CompTIA 220-1102 Online Practice Questions and Exam Preparation

CompTIA 220-1102 Online Questions & Answers

• Question 501:

  A technician needs to transfer a file to a user's workstation. Which of the following would BEST accomplish this task utilizing the workstation's built-in protocols?

  A. VPN
  B. SMB
  C. RMM
  D. MSRA
  B. SMB

  ---

  Explanation

  SMB stands for Server Message Block, which is a network file sharing protocol that allows applications on a computer to read and write to files and to request services from server programs in a computer network. SMB is a built-in protocol in Windows operating systems and can be used to transfer files between computers over a network. The technician can use SMB to access a file share on the user's workstation and copy the file to or from it. VPN stands for virtual private network, which is a technology that creates a secure and encrypted connection over a public network. VPN is not a built-in protocol in Windows operating systems and does not directly transfer files between computers. RMM stands for remote monitoring and management, which is a type of software solution that allows remote management and monitoring of devices and networks. RMM is not a built-in protocol in Windows operating systems and does not directly transfer files between computers. MSRA stands for Microsoft Remote Assistance, which is a feature that allows a user to invite another user to view or control their computer remotely. MSRA is not a protocol, but an application that uses Remote Desktop Protocol (RDP) to establish a connection. MSRA does not directly transfer files between computers. https://www.pcmag.com/picks/the-best-desktop-workstations

• Question 502:

  Which of the following can be used to help recover a lost smartphone?

  A. Remote support software
  B. Locator application
  C. NFC enabled device
  D. GPS navigation software
  B. Locator application

  ---

  Explanation

• Question 503:

  A technician needs to implement a system to handle both authentication and authorization Which of the following meets this requirement?

  A. WPA3
  B. MFA
  C. TACACS+
  D. RADIUS
  C. TACACS+

  ---

  Explanation

  To implement a system that handles both authentication and authorization, TACACS+ (Terminal Access Controller Access-Control System Plus) is the best option. TACACS+ is a security protocol that provides centralized Authentication, Authorization, and Accounting (AAA) services for networked access control, meeting the requirement for both authentication and authorization management.

• Question 504:

  A user needs to test several software replacement possibilities. Part of the process involves installing the different software options on a corporate-imaged sandboxed PC. Which of the following is the best option to allow the user to install the required software?

  A. Make the user a member of Domain Admins.
  B. Add the user to the local Administrators group.
  C. Let the user use credentials from another user who has rights.
  D. Give the user the local, high-privileged account password.
  B. Add the user to the local Administrators group.

  ---

  Explanation

  The best practice is to add the user to the local Administrators group, allowing them to install software on their own machine without giving them excessive permissions across the entire network. Option A: Make the user a member of Domain

  Admins, Incorrect. This would give too much control over the network, creating a major security risk. Option C: Let the user use credentials from another user who has rights, Incorrect. Sharing credentials violates security best practices.

  Option D: Give the user the local, high-privileged account password, Incorrect. This could allow unauthorized configuration changes.

  CompTIA A+ 220-1102, Objective 2.2 ?Security and Access Control Best Practices

• Question 505:

  The camera and microphone on an iPhone user's device are activating without any user input. The user's friend recently modified the device to allow applications to be installed outside the normal App Store.

  Which of the following is the issue?

  A. The user connected a counterfeit Lightning cable to the iPhone.
  B. The device is unenrolled from Mobile Device Management.
  C. The device was jailbroken to remove internal security protections.
  D. The iPhone has an out-of-date operating system.
  C. The device was jailbroken to remove internal security protections.

