220-1202 CompTIA A+ Core 2 (2026 Exam Update) Question and Answers

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

When resolution requires another team, professionalism means clear communication, setting expectations, and explaining what will happen next. Quentin Docter describes escalation: when you don’t have the answer, “this process is called escalation,” and when a ticket is escalated, someone must “be responsible for communicating with the user.” He emphasizes “Clear Communication,” stating the prob lem description must be understandable to others because “the problem may have to be escalated,” and you should communicate work-arounds and progress transparently.

The All-in-One guide and Mike Meyers Lab Manual both stress empathy and respectful communication with frustrated users—use statements that acknowledge feelings and keep a nonaccusatory tone.

Option D best matches these best practices: explain what’s happening (app crashing), why another department must be involved, and what the user should expect (timeline/next steps/work-around if available). Transferring without explanation (A) increases frustration; a complaint (B) isn’t a solution; and working alone (C) ignores the required collaboration.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

A low-cost home lab for practicing server management and scripting strongly points to Linux because it is widely available at no cost and is designed to support many server-style workloads. The All-in-One guide states plainly: “Linux is a popular, free, open source operating system,” and notes that there are many distributions (distros), giving flexibility for different needs. Quentin Docter adds key context about Linux’s purpose: Linus Torvalds created it as “a completely open source operating system for the world to use… completely free for anyone to use,” and highlights that many Linux distributions exist today.

From a cost standpoint, Docter’s licensing section defines open source as “not only… free, but the source code… is also shared,” and explicitly lists “OSs such as Linux” as open source examples. This directly supports “low-cost.”

Finally, Linux is a common target environment for real server administration and scripting practice (shell tools, package repositories, services), making it the best match versus ChromeOS/macOS/Windows for this lab goal.

The correct answer is B. Turn off notifications in the browser, because the described behavior matches browser notification abuse, not traditional pop-ups. Modern browsers allow websites to request permission to send notifications. If a user previously allowed notifications from a retail site, the site can continue sending onscreen alerts even when pop-up blockers are enabled.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, browser notification permissions are separate from pop-up blocking settings. Pop-up blockers prevent new browser windows or tabs from opening, but they do not block push notifications that were previously approved by the user. These notifications can persist long after visiting a site.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that one of the first troubleshooting steps for repeated browser messages is to review and disable site notification permissions. This directly targets the root cause without affecting browser configuration or user data.

The Mike Meyers / Mark Soper Lab Manual reinforces that resetting or reinstalling the browser is an excessive step unless configuration corruption is suspected. Clearing cache removes stored files but does not revoke notification permissions.

Because the messages originate from previously allowed browser notifications, the most appropriate and targeted fix is to disable notifications in the browser, making B the correct answer.

Memory usage is critically high, suggesting many applications or background processes. Closing unnecessary programs will immediately free up RAM.

FromTravis Everett – All-in-One Exam Guide:

“High memory usage with moderate CPU load usually means too many applications are open. Close unnecessary apps or use Task Manager to end processes.”

The correct answer is C. man, which stands for manual. The man command is used in Linux and UNIX-based operating systems to display the official documentation for commands, configuration files, and system calls. This documentation includes descriptions, syntax, available options, and usage examples.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that Linux relies heavily on built-in documentation accessible from the command line. The man pages are considered the authoritative reference for how a command works and what options it supports. For example, running man cp displays documentation for the file copy command.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that learning to use man is essential for Linux administration and troubleshooting. Unlike graphical help systems, man pages are always available locally and do not require internet access.

The Mike Meyers / Mark Soper Lab Manual clarifies that chmod changes file permissions, cat displays file contents, and sudo allows commands to be run with elevated privileges. None of these commands provide documentation about other commands.

Because the question specifically asks about reading another command’s documentation, the Linux command designed for that exact purpose is man, making C the correct answer.

