[CompTIA] 220-1102 - A+ (Plus) Core 2 Exam Dumps & Study Guide

Free [CompTIA] 220-1102 - A+ (Plus) Core 2 Practice Questions Preview

• Question 1

  SIMULATION -
  Ann, a CEO, has purchased a new consumer-class tablet for personal use, but she is unable to connect to the wireless network. Other users have reported that their personal devices are connecting without issues. She has asked you to assist with getting the device online without adjusting her home WiFi configuration.
  
  INSTRUCTIONS -
  Review the network diagrams and device configurations to determine the cause of the problem and resolve any discovered issues.
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  
  
  
  
  
  
  
  
  
  

  Correct Answer: See interactive view.

  Explanation:

  Based on the question and discussion, I agree with the suggested answer, but with some refinements for clarity and precision.
  
  Here's the breakdown of the recommended configuration and the reasoning behind each choice:
  

  • 802.11: Select 802.11b/g. Reasoning: The tablet is a "consumer-class" device, it is more likely to support the older 802.11b/g standards. Selecting 802.11ac or 802.11n might not be compatible if the tablet's wireless card only supports older standards. The discussion summary also leans towards compatibility and not changing the existing configuration.
  • SSID: Select BYOD. Reasoning: The question states that other users have connected their *personal* devices without issue. The BYOD SSID is the most logical choice for connecting a personal device, given the context.
  • Frequency: Select 2.4 GHz. Reasoning: While 5 GHz offers faster speeds, 2.4 GHz has better range and penetration through walls. Since the prompt specifies not adjusting the home WiFi configuration, and other devices are connecting, it's reasonable to assume the existing BYOD network is running on 2.4 GHz. Also, older devices tend to only support 2.4 GHz.
  • Wireless Security Mode: Select WPA. Set the password to "TotallySecure!". Reasoning: The discussion specifically mentions that the BYOD network is using WPA. Although WPA2 is more secure, the goal is to connect to the *existing* BYOD network without making changes to the access point's configuration. Using WPA2 would require the tablet and access point both to support WPA2, and if the access point is configured for WPA, WPA2 will not be compatible.

  
  Why not the other options?

  • Choosing 802.11ac or n might lead to incompatibility if the tablet only supports older standards.
  • Selecting the incorrect SSID would prevent the device from connecting to the correct network.
  • Choosing the 5 GHz frequency may result in a weaker signal or incompatibility if the access point is primarily configured for 2.4 GHz or if the tablet has poor 5 GHz support.
  • Using the wrong security protocol (e.g., WPA2 when the network uses WPA) will prevent a successful connection.

  
  Citations:

  • 802.11 standards, https://en.wikipedia.org/wiki/IEEE_802.11
  • Wi-Fi frequency bands, https://www.intel.com/content/www/us/en/support/articles/000005725/wireless/intel-wireless-products.html
  • WPA vs WPA2, https://www.lifewire.com/wpa-vs-wpa2-3555407

• Question 2

  A help desk team lead contacts a systems administrator because the technicians are unable to log in to a Linux server that is used to access tools. When the administrator tries to use remote desktop to log in to the server, the administrator sees the GUI is crashing. Which of the following methods can the administrator use to troubleshoot the server effectively?
  

  • A. SFTP
  • B. SSH
  • C. VNC
  • D. MSRA

  Correct Answer: B

  Explanation:

  I agree with the suggested answer B (SSH).
  
  Reasoning:
  The problem states that the GUI is crashing, which means that graphical remote access methods will likely be ineffective. The best approach would be to use a command-line interface to troubleshoot the server. SSH (Secure Shell) provides a secure command-line interface that can be used even when the GUI is unavailable. This allows the administrator to log in and run commands to diagnose and fix the problem.
  
  Why other options are not suitable:

  • A. SFTP (Secure File Transfer Protocol): SFTP is used for securely transferring files, not for remote login and troubleshooting.
  • C. VNC (Virtual Network Computing): VNC provides graphical remote access. Since the GUI is crashing, VNC would be ineffective.
  • D. MSRA (Microsoft Remote Assistance): MSRA is a Microsoft protocol for remote assistance and is unlikely to be compatible with a Linux server. It also relies on a graphical interface.