  ---

  Explanation

  The camera and microphone on an iPhone activating without user input, especially after allowing applications to be installed outside the normal App Store, is a classic sign of the device being jailbroken. Jailbreaking an iPhone removes many of the built-in security features and restrictions, allowing the installation of apps from third-party sources. These third-party apps can be malicious and can gain unauthorized access to system resources like the camera and microphone. Option

  A: The user connected a counterfeit Lightning cable to the iPhone. While counterfeit cables can be harmful, they typically cause charging or connectivity issues rather than security vulnerabilities that would enable camera and microphone activation without user input. Option B: The device is unenrolled from Mobile Device Management. Unenrolling from MDM removes organizational controls but does not directly cause unauthorized camera and microphone activation. Option D: The iPhone has an out-of-date operating system. An outdated OS can have vulnerabilities, but the scenario specifically mentions modifications to allow third- party app installations, pointing to jailbreaking as the primary cause.

  References:

  CompTIA A+ Core 2 (220-1102) Exam Objectives, Section 2.3: Security measures and their purposes including mobile device security.

• Question 506:

  A Windows user reported that a pop-up indicated a security issue. During inspection, an antivirus system identified malware from a recent download, but it was unable to remove the malware. Which of the following actions would be BEST to remove the malware while also preserving the user's files?

  A. Run the virus scanner in an administrative mode.
  B. Reinstall the operating system.
  C. Reboot the system in safe mode and rescan.
  D. Manually delete the infected files.
  C. Reboot the system in safe mode and rescan.

  ---

  Explanation

  Rebooting the system in safe mode will limit the number of programs and processes running, allowing the antivirus system to more effectively identify and remove the malware. Rescanning the system will allow the antivirus system to identify and remove the malware while preserving the user's files.

• Question 507:

  A technician has been tasked with installing a workstation that will be used tor point-of-sale transactions. The point-of-sale system will process credit cards and loyalty cards. Which of the following encryption technologies should be used to secure the workstation in case of theft?

  A. Data-in-transit encryption
  B. File encryption
  C. USB drive encryption
  D. Disk encryption
  D. Disk encryption

  ---

  Explanation

  Disk encryption should be used to secure the workstation in case of theft. Disk encryption can help to protect data on the hard drive by encrypting it so that it cannot be accessed without the correct encryption key.

• Question 508:

  SIMULATION

  As a corporate technician, you are asked to evaluate several suspect email messages on a client's computer. Corporate policy requires the following:

  1. All phishing attempts must be reported.

  2. Future spam emails to users must be prevented.

  INSTRUCTIONS

  Review each email and perform the following within the email:

  1. Classify the emails

  2. Identify suspicious items, if applicable, in each email

  3. Select the appropriate resolution

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  A. Check the answer in expalation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. Check the answer in expalation.

  ---

  Explanation

  Inbox mail 1 - Account Locked- Phishing - Report email to Information Security

  Inbox mail 2 - Share your feedback - Legitimate - Perform no additional actions

  Inbox mail 3 - Employee orientation - Legitimate - Perform no additional actions

  Inbox mail 4 - Security Update - Spam - Report email to Information Security

  Inbox mail 5 - Interview - Legitimate - Perform no additional actions

• Question 509:

  A technician needs to override DNS and redirect IP addresses and URLs to different locations. Which of the following should the technician do?

  A. Install signal repeaters.
  B. Edit the hosts file.
  C. Configure the firewall.
  D. Enable port forwarding.
  B. Edit the hosts file.

  ---

  Explanation

• Question 510:

  A technician is selling up a newly built computer. Which of the following is the FASTEST way for the technician to install Windows 10?

  A. Factory reset
  B. System Restore
  C. In-place upgrade
  D. Unattended installation
  D. Unattended installation

  ---

  Explanation

  An unattended installation is the fastest way to install Windows 10 on a newly built computer. It uses an answer file that contains all the configuration settings and preferences for the installation, such as language, product key, partition size, etc. It does not require any user interaction or input during the installation process. Factory reset, System Restore and in-place upgrade are not methods of installing Windows 10 on a new computer, but ways of restoring or updating an existing Windows installation.

  References: https://www.comptia.org/blog/what-is-an-unattended-installation https://www.comptia.org/certifications/a