The most likely cause of repeated application installation failures on a work-issued laptop is an incorrectly configured Access Control List (ACL). In corporate environments, security policies are designed to limit what standard users can install in order to reduce malware risk, maintain compliance, and ensure system stability. These restrictions are enforced through NTFS permissions, ACLs, and Group Policy settings.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, ACLs define which users or groups have permission to read, write, modify, or execute files and directories. If a user does not have sufficient permissions to write to protected locations such as C:\Program Files, system folders, or specific registry keys, software installers will fail—even if the installer itself is legitimate and intact.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that many organizations intentionally restrict installation privileges to administrators only. This prevents users from installing unauthorized or potentially harmful software. When ACLs are misconfigured or intentionally restrictive, installation attempts may fail repeatedly without clearly stating that permissions are the root cause.

The Mike Meyers / Mark Soper Lab Manual further clarifies that issues like a full browser cache or slow internet speeds typically affect downloads, not the execution of installers. An unformatted hard drive would prevent the operating system from functioning at all, making it irrelevant in this scenario.

Therefore, the repeated installation failure on a work laptop is best explained by incorrectly configured ACLs, making C the correct answer.

The scenario involves an application that should retrieve data from a local database server but is failing to do so. This likely indicates a problem in communication between the application and the database server (such as a network issue, port misconfiguration, or service unavailability). The correct troubleshooting approach involves testing the network/service connectivity between the client and the database.

Let’s examine the options:

A. ipconfig:This command displays IP configuration details for Windows systems, such as IP address, subnet mask, and default gateway. While useful for diagnosing general network issues, it does not test service connectivity or the availability of a specific application port/service.

B. nslookup:Used to query DNS servers to resolve domain names to IP addresses. However, since the question references a local server (likely accessed via IP or static hostname), DNS is probably not involved. Also, it does not test application/service availability.

C. netstat:Displays active TCP connections, listening ports, and routing tables. It helps determine whether the local system is listening for or maintaining any network connections, but it does not initiate a connection to test availability. It’s diagnostic but not interactive for service testing.

D. curl:This is the most appropriate tool for this scenario. curl is used to test connectivity to services over protocols like HTTP, HTTPS, FTP, and more. If the application retrieves data via a web interface or API (common in database-driven applications), curl can be used to test if the application can successfully reach and retrieve data from the server. It provides immediate, testable feedback on whether the server and service are available and responsive.

Example usage:

curlhttp://localhost:8080/api/data

This command would test whether a local server ' s application programming interface (API) is available and responding on port 8080.

CompTIA A+ 220-1102 Reference Points:

Objective 2.4: Given a scenario, use appropriate tools to troubleshoot and support Windows OS issues.

Objective 3.3: Use appropriate tools to troubleshoot and resolve issues.

The CompTIA A+ Core 2 study guide references curl as a useful command-line utility for testing connectivity and troubleshooting application access to services.

===========================

The correct answer is D. The computer operating system is Home edition . Windows Home editions are intended for consumer and basic home use and do not support joining a traditional Windows domain. The All-in-One Exam Guide clearly states that Windows Home systems cannot become part of a domain and that a system needs Windows Pro or a higher edition for domain membership. The Mike Meyers/Mark Soper material also shows that Windows Home cannot use a Windows domain, while Windows Pro can, and explains that Windows 10 Pro is the most basic edition that supports joining a Windows domain. This same edition limitation applies to Windows 11 in the A+ exam context. Updating Windows, changing network settings, or restarting for Group Policy will not enable domain joining on Home edition. The correct fix would be upgrading to Windows Pro or another domain-capable edition.

Open Ethernet ports in a public-facing area create a direct, high-trust entry point into the internal network. The most efficient fix is to remove that exposure by disabling the lobby ports and moving untrusted users to a segmented guest network. Quentin Docter explains why disabling unused/unauthorized access points matters: “Ports on a switch, router, or firewall not in use present an open door for an attacker to enter and should be disabled or disconnected.” That directly supports disabling lobby switch ports that shouldn’t be available to external users.

