220-1202 CompTIA A+ Core 2 2025 Exam Questions and Answers

Comprehensive and Detailed Explanation From Exact Extract:

A Potentially Unwanted Program (PUP) is software that a user may not have knowingly installed. It often gets bundled with legitimate software and installs without full disclosure. PUPs can affect performance, change system settings, or display unwanted ads but are not necessarily malicious like viruses or ransomware.

A. Viruses replicate and spread; they are generally more harmful and not "bundled" in the same way.

B. Ransomware encrypts files for payment and is deliberately malicious.

D. A Trojan disguises itself as legitimate software to perform malicious actions but is not typically pre-bundled by legitimate publishers.

Comprehensive and Detailed Explanation From Exact Extract:

AnNDA (Non-Disclosure Agreement)is used to ensure confidentiality of sensitive company information, especially when interacting with external parties.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“An NDA ensures that confidential information is not disclosed to unauthorized individuals, especially important in external communications.”

Comprehensive and Detailed Explanation From Exact Extract:

NET Framework versions are often required for applications to run. If an older app requires .NET Framework 3.5, it must be explicitly installed as it is not included by default in newer versions of Windows. The best method to do this safely is through the built-in "Turn Windows features on or off" utility, which downloads and installs it via official Microsoft services.

B. Using third-party repositories is unsafe and not recommended.

C. Installing .NET 4 does not include 3.5; versions are not fully backward compatible.

D. The issue is technical, not a security incident for the SOC team.

The correct answer is C. Listen to the customer’s concerns and acknowledge their frustrations, because effective communication and empathy are critical components of professional help desk interactions—especially when customers are upset.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, technicians should always demonstrate active listening, empathy, and professionalism. Acknowledging a user’s frustration helps de-escalate tense situations and builds trust.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that users who feel unheard are less cooperative and more dissatisfied. Before troubleshooting or escalation, technicians should validate the customer’s experience and reassure them that the issue will be addressed.

The Mike Meyers / Mark Soper Lab Manual reinforces that blaming previous technicians or immediately escalating without communication can worsen the situation. Asking technical questions too early may come across as dismissive.

Because the goal is to communicate professionally and effectively, the technician should first listen and acknowledge the user’s frustration, making C the correct answer.

The correct answer is A. Remove account administrative rights, because unauthorized software installation is most commonly possible when users have local administrator privileges. In Windows environments, installing most applications requires elevated permissions. If users are members of the local Administrators group, they can bypass many built-in security controls and install software without IT approval.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the principle of least privilege is fundamental to endpoint security. Users should only be granted the minimum permissions necessary to perform their job functions. Removing administrative rights prevents users from installing unapproved applications and significantly reduces malware risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while technologies like firewalls, SmartScreen, and Endpoint Detection and Response (EDR) provide important layers of protection, they do not directly stop users from installing software if they already have administrative access. EDR detects and responds to threats, but it does not prevent intentional installation by privileged users.

The Mike Meyers / Mark Soper Lab Manual reinforces that controlling user permissions is the most effective preventive control against unauthorized changes to a system. Removing admin rights stops the root cause rather than reacting after installation occurs.

Therefore, to prevent future unauthorized software installations, removing account administrative rights is the most direct and effective solution, making A the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Thepowercfg commandis a built-in utility for controlling power settings including hibernation. It can be used in scripts and does not require domain access.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“The powercfg command provides granular control of power settings, useful for scripting and configuring systems without Group Policy access.”

The correct answer is C. Change the User Account Control (UAC) settings, because the credential prompt during installation indicates that the system is requesting administrative privileges. In Windows environments, UAC is designed to prevent unauthorized system changes by prompting for administrator approval when elevated permissions are required.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, UAC acts as a security boundary between standard user activities and system-level changes such as software installation. If a user does not have sufficient privileges, the system will request administrator credentials before proceeding.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that technicians can temporarily adjust UAC settings or provide proper elevation to allow legitimate installations. This is especially common in corporate environments where users operate with standard accounts.

The Mike Meyers / Mark Soper Lab Manual reinforces that restarting the computer or using a different browser does not change permission requirements. Contacting the software vendor is unnecessary when the issue is clearly related to local security controls.

Because the installation is blocked by privilege restrictions enforced by UAC, adjusting User Account Control settings or providing proper elevation is the correct and most efficient resolution, making C the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple's proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

Comprehensive and Detailed Explanation From Exact Extract:

Multifactor authentication (MFA) is considered one of the most effective security measures for cloud environments. It requires users to verify their identity using two or more factors (e.g., password + phone app code), making it significantly harder for external attackers to gain access, even if the primary password is compromised.

