CompTIA 220-1202 CompTIA A+ Core 2 2025 Exam Exam Practice Test

The correct answer is C. SSH (Secure Shell), because SSH is the standard method for secure, command-line-based remote management of network devices, including switches, routers, and firewalls. Network switches typically do not provide graphical interfaces, and administrators interact with them using a command-line interface (CLI).

According to the Quentin Docter – CompTIA A+ Complete Study Guide, SSH is widely used to securely access and manage network infrastructure devices. It encrypts all communication between the technician’s system and the remote device, protecting credentials and command output from interception.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that SSH allows administrators to execute commands remotely and capture text-based output, which can easily be copied and shared for documentation or escalation. This makes it ideal for fulfilling requests that involve running commands and returning results.

The Mike Meyers / Mark Soper Lab Manual clarifies that RDP and VNC are graphical desktop-sharing tools typically used for managing workstations or servers, not network switches. WinRM is used for Windows system management, not network hardware.

Because the task involves secure CLI access to a network switch, SSH is the correct and expected tool, making C the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

A bollard is a sturdy physical barrier—often a steel or concrete post—designed to prevent vehicles or unauthorized individuals from ramming into or entering secure areas of a building. It provides physical security and is commonly used outside entrances to prevent forced entry.

A. PIV (Personal Identity Verification) cards are used for identity access control, not physical blocking.

B. Motion lighting may deter activity but doesn’t physically prevent entry.

C. Surveillance records activity but cannot stop a forced entry.

Comprehensive and Detailed Explanation From Exact Extract:

Keychainis the built-in macOS utility that manages and stores credentials, including passwords and certificates.

According toQuentin Docter – CompTIA A+ Complete Study Guide:

“Keychain Access in macOS is used for managing and storing passwords securely, similar to credential managers in Windows.”

Comprehensive and Detailed Explanation From Exact Extract:

RADIUS (Remote Authentication Dial-In User Service)provides centralized Authentication, Authorization, and Accounting (AAA) for users who connect and use a network service.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“RADIUS is a widely used protocol for implementing AAA in network environments, allowing centralized control over user access and accounting.”

The correct answer is B. Add the user to the local Administrators group, because this provides the necessary permissions to install software on a specific machine without granting excessive privileges across the entire domain. This approach follows the principle of least privilege while still allowing the user to perform required testing tasks.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, local administrator rights allow users to install and configure applications on a single system but do not grant access to domain-wide resources. This makes it an appropriate choice for sandboxed or test environments.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide warns against adding users to the Domain Admins group, as this grants full control over the entire Active Directory environment and poses a significant security risk. Sharing credentials or passwords violates security best practices and audit requirements.

The Mike Meyers / Mark Soper Lab Manual reinforces that granting local administrative access is a common and accepted practice in controlled testing scenarios, especially when systems are isolated from production environments.

Because the goal is to allow software installation without compromising domain security, adding the user to the local Administrators group is the best and safest option, making B the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

When an OS is no longer receiving updates, it is generally because it has reachedend of life (EOL), meaning the vendor has ceased support.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“End-of-life refers to the point when an OS vendor no longer issues updates or support. Systems at EOL pose security risks and must be upgraded or isolated.”

Comprehensive and Detailed Explanation From Exact Extract:

A management profile is used to enforce corporate policies on Apple devices. These profiles are installed via an MDM (Mobile Device Management) solution and control access, restrictions, Wi-Fi settings, app installations, and more. They’re critical for managing devices in a business environment.

A. The App Store allows software downloads but doesn’t control policies.

B. VPN configuration is used for secure remote connections, not enforcement of restrictions.

C. Apple ID is for personal account access to Apple services, not corporate device management.

Comprehensive and Detailed Explanation From Exact Extract:

In secure or isolated network segments, DHCP may be disabled to reduce the risk of unauthorized device connections or to maintain strict IP assignment control. In such cases, the help desk technician must manually configure IP settings (including IP address, subnet mask, gateway, and DNS servers). This ensures the workstation communicates properly within that segment.

A. DNS server restriction is unrelated to manual IP configuration.

B. Allow lists refer to traffic access, but manual IP assignment is due to lack of DHCP, not allow lists.

D. NAC servers control access but don't replace the need for IP addressing.

Comprehensive and Detailed Explanation From Exact Extract:

Windows 11 features a“Do Not Disturb”mode under Notification settings, which is designed to suppress interruptions during tasks like videoconferencing.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Windows 11 introduces Do Not Disturb and Focus Assist under notification settings, enabling users to mute alerts during presentations or calls.”

Comprehensive and Detailed Explanation From Exact Extract:

To ensure the authenticity of a downloaded application, the most reliable method is to verify the file’s hash (e.g., SHA256, MD5) against the value provided by the legitimate vendor. If the hash values match, the file has not been altered or tampered with. This verification confirms the integrity and authenticity of the executable.

