CompTIA 220-1202 CompTIA A+ Core 2 (2026 Exam Update) Exam Practice Test

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

Shreddingphysically destroys the platters, making data recovery virtually impossible. It ' s more effective and accessible than degaussing or low-level formatting.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Physical destruction methods like shredding are the most secure options for ensuring data on failed drives cannot be recovered.”

Most public Wi-Fi networks requireinteraction with a captive portal(e.g., terms of use or login). Dismissing it prevents the user from gaining internet access. Reconnecting and completing the portal page is essential.

FromAll-in-One Exam Guide:

“Many public hotspots require user acknowledgment or login via a captive portal. Skipping this step results in no internet access.”

If uploading fails only offsite,mobile data limits or restrictionsare the likely cause. Data caps or network management can interfere with uploads.

FromTravis Everett – All-in-One Exam Guide:

“When mobile users experience network issues, always check if the device has reached a data cap or roaming restriction.”

Extra icons in the system tray after an update often indicate new background apps loading at startup, increasing boot time. The Mike Meyers Lab Manual explains that “autostarting programs will slow down your system,” and Windows provides control through Task Manager’s Startup tab to enable/disable startup programs—specifically calling this out as useful “especially if Windows is slow to load.” The All-in-One Exam Guide gives the same practical step: open Task Manager’s Startup tab and “review the enabled applications for any you don’t need,” then disable unnecessary ones to regain speed.

Importantly, the All-in-One answer guidance explicitly notes that disabling unnecessary startup programs is the least disruptive first action: “Andre’s best option would be to disable unnecessary startup programs… A system restore might help… but it’ll be much slower and more disruptive.”

Uninstalling the update or restoring the system are more disruptive and should come later if simpler optimization fails. Antivirus scanning can be appropriate if no obvious cause exists, but the clear clue here is new startup items (system tray icons).

The issue described—“domain cannot be found” despite the ability to ping the server and access the internet—indicates aDNS resolution problem, not a network connectivity issue. The workstation is currently usingpublic DNS servers (8.8.8.8 and 1.1.1.1)whichcannot resolve internal domain names, such as the ones used in Active Directory environments. To resolve this, the technician needs tochange the DNS settings to point to the internal DNS server, which in most domain setups is thedomain controller itself (likely 192.168.1.10 in this case).

Here’s the breakdown of the incorrect options:

B. Assign a static IP address: The IP is already assigned and functioning; the device can ping and reach the network and internet.

C. Configure a subnet mask: The subnet mask is appropriate for the network range (Class C /24).

D. Update the default gateway: The gateway is valid and allows internet access; this is not the issue.

CompTIA A+ 220-1102 Core 2 Objective Reference:

Objective 1.8 – Given a scenario, use features and tools of the operating system.

Under this objective, candidates must know how to troubleshoot OS-based network configurations, includingproper DNS settings in domain environments.

—

Once the system is cleaned, the next priority is toeducate the useron safe practices to prevent recurrence.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Post-malware remediation should include user education to prevent reinfection and identify how the malware was introduced.”

The correct answer is C because the symptoms strongly indicate ransomware: files renamed with a new extension, files still unusable after renaming them back, and payment demands in cryptocurrency. Quentin Docter’s Complete Study Guide explains that ransomware commonly encrypts files, renames them with a unique extension, and places ransom instructions for payment. The Mike Meyers/Mark Soper material also states that ransomware encrypts accessible local or network data and demands payment for decryption keys. According to the CompTIA A+ malware-removal procedure, after investigating and verifying malware symptoms, the next step is to quarantine infected systems . Removing the machine from the network prevents the ransomware from spreading to shared drives or other systems. Reimaging and restoring from backup may be required later, and updating/scanning anti-malware is part of remediation, but isolation must happen first.

Memory usage is critically high, suggesting many applications or background processes. Closing unnecessary programs will immediately free up RAM.

FromTravis Everett – All-in-One Exam Guide:

“High memory usage with moderate CPU load usually means too many applications are open. Close unnecessary apps or use Task Manager to end processes.”

Public Wi-Fi networks often usecaptive portals, which require accepting terms or authenticating via the pop-up page before full access is granted. Closing it prematurely stops full connection.