He also describes guest network isolation: guests “never need to connect to the organization’s servers and internal systems,” so a guest SSID should be created that “isolates guest traffic from production traffic.” This is exactly what option B accomplishes: it prevents contractors from gaining internal wired access while still providing Internet access through a controlled guest network.

WPA3 (A) only improves Wi-Fi encryption; it doesn’t stop wired port access. Monitoring traffic (C) is reactive. Signage (D) is weak administrative control compared to disabling the ports.

The correct answer is D. cp, which is a core Linux command used to copy files and directories. File management in Linux is performed primarily through command-line utilities, and cp is one of the most fundamental commands for this purpose.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Linux administrators frequently use commands such as cp, mv, rm, and ls to manage files. The cp command allows users to copy files between directories or locations and supports options for recursive copying and permission preservation.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that Linux file management commands differ significantly from Windows equivalents. While Windows uses robocopy and xcopy, Linux relies on simpler, built-in commands like cp.

The Mike Meyers / Mark Soper Lab Manual further explains that curl is used for transferring data over network protocols, not for managing local files. Commands such as robocopy and xcopy are Windows-specific and not available in standard Linux environments.

Because the question asks specifically about managing files in Linux, and cp is a native Linux file-management command, D is the correct answer.

A cable run under a carpet is vulnerable to compression, bending, and repeated physical stress from foot traffic, which can damage the cable jacket, distort the twists, loosen terminations, or partially break conductors—often showing up as intermittent connectivity. Quentin Docter notes that on a wired network, “other wired issues can include bad or poorly connected cables,” and you should check cabling and connections as a cause of intermittent problems. Putting a cable where people walk on it increases the chance it becomes “bad” over time or develops poor connections, producing the intermittent symptoms described in the answer option.

From a safety/professional practice perspective, Mike Meyers emphasizes that unmanaged cables are “dangerous tripping hazards” and that in business environments cables should be “carefully tucked away… or placed under cable runners,” using “proper cable management.” While that supports hazard reduction, the best reason in this question’s choices focuses on network reliability: repeated walking over the cable can cause intermittent issues. So the correct answer is D.

A Zero-day vulnerability refers to a security flaw in software or hardware that is unknown to the vendor or has not yet been patched. If this vulnerability is exploited before the vendor has issued a fix or patch, it becomes a Zero-day exploit. These attacks are highly dangerous because they take advantage of the absence of defenses due to the lack of awareness or mitigation options.

A. Spoofing is a form of impersonation, not necessarily tied to unpatched vulnerabilities.

B. Brute-force attacks rely on repeatedly guessing credentials and are not related to software flaws.

C. DoS (Denial of Service) attacks are meant to overwhelm systems and don ' t necessarily exploit unknown vulnerabilities.

The best option is to create a lower-security network exclusively for the console. Many retro or legacy gaming consoles only support older Wi-Fi security standards such as WPA or even WEP, and they cannot connect to modern WPA2 or WPA3 networks. Downgrading the entire primary network would significantly weaken overall security, which is not recommended in any environment.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that legacy devices often lack firmware support for modern encryption standards and should be isolated rather than integrated directly into secure networks. Creating a separate SSID with reduced security limits exposure while still allowing connectivity for the unsupported device.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that lowering security settings on a primary router—even temporarily—introduces unnecessary risk. Switching encryption modes back and forth can also cause configuration instability and expose the network during the downgrade window.

The Mike Meyers / Mark Soper Lab Manual further reinforces the concept of network segmentation as a best practice. By creating a dedicated network for legacy or insecure devices, administrators reduce the attack surface and prevent lateral movement to sensitive systems.

Using a wired Ethernet adapter may not be supported by the console, and adding an older router introduces unmanaged vulnerabilities. Therefore, isolating the console on a separate, lower-security wireless network is the safest and most practical solution.