B. Process IDs are dynamic and not unique to specific software.

C. Running in safe mode doesn’t validate legitimacy—it only runs the app in a minimal environment.

D. File names can be spoofed; matching the name does not prove authenticity.

Comprehensive and Detailed Explanation From Exact Extract:

The scenario involves an application that should retrieve data from a local database server but is failing to do so. This likely indicates a problem in communication between the application and the database server (such as a network issue, port misconfiguration, or service unavailability). The correct troubleshooting approach involves testing the network/service connectivity between the client and the database.

Let’s examine the options:

A. ipconfig:This command displays IP configuration details for Windows systems, such as IP address, subnet mask, and default gateway. While useful for diagnosing general network issues, it does not test service connectivity or the availability of a specific application port/service.

B. nslookup:Used to query DNS servers to resolve domain names to IP addresses. However, since the question references a local server (likely accessed via IP or static hostname), DNS is probably not involved. Also, it does not test application/service availability.

C. netstat:Displays active TCP connections, listening ports, and routing tables. It helps determine whether the local system is listening for or maintaining any network connections, but it does not initiate a connection to test availability. It’s diagnostic but not interactive for service testing.

D. curl:This is the most appropriate tool for this scenario. curl is used to test connectivity to services over protocols like HTTP, HTTPS, FTP, and more. If the application retrieves data via a web interface or API (common in database-driven applications), curl can be used to test if the application can successfully reach and retrieve data from the server. It provides immediate, testable feedback on whether the server and service are available and responsive.

Example usage:

curlhttp://localhost:8080/api/data

This command would test whether a local server's application programming interface (API) is available and responding on port 8080.

CompTIA A+ 220-1102 Reference Points:

Objective 2.4: Given a scenario, use appropriate tools to troubleshoot and support Windows OS issues.

Objective 3.3: Use appropriate tools to troubleshoot and resolve issues.

The CompTIA A+ Core 2 study guide references curl as a useful command-line utility for testing connectivity and troubleshooting application access to services.

===========================

The correct syntax for mapping a network drive in Windows is:

net use Z: \\WinNAS\shared

This command connects the specified network share and maps it as drive Z:.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“Use net use followed by the desired drive letter and the UNC path to map network shares.”

The correct answer is D. Roaming profiles, because roaming profiles allow users to log in to any domain-joined workstation and automatically access their personal settings, documents, and configuration without storing data locally on each machine. This is ideal for environments with hot-desking or shared workstations.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, roaming profiles store user data centrally on a server rather than on individual computers. When a user logs in, their profile is loaded; when they log out, changes are saved back to the server. This minimizes data duplication and reduces the risk of data being left behind on shared systems.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that roaming profiles improve security by preventing sensitive user data from being permanently stored on multiple endpoints. This also simplifies backup and recovery, since user data resides in a centralized location.

The Mike Meyers / Mark Soper Lab Manual clarifies that portable drives introduce data loss risks, cloud email only addresses messaging data, and certificate storage does not manage user profiles or documents.

Because the goal is to maintain data security while allowing mobility and minimizing data transfer, roaming profiles are the most appropriate solution, making D the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Group Policyis the standard administrative tool for setting user permissions across domain-joined systems.

FromQUENTIN DOCTER – COMPLETE Study Guide:

“Use Group Policy to enforce user rights, including disabling guest account access on domain computers.”

The correct answers are E. Set the view extensions to "on" and F. Check the box to view hidden files, because folders located in the root directory are often hidden or protected system folders by default in Windows operating systems. Windows hides certain files and folders to prevent accidental modification or deletion, especially those critical to system functionality.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, File Explorer includes view options that control whether hidden files, protected operating system files, and file extensions are visible. If these options are disabled, users will not see many system-level folders, even when browsing the root of the drive (such as C:\).

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that enabling “Show hidden files, folders, and drives” allows technicians to view directories that are normally concealed, such as configuration or application folders. Additionally, turning on file name extensions helps identify system folders and files more accurately, especially when troubleshooting or guiding users remotely.

The Mike Meyers / Mark Soper Lab Manual reinforces that simply opening File Explorer or adjusting display resolution does not affect file visibility. The correct fix is to modify File Explorer view settings, specifically enabling hidden items and file extensions.

Therefore, enabling hidden files and file extensions is required, making E and F the correct answers.

Comprehensive and Detailed Explanation From Exact Extract:

An incident report documents key details such as the cause of the outage, steps taken to resolve it, and measures to prevent recurrence. It is a post-mortem analysis often shared with stakeholders to improve future response.

