report

  C. End user license agreement

  D. Standard operating procedures

  Correct Answer: B

  After successfully mitigating a malicious event caused by an infected email, the final step before considering the event closed is to complete an incident report. This document should detail the nature of the incident, the steps taken to resolve it, and any lessons learned to improve future responses to similar threats.

• Question 602:

  Which of the following Linux commands would help to identify which directory the user is currently operating in?

  A. pwd

  B. dig

  C. find

  D. cat

  Correct Answer: A

  The pwd command, which stands for "print working directory," is used in Linux and Unix-like operating systems to display the current directory in which the user is operating. This command outputs the full pathname of the current working

  directory, helping users to understand their current location in the filesystem hierarchy. pwd: When executed, it provides the absolute path of the directory you're currently in, which is useful for navigation and scripting purposes.

  Other options listed:

  dig: This command is used for querying DNS name servers for information about host addresses, mail exchanges, name servers, and related information. find: This command is used to search for files in a directory hierarchy based on

  specified criteria (such as name, modification date, size, etc.). cat: Short for "concatenate," this command is used to read the contents of files and output them to the terminal.

• Question 603:

  When a user attempts to open an email using a company-issued smartphone, the user receives a message stating the email is encrypted and cannot be opened. The user forwards the email to a personal account and receives the same message. The user then contacts the IT department for assistance. The technician instructs the user to contact the sender to exchange information in order to decode the message. Which of the following will the user receive from the sender?

  A. Keys

  B. Token

  C. Password

  D. RootCA

  Correct Answer: A

  When an email is encrypted and the recipient cannot open it, the issue typically revolves around the need for encryption keys. Encryption keys are used to encode and decode the email content, ensuring that only authorized recipients with the correct key can access the information. In this scenario, the user would need to receive the appropriate decryption key from the sender to unlock and read the encrypted email. This exchange ensures that sensitive information remains secure during transmission and is only accessible to intended recipients.

• Question 604:

  A user is unable to start a computer following a failed Windows 10 update. When trying to start the computer, the user sees a blue screen of death. Which of the following steps should a technician take to diagnose the issue?

  A. Perform a safe mode boot.

  B. Run the System Restore wizard.

  C. Start the computer in the last known-good configuration.

  D. Reset the BIOS settinqs.

  Correct Answer: A

  Booting in safe mode is the initial step to diagnose a computer experiencing a blue screen of death (BSOD) following a failed Windows 10 update. Safe mode starts the computer with a minimal set of drivers and services, allowing troubleshooting and identification of the problematic software or driver causing the BSOD. This mode provides a safer environment to uninstall recent updates or drivers, perform system scans, and restore the system if necessary. Other options like System Restore wizard, last known-good configuration, and resetting BIOS settings may be subsequent steps but do not directly diagnose the issue as effectively as booting in safe mode.

• Question 605:

  A user takes a work-issued laptop home for the first time. When the user attempts to browse any website on the home internet, the user receives the following error:

  "This site cannot be reached."

  A technician from work confirms that the static IP that was set up on the machine was changed back to DHCP. Which of the following needs to be corrected?

  A. HTTPS

  B. VLAN

  C. DNS

  D. SMTP

  Correct Answer: C

  The error "This site cannot be reached" often indicates a problem with DNS (Domain Name System) resolution, where the browser is unable to translate a website's domain name into its corresponding IP address. Since the laptop was set to

  use DHCP (Dynamic Host Configuration Protocol) at home, it's possible that it's not receiving the correct DNS server information from the home network, or the DNS servers it was using at work are not accessible from the home network.

  DNS: Checking and possibly correcting the DNS settings to ensure they are appropriate for the home network might resolve the browsing issue. The user can try using public DNS servers like those provided by Google (8.8.8.8 and 8.8.4.4) or

  Cloudflare (1.1.1.1) if the default DNS servers provided by the home ISP are not working properly.