The correct answer is A. Reinstalling the application, because the issue appears to be application-specific rather than system-wide. The problem only affects one game, the operating system is fully updated, and there are no storage constraints. These indicators strongly suggest corrupted application data or a faulty app installation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, when a single application crashes repeatedly, the first recommended troubleshooting step is to remove and reinstall the app. This clears corrupted files, resets application settings, and ensures the latest compatible version is installed.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that factory resets should only be used as a last resort, as they are disruptive and erase user data. Disabling background applications may help performance issues but does not typically resolve persistent crashes tied to one specific app.

The Mike Meyers / Mark Soper Lab Manual further clarifies that date and time misconfiguration usually affects authentication or certificate validation, not game stability.

Because the symptoms are isolated to a single application and basic system factors have already been ruled out, reinstalling the application is the most appropriate first troubleshooting step, making A the correct answer.

Multi-Factor Authentication (MFA) requires at least two different types of authentication factors:

Something you know (e.g., password or PIN)

Something you have (e.g., smartphone or hardware token)

Something you are (e.g., fingerprint or facial recognition)

Option A, sending a code to the user’s phone, is an example of " something you have " — a physical device that receives a one-time passcode. Combined with a password, this forms a proper MFA implementation.

B. Date of birth is another knowledge-based factor (like a password), not a second factor type.

C. Solving a math problem is not a recognized authentication factor.

D. A PIN is also " something you know " and does not count as a distinct MFA factor when paired with a password.

RADIUS (Remote Authentication Dial-In User Service)provides centralized Authentication, Authorization, and Accounting (AAA) for users who connect and use a network service.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“RADIUS is a widely used protocol for implementing AAA in network environments, allowing centralized control over user access and accounting.”

The technician should not disclose information about other customers’ issues, environments, or outcomes because that violates professional confidentiality expectations. Instead, the best response is to explain the general troubleshooting process the technician will follow—such as gathering symptoms, checking logs/connection status, isolating whether the problem is local vs. ISP, testing known-good hardware, and documenting results—without referencing other clients’ specific cases. Quentin Docter emphasizes that as a computer professional you must uphold confidentiality and ensure sensitive information “goes no further,” reinforcing that you should not reveal work-related details to others. The All-in-One guide similarly states that anything you see or are told should be treated as a “personal confidence” and not repeated to customers or others, underscoring why option A is inappropriate. Mike Meyers’ Lab Manual echoes this privacy expectation: treat what you see as confidential and handle customers’ private materials appropriately. Option B dismisses the customer’s concern, and option D is unprofessional and speculative.

Because the requirement is defined by a global security policy , the key question is whether the endpoint is actually receiving and applying the correct Group Policy Object (GPO) settings for screensaver timeout and enforcement. The best command to investigate applied policy is gpresult , which produces the Resultant Set of Policy (RSoP) information. Quentin Docter explains: “The gpresult command is used to show the Resultant Set of Policy (RSoP) report/values for a remote user and computer,” and it helps determine “which settings apply” when policies can be set at the local workstation, domain, user, and computer levels. He notes the /r switch provides a summary and /z gives detailed, “super-verbosity” output showing exact settings being applied.

The All-in-One guide similarly states gpresult gives “a quick overview of all security policies applied to a single user or computer,” which is precisely what you need when a policy-driven screensaver setting isn’t behaving as expected. msinfo32 shows system info, sfc repairs corrupted files, and whoami shows identity—none confirm applied GPO settings like gpresult.

TheServicestool in Windows allows a technician to view service dependencies and status. If the print spooler can ' t start due to a dependency, Services is the correct tool to inspect and manage them.

FromAll-in-One Exam Guide:

“The Services console allows technicians to view, start, and configure system services, including setting recovery actions and viewing dependencies.”

A “central log-in” means users can authenticate using a centralized account database rather than separate local accounts on each PC—this is a core feature of a Windows domain . Mike Meyers explains that a Windows domain makes it easy for anyone with a domain account to log on to any computer in the domain with a single account , a process called “single sign-on (SSO),” and that users do not need a separate local account stored on every computer. The All-in-One guide reinforces the same: in a domain, the domain controller stores domain accounts and “a user logging on to any computer on the domain may use their one domain account to log on to the entire network.”