  Therefore, SSH is the most effective method to troubleshoot the server.

• Question 3

  A company wants to remove information from past users' hard drives in order to reuse the hard drives. Which of the following is the MOST secure method?
  

  • A. Reinstalling Windows
  • B. Performing a quick format
  • C. Using disk-wiping software
  • D. Deleting all files from command-line interface:

  Correct Answer: C

  Explanation:

  I agree with the suggested answer, which is C. Using disk-wiping software.
  
  Reasoning: Disk-wiping software is the most secure method for removing information from hard drives because it overwrites the data, typically multiple times, making it virtually unrecoverable. This is crucial when reusing hard drives that previously contained sensitive information.
  
  Why other options are incorrect:

  • A. Reinstalling Windows: Reinstalling the operating system does format the drive, but it may not securely erase the previous data. Data recovery tools might still be able to retrieve some of the old data.
  • B. Performing a quick format: A quick format only removes the file system structure, not the actual data. The data remains on the drive and can be easily recovered using readily available tools.
  • D. Deleting all files from the command-line interface: Deleting files only removes the directory entries, not the actual data. The data remains on the drive until overwritten, and can be recovered using data recovery software.

  Therefore, using disk-wiping software ensures that the data is overwritten, making it extremely difficult, if not impossible, to recover, ensuring the highest level of security for data removal.

  The process of disk wiping (also known as data sanitization) is a very common and critical practice in IT to ensure data privacy and security when repurposing or disposing of storage media.

  For further information on data sanitization methods, please refer to the following resources.

  • Data Sanitization, https://en.wikipedia.org/wiki/Data_sanitization
  • NIST Guidelines for Media Sanitization, https://csrc.nist.gov/publications/detail/sp/800-88/r1/final

• Question 4

  A user is having phone issues after installing a new application that claims to optimize performance. The user downloaded the application directly from the vendor's website and is now experiencing high network utilization and is receiving repeated security warnings. Which of the following should the technician perform FIRST to mitigate the issue?
  

  • A. Reset the phone to factory settings.
  • B. Uninstall the fraudulent application.
  • C. Increase the data plan limits.
  • D. Disable the mobile hotspot.

  Correct Answer: B

  Explanation:

  I agree with the suggested answer, which is B. Uninstall the fraudulent application.
  
  Reasoning: The question states that the user began experiencing issues immediately after installing a new application. The symptoms, such as high network utilization and repeated security warnings, strongly suggest that the application is malicious. Therefore, the most logical first step to mitigate the problem is to remove the application.
  
  Here's why the other options are not the best first step:

  • A. Reset the phone to factory settings: While this would likely resolve the issue, it's a drastic step to take immediately. It will erase all user data and require significant time to restore the phone to its previous state. Uninstalling the app is a less disruptive and quicker initial troubleshooting step.
  • C. Increase the data plan limits: This addresses a symptom (high network usage) but not the underlying problem (the malicious application). It would be like putting a band-aid on a broken leg.
  • D. Disable the mobile hotspot: This is irrelevant to the stated problem since the problem is caused by the app.

  The consensus from the discussion also supports removing the application as the first step.

• Question 5

  A change advisory board just approved a change request. Which of the following is the MOST likely next step in the change process?
  

  • A. End user acceptance
  • B. Perform risk analysis
  • C. Communicate to stakeholders
  • D. Sandbox testing

  Correct Answer: A

  Explanation:

  I agree with the suggested answer. The most likely next step after a Change Advisory Board (CAB) approves a change request is end-user acceptance (A).
  
  Reasoning:

  • The change management process typically follows a sequence: initiation, planning (including risk analysis), CAB approval, implementation (including testing), and finally, verification and closure. End-user acceptance is the final verification step to ensure the change meets the intended requirements and is functioning as expected in the live environment.
  • The change advisory board (CAB) has already approved the change request, therefore, risk analysis should have already been completed, ruling out option B.
  • Communication with stakeholders may occur throughout the process, but after CAB approval, the immediate next step focuses on implementation and verification, which includes testing and end-user acceptance. Therefore, C is not the most *likely* next step.
  • Sandbox testing is part of the testing phase during implementation, which ideally happens before end-user acceptance. It's a step prior to making the changes live and getting end-user sign-off, making option D less appropriate.

