CompTIA CompTIA A+ 220-1102 Questions & Answers

• Question 471:

  A user has a license for an application that is in use on a personal home laptop. The user approaches a systems administrator about using the same license on multiple computers on the corporate network.

  Which of the following BEST describes what the systems administrator should tell the user?

  A. Use the application only on the home laptop because it contains the initial license.

  B. Use the application at home and contact the vendor regarding a corporate license.

  C. Use the application on any computer since the user has a license.

  D. Use the application only on corporate computers.

  Correct Answer: B

  Use the application at home and contact the vendor regarding a corporate license. The user should use the application only on the home laptop because it contains the initial license. The user should contact the vendor regarding a corporate license if they want to use the application on multiple computers on the corporate network

• Question 472:

  A new spam gateway was recently deployed at a small business However; users still occasionally receive spam. The management team is concerned that users will open the messages and potentially infect the network systems.

  Which of the following is the MOST effective method for dealing with this Issue?

  A. Adjusting the spam gateway

  B. Updating firmware for the spam appliance

  C. Adjusting AV settings

  D. Providing user training

  Correct Answer: D

  The most effective method for dealing with spam messages in a small business is to provide user training1. Users should be trained to recognize spam messages and avoid opening them1. They should also be trained to report spam messages to the IT department so that appropriate action can be taken1. In addition, users should be trained to avoid clicking on links or downloading attachments from unknown sources1. By providing user training, the management team can reduce the risk of users opening spam messages and potentially infecting the network systems

• Question 473:

  Which of the following is the STRONGEST wireless configuration?

  A. WPS

  B. WPA3

  C. WEP

  D. WMN

  Correct Answer: B

  The strongest wireless configuration is B. WPA3. WPA3 is the most up-to-date wireless encryption protocol and is the most secure choice. It replaces PSK with SAE, a more secure way to do the initial key exchange. At the same time, the session key size of WPA3 increases to 128-bit in WPA3-Personal mode and 192-bit in WPA3-Enterprise, which makes the password harder to crack than the previous Wi-Fi security standards https://www.makeuseof.com/tag/wep-wpa-wpa2wpa3-explained/

• Question 474:

  A small business owner wants to install newly purchased software on all networked PCs. The network is not configured as a domain, and the owner wants to use the easiest method possible. Which of the following is the MOST deficient way lor the owner to install the application?

  A. Use a network share to share the installation files.

  B. Save software to an external hard drive to install.

  C. Create an imaging USB for each PC.

  D. Install the software from the vendor's website

  Correct Answer: B

  Saving software to an external hard drive and installing it on each individual PC is the most inefficient method for the small business owner. This method requires manual intervention on each PC, and there is a higher risk of error or inconsistencies between PCs. Additionally, if the software needs to be updated or reinstalled in the future, this process would need to be repeated on each PC.

• Question 475:

  A user's system is infected with malware. A technician updates the anti-malware software and runs a scan that removes the malware. After the user reboots the system, it once again becomes infected with malware.

  Which of the following will MOST likely help to permanently remove the malware?

  A. Enabling System Restore

  B. Educating the user

  C. Booting into safe mode

  D. Scheduling a scan

  Correct Answer: B

  Although updating the anti-malware software and running scans are important steps in removing malware, they may not be sufficient to permanently remove the malware if the user keeps engaging in behaviors that leave the system vulnerable, such as downloading unknown files or visiting malicious websites. Therefore, educating the user on safe computing practices is the best way to prevent future infections and permanently remove the malware. Enabling System Restore, Booting into safe mode, and scheduling a scan are not the most efficient ways to permanently remove the malware. Enabling System Restore and Booting into safe mode may help in some cases, but they may not be sufficient to permanently remove the malware. Scheduling a scan is also important for detecting and removing malware, but it may not be sufficient to prevent future infections.

  https://partners.comptia.org/docs/default-source/resources/comptia-a-220-1102-exam-objectives-(3-0)

• Question 476:

  Sensitive data was leaked from a user's smartphone. A technician discovered an unapproved application was installed, and the user has full access to the device's command shell.

  Which of the following is the NEXT step the technician should take to find the cause of the leaked data?

