220-1202 CompTIA A+ Core 2 2025 Exam Questions and Answers

Comprehensive and Detailed Explanation From Exact Extract:

Cryptominersexploit system resources to mine cryptocurrency, often without user consent, leading to high CPU and GPU usage.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Cryptomining malware can cause significant performance degradation by monopolizing system resources like CPU and GPU to mine digital currency.”

Comprehensive and Detailed Explanation From Exact Extract:

Multi-Factor Authentication (MFA) requires at least two different types of authentication factors:

Something you know (e.g., password or PIN)

Something you have (e.g., smartphone or hardware token)

Something you are (e.g., fingerprint or facial recognition)

Option A, sending a code to the user’s phone, is an example of "something you have" — a physical device that receives a one-time passcode. Combined with a password, this forms a proper MFA implementation.

B. Date of birth is another knowledge-based factor (like a password), not a second factor type.

C. Solving a math problem is not a recognized authentication factor.

D. A PIN is also "something you know" and does not count as a distinct MFA factor when paired with a password.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-generated content may be incorrect.

A screenshot of a computer AI-generated content may be incorrect.

Comprehensive and Detailed Explanation From Exact Extract:

Cloud-based software often enforcesdevice limitsper license. Before reinstallation or switching software, checking license allocations is the most logical first step.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Many cloud apps enforce user or device count restrictions. When an install fails, check licensing before troubleshooting other areas.”

Comprehensive and Detailed Explanation From Exact Extract:

After containment and remediation, one of the final steps in incident response is user education. Since the root cause was a phishing attack, it is essential to educate users about identifying phishing attempts, safe browsing practices, and how to handle suspicious communications. This improves overall security posture and helps prevent future incidents.

A. Installing additional tools may be helpful but is a long-term step.

C. Flashing router firmware is not warranted unless the network hardware is known to be compromised.

D. Suggesting more advanced tools might be excessive given that the EDR successfully contained the incident.

Comprehensive and Detailed Explanation From Exact Extract:

Just recognizing the device isn’t enough—audio output must be routed to it manuallyby setting it as the default playback device in sound settings.

FromMark Soper – Mike Meyers' Lab Manual:

“If audio is still playing through the internal speaker, verify that the Bluetooth headset is set as the default playback device. This can be configured under Windows Sound Settings.”

Comprehensive and Detailed Explanation From Exact Extract:

exFATis the only listed file system that supports both read and write access across Windows, macOS, and Linux (with appropriate drivers). It’s optimized for flash storage and external drives.

FromAll-in-One Exam Guide:

“exFAT is a lightweight file system with cross-platform read/write support, ideal for use on removable drives when compatibility is essential.”

Screensaver lockshelp protect unattended workstations.

BIOS passwordsprevent unauthorized changes at startup or during boot.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“Applying a BIOS password adds a pre-boot security layer. Screensaver locks help protect logged-in sessions during idle times.”

A VPN creates a secure tunnel from the user’s home network into the corporate network, providing the necessary routing and access controls for the laptop to reach internal file servers. Without a VPN, the device remains outside the corporate LAN and cannot directly reach protected resources.

A VPN creates a secure tunnel from the user’s home network into the corporate network, providing the necessary routing and access controls for the laptop to reach internal file servers. Without a VPN, the device remains outside the corporate LAN and cannot directly reach protected resources.

Comprehensive and Detailed Explanation From Exact Extract:

Device encryptionensures that even if someone bypasses biometrics or has physical access to the phone, they cannot read the stored data without the encryption key.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Encryption is the most effective way to protect data at rest. Even if the device is lost or stolen, encryption ensures the data remains inaccessible without the correct key or passcode.”

Comprehensive and Detailed Explanation From Exact Extract:

When a technician exhausts all troubleshooting steps within their knowledge and the issue remains unresolved, the best practice is to escalate the issue to a higher-level technician or team. Additionally, the technician should clearly communicate the next steps to the customer to maintain transparency and reduce frustration. This ensures continuity of support and upholds customer satisfaction.