FromTravis Everett – All-in-One Exam Guide:

“Captive portals intercept the first HTTP request and present a login or acknowledgment screen. Without completing it, access is denied.”

The correct answer is C. Setting up image deployment for PXE, because PXE (Preboot Execution Environment) allows operating system installations and upgrades to be performed over the network without using removable storage. Since all removable media is disabled for security reasons, PXE-based deployment preserves existing security controls while enabling centralized OS upgrades.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, PXE is commonly used in enterprise environments to deploy or upgrade operating systems at scale. PXE works by booting client machines from a network interface and pulling installation images from a secured deployment server.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that PXE is especially valuable when USB drives and external media are restricted. It ensures consistency, reduces human error, and maintains compliance with organizational security policies.

The Mike Meyers / Mark Soper Lab Manual reinforces that copying ISO files locally still requires write access and may violate security baselines. External drives are explicitly prohibited, and hardware tokens are authentication tools—not deployment mechanisms.

Because PXE enables secure, centralized, removable-media-free OS upgrades, it is the most appropriate solution, making C the correct answer.

Event Viewer is the primary tool used to investigate system-level errors and logs, including BSODs. When a BSOD occurs, Windows logs the error codes and associated system behavior under “System” logs in Event Viewer. This allows the technician to review crash events, identify error codes (e.g., STOP codes), and pinpoint hardware or driver issues.

B. Performance Monitor is used for real-time performance tracking and trend analysis, not crash logs.

C. System Information displays system specs but not crash logs or events.

D. Device Manager shows device status and driver issues but doesn’t retain error logs related to BSODs.

Mobile OS updates can sometimes cause compatibility issues with specific apps, including corporate email clients. The most likely resolution is to check for and apply an update to the affected application, especially if it hasn’t been updated to support the latest OS version.

B. Registering with MDM might be required for access but wouldn’t address app crashes due to incompatibility.

C. A third-party client might help, but it’s not the best first step if the default app is expected to work.

D. Clearing the cache can help resolve some minor issues, but updating the app directly addresses compatibility concerns.

Cryptominersexploit system resources to mine cryptocurrency, often without user consent, leading to high CPU and GPU usage.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Cryptomining malware can cause significant performance degradation by monopolizing system resources like CPU and GPU to mine digital currency.”

The symptoms point to malicious or rogue content: frequent “security warning” pop-ups that push “tools” is a classic sign of scam/rogue apps, and the new fast battery drain suggests an unwanted process running in the background. The CompTIA objectives explicitly list mobile security symptoms such as “high number of ads,” “fake security warnings,” and “unexpected application behavior,” which aligns with this scenario. On the browser side, Quentin Docter notes that if you continually receive pop-ups or overlays, “you may be infected with malware,” and recommends scanning with antivirus/antimalware software. He also explains that clearing browsing data/cache is sometimes necessary to resolve browser-related problems and details how to clear cache/browsing data.

Because the user tapped the pop-up and then battery life worsened, the best practical fix is to remove the likely malicious application(s) (uninstall unknown apps) and clear browser cache to eliminate stored site data/scripts fueling the pop-ups. A factory reset is a stronger last resort, but least disruptive remediation is A.

If internal resources (such as intranet or internal apps) can ' t be accessed but external sites work, this often points to aDNS issue, where the system isn ' t resolving internal domain names correctly.

FromAll-in-One Exam Guide:

“When internet access is functional but internal sites fail to load, the issue usually lies with DNS resolution. Internal resources often require internal DNS servers, which may not be configured correctly.”

The user needs to deliver a project status presentation to external stakeholders, which implies hosting a meeting with screen sharing, invitations, and attendee management. Quentin Docter defines videoconferencing as screen-sharing software that allows more than one person to share screens and includes “additional functionality, such as calendar invite, call-in numbers, and attendee management.” He lists Microsoft Teams, WebEx, Zoom, and GoToMeeting as examples and states these tools “are often used to present ideas and collaborate between groups of people.” That exactly matches presenting to external stakeholders.