  Therefore, End user acceptance is the MOST likely next step after a change request is approved.

  Reasons for not choosing other options:

  • Option B (Perform risk analysis): Risk analysis should ideally be performed *before* submitting the change request to the CAB for approval.
  • Option C (Communicate to stakeholders): While communication is important throughout the change management process, it's not the *immediate* next step after CAB approval. Communication is an ongoing activity.
  • Option D (Sandbox testing): Sandbox testing should occur *before* end-user acceptance, as it is part of the implementation and testing phase.

• Question 6

  A user calls the help desk to report that none of the files on a PC will open. The user also indicates a program on the desktop is requesting payment in exchange for file access. A technician verifies the user's PC is infected with ransomware. Which of the following should the technician do FIRST?
  

  • A. Scan and remove the malware.
  • B. Schedule automated malware scans.
  • C. Quarantine the system.
  • D. Disable System Restore.

  Correct Answer: C

  Explanation:

  I agree with the suggested answer, which is C. Quarantine the system.
  Reasoning: The very first action a technician should take when ransomware is suspected is to isolate the infected system from the network. This is crucial to prevent the ransomware from spreading to other devices and encrypting more files. Quarantining minimizes the damage and contains the threat.
  Why other options are not the best first step:

  • A. Scan and remove the malware: While removing the malware is essential, it's not the very first step. Scanning and removal should occur after the system is isolated to prevent further spread during the scanning process.
  • B. Schedule automated malware scans: Scheduling scans is a preventative measure, but it's not the immediate action needed when a system is already infected with ransomware.
  • D. Disable System Restore: Disabling System Restore can be a useful step to prevent the ransomware from potentially reinfecting the system through restore points, but it's not the priority action compared to isolating the infected machine. It's a subsequent step in the remediation process.

  The immediate priority is always to contain the threat, and quarantining achieves this.

• Question 7

  A company is issuing smartphone to employees and needs to ensure data is secure if the devices are lost or stolen. Which of the following provides the BEST solution?
  

  • A. Anti-malware
  • B. Remote wipe
  • C. Locator applications
  • D. Screen lock

  Correct Answer: B

  Explanation:

  The suggested answer, B. Remote wipe, is correct.
  Reasoning: Remote wipe is the most effective solution for securing data on a lost or stolen smartphone. It allows the company to erase all data from the device, preventing unauthorized access to sensitive information. This is crucial in scenarios where the device falls into the wrong hands.
  Here's a breakdown of why the other options are less effective:

  • A. Anti-malware: While important for device security, anti-malware software does not prevent data access if the device is lost or stolen and someone bypasses security measures.
  • C. Locator applications: Locator applications can help in finding the device, but they do not secure the data if the device cannot be recovered or if the thief accesses the data before it's located.
  • D. Screen lock: While a screen lock provides a basic level of security, it can often be bypassed by someone with technical knowledge, leaving the data vulnerable.

  Therefore, remote wipe is the most comprehensive solution to the stated problem.

  Citations:

  • Remote wipe - SearchSecurity, https://www.techtarget.com/searchsecurity/definition/remote-wipe

• Question 8

  A user reports seeing random, seemingly non-malicious advertisement notifications in the Windows 10 Action Center. The notifications indicate the advertisements are coming from a web browser. Which of the following is the BEST solution for a technician to implement?
  

  • A. Disable the browser from sending notifications to the Action Center.
  • B. Run a full antivirus scan on the computer.
  • C. Disable all Action Center notifications.
  • D. Move specific site notifications from Allowed to Block.

  Correct Answer: D

  Explanation:

  I agree with the suggested answer, which is D. Move specific site notifications from Allowed to Block.
  