B. Dismissing the customer is unprofessional and violates proper customer service protocols.

C. Interrupting the customer and providing excuses escalates the tension and is inappropriate.

D. Continuing to ask questions without new troubleshooting steps wastes time and increases frustration.

Comprehensive and Detailed Explanation From Exact Extract:

A low-level format (also referred to as a zero-fill or full format) writes over every sector on a storage device, effectively destroying the existing data and making recovery nearly impossible. Unlike degaussing, which renders the drive unusable, a low-level format maintains the integrity of the device, allowing it to be repurposed or reused.

A. Deleting partitions does not fully erase data; it only removes references in the partition table.

B. EFS (Encrypting File System) encrypts files but does not securely wipe them.

D. Degaussing destroys the magnetic structure of a drive, making it inoperable and not reusable.

Comprehensive and Detailed Explanation From Exact Extract:

Many modern commercial software applications (including photo editors like Adobe Photoshop) offer tiered features based on user subscriptions or license levels. If certain features are locked and prompt for a login, the issue is likely due to a missing or unassigned software license. Assigning the correct license through a centralized license management system (such as Adobe Admin Console or Microsoft 365 portal) will enable those features.

B. VPN connection does not affect local software licensing.

C. Repairing the application does not resolve license entitlement.

D. Reinstalling the software won’t help unless the license is assigned.

Comprehensive and Detailed Explanation From Exact Extract:

The Linux machine likely formatted the drive in a file system like ext4, which Windows cannot natively read. Reformatting the drive toexFATallows cross-platform compatibility.

FromAll-in-One Exam Guide:

“When migrating data between OSes, using a file system like exFAT ensures compatibility. Windows cannot read Linux-native file systems such as ext4 without third-party tools.”

TheLocal Users and Groups Manager (lusrmgr.msc)is the utility for managing user accounts, including renaming the default Administrator.

FromQuentin Docter – Complete Study Guide:

“The lusrmgr.msc snap-in allows renaming and managing local user accounts, including the default administrator.” .

Comprehensive and Detailed Explanation From Exact Extract:

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple's proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

Comprehensive and Detailed Explanation From Exact Extract:

Group Policyis the standard administrative tool for enforcing security and configuration settings across domain-joined systems, including disabling guest accounts.

FromQuentin Docter – CompTIA A+ Study Guide:

“Disabling guest accounts and applying consistent security policies across multiple machines is best achieved through Group Policy on a Windows domain.”

Comprehensive and Detailed Explanation From Exact Extract:

Virtualizationallows the legacy OS to be run in a virtual machine (VM) on top of the newer OS. This method provides backward compatibility without requiring outdated operating systems on physical hardware.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Using virtualization is a preferred method when legacy applications are needed after migrating to newer operating systems. It allows legacy environments to exist securely within a modern OS framework.”

Comprehensive and Detailed Explanation From Exact Extract:

MDR (Managed Detection and Response)provides outsourced threat monitoring and response using multiple tools. The use of athird-party providerfor protection and incident handling confirms MDR.

FromQuentin Docter – CompTIA A+ Study Guide:

“MDR provides 24/7 threat detection and response through outsourced experts using advanced tools across client environments.”

Comprehensive and Detailed Explanation From Exact Extract:

The issue described—“domain cannot be found” despite the ability to ping the server and access the internet—indicates aDNS resolution problem, not a network connectivity issue. The workstation is currently usingpublic DNS servers (8.8.8.8 and 1.1.1.1)whichcannot resolve internal domain names, such as the ones used in Active Directory environments. To resolve this, the technician needs tochange the DNS settings to point to the internal DNS server, which in most domain setups is thedomain controller itself (likely 192.168.1.10 in this case).

Here’s the breakdown of the incorrect options:

B. Assign a static IP address: The IP is already assigned and functioning; the device can ping and reach the network and internet.

