CompTIA 220-1102 Online Practice Questions and Exam Preparation

CompTIA 220-1102 Online Questions & Answers

• Question 701:

  A user regularly calls and states that they have a computer with possibly corrupt system files and wants to know how to repair them. Which of the following utilities would resolve the problem?

  A. ASR
  B. FIXMBR
  C. SFC
  D. MSCONFIG
  C. SFC

  ---

  Explanation

• Question 702:

  A malicious user was able to export an entire website's user database by entering specific commands into a field on the company's website. Which of the following did the malicious user most likely exploit to extract the data?

  A. Cross-site scripting
  B. SQL injection
  C. Brute-force attack
  D. DDoS attack
  B. SQL injection

  ---

  Explanation

  SQL injection is a type of attack that takes advantage of vulnerabilities in a web application's database query software, allowing an attacker to send malicious SQL commands through the application to the database. These commands can manipulate the database and can lead to unauthorized data access or manipulation. SQL injection: In the scenario described, the malicious user was able to export an entire website's user database by entering specific commands into a field on the company's website, which is a classic example of an SQL injection attack. This type of attack exploits vulnerabilities in the database layer of an application to execute unauthorized SQL commands. Cross-site scripting (A) involves injecting malicious scripts into content from otherwise trusted websites. A brute-force attack (C) is an attempt to gain access to a system by systematically checking all possible keys or passwords until the correct one is found. A DDoS attack

  (D) is an attempt to make a machine or network resource unavailable to its intended users by overwhelming it with a flood of internet traffic.

• Question 703:

  A technician downloads a validated security tool and notes the vendor hash of a58e87a2. When the download is complete, the technician again validates the hash, but the value returns as 2a876a7d3. Which of the following is the MOST likely cause of the issue?

  A. Private-browsing mode
  B. Invalid certificate
  C. Modified file
  D. Browser cache
  C. Modified file

  ---

  Explanation

  The most likely cause of the issue of having different hash values for a downloaded security tool is a modified file. A hash value is a unique and fixed-length string that is generated from an algorithm that processes data or files. A hash value can be used to verify the integrity and authenticity of data or files by comparing it with a known or expected value. If the hash values do not match, it means that the data or file has been altered or corrupted in some way. A modified file may result from intentional or unintentional changes, such as editing, encryption, compression or malware infection. Private-browsing mode is a feature that allows users to browse the web without storing any browsing history, cookies or cache on their browser. Private-browsing mode does not affect the hash value of a downloaded file but only how the browser handles user data. Invalid certificate is an error that occurs when a website or a server does not have a valid or trusted digital certificate that proves its identity and secures its communication. Invalid certificate does not affect the hash value of a downloaded file but only how the browser verifies the website or server's credibility. Browser cache is a temporary storage that stores copies of web pages, images and other content that users have visited on their browser.

• Question 704:

  A technician is trying to perform an in-place upgrade of a Windows OS from a file. When the technician double-clicks the file, the technician receives a prompt to mount a drive.

  Which of the following file types did the technician download?

  A. msi
  B. iso
  C. zip
  D. exe
  B. iso

  ---

  Explanation

  The file type ISO is a disk image format that contains everything from a CD, DVD, or Blu-ray disc in a single file. When an ISO file is accessed, the system prompts the user to mount it as a virtual drive, which is why the technician received a

  "mount a drive" prompt. MSI (A) is for installing software, ZIP (C) is a compressed file, and EXE (D) is an executable file.

  Core 2, Domain 1.9 - Installation methods and upgrade paths.

• Question 705:

  A user's new laptop, which was advertised as gaming-ready, is performing slowly when the user is playing a modern game. However, when the user is playing a less resource- demanding game, the user does not see any lag. Which of the following should a technician do to resolve the issue?

  A. Overclock the RAM
  B. Enable NIC teaming
  C. Select dedicated graphics
  D. Activate CPU hyperthreading
  C. Select dedicated graphics

  ---

  Explanation

  Many modern laptops have both an integrated GPU (built into the CPU) and a dedicated GPU (such as NVIDIA or AMD). The system may default to the integrated GPU to save power, which results in poor gaming performance. The

  technician should manually set the game to use the dedicated graphics card to resolve the issue.

  Option A: Overclock the RAM, Incorrect. While overclocking RAM can improve performance slightly, it does not resolve GPU-related gaming lag.