Active Directory is the directory service commonly used to implement domains, but the question asks what is required for centralized logon on the workstation side— the computer must be joined to the domain (domain membership). Workgroups use only local accounts, and Local Group Policy Editor manages policies locally, not centralized authentication.

In AI terminology,hallucinationrefers to generated output that appears plausible but is factually incorrect.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“AI hallucination describes output that is fluent and coherent but includes information that is entirely fabricated or inaccurate.”

The correct answer is C. DDoS (Distributed Denial-of-Service), because the attack involves thousands of compromised machines, commonly referred to as a botnet, generating fraudulent traffic against an online service. Although the activity includes fake purchases, the scale and distributed nature indicate an attempt to overwhelm or disrupt the service.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, DDoS attacks use multiple systems to flood a target with traffic, exhausting server resources and preventing legitimate users from accessing the service. These attacks often involve compromised devices controlled remotely.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that DDoS attacks can take many forms, including HTTP request floods and application-layer attacks that mimic legitimate user actions, such as fake transactions.

The Mike Meyers / Mark Soper Lab Manual clarifies that brute-force attacks focus on credential guessing, spoofing involves identity falsification, and SQL injection targets database queries. None of those specifically require thousands of compromised machines.

Because the defining characteristics here are scale, distribution, and coordinated malicious activity, the correct classification is a DDoS attack, making C the correct answer.

The correct answer is D. The firewall certificate has expired. The phrase “Your connection is not secure” is a strong browser certificate warning, not a normal VPN credential or client error. Quentin Docter’s Complete Study Guide explains that HTTPS/SSL/TLS communications rely on certificates and that each certificate has an expiration date. When certificates expire, are replaced, or are revoked, browsers may no longer trust the connection. The All-in-One Exam Guide also explains that secure web connections use digital certificates issued by trusted certificate authorities to prove the site or device identity and support encrypted communication. If the organization’s firewall, VPN portal, or SSL inspection device presents an expired certificate, browsers will warn users that the connection is not secure. Incorrect credentials would cause an authentication failure, and not using the VPN client would usually prevent connection rather than create a certificate trust warning.

A Potentially Unwanted Program (PUP) is software that a user may not have knowingly installed. It often gets bundled with legitimate software and installs without full disclosure. PUPs can affect performance, change system settings, or display unwanted ads but are not necessarily malicious like viruses or ransomware.

A. Viruses replicate and spread; they are generally more harmful and not " bundled " in the same way.

B. Ransomware encrypts files for payment and is deliberately malicious.

D. A Trojan disguises itself as legitimate software to perform malicious actions but is not typically pre-bundled by legitimate publishers.

The combination of extreme slowness , browser redirection to unknown sites , outdated antivirus , and blocked access to security settings strongly indicates a malware infection localized to that device (especially since other workstations and network diagnostics are normal). Quentin Docter lists browser redirection as a common security symptom (“Your browser is redirected to websites”) and stresses that if you experience even one of these security symptoms, you should “immediately rectify the security issue or quarantine the system .”

In malware removal best practices, the first operational containment step after verifying symptoms is to isolate/quarantine the infected system to prevent spread, credential theft, or further compromise. Disconnecting the device from the network accomplishes this containment so investigation (logs, scans, offline tools, safe mode, etc.) can be done without risking other systems. Clearing cache (B) is too narrow and doesn’t address blocked security settings/outdated AV. Firewall checks (A) and raising settings (D) don’t contain the threat and may be prevented by the malware itself. Therefore, the next step is to disconnect and investigate .

A blue screen or sudden shutdown generates diagnostic records that persist after reboot, and the primary Windows tool to review those records is Event Viewer . Quentin Docter states: “ Event Viewer should be the first place you look when you are trying to solve a problem whose solution is not evident ,” because the system and applications “will often create an entry… that can be used to… diagnose problems.” He also specifically notes for unexpected shutdowns: “ The first place to check is Event Viewer on the System tab ,” where kernel and EventLog entries help determine whether the system lost power or shut down abnormally.