C. Configure a subnet mask: The subnet mask is appropriate for the network range (Class C /24).

D. Update the default gateway: The gateway is valid and allows internet access; this is not the issue.

CompTIA A+ 220-1102 Core 2 Objective Reference:

Objective 1.8 – Given a scenario, use features and tools of the operating system.

Under this objective, candidates must know how to troubleshoot OS-based network configurations, includingproper DNS settings in domain environments.

—

Comprehensive and Detailed Explanation From Exact Extract:

Multifactor authentication (MFA) is considered one of the most effective security measures for cloud environments. It requires users to verify their identity using two or more factors (e.g., password + phone app code), making it significantly harder for external attackers to gain access, even if the primary password is compromised.

B. Encryption is important for data protection but doesn’t prevent unauthorized logins.

C. Backups protect against data loss but don’t stop breaches.

D. Strong passwords are helpful but can still be phished or cracked — MFA adds a critical extra layer.

Comprehensive and Detailed Explanation From Exact Extract:

Remote wipeis a mobile device management (MDM) feature that allows administrators to erase data remotely if a device is lost or stolen, preventing unauthorized access to corporate or personal information.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Remote wipe features enable a device to be cleared of all sensitive data if it is lost or stolen. This is one of the most effective ways to prevent unauthorized access to corporate resources.”

Comprehensive and Detailed Explanation From Exact Extract:

The scenario involves an application that should retrieve data from a local database server but is failing to do so. This likely indicates a problem in communication between the application and the database server (such as a network issue, port misconfiguration, or service unavailability). The correct troubleshooting approach involves testing the network/service connectivity between the client and the database.

Let’s examine the options:

A. ipconfig:This command displays IP configuration details for Windows systems, such as IP address, subnet mask, and default gateway. While useful for diagnosing general network issues, it does not test service connectivity or the availability of a specific application port/service.

B. nslookup:Used to query DNS servers to resolve domain names to IP addresses. However, since the question references a local server (likely accessed via IP or static hostname), DNS is probably not involved. Also, it does not test application/service availability.

C. netstat:Displays active TCP connections, listening ports, and routing tables. It helps determine whether the local system is listening for or maintaining any network connections, but it does not initiate a connection to test availability. It’s diagnostic but not interactive for service testing.

D. curl:This is the most appropriate tool for this scenario. curl is used to test connectivity to services over protocols like HTTP, HTTPS, FTP, and more. If the application retrieves data via a web interface or API (common in database-driven applications), curl can be used to test if the application can successfully reach and retrieve data from the server. It provides immediate, testable feedback on whether the server and service are available and responsive.

Example usage:

curlhttp://localhost:8080/api/data

This command would test whether a local server's application programming interface (API) is available and responding on port 8080.

CompTIA A+ 220-1102 Reference Points:

Objective 2.4: Given a scenario, use appropriate tools to troubleshoot and support Windows OS issues.

Objective 3.3: Use appropriate tools to troubleshoot and resolve issues.

The CompTIA A+ Core 2 study guide references curl as a useful command-line utility for testing connectivity and troubleshooting application access to services.

===========================

In AI terminology,hallucinationrefers to generated output that appears plausible but is factually incorrect.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“AI hallucination describes output that is fluent and coherent but includes information that is entirely fabricated or inaccurate.”

Comprehensive and Detailed Explanation From Exact Extract:

Disk optimization tools can sometimes corrupt theMaster Boot Record (MBR). If BIOS sees the drive but can't boot, repairing the MBR using installation media is the correct next step.

FromAll-in-One Exam Guide:

“When BIOS recognizes the drive but no OS is found, the issue is often with the boot record. Use installation media to access recovery tools and repair the MBR or boot loader.”

Comprehensive and Detailed Explanation From Exact Extract:

RAM is an electrostatic-sensitive component. When removing or transporting RAM modules, they should be stored in antistatic bags to protect against electrostatic discharge (ESD), which can damage the memory. This is a standard best practice in hardware handling.