The other options don’t fit the requirement: WinRM is a Windows remote management protocol (administration, not presentations), RMM is used by IT providers to manage many systems remotely (not stakeholder presentations), and secure file transfer is for moving files rather than delivering a live presentation. Since videoconferencing platforms commonly provide screen sharing, chat, and meeting controls designed for external audiences, Videoconferencing (C) is the correct software type.

The correct answer is C. SAML. Security Assertion Markup Language is commonly used for single sign-on between an identity provider and a service provider, especially when an organization wants a third-party application to trust its existing identity service. The CompTIA A+ objectives include SSO, meaning single sign-on, and the objectives’ acronym list identifies SSO as a relevant exam term. In this scenario, the organization wants users to authenticate through its existing identity system rather than maintaining separate credentials for the third-party application. SAML is the best match because it passes authentication assertions between trusted parties. OTP means one-time password and is an authentication factor, not an SSO federation standard. ACL means access control list and controls permissions to resources. UAC is Windows User Account Control, which prompts for administrative approval on a local system. Therefore, SAML is the correct technology for third-party SSO integration.

Standard Operating Procedures (SOPs)guide technicians through consistent and complete processes, including documentation.

FromTravis Everett – All-in-One Exam Guide:

“SOPs ensure that all required steps—such as data collection and issue description—are followed in every support interaction.”

Because this is a government client with confidential data and a strict requirement to follow regulatory compliance, the best practice is to use a certified third-party destruction service that can provide documented proof of destruction. The All-in-One guide explicitly notes that “professional hard drive disposal services are third-party vendors” that guarantee drives are thoroughly destroyed by issuing a certificate of destruction/recycling, which provides assurance that data will not fall into the wrong hands. Mike Meyers’ Lab Manual repeats the same exam point: third-party vendors “will guarantee they have truly, thoroughly destroyed drives by issuing a certificate of destruction/recycling.”

Low-level formatting (often used to mean overwrite/zero-fill) can sanitize drives, but it may not satisfy the requirement for provable compliance and chain-of-custody documentation, especially for regulated environments. Targeted deletion is ineffective because deleted data can remain recoverable. In-house incineration is extreme and may be restricted, unsafe, or noncompliant without proper facilities and documentation. Therefore, Certified third-party destruction (B) is the best option.

The correct answer is A. .app, because macOS applications packaged as .app files are typically self-contained application bundles. This means that all required application files are stored within a single directory that appears as one file in Finder. When the .app file is moved to the Trash, the application is effectively removed from the system.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, macOS applications are commonly distributed as .app bundles, allowing for simple installation and removal. This design contrasts with Windows, where applications often install files across multiple directories and require uninstallers.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that dragging a .app file to the Trash is generally sufficient to uninstall the software, although some applications may leave behind preference files or caches. However, from an exam perspective, .app is the only option that supports this uninstall behavior.

The Mike Meyers / Mark Soper Lab Manual further clarifies that .msi and .exe are Windows formats, .rpm is used by Linux package managers, and .pkg installers often install system-wide components that require a formal uninstallation process.

Because .app files support simple drag-to-trash uninstallation, A is the correct answer.

MDM hardening often includes enforcing stronger authentication on mobile devices. The phrase “unique to each user” points to something inherent to the individual—biometrics—rather than something the user knows (password/pattern) or something they have (PIV/smart card). Quentin Docter explains: “Biometric devices use physical characteristics to identify the user. This type of authentication is considered something that you are,” and lists common implementations including “fingerprint… scanners.” This exactly matches a fingerprint, which is unique per person and commonly enforced via device policies in MDM environments.

Docter also notes mobile devices increasingly implement biometrics for access control, specifically citing “fingerprint access control” adopted by manufacturers. A drawn pattern and a password are knowledge factors and can be shared/observed, while a PIV card is a possession factor (something you have) and can be lost or loaned. Because the question specifies a hardening technique “unique to each user,” the best match is the biometric factor: fingerprint (B).

TheServicestool in Windows allows a technician to view service dependencies and status. If the print spooler can ' t start due to a dependency, Services is the correct tool to inspect and manage them.

FromAll-in-One Exam Guide:

“The Services console allows technicians to view, start, and configure system services, including setting recovery actions and viewing dependencies.”