According to the Quentin Docter – CompTIA A+ Complete Study Guide:

“An incident report provides a summary of an event that disrupted normal operations and includes a timeline of what occurred, how the issue was diagnosed and fixed, and who was involved in the resolution”.

This is reaffirmed in Travis Everett’s All-in-One Guide:

“Documentation after an incident helps technical teams and management review the situation and learn from it. This is formalized in an incident report”.

The correct answer is C. Windows Server 2022, because Windows Server editions are specifically designed to run server workloads, such as file services, Active Directory, DNS, DHCP, virtualization, and application hosting.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Windows Server operating systems differ significantly from desktop versions. They support server roles, higher hardware limits, and enterprise features not available in client editions.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Windows 10 Enterprise and Windows 11 Pro are client operating systems intended for end-user workstations. While they can connect to servers, they are not designed to function as servers themselves.

The Mike Meyers / Mark Soper Lab Manual clarifies that version identifiers like 22H2 represent feature updates for Windows client operating systems, not standalone server products.

Because the question asks which version would most likely be installed on a server, the correct choice is Windows Server 2022, making C the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

RAM is an electrostatic-sensitive component. When removing or transporting RAM modules, they should be stored in antistatic bags to protect against electrostatic discharge (ESD), which can damage the memory. This is a standard best practice in hardware handling.

A. Demagnetization is not applicable to RAM.

C. Plugging in power to ground is not safe or recommended for static protection.

D. Installing identical memory pairs is applicable for dual-channel configuration, but not directly related to transporting or handling RAM.

Comprehensive and Detailed Explanation From Exact Extract:

Thefirst stepin troubleshooting degraded mobile performance is typically arestart. This clears RAM and stops background processes that might be causing issues.

FromAll-in-One Exam Guide:

“Before taking invasive measures like a factory reset, always restart the device. A reboot clears temporary files and can significantly improve responsiveness.”

Comprehensive and Detailed Explanation From Exact Extract:

Once the system is cleaned, the next priority is toeducate the useron safe practices to prevent recurrence.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Post-malware remediation should include user education to prevent reinfection and identify how the malware was introduced.”

Comprehensive and Detailed Explanation From Exact Extract:

Multi-Factor Authentication (MFA) apps, especially time-based one-time password (TOTP) apps (e.g., Google Authenticator, Authy), rely on accurate time synchronization between the device and the authentication server. If the user recently traveled internationally, the device may have incorrect date/time settings due to time zone changes or failed synchronization, leading to MFA failure.

The most logical and non-intrusive first step is to verify and correct the date and time settings. This aligns with basic troubleshooting principles—start with the simplest and most likely cause before taking more drastic action.

The most likely cause of repeated application installation failures on a work-issued laptop is an incorrectly configured Access Control List (ACL). In corporate environments, security policies are designed to limit what standard users can install in order to reduce malware risk, maintain compliance, and ensure system stability. These restrictions are enforced through NTFS permissions, ACLs, and Group Policy settings.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, ACLs define which users or groups have permission to read, write, modify, or execute files and directories. If a user does not have sufficient permissions to write to protected locations such as C:\Program Files, system folders, or specific registry keys, software installers will fail—even if the installer itself is legitimate and intact.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that many organizations intentionally restrict installation privileges to administrators only. This prevents users from installing unauthorized or potentially harmful software. When ACLs are misconfigured or intentionally restrictive, installation attempts may fail repeatedly without clearly stating that permissions are the root cause.

The Mike Meyers / Mark Soper Lab Manual further clarifies that issues like a full browser cache or slow internet speeds typically affect downloads, not the execution of installers. An unformatted hard drive would prevent the operating system from functioning at all, making it irrelevant in this scenario.

Therefore, the repeated installation failure on a work laptop is best explained by incorrectly configured ACLs, making C the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

End-user education is crucial after malware removal to prevent recurrence. Teaching safe browsing habits and security awareness completes the remediation cycle.

Mark Soper – Mike Meyers' Lab Manualstates:

“Educating the user after malware remediation is part of the CompTIA malware response methodology. This includes training on phishing and safe practices.”

SSH (Secure Shell) allows encrypted console sessions to access and administer remote servers.

From Quentin Docter – Complete Study Guide:

“Secure Shell (SSH) provides an encrypted console session to manage Linux, UNIX, or network devices securely over TCP port 22.” .

The correct answer is C. Disconnect the power, because safety is the first priority when working inside a computer case. Before opening the system, all power sources must be removed to prevent electrical shock and hardware damage.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, technicians should always shut down the system and disconnect the power cable before opening a computer. Even powered-off systems can still carry electrical current if they remain plugged in.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that unexpected noises are often caused by fans, loose cables, or failing hard drives. Opening the case while the system is powered can cause injury or damage sensitive components.