A. Demagnetization is not applicable to RAM.

C. Plugging in power to ground is not safe or recommended for static protection.

D. Installing identical memory pairs is applicable for dual-channel configuration, but not directly related to transporting or handling RAM.

Comprehensive and Detailed Explanation From Exact Extract:

Highmemory usage (97%)suggests the system is overloaded with active processes. The technician should close unneeded applications to free up RAM and improve performance.

FromMike Meyers' Lab Manual:

“When memory usage is near capacity, close all non-essential programs. This can dramatically improve response time without needing hardware upgrades.”

When DHCP isn’t enabled, static IPs must be assigned manually, so the engineering team provides the IP details.

FromTravis Everett – All-in-One Exam Guide:

“If DHCP is unavailable, technicians need the static IP configuration to connect devices to the network.” .

Comprehensive and Detailed Explanation From Exact Extract:

UPS batteries are heavy and often located at the bottom of racks to maintain balance. Safe removal requires the use of correct lifting techniques to avoid injury. OSHA and workplace safety standards emphasize ergonomic handling when dealing with heavy equipment.

A. Fire suppression readiness is important for fire safety but not specifically relevant to battery removal.

C. Antistatic bags are for electronic components, not heavy battery modules.

D. A face mask is not generally necessary unless there is a chemical leak, which is not indicated here.

Comprehensive and Detailed Explanation From Exact Extract:

Virtualization settings are typically found within the BIOS/UEFI firmware configuration. To prevent unauthorized users from changing these settings, the technician should set a BIOS password. This ensures only administrators with the password can access or modify BIOS settings, including virtualization support.

B. The guest account is a user-level feature in Windows and doesn’t control BIOS access.

C. A screen lock prevents casual access to the desktop but doesn’t protect firmware settings.

D. AutoRun controls how media and devices behave when inserted — unrelated to BIOS security.

Comprehensive and Detailed Explanation From Exact Extract:

A corruptedMaster Boot Record (MBR)is a common issue after disk manipulation. Booting from installation media and using tools like bootrec to repair the MBR can resolve the problem.

Travis Everett – All-in-One Exam Guideexplains:

“A damaged MBR may result in the OS not loading. Booting from recovery or installation media and selecting startup repair or running bootrec commands can restore functionality.”

Comprehensive and Detailed Explanation From Exact Extract:

ApplicationsandLibraryare core system directories in macOS. TheApplicationsfolder contains installed applications. TheLibraryfolder contains support files, preferences, and other system-related files.

From theQuentin Docter – CompTIA A+ Complete Study Guide:

“macOS organizes system and user files into several key folders. Among them, Applications and Library are standard system folders where apps and related files are stored.”

Comprehensive and Detailed Explanation From Exact Extract:

If unauthorized or non-standard applications are appearing on systems and users are receiving licensing prompts, it’s likely users are installing software themselves. Removing users from the local administrators group will prevent them from installing software without approval and reduce the likelihood of introducing unapproved or malicious programs.

A. Deploying a PKI helps with secure communications but doesn’t address user software installation rights.

C. Blocking suspicious websites is helpful but doesn’t prevent local installations.

D. Stricter UAC may add prompts but can still be bypassed by admin users.

Comprehensive and Detailed Explanation From Exact Extract:

This is likely arogue antivirusor scareware tactic. The user shouldnot click "OK"and instead check Windows Security (or third-party antivirus) status and ensure real-time protection is enabled.

FromMark Soper – Mike Meyers' Lab Manual:

“Users should verify security center settings if receiving suspicious pop-ups. Clicking unknown software updates can install malware. It’s safer to validate protection through legitimate system tools.”

Comprehensive and Detailed Explanation From Exact Extract:

The net use command in Windows is used to map (assign) a shared drive from the command line. The syntax typically looks like: net use X: \server\share where X is the drive letter and \server\share is the network path.