Mike Meyers reinforces that Event Viewer is how you read Windows logs (Application, Security, Setup, System) and that the details pane shows information about the selected event, which is exactly what you need when the on-screen error flashes too quickly. Performance Monitor is for counters/trends, Device Manager focuses on hardware status/drivers, and System Information shows configuration—not the crash/shutdown event details. Hence, Event Viewer (C) is correct.

The correct answer is B. Getting assistance to lift the hardware . A rack-mounted UPS can be very heavy because it contains one or more internal batteries. When replacing or installing heavy rack-mounted equipment, the technician must consider personal safety and proper lifting techniques before performing the work. The Sybex practice-test explanations state that a UPS, also called a battery backup, can range in size from a small unit to equipment as large as an entire server rack, and it contains batteries and fuses used to provide power protection during power problems. The same source also explains that technicians should bend at the knees, lift with the legs, observe weight limitations, and use a partner lift or cart when needed. Compressed air is related to cleaning, not replacing a UPS. Low-voltage regulations and fire suppression systems may be relevant to facility planning, but the immediate safety concern when replacing rack-mounted hardware is safe lifting and handling.

This scenario is phishing delivered through a QR code (scan an image to reach a portal), which is best described as quishing . Quentin Docter defines phishing as a social engineering method where the attacker makes a message look legitimate and convinces the user to click a link to “correct” an account problem; after the click, the victim is taken to a site controlled by the attacker and asked for credentials. A QR code in a message is simply an alternate way to deliver that same malicious “link” without showing the URL clearly.

The Mike Meyers Lab Manual distinguishes related social engineering types: vishing is done by phone calls, and whaling targets high-level executives. Smishing is phishing delivered via SMS text messages, but the prompt specifically centers on scanning an image (QR-style workflow), not a text-message attack vector.

Docter also notes QR codes are commonly used in authentication workflows (for example, adding accounts to authenticator apps), which is why attackers mimic this behavior to make the scam seem normal. Therefore, QR-based phishing is best labeled quishing .

When DHCP isn’t enabled, static IPs must be assigned manually, so the engineering team provides the IP details.

From Travis Everett – All-in-One Exam Guide:

“If DHCP is unavailable, technicians need the static IP configuration to connect devices to the network.” .

The user’s issue likely stems from amobile data restriction or cap, especially since uploads work on Wi-Fi but not cellular. Checkingdata usage limitswill help determine if mobile uploads are blocked.

FromAll-in-One Exam Guide:

“When data-intensive functions fail on mobile networks but not on Wi-Fi, it’s often due to data caps or metered connection limits.”

Mobile Device Management (MDM) is used to control, monitor, and enforce policies on mobile devices. It allows IT teams to restrict app installations, push approved apps, and monitor device compliance. Deploying MDM would prevent unauthorized applications, such as password crackers, from being installed on company-managed devices.

A. Group Policy is for managing Windows environments and not applicable to smartphones.

B. PAM (Privileged Access Management) controls administrative access, not app installation.

C. Anti-malware can help detect malicious apps but doesn’t prevent their installation proactively.

Windows doesn ' t natively support many Linux file systems (like ext4).Reformatting to exFATmakes the drive readable/writable on both Linux and Windows.

FromAll-in-One Exam Guide:

“For cross-platform compatibility, exFAT is recommended as it supports large files and is recognized by Windows, macOS, and Linux (with exFAT drivers).”

The best first step is to leverage existing documentation: check whether the issue was previously recorded and resolved, and reuse that known fix (or confirm conditions). Mike Meyers explains ticketing systems capture key information needed to resolve issues, including “ problem description ,” “ progress notes ,” and “ problem resolution ,” and stresses that “ Clear, concise writing is critical ” because you “won’t be the only tech responding to every ticket.” That is exactly why you review prior tickets first—so you can quickly see what was done previously and apply it consistently.