To allow Remote Desktop Protocol (RDP) access, the firewall must be configured to allow inbound connections on TCP port 3389. If the Windows Firewall blocks RDP, users will not be able to connect remotely even if the feature is enabled in system settings.

B. Computer Management allows configuration of services and local users, but not network access.

C. User Accounts is for account setup and control, but enabling remote access requires firewall configuration.

D. Ease of Access is unrelated to remote connectivity—it’s for accessibility features.

Virtualizationallows the legacy OS to be run in a virtual machine (VM) on top of the newer OS. This method provides backward compatibility without requiring outdated operating systems on physical hardware.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Using virtualization is a preferred method when legacy applications are needed after migrating to newer operating systems. It allows legacy environments to exist securely within a modern OS framework.”

The correct answer is C. net use, which is the Windows command-line utility used to display, create, and remove mapped network drives and SMB (Server Message Block) connections. When working re motely through command-line interfaces, technicians often rely on net use to quickly verify which network shares are currently connected.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that SMB is the protocol Windows uses for file and printer sharing, and mapped drives are maintained through SMB sessions. The net use command lists all active connections, including the drive letter, remote UNC path, and connection status.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that net use is especially valuable for remote troubleshooting because it does not require a graphical interface. This makes it ideal when administering multiple systems via command prompt or remote shell.

The Mike Meyers / Mark Soper Lab Manual clarifies that systeminfo displays OS and hardware details, hostname only shows the system name, and nslookup is used for DNS queries. None of those commands provide information about mapped SMB shares.

Since the task is to verify existing SMB mappings, net use is the only command that directly fulfills this requirement, making C the correct answer.

The correct answer is C. XDR (Extended Detection and Response), which is designed to provide holistic security visibility across endpoints, networks, servers, cloud workloads, and email systems. Unlike traditional endpoint-only solutions, XDR correlates data from multiple security layers to detect and respond to advanced threats.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, XDR expands upon EDR by integrating telemetry from network traffic, firewalls, identity systems, and cloud platforms. This enables detection of threats that move laterally or originate outside a single host.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that XDR is specifically designed to detect attacks that bypass endpoint protections by analyzing network-level behavior, command-and-control traffic, and cross-system activity.

The Mike Meyers / Mark Soper Lab Manual contrasts XDR with other options: RADIUS is an authentication protocol, UAC is a local Windows privilege control, and antivirus focuses only on known malware signatures at the host level. None of those provide network-wide visibility and coordinated response.

Because the question explicitly mentions traffic outside the host and at the network level, XDR is the only technology designed to meet that requirement, making C the correct answer.

Carbon fiber filamentcan producefine particles or fumesduring printing, which may be harmful when inhaled. Wearing anair filter maskis essential to protect the respiratory system.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“When working with advanced materials like carbon fiber, always use appropriate personal protective equipment such as air filter masks to prevent inhalation of dangerous particles.”

Group Policyis the standard administrative tool for enforcing security and configuration settings across domain-joined systems, including disabling guest accounts.

FromQuentin Docter – CompTIA A+ Study Guide:

“Disabling guest accounts and applying consistent security policies across multiple machines is best achieved through Group Policy on a Windows domain.”

The correct answer is A. Detailed guides for resolving common issues, because effective deployment documentation must support ongoing troubleshooting and support, not just initial installation. Including known issues and resolution steps allows future technicians to resolve problems efficiently and consistently.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, high-quality technical documentation should include error conditions, common failure points, and step-by-step remediation procedures. This information significantly reduces mean time to resolution (MTTR) and improves service quality.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that help desk documentation should evolve over time, incorporating lessons learned from previous incidents. Troubleshooting guides turn deployment documentation into a practical reference rather than a static record.

The Mike Meyers / Mark Soper Lab Manual further clarifies that email logs are informal and unstructured, vendor contact information is supplementary, and end-user manuals are not intended for technical troubleshooting. None of these provide actionable guidance for technicians resolving future issues.

Because the goal is to ensure long-term supportability and effective troubleshooting, the most important inclusion is detailed guides for resolving common issues, making A the correct answer.