A. pathping tests network latency and packet loss.

B. nslookup is used for DNS troubleshooting.

D. tracert shows the route packets take to reach a destination — not for drive mapping.

Comprehensive and Detailed Explanation From Exact Extract:

When an iOS device approaches full storage capacity, performance can be significantly impacted. iOS requires a buffer of free space to perform background processes efficiently.

From theAll-in-One Exam Guide:

“iOS devices need several gigabytes of free space to maintain optimal performance. Near-full storage can cause sluggish operation and failures in updates or background tasks.”

Azero-day vulnerabilitydemands an emergency change to quickly secure the system, even if downtime is needed.

FromMike Meyers' Lab Manual:

“Emergency changes bypass standard scheduling to quickly address critical vulnerabilities that pose immediate risks.” .

Comprehensive and Detailed Explanation From Exact Extract:

If a system becomes unresponsive while opening a specific spreadsheet, the issue is likely tied to the file’s size or the complexity of its content (e.g., embedded formulas, macros, or graphics). High memory utilization caused by the file can lead to temporary freezing or application "Not Responding" messages. Checking the spreadsheet's file size and monitoring system memory in Task Manager will help isolate performance bottlenecks.

A. Anti-malware logs are important for security troubleshooting but less likely relevant to spreadsheet-related performance issues.

B. Workstation repair is for system-wide problems and not necessary for a single-file issue.

C. Bandwidth relates to network usage and wouldn’t impact opening a local file.

Comprehensive and Detailed Explanation From Exact Extract:

BitLocker is Microsoft’s full disk encryption technology built into Windows Pro and Enterprise editions. It encrypts the entire drive, protecting data if the device is lost or stolen. BitLocker can use TPM (Trusted Platform Module) and can be configured with PINs or USB keys for added security.

A. Active Directory is for centralized user and policy management in domains.

B. NTFS is the file system format and doesn't provide encryption by itself.

C. EFS (Encrypting File System) encrypts individual files or folders, not the entire drive.

Comprehensive and Detailed Explanation From Exact Extract:

Shreddingphysically destroys the platters, making data recovery virtually impossible. It's more effective and accessible than degaussing or low-level formatting.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Physical destruction methods like shredding are the most secure options for ensuring data on failed drives cannot be recovered.”

Comprehensive and Detailed Explanation From Exact Extract:

In Windows, accessibility tools such as speech recognition are found under the Ease of Access settings. This section includes options for users who require assistive technologies, including screen readers, magnifiers, and voice control interfaces like speech recognition. Setting up speech recognition allows users to control the system and input text using voice commands.

A. Time and Language is for setting regional preferences and language packs.

B. Personalization adjusts themes, backgrounds, and colors.

C. System includes display, storage, notifications, and power settings, but not accessibility tools.

Comprehensive and Detailed Explanation From Exact Extract:

The first step in the IT change management process is to identify and propose the change. In this case, the technician notices a need (end-of-life network switches), so the appropriate action is to formally propose a change. This proposal would be documented and submitted for approval before any planning or implementation occurs.

According to the CompTIA A+ 220-1102 objectives under Operational Procedures (Domain 4.0), the change management process follows these typical steps:

Submit a change request (Propose the change)

Review and approval (Approve the change)

Planning and scheduling (Schedule the change)

Implementation

Documentation and review

Therefore, proposing the change is the correct first step in accordance with standard ITIL-based change management practices.

Aclean installensures all malware is eliminated by completely wiping and reinstalling the OS. System restore or repair may leave traces.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“If malware cannot be completely removed, perform a clean installation of the operating system. This ensures no remnants remain on the machine.”

Comprehensive and Detailed Explanation From Exact Extract:

When an OS is no longer receiving updates, it is generally because it has reachedend of life (EOL), meaning the vendor has ceased support.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“End-of-life refers to the point when an OS vendor no longer issues updates or support. Systems at EOL pose security risks and must be upgraded or isolated.”