The All-in-One guide reinforces the same ticketing-system concept and lists the same essential elements (description, notes, resolution) used to streamline troubleshooting and escalation. Consulting the prior technician (A) may be impossible (the employee is gone) and slower than checking documented history. Opening a new case (D) is important, but the question asks what to do first —review the prior occurrence details, then document your current case using what you find.

When a Windows service suddenly stops and then fails to start manually, one of the first places to confirm why it cannot start is the service logon context. A very common root cause is that the account configured on the service cannot authenticate anymore—often because the password changed or the account is locked. Quentin Docter notes that if the service fails due to misconfiguration, “the most likely cause is the user account the service is configured to start with,” and you should ensure “the user account is not locked out.” This aligns with standard service troubleshooting: check Event Viewer (Service Control Manager events) for login failures, then validate the service’s Log On tab configuration and the account state.

The All-in-One guide also reinforces validating services via the Services console and correcting service settings when services fail to start.

Therefore, the best cause given the options is that the service account is locked out (C).

Persistent pop-ups urging antivirus updates are likelyscareware or adware. The correct approach is toverify existing antivirus settings, run a trusted security scan, and avoid interacting with unknown pop-ups.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Users should verify antivirus status using trusted tools before responding to alerts. Fake updates are common vectors for malware.”

exFATis the only listed file system that supports both read and write access across Windows, macOS, and Linux (with appropriate drivers). It’s optimized for flash storage and external drives.

FromAll-in-One Exam Guide:

“exFAT is a lightweight file system with cross-platform read/write support, ideal for use on removable drives when compatibility is essential.”

Badge readers are electronic access control systems that require authorized users to scan a badge (e.g., RFID or magnetic strip cards) to gain access to restricted physical locations. These systems typically log all access attempts—successful or denied—providing both detection and recording of access events.

A. Bollards are physical barriers to prevent vehicle access.

B. Video surveillance can record access visually but does not track identity unless integrated with access control systems.

D. A fence restricts access but doesn ' t detect or record who entered.

The correct answer is C. Browser policy, because the listed requirements apply specifically to browser-level behavior and settings, not general network traffic or system-wide configuration. Browser policies allow administrators to centrally control how browsers behave on managed systems.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that modern browsers support administrative templates or policies that govern password storage, trusted sites, security levels, history handling, and URL restrictions. These policies ensure consistent behavior across all user systems without relying on manual configuration.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide clarifies that while Group Policy can deploy browser policies, the object being configured is still the browser itself. The question asks what is best to configure, not how it is delivered. Browser policies directly control password management, trusted URLs, and security zones.

The Mike Meyers / Mark Soper Lab Manual further notes that web proxies and gateways filter traffic at the network level and cannot control local browser features such as password storage or history retention.

Because every listed requirement is a browser-specific control, the most accurate and targeted solution is Browser policy, making C the correct answer.

3-D rendering is a graphics-intensive workload, and minimum hardware checks for this type of software commonly fail due to GPU capability (including dedicated vs. integrated GPU support) and VRAM requirements. Quentin Docter explains that application “Display” requirements can include “a graphics processing unit (GPU). A specific GPU may be required if the application will process video or graphics.” He also notes that “VRAM requirements are typically related to applications that are graphic intensive, such as gaming,” which aligns strongly with 3-D rendering workloads.

Mike Meyers’ Lab Manual reinforces that “graphically demanding applications… state specific graphics requirements,” and that CompTIA focuses on “dedicated graphics cards versus integrated ones,” because integrated GPUs are often less capable for demanding graphics tasks. It also reminds that systems with integrated GPUs share RAM with graphics, which can matter when software checks VRAM.

Therefore, the first thing to verify is GPU requirements (B), not USB/NIC/PSU.

Linux is an open-source operating system that is freely available and does not require traditional licensing fees. It is highly versatile and scalable, making it suitable for both workstations and servers. Many enterprise environments use Linux to reduce software costs and benefit from robust server features.