  Reasoning:

  • This approach directly addresses the problem of unwanted advertisement notifications by allowing the user to selectively block notifications from the offending websites. It's a targeted solution that doesn't unnecessarily disable all browser notifications.

  
  Reasons for not choosing other answers:

  • A. Disable the browser from sending notifications to the Action Center: This is too broad and would prevent all notifications from the browser, including potentially useful ones.
  • B. Run a full antivirus scan on the computer: While a virus scan is generally a good practice, it's unlikely to be effective against advertisement notifications that are originating from legitimate websites. This option doesn't directly address the stated problem.
  • C. Disable all Action Center notifications: This is also too broad and would disable all notifications, not just the unwanted advertisements. This is not ideal.

• Question 9

  After clicking on a link in an email, a Chief Financial Officer (CFO) received the following error:
  
  The CFO then reported the incident to a technician. The link is purportedly to the organization's bank. Which of the following should the technician perform FIRST?
  

  • A. Update the browser's CRLs.
  • B. File a trouble ticket with the bank.
  • C. Contact the ISP to report the CFO's concern.
  • D. Instruct the CFO to exit the browser.

  Correct Answer: D

  Explanation:

  I agree with the suggested answer of D.
  Reasoning: The question asks for the FIRST action a technician should take. The error message displayed in the image indicates a potential security risk (invalid security certificate), suggesting a phishing attempt or a compromised website. The primary concern is to immediately mitigate the risk to the CFO's computer and the organization's network. Instructing the CFO to exit the browser accomplishes this by immediately severing the connection to the potentially malicious site.
  Why other options are not the best FIRST action:

  • A. Update the browser's CRLs: While updating the Certificate Revocation Lists (CRLs) is a good security practice, it is not the immediate first step. CRL updates don't guarantee instant protection, and the CFO remains exposed until the update completes and the browser recognizes the revoked certificate.
  • B. File a trouble ticket with the bank: Contacting the bank is a valid step in investigating the incident, but it doesn't address the immediate threat to the CFO's system. The CFO's machine could still be compromised while waiting for the bank's response.
  • C. Contact the ISP to report the CFO's concern: Reporting to the ISP is a later step to prevent the spread of malicious content, but it doesn't help the CFO deal with the immediate risk of a malware.

• Question 10

  A help desk technician is troubleshooting a workstation in a SOHO environment that is running above normal system baselines. The technician discovers an unknown executable with a random string name running on the system. The technician terminates the process, and the system returns to normal operation. The technician thinks the issue was an infected file, but the antivirus is not detecting a threat. The technician is concerned other machines may be infected with this unknown virus. Which of the following is the MOST effective way to check other machines on the network for this unknown threat?
  

  • A. Run a startup script that removes files by name.
  • B. Provide a sample to the antivirus vendor.
  • C. Manually check each machine.
  • D. Monitor outbound network traffic.

  Correct Answer: C

  Explanation:

  I disagree with the suggested answer of C.
  The most effective way to address the unknown threat across the network is B. Provide a sample to the antivirus vendor.
  Here's why:

  • The technician has already identified a suspicious executable. Providing this sample to the antivirus vendor allows them to analyze the file, determine its behavior, and develop a signature to detect it. This is a proactive approach that protects all systems using that antivirus solution.
  • Once the vendor has a signature, they can update their software, and all protected machines will be able to detect and remove the threat automatically.

  Why the other options are less effective:

  • A. Running a startup script that removes files by name might work if the file name is consistent across all infected machines. However, malware often uses different file names or hides itself, making this unreliable. Furthermore, simply removing the file doesn't address the root cause of the infection or prevent reinfection.
  • C. Manually checking each machine is time-consuming and prone to human error. In a SOHO environment, this might be feasible, but it's not scalable or efficient. Also, manually checking doesn't guarantee that the threat will be identified.
  • D. Monitoring outbound network traffic can be helpful in detecting communication with command-and-control servers, but it doesn't directly identify the infected file. It requires skilled analysis to correlate traffic patterns with specific threats. Also, the malware might not be actively communicating, making it difficult to detect through network monitoring alone.

  The vendor analysis approach provides a comprehensive and automated solution compared to the other methods.