  A. Restore the device to factory settings.

  B. Uninstall the unapproved application.

  C. Disable the ability to install applications from unknown sources.

  D. Ensure the device is connected to the corporate WiFi network.

  Correct Answer: B

  The technician should disable the user's access to the device's command shell. This will prevent the user from accessing sensitive data and will help to prevent further data leaks. The technician should then investigate the unapproved application to determine if it is the cause of the data leak. If the application is found to be the cause of the leak, the technician should uninstall the application and restore the device to factory settings. If the application is not the cause of the leak, the technician should investigate further to determine the cause of the leak. Disabling the ability to install applications from unknown sources can help to prevent future data leaks, but it is not the next step the technician should take in this scenario. Ensuring the device is connected to the corporate WiFi network is not relevant to this scenario

• Question 477:

  A technician is setting up a new laptop. The company's security policy states that users cannot install virtual machines.

  Which of the following should the technician implement to prevent users from enabling virtual technology on their laptops?

  A. UEFI password

  B. Secure boot

  C. Account lockout

  D. Restricted user permissions

  Correct Answer: B

  A technician setting up a new laptop must ensure that users cannot install virtual machines as the company's security policy states One way to prevent users from enabling virtual technology is by implementing Secure Boot. Secure Boot is a feature of UEFI firmware that ensures the system only boots using firmware that is trusted by the manufacturer. It verifies the signature of all bootloaders, operating systems, and drivers before running them, preventing any unauthorized modifications to the boot process. This will help prevent users from installing virtual machines on the laptop without authorization.

• Question 478:

  An administrator has received approval for a change request for an upcoming server deployment. Which of the following steps should be completed NEXT?

  A. Perform a risk analysis.

  B. Implement the deployment.

  C. Verify end user acceptance

  D. Document the lessons learned.

  Correct Answer: A

  Before making any changes to the system, it is important to assess the risks associated with the change and determine whether it is worth implementing. Risk analysis involves identifying potential risks, assessing their likelihood and impact, and determining what steps can be taken to mitigate them. It is important to perform this step before making any changes, as this allows the administrator to make an informed decision about whether or not the change should be implemented. Once the risks have been assessed and the administrator has decided to go ahead with the change, the next step is to implement the deployment.

• Question 479:

  A network technician installed a SOHO router for a home office user. The user has read reports about home routers being targeted by malicious actors and then used in DDoS attacks.

  Which of the following can the technician MOST likely do to defend against this threat?

  A. Add network content filtering.

  B. Disable the SSID broadcast.

  C. Configure port forwarding.

  D. Change the default credentials.

  Correct Answer: D

  One of the most effective ways to defend against malicious actors targeting home routers for DDoS attacks is to change the default credentials of the router. The default credentials are often well-known or easily guessed by attackers, who can then access and compromise the router settings and firmware. By changing the default credentials to strong and unique ones, a technician can prevent unauthorized access and configuration changes to the router. Adding network content filtering may help block some malicious or unwanted websites but may not prevent attackers from exploiting router vulnerabilities or backdoors. Disabling the SSID broadcast may help reduce the visibility of the wireless network but may not prevent attackers from scanning or detecting it. Configuring port forwarding may help direct incoming traffic to specific devices or services but may not prevent attackers from sending malicious packets or requests to the router. References: CompTIA A+ Core 2 (220-1002) Certification Exam Objectives Version 4.0, Domain 3.3

• Question 480:

  A company recently outsourced its night-shift cleaning service. A technician is concerned about having unsupervised contractors in the building. Which of the following security measures can be used to prevent the computers from being accessed? (Choose two.)

  A. Implementing data-at-rest encryption

  B. Disabling AutoRun

  C. Restricting user permissions

  D. Restricting log-in times

  E. Enabling a screen lock

  F. Disabling local administrator accounts

  Correct Answer: CF

  While the other options (A, B, D, and E) are important security measures in general, they may not directly address the concern of contractors accessing the computers during their cleaning duties. Data-at-rest encryption, disabling AutoRun, restricting log-in times, and enabling a screen lock are more focused on protecting data and controlling system behavior but may not specifically prevent unsupervised access to computers by contractors.