B. Windows requires per-device or per-user licensing for both workstation and server editions.

C. macOS is proprietary and limited to Apple hardware with licensing restrictions.

D. Chrome OS is designed for lightweight devices and lacks server functionality.

The 3-2-1 backup rule is specifically about number of copies, diversity of media, and offsite storage. “2” in 3-2-1 means using two different types of media. The All-in-One guide states the rule plainly: “keep at least three copies of your data on at least two different types of media… and store at least one copy offsite.” Mike Meyers’ Lab Manual repeats the same definition word-for-word, emphasizing two different media types and one off-site copy.

Quentin Docter explains the same method and gives an example: original data plus an on-site backup, plus “a third copy… off site,” such as backing up to the cloud.

Given the options, only D directly satisfies the “two different media” requirement. Option C contradicts the offsite requirement, option B invents a testing interval not defined by 3-2-1, and option A is about backup types rather than the core 3-2-1 rule. Therefore D is correct.

For legacy Windows systems, the simplest and most compatible approach is a Windows batch script using built-in commands like net use. Quentin Docter explains that “Remapping network drives can be done… with VBScript, PowerShell, Window batch scripts… However, Windows batch script and Pow erShell are the most common,” and shows the batch method using net use m: \\server1\files. Because the scenario specifies legacy equipment and simple Windows commands, batch scripting is the best fit: it runs directly under cmd.exe without needing additional runtimes or frameworks that may be missing or unsupported on an end-of-life OS.

Mike Meyers’ Lab Manual reinforces that “The net use command is a command-line method for mapping network shares,” giving the example net use x: \\server1\research. The All-in-One guide provides the same exact mapping approach and emphasizes that net use maps a drive letter to a UNC path.

Therefore, the best script type here is Batch (B).

To work remotely without physically transporting a workstation, the user needs:

C. RDP (Remote Desktop Protocol): Allows graphical remote access to a Windows PC at the office.

D. VPN (Virtual Private Network): Establishes a secure tunnel to access the corporate network remotely, making the internal PC reachable.

A. SPICE is used in virtual machine environments and is not typically used for end-user remote desktop access.

B. SSH is a text-based remote access tool used mostly for Linux systems.

E. RMM (Remote Monitoring and Management) is used by IT administrators for support — not end-user remote access.

F. WinRM is used for Windows remote management via PowerShell, not for full desktop access.

A .bat file (batch file) is a script file in DOS, OS/2, and Microsoft Windows. It contains a series of commands that are executed by the command-line interpreter. In Windows environments, batch files are commonly used to automate log-in tasks, such as mapping network drives, launching applications, or setting environment variables during the user ' s logon process.

B. .sh is a shell script used in Linux/Unix environments.

C. .py is a Python script, which can be used for automation but is not commonly run directly at user logon in standard Windows environments.

D. .js is JavaScript, used mainly in web development and not for system-level scripting in Windows logon automation.

Cloud-based software often enforcesdevice limitsper license. Before reinstallation or switching software, checking license allocations is the most logical first step.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Many cloud apps enforce user or device count restrictions. When an install fails, check licensing before troubleshooting other areas.”

A VPN is the best choice because it is designed to provide secure remote access to an internal network over the Internet by creating an encrypted tunnel. Once the VPN is established, the remote user’s device effectively becomes part of the corporate network and can use the appropriate tools for each server type (for example, SSH to Linux and RDP to Windows) without exposing those management services directly to the public Internet. Quentin Docter explains that a VPN “extends your company’s internal network across the Internet,” creating a private connection through “encryption and encapsulation,” and that the host becomes part of the internal network (often receiving an internal IP). The All-in-One guide reinforces this by describing VPNs as an encrypted tunnel over the open Internet.

By comparison, RDP is “used exclusively with Microsoft operating systems,” so it doesn’t meet the Linux requirement. FTP is for file transfers, not full secure remote access, and RMM is primarily for centralized IT monitoring/management rather than a general user remote-access method.