B. Encryption is important for data protection but doesn’t prevent unauthorized logins.

C. Backups protect against data loss but don’t stop breaches.

D. Strong passwords are helpful but can still be phished or cracked — MFA adds a critical extra layer.

Comprehensive and Detailed Explanation From Exact Extract:

Once the system is cleaned, the next priority is toeducate the useron safe practices to prevent recurrence.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Post-malware remediation should include user education to prevent reinfection and identify how the malware was introduced.”

Comprehensive and Detailed Explanation From Exact Extract:

Event Viewer is the best tool to analyze the root cause of service failures in Windows. It provides detailed logs from system processes, including errors, warnings, and crash reports related to services and applications. When a service starts and stops unexpectedly, Event Viewer will often record the cause, such as dependency failures or access violations.

B. Task Manager shows active processes but doesn't retain logs or causes of failure.

C. Internet Options is used for configuring browser settings, not troubleshooting services.

D. Process Explorer is powerful but more suited for live monitoring and detailed process trees, not post-failure log analysis.

Comprehensive and Detailed Explanation From Exact Extract:

If internal resources (such as intranet or internal apps) can't be accessed but external sites work, this often points to aDNS issue, where the system isn't resolving internal domain names correctly.

FromAll-in-One Exam Guide:

“When internet access is functional but internal sites fail to load, the issue usually lies with DNS resolution. Internal resources often require internal DNS servers, which may not be configured correctly.”

Comprehensive and Detailed Explanation From Exact Extract:

The symptoms suggest abrowser hijacker. Thefirst stepsshould be toremove any malicious extensionsandreset the startup pageto restore normal behavior.

FromAll-in-One Exam Guide:

“Browser hijackers often install as extensions and change homepage settings. Removing these extensions and resetting the startup configuration typically resolves the issue.”

The Local Users and Groups Manager (lusrmgr.msc) is the utility for managing user accounts, including renaming the default Administrator.

From Quentin Docter – Complete Study Guide:

“The lusrmgr.msc snap-in allows renaming and managing local user accounts, including the default administrator.” .

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

The correct answer is B. Create and assign a security group with adequate permissions, because group-based permission management is the most efficient and scalable way to control access to shared resources. By assigning permissions to a group rather than individual users, administrators reduce administrative overhead and simplify future changes.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, security groups are a best practice for managing access to files, folders, and repositories. Permissions are assigned once to the group, and users inherit those permissions by being members of the group.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that granting administrative permissions is excessive and violates the principle of least privilege. Applying permissions individually increases complexity and the risk of configuration errors, especially as team membership changes.

The Mike Meyers / Mark Soper Lab Manual further clarifies that mapping a network folder does not control permissions; it only provides access to a resource that is already governed by permissions. Group-based access ensures consistency, security, and minimal effort.

Because the requirement is to allow specific actions while preventing deletion—and to do so with the least amount of effort—creating and assigning a properly permissioned security group is the optimal solution, making B the correct answer.

Microsoft Edge most commonly blocks “unrecognized” or “potentially unsafe” downloads through Microsoft Defender SmartScreen, which is a reputation-based protection feature integrated into Windows/Edge. When SmartScreen cannot establish trust in a downloaded file (often because the file type is commonly abused or the file has low reputation), it can warn or block the download even if the technician believes the file is legitimate. In this scenario, the technician should adjust SmartScreen settings (rather than disabling antivirus, UAC, or the firewall) to permit the download while keeping other protections intact. This aligns with Windows security management concepts: Windows includes built-in protections (Microsoft Defender and related safeguards) that can be configured through Windows Security, and technicians should tune the specific protection causing the block instead of broadly weakening system security. Also, browser security options are managed from the browser’s Settings area, reinforcing that the correct fix is changing the browser’s download/reputation protection behavior rather than network or privilege controls.

Comprehensive and Detailed Explanation From Exact Extract:

Shreddingphysically destroys the platters, making data recovery virtually impossible. It's more effective and accessible than degaussing or low-level formatting.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Physical destruction methods like shredding are the most secure options for ensuring data on failed drives cannot be recovered.”