The Mike Meyers / Mark Soper Lab Manual reinforces the standard safety sequence: power off the system, unplug it, discharge residual power, and then apply grounding measures before touching internal components.

Because disconnecting power eliminates electrical hazards and protects both the technician and the equipment, C is the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

A low-level format (also referred to as a zero-fill or full format) writes over every sector on a storage device, effectively destroying the existing data and making recovery nearly impossible. Unlike degaussing, which renders the drive unusable, a low-level format maintains the integrity of the device, allowing it to be repurposed or reused.

A. Deleting partitions does not fully erase data; it only removes references in the partition table.

B. EFS (Encrypting File System) encrypts files but does not securely wipe them.

D. Degaussing destroys the magnetic structure of a drive, making it inoperable and not reusable.

Comprehensive and Detailed Explanation From Exact Extract:

Content filtering allows administrators to block or allow access to websites based on categories (e.g., social media, adult content, streaming). On a SOHO (Small Office/Home Office) router, this is often built-in or available via DNS-level filtering, and is the most appropriate method for enforcing browsing policies without needing to touch each individual device.

A. Secure management access protects router admin interfaces but doesn’t control user browsing.

B. Group Policy Editor is a Windows tool, not used on routers.

D. A firewall can block specific IPs or ports, but it doesn't categorize web content.

Comprehensive and Detailed Explanation From Exact Extract:

Group Policyis the standard administrative tool for enforcing security and configuration settings across domain-joined systems, including disabling guest accounts.

FromQuentin Docter – CompTIA A+ Study Guide:

“Disabling guest accounts and applying consistent security policies across multiple machines is best achieved through Group Policy on a Windows domain.”

Comprehensive and Detailed Explanation From Exact Extract:

A synthetic full backup combines the last full backup with subsequent incremental backups to create a new full backup without re-reading data from the source system. This method significantly reduces the backup window and network impact. It is especially useful when traditional full backups are too time-consuming.

A. Changing the backup window only shifts timing, not duration.

B. Incremental weekly backups would lack a proper full recovery point and aren't ideal alone.

C. Storage space isn't the bottleneck in backup speed—it’s read/write operations and network load.

The correct answer is C. RDP (Remote Desktop Protocol), because RDP is the default remote access technology for Windows servers. It allows technicians to remotely connect to the graphical desktop environment of a Windows server to verify services, logs, and system status.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, RDP is built into Windows operating systems and is commonly used by administrators to manage Windows servers and workstations. It provides full access to the desktop, making it ideal for checking whether services such as IIS (Internet Information Services) are running properly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while SSH is commonly used for Linux and network devices, Windows servers typically rely on RDP for administrative access. VNC is a third-party remote desktop solution and is not enabled by default on Windows systems.

The Mike Meyers / Mark Soper Lab Manual reinforces that SPICE is primarily used in virtualized environments and is not a standard Windows remote access tool.

Because the technician needs to verify a Windows web server’s operational status using a built-in method, RDP is the most appropriate and likely technology, making C the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Ransomware is a type of malware that encrypts the user's files and demands a payment (ransom) for the decryption key. When a user receives a message stating that their files are encrypted and cannot be accessed, ransomware is the most likely cause. The attacker’s goal is to hold the data hostage until the victim pays to restore access.

A. Keylogger records keystrokes and doesn’t encrypt files.

C. Phishing is a social engineering tactic to gather credentials, not to encrypt data.

D. Cryptominer uses system resources to mine cryptocurrency, not encrypt files.

Comprehensive and Detailed Explanation From Exact Extract:

An Acceptable Use Policy (AUP) outlines the rules and guidelines for employees or users regarding the appropriate use of company systems, resources, and internet access. It defines permitted and prohibited activities, helping to mitigate security risks and establish clear behavioral expectations.

B. MNDA (Mutual Non-Disclosure Agreement) deals with confidentiality, not usage guidelines.

C. DRM (Digital Rights Management) controls access to copyrighted content.

D. EULA (End User License Agreement) pertains to software licensing, not internal policies.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-generated content may be incorrect.

A screenshot of a computer AI-generated content may be incorrect.

1st CLI Resolution

copy "C:\Program Files\Testing\msvcp100.dll" "User-PC02\C$\Windows\System32" /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

>Select reply:"I am happy to assist you today."

Second Chat Response:When the user states that they need to set up basic security settings:

>Select reply:"Is this the first router in your office?"

Third Chat Response:After learning it's a replacement router and the user is logged into the router's web page:

>Select reply:"The first thing you need to do is change the default password."

Fourth Chat Response:For the response about password settings:

>Select reply:"Create a new password with an uppercase, a lowercase, and a special character."

Fifth Chat Response:When the router prompts to reboot:

>Select reply:"Yes, reboot please."

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.