CompTIA 220-1102 Online Practice Questions and Exam Preparation

CompTIA 220-1102 Online Questions & Answers

• Question 601:

  A company needs employees who work remotely to have secure access to the corporate intranet. Which of the following should the company implement?

  A. Password-protected Wi-Fi
  B. Port forwarding
  C. Virtual private network
  D. Perimeter network
  C. Virtual private network

  ---

  Explanation

• Question 602:

  The Chief Executive Officer at a bark recently saw a news report about a high-profile cybercrime where a remote-access tool that the bank uses for support was also used in this crime. The report stated that attackers were able to brute force passwords to access systems. Which of the following would BEST limit the bark's risk? (Select TWO)

  A. Enable multifactor authentication for each support account
  B. Limit remote access to destinations inside the corporate network
  C. Block all support accounts from logging in from foreign countries
  D. Configure a replacement remote-access tool for support cases.
  E. Purchase a password manager for remote-access tool users
  F. Enforce account lockouts after five bad password attempts
  A. Enable multifactor authentication for each support account
  F. Enforce account lockouts after five bad password attempts

  ---

  Explanation

  The best ways to limit the bank's risk are to enable multifactor authentication for each support account and enforce account lockouts after five bad password attempts. Multifactor authentication adds an extra layer of security to the login process, making it more difficult for attackers to gain access to systems. Account lockouts after five bad password attempts can help to prevent brute force attacks by locking out accounts after a certain number of failed login attempts.

• Question 603:

  Antivirus software indicates that a workstation is infected with ransomware that cannot be quarantined. Which of the following should be performed FIRST to prevent further damage to the host and other systems?

  A. Power off the machine.
  B. Run a full antivirus scan.
  C. Remove the LAN card.
  D. Install a different endpoint solution.
  A. Power off the machine.

  ---

  Explanation

  Ransomware is a type of malware that encrypts the files on a system and demands a ransom for their decryption. Ransomware can also spread to other systems on the network or exfiltrate sensitive data to the attackers. Therefore, it is important to isolate the infected machine as soon as possible to contain the infection and prevent further damage. Powering off the machine is a quick and effective way of disconnecting it from the network and stopping any malicious processes running on it. The other options are not directly related to preventing ransomware damage or may not be effective. Running a full antivirus scan may not be able to detect or remove the ransomware, especially if it is a new or unknown variant. Removing the LAN card may disconnect the machine from the network, but it may not stop any malicious processes running on it or any data encryption or exfiltration that has already occurred. Installing a different endpoint solution may not be possible or helpful if the system is already infected and locked by ransomware.

• Question 604:

  Which of the following Windows 10 editions is the most appropriate for a single user who wants to encrypt a hard drive with BitLocker?

  A. Professional
  B. Home
  C. Enterprise
  D. Embedded
  A. Professional

  ---

  Explanation

• Question 605:

  Which of the following editions of Windows 10 requires reactivation every 180 days?

  A. Enterprise
  B. Pro for Workstation
  C. Home
  D. Pro
  A. Enterprise

  ---

  Explanation

  Windows 10 Enterprise is an edition of Windows 10 that is designed for large organizations that need advanced security and management features. Windows 10 Enterprise can be activated using different methods, such as Multiple Activation Key (MAK), Active Directory-based Activation (ADBA), or Key Management Service (KMS). KMS is a method of activation that uses a local server to activate multiple devices on a network. KMS activations are valid for 180 days and need to be renewed periodically by connecting to the KMS server. If a device does not renew its activation within 180 days, it will enter a grace period of 30 days, after which it will display a warning message and lose some functionality until it is reactivated. The other editions of Windows 10 do not require reactivation every 180 days. Windows 10 Pro for Workstation is an edition of Windows 10 that is designed for high-performance devices that need advanced features such as ReFS file system, persistent memory, and faster file sharing. Windows 10 Pro for Workstation can be activated using a digital license or a product key. Windows 10 Home is an edition of Windows 10 that is designed for personal or home use. Windows 10 Home can be activated using a digital license or a product key. Windows 10 Pro is an edition of Windows 10 that is designed for business or professional use. Windows 10 Pro can be activated using a digital license or a product key. None of these editions require reactivation every 180 days unless there are significant hardware changes or other issues that affect the activation status.

• Question 606:

  Which of the following social engineering tactics is best avoided by shredding sensitive documents?

  A. Dumpster diving
  B. Phishing
  C. Whaling
  D. Shoulder surfing
  A. Dumpster diving

  ---

  Explanation

• Question 607:

  A technician needs to document who had possession of evidence at every step of the process. Which of the following does this process describe?

  A. Rights management
  B. Audit trail
  C. Chain of custody
  D. Data integrity
  C. Chain of custody

  ---

  Explanation

  The process of documenting who had possession of evidence at every step of the process is called chain of custody

• Question 608:

  A user is receiving repeated pop-up advertising messages while browsing the internet. A malware scan is unable to locate the source of an infection. Which of the following should the technician check NEXT?

  A. Windows updates
  B. DNS settings
  C. Certificate store
  D. Browser plug-ins
  D. Browser plug-ins

  ---

  Explanation

• Question 609:

  A company has experienced a ransomware attack. Which of the following is the best way to recover from ransomware?

  A. Antivirus
  B. Backups
  C. Anti-malware
  D. Recovery mode
  B. Backups

  ---

  Explanation

  The best way to recover from a ransomware attack is by restoring clean backups of the affected files. Ransomware encrypts files and demands a ransom for decryption, but paying the ransom is not recommended because it does not

  guarantee file recovery.

  Option A: Antivirus, Incorrect. Antivirus software may detect and remove the ransomware, but it cannot decrypt the files.

  Option C: Anti-malware, Incorrect. Anti-malware software helps prevent infection but cannot recover encrypted files.

  Option D: Recovery mode, Incorrect. Recovery mode restores system files but does not recover user data from ransomware.

  Best Practice: Regularly back up critical data and store backups in offline or cloud-based solutions to prevent ransomware from encrypting them.

  CompTIA A+ 220-1102, Objective 2.4 ?Removing Malware and Security Threats

• Question 610:

  Which of the following will automatically map network drives based on Group Policy configuration?

  A. Log-in scripts
  B. Access controllists
  C. Organizationalunits
  D. Folder redirection
  A. Log-in scripts

  ---

  Explanation

  Network drives can be automatically mapped for users based on Group Policy configuration using log-in scripts. Here's how it works:

  Log-in scripts: These are scripts executed when a user logs in to a domain. They can be configured through Group Policy in Active Directory to map network drives automatically. The scripts can use commands like net use to map drives.

  Access control lists (ACLs): While ACLs control permissions for files and folders, they do not automatically map network drives.

  Organizational units (OUs): OUs are used to organize users and computers in a directory structure but do not map drives.

  Folder redirection: This redirects the path of a folder to a new location, typically on a network share, but it does not automatically map drives.

  CompTIA A+ 220-1102 Exam Objectives, Section 1.6: Given a scenario configure Microsoft Windows networking features on a client/desktop.

  Group Policy and login script documentation from Microsoft.