The most likely reason a legacy tablet cannot run the latest version of an app is that the tablet’s operating system is end-of-life (EOL) or otherwise too old to meet the app’s supported OS/version requirements. Quentin Docter explains that an OS life cycle ends when it is no longer supported, and that an OS at end-of-life will no longer receive updates (including feature updates), making it increasingly incompatible with modern software that expects newer OS frameworks and APIs. The All-in-One guide reinforces this by noting that apps may fail to launch or install when they are not compatible with the device’s OS version (or related vendor customizations).

While insufficient storage can also prevent an update, that typically produces an “update failed/not enough space” condition rather than a consistent inability to use the latest version due to platform support; Mike Meyers’ Lab Manual specifically calls out free space as a common cause of update failures. MDM restrictions and malware are possible but are less “most likely” for a personal legacy tablet.

The correct answer is C. BAT, because batch files are specifically designed to execute a sequence of commands automatically in Windows environments. They are commonly used for startup tasks such as launching applications, mapping network drives, setting environment variables, or running maintenance scripts.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, batch files (.bat) are text-based scripts interpreted by the Windows Command Processor (cmd.exe). They are lightweight, easy to create, and can be placed directly in startup folders or scheduled through system tasks.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that batch files are ideal for automation because they do not require compilation and can run without user interaction. This makes them well-suited for startup operations that must execute consistently every time the system boots or a user logs in.

The Mike Meyers / Mark Soper Lab Manual contrasts batch files with other file types: .sh files are used in Linux and macOS, .msi files are installer packages, and .exe files are compiled programs that may prompt user interaction or security warnings.

Because batch files are native to Windows, scriptable, and commonly used for startup automation, C. BAT is the correct answer.

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

1st CLI Resolution

copy "C:\Program Files\Testing\msvcp100.dll" "User-PC02\C$\Windows\System32" /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

>Select reply:"I am happy to assist you today."

Second Chat Response:When the user states that they need to set up basic security settings:

>Select reply:"Is this the first router in your office?"

Third Chat Response:After learning it's a replacement router and the user is logged into the router's web page:

>Select reply:"The first thing you need to do is change the default password."

Fourth Chat Response:For the response about password settings:

>Select reply:"Create a new password with an uppercase, a lowercase, and a special character."

Fifth Chat Response:When the router prompts to reboot:

>Select reply:"Yes, reboot please."

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

Comprehensive and Detailed Explanation From Exact Extract:

Since the issue has recurred after a temporary fix, it is likely a deeper or persistent configuration or server issue. Escalating the ticket to the next tier of support (e.g., network or system administrator) ensures further investigation and permanent resolution. Escalation is part of the standard support protocol when issues reoccur despite initial troubleshooting.

A. Rechecking remotely may confirm the issue, but doesn’t resolve it long term.

B. Providing documentation helps the user but doesn’t solve the root cause.

D. Keeping the ticket open is passive and doesn’t address the recurring issue.

Comprehensive and Detailed Explanation From Exact Extract:

Smishing (SMS phishing) is a type of social engineering attack where attackers send fraudulent text messages to trick users into revealing sensitive information or downloading malware. These messages often impersonate banks, delivery services, or official institutions to lure the victim into clicking malicious links.

A. Impersonation is an in-person or voice-based tactic.

B. Vishing refers to voice phishing over phone calls.

C. Spear phishing is a targeted email-based phishing method.

Comprehensive and Detailed Explanation From Exact Extract:

A Zero-day vulnerability refers to a security flaw in software or hardware that is unknown to the vendor or has not yet been patched. If this vulnerability is exploited before the vendor has issued a fix or patch, it becomes a Zero-day exploit. These attacks are highly dangerous because they take advantage of the absence of defenses due to the lack of awareness or mitigation options.

A. Spoofing is a form of impersonation, not necessarily tied to unpatched vulnerabilities.

B. Brute-force attacks rely on repeatedly guessing credentials and are not related to software flaws.

C. DoS (Denial of Service) attacks are meant to overwhelm systems and don't necessarily exploit unknown vulnerabilities.

Comprehensive and Detailed Explanation From Exact Extract:

For persistent printing issues due to spooler service, ensure theprint spooler is started and set to Automatic. This maintains print capability across reboots.

FromMike Meyers' Lab Manual:

“If users lose printing capabilities on reboot, the print spooler service must be configured to start automatically and be confirmed as running.”

Comprehensive and Detailed Explanation From Exact Extract:

Group Policyis the standard administrative tool for setting user permissions across domain-joined systems.

FromQUENTIN DOCTER – COMPLETE Study Guide:

“Use Group Policy to enforce user rights, including disabling guest account access on domain computers.”