  Option B: Enable NIC teaming, Incorrect. NIC teaming improves network bandwidth and has no effect on gaming graphics.

  Option D: Activate CPU hyperthreading ?Incorrect. Hyperthreading improves multitasking but does not directly impact gaming graphics performance.

  CompTIA A+ 220-1102, Objective 1.8 ?Performance Optimization and Troubleshooting

• Question 706:

  A technician has verified a computer is infected with malware. The technician isolates the system and updates the anti-malware software. Which of the following should the technician do next?

  A. Run one scan and schedule future scans.
  B. Back up the uninfected files and reimage the computer.
  C. Restore the clean backup copies of the infected files.
  D. Run repeated remediation scans until the malware is removed.
  D. Run repeated remediation scans until the malware is removed.

  ---

  Explanation

  Malware is malicious software that can cause damage or harm to a computer system or network4. A technician has verified a computer is infected with malware by observing unusual behavior, such as slow performance, pop-ups, or unwanted ads. The technician isolates the system and updates the anti-malware software to prevent further infection or spread of the malware. The next step is to run repeated remediation scans until the malware is removed. A remediation scan is a scan that detects and removes malware from the system. Running one scan may not be enough to remove all traces of malware, as some malware may hide or regenerate itself.

• Question 707:

  A systems administrator installed the latest Windows security patch and received numerous tickets reporting slow performance the next day. Which of the following should the administrator do to resolve this issue?

  A. Rebuild user profiles.
  B. Roll back the updates.
  C. Restart the services.
  D. Perform a system file check.
  B. Roll back the updates.

  ---

  Explanation

• Question 708:

  A technician cannot uninstall a system driver because the driver is currently in use. Which of the following tools should the technician use to help uninstall the driver?

  A. msinfo32.exe
  B. dxdiag.exe
  C. msconfig.exe
  D. regedit.exe
  C. msconfig.exe

  ---

  Explanation

  The msconfig.exe tool, also known as the System Configuration utility, is a tool that allows users to modify various system settings, such as startup options, services, boot options, and more. One of the features of msconfig.exe is the ability to

  disable or enable device drivers that are loaded during the system startup. By using msconfig.exe, a technician can prevent a driver from being loaded and used by the system, which will allow them to uninstall it without any errors. To use

  msconfig.exe to disable a driver, the technician can follow these steps:

  Open the Run dialog box by pressing the Windows key + R.

  Type msconfig.exe and press Enter.

  Click on the Boot tab and then click on Advanced options.

  Check the box next to No GUI boot and click OK. This will prevent the graphical user interface from loading during the boot process, which will also prevent some drivers from loading.

  Click on the Services tab and check the box next to Hide all Microsoft services.

  This will show only the third-party services and drivers that are running on the system.

  Find the service or driver that corresponds to the device that the technician wants to uninstall and uncheck the box next to it. This will disable the service or driver from starting during the system startup.

  Click Apply and OK and then restart the computer.

  After the computer restarts, the technician can use the Device Manager or the Control Panel to uninstall the driver that was previously in use.

  References:

  How to Completely Remove/Uninstall a Driver in Windows, section 31

  The Official CompTIA A+ Core 2 Study Guide (220-1102), page 2212

• Question 709:

  A home office user wants to ensure a PC is backed up and protected against local natural disasters and hardware failures. Which of the following would meet the user's requirements?

  A. Using an agent-based cloud backup solution
  B. Implementing a grandfather-father-son backup rotation
  C. Automating backups to a local network share
  D. Saving files manually to an external drive
  A. Using an agent-based cloud backup solution

  ---

  Explanation

• Question 710:

  A company needs employees who work remotely to have secure access to the corporate intranet. Which of the following should the company implement?

  A. Password-protected Wi-Fi
  B. Port forwarding
  C. Virtual private network
  D. Perimeter network
  C. Virtual private network

  ---

  Explanation

  A virtual private network (VPN) is a technology that creates a secure and encrypted connection over a public network, such as the internet. A VPN allows remote employees to access the corporate intranet as if they were physically connected to the local network. Password-protected Wi-Fi is a security measure for wireless networks that does not provide access to the corporate intranet. Port forwarding is a technique that allows external devices to access services on a private network through a router, but does not provide access to the corporate intranet. A perimeter network is a network segment that lies between an internal network and an external network, such as the internet, and provides an additional layer of security, but does not provide access to the corporate intranet.