CompTIA 220-1102 Online Practice Questions and Exam Preparation

CompTIA 220-1102 Online Questions & Answers

• Question 461:

  Which of the following describes a concept that requires using a combination of an ID, a password, and a biometric?

  A. Types of security
  B. Access control
  C. Principle of least privilege
  D. Multifactor authentication
  D. Multifactor authentication

  ---

  Explanation

• Question 462:

  A technician wants to harden Windows workstations after a recent security audit indicated the company is vulnerable to brute-force attacks. Which of the following features should the technician implement to mitigate such attacks?

  A. System screen lock
  B. Failed log-in lockout
  C. Restricted user permissions
  D. Data-at-rest encryption
  B. Failed log-in lockout

  ---

  Explanation

  To mitigate brute-force attacks, implementing a failed log-in lockout feature is effective. This security measure temporarily disables user accounts after a specified number of unsuccessful login attempts, preventing attackers from continuously trying different password combinations to gain unauthorized access.

• Question 463:

  Windows updates need to be performed on a department's servers. Which of the following methods should be used to connect to the server?

  A. FTP
  B. MSRA
  C. RDP
  D. VPN
  C. RDP

  ---

  Explanation

• Question 464:

  A technician received a notification about encrypted production data files and thinks active ransomware is on the network. The technician isolated and removed the suspicious system from the network.

  Which of the following steps should the technician take next?

  A. Schedule and perform an antivirus scan and system update
  B. Educate the end user on internet usage
  C. Perform a system scan to remove the malware
  D. Create a system restore point
  C. Perform a system scan to remove the malware

  ---

  Explanation

  The next step after isolating the system is to perform a system scan to remove the malware (Option C). Since ransomware is suspected, running a comprehensive malware scan can help identify and remove the malicious software. It is crucial to deal with the active threat before taking further actions. Scheduling an antivirus scan and system update (Option A) may help, but the immediate concern is identifying and removing the ransomware. Educating the end user (Option B) is

  important but should happen after the immediate threat is resolved. Creating a system restore point (Option D) would not be useful at this point since the system is infected.

  References:

  CompTIA A+ Core 2 2.3 - Detect, remove, and prevent malware, including handling ransomware.

• Question 465:

  Which of the following allows access to the command line in macOS?

  A. PsExec
  B. command.com
  C. Terminal
  D. CMD
  C. Terminal

  ---

  Explanation

• Question 466:

  Which of the following is a proprietary Cisco AAA protocol?

  A. TKIP
  B. AES
  C. RADIUS
  D. TACACS+
  D. TACACS+

  ---

  Explanation

  TACACS+ is a proprietary Cisco AAA protocol

• Question 467:

  A user calls a technician and asks for help with setting up a connection to a printer application. The technician has never dealt with secure print but has directions that will help guide the user.

  Which of the following techniques should the technician use?

  A. Express to the user that this is the technician's first experience with the application.
  B. Maintain a positive attitude and project confidence.
  C. Use technical jargon so the user is confident in the technician's skills.
  D. Send the user the directions to connect.
  B. Maintain a positive attitude and project confidence.

  ---

  Explanation

• Question 468:

  A technician is setting up a SOHO router in a user's home. The user wants the router to be configured to prevent access to malicious content and apply internet access protection. Which of the following settings should the technician configure?

  A. Port forwarding
  B. Content filtering
  C. Firmware updates
  D. DHCP reservations
  B. Content filtering

  ---

  Explanation

• Question 469:

  An administrator has submitted a change request for an upcoming server deployment. Which of the following must be completed before the change can be approved?

  A. Risk analysis
  B. Sandbox testing
  C. End user acceptance
  D. Lessons learned
  A. Risk analysis

  ---

  Explanation

  A risk analysis must be completed before a change request for an upcoming server deployment can be approved

  Risk analysis is an important step in the change management process because it helps identify and mitigate potential risks before changes are implemented. Once the risks have been analyzed and the appropriate measures have been taken to minimize them, the change can be approved and implemented.

• Question 470:

  Which of the following operating systems is considered closed source?

  A. Ubuntu
  B. Android
  C. CentOS
  D. OSX
  D. OSX

  ---

  Explanation

  OSX (now macOS) is an operating system that is considered closed source, meaning that its source code is not publicly available or modifiable by anyone except its developers. It is owned and maintained by Apple Inc. Ubuntu, Android and CentOS are operating systems that are considered open source, meaning that their source code is publicly available and modifiable by anyone who wants to contribute or customize them. Verified

  References: https://www.comptia.org/blog/ open-source-vs-closed- source-software https://www.comptia.org/certifications/a