  HTTPS (A) is a protocol for secure communication over a computer network but is not something that needs to be configured on the user's end to solve this type of issue. VLAN (B) stands for Virtual Local Area Network and is more related to

  network segmentation and management within larger networks, not typically applicable to home internet issues. SMTP (D) stands for Simple Mail Transfer Protocol, which is used for sending emails, not for general web browsing issues.

• Question 606:

  A customer wants to make sure the data is protected and secure on a Windows laptop's hard drive. Which of the following is the best solution?

  A. Windows Backup

  B. BitLocker

  C. Shadow Copy

  D. Trusted PlatformModule

  Correct Answer: B

  BitLocker is a full-disk encryption feature included with Windows Vista and later. It is designed to protect data by providing encryption for entire volumes. By encrypting the hard drive, BitLocker prevents unauthorized access to the data stored on the drive, securing it in case the laptop is lost or stolen. BitLocker is preferable over options like Windows Backup (which is for data recovery, not encryption), Shadow Copy (used for backup and does not encrypt data), and Trusted Platform Module (TPM, which is a hardware component used alongside BitLocker for securing encryption keys).

• Question 607:

  A web developer installs and launches a new external web server. Immediately following the launch, the performance of all traffic traversing the firewall degrades substantially. Which of the following considerations was overlooked?

  A. OS compatibility

  B. Quality of service

  C. 32- vs. 64-bit architecture

  D. Storage requirements

  Correct Answer: B

  The performance degradation following the launch of a new external web server suggests that Quality of Service (QoS) considerations were overlooked. QoS settings help prioritize traffic to ensure that critical services like web servers receive the bandwidth they need without negatively impacting the overall network performance. Without proper QoS configuration, the new server's traffic could overwhelm the firewall, leading to widespread performance issues.

• Question 608:

  A technician is configuring a SOHO router and wants to only allow specific computers on the network. Which of the following should the technician do?

  A. Configure MAC filtering.

  B. Disable DHCP.

  C. Configure port forwarding.

  D. Disable guest access.

  Correct Answer: A

  For a SOHO (Small Office/Home Office) router setup where the goal is to only allow specific computers on the network, MAC filtering is the appropriate solution:

  Configure MAC filtering: This security measure involves creating a list of allowed device MAC (Media Access Control) addresses in the router's settings. Only devices with MAC addresses on this list will be able to connect to the network,

  effectively restricting access to authorized computers only.

• Question 609:

  A technician needs to recommend a way to keep company devices for field and home- based staff up to date. The users live in various places across the country and the company has several national offices that staff can go to for technical support Which of the following methods is most appropriate for the users?

  A. Make office attendance mandatory for one day per week so that updates can be installed.

  B. Ask users to ensure that they run updates on devices and reboot computers on a regular basis.

  C. Push updates out via VPN on a weekly basis in a staggered manner so that the network is not affected.

  D. Configure cloud-based endpoint management software to automatically manage computer updates.

  Correct Answer: D

  For a company with geographically dispersed staff and the need to keep devices updated, using cloud-based endpoint management software is the most efficient method. This type of software allows IT administrators to remotely manage and push updates to company devices, regardless of their location. It ensures that all devices remain up to date with the latest security patches and software updates without requiring physical access or user intervention. This approach is scalable, reduces the risk of unpatched vulnerabilities, and is convenient for both the IT department and the end-users.

• Question 610:

  A technician is troubleshooting a user's PC that is displaying pop-up windows, which are advertising free software downloads. When the technician tries to open a document, the system displays an error message that reads: Not enough memory to perform this operation. Which of the following should be the technician's next step to resolve this issue?

  A. Install antispyware

  B. Reimage the system

  C. Disable the pop-up blocker

  D. Upgrade the browser

  E. Install antivirus software

  Correct Answer: A

  The presence of pop-up windows advertising free software and the error message about memory are indicative of spyware infection. Installing and running antispyware software is a practical first step to remove the unwanted software and resolve the issue without resorting to more drastic measures like re-imaging the system.