ApplicationsandLibraryare core system directories in macOS. TheApplicationsfolder contains installed applications. TheLibraryfolder contains support files, preferences, and other system-related files.

From theQuentin Docter – CompTIA A+ Complete Study Guide:

“macOS organizes system and user files into several key folders. Among them, Applications and Library are standard system folders where apps and related files are stored.”

The 3-2-1 backup rule is specifically about number of copies, diversity of media, and offsite storage. “2” in 3-2-1 means using two different types of media. The All-in-One guide states the rule plainly: “keep at least three copies of your data on at least two different types of media… and store at least one copy offsite.” Mike Meyers’ Lab Manual repeats the same definition word-for-word, emphasizing two different media types and one off-site copy.

Quentin Docter explains the same method and gives an example: original data plus an on-site backup, plus “a third copy… off site,” such as backing up to the cloud.

Given the options, only D directly satisfies the “two different media” requirement. Option C contradicts the offsite requirement, option B invents a testing interval not defined by 3-2-1, and option A is about backup types rather than the core 3-2-1 rule. Therefore D is correct.

The correct answer is A. Remove account administrative rights, because unauthorized software installation is most commonly possible when users have local administrator privileges. In Windows environments, installing most applications requires elevated permissions. If users are members of the local Administrators group, they can bypass many built-in security controls and install software without IT approval.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the principle of least privilege is fundamental to endpoint security. Users should only be granted the minimum permissions necessary to perform their job functions. Removing administrative rights prevents users from installing unapproved applications and significantly reduces malware risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while technologies like firewalls, SmartScreen, and Endpoint Detection and Response (EDR) provide important layers of protection, they do not directly stop users from installing software if they already have administrative access. EDR detects and responds to threats, but it does not prevent intentional installation by privileged users.

The Mike Meyers / Mark Soper Lab Manual reinforces that controlling user permissions is the most effective preventive control against unauthorized changes to a system. Removing admin rights stops the root cause rather than reacting after installation occurs.

Therefore, to prevent future unauthorized software installations, removing account administrative rights is the most direct and effective solution, making A the correct answer.

The correct syntax for mapping a network drive in Windows is:

net use Z: \\WinNAS\shared

This command connects the specified network share and maps it as drive Z:.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“Use net use followed by the desired drive letter and the UNC path to map network shares.”

To work remotely without physically transporting a workstation, the user needs:

C. RDP (Remote Desktop Protocol): Allows graphical remote access to a Windows PC at the office.

D. VPN (Virtual Private Network): Establishes a secure tunnel to access the corporate network remotely, making the internal PC reachable.

A. SPICE is used in virtual machine environments and is not typically used for end-user remote desktop access.

B. SSH is a text-based remote access tool used mostly for Linux systems.

E. RMM (Remote Monitoring and Management) is used by IT administrators for support — not end-user remote access.

F. WinRM is used for Windows remote management via PowerShell, not for full desktop access.

A cable run under a carpet is vulnerable to compression, bending, and repeated physical stress from foot traffic, which can damage the cable jacket, distort the twists, loosen terminations, or partially break conductors—often showing up as intermittent connectivity. Quentin Docter notes that on a wired network, “other wired issues can include bad or poorly connected cables,” and you should check cabling and connections as a cause of intermittent problems. Putting a cable where people walk on it increases the chance it becomes “bad” over time or develops poor connections, producing the intermittent symptoms described in the answer option.

From a safety/professional practice perspective, Mike Meyers emphasizes that unmanaged cables are “dangerous tripping hazards” and that in business environments cables should be “carefully tucked away… or placed under cable runners,” using “proper cable management.” While that supports hazard reduction, the best reason in this question’s choices focuses on network reliability: repeated walking over the cable can cause intermittent issues. So the correct answer is D.

The best option is to create a lower-security network exclusively for the console. Many retro or legacy gaming consoles only support older Wi-Fi security standards such as WPA or even WEP, and they cannot connect to modern WPA2 or WPA3 networks. Downgrading the entire primary network would significantly weaken overall security, which is not recommended in any environment.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that legacy devices often lack firmware support for modern encryption standards and should be isolated rather than integrated directly into secure networks. Creating a separate SSID with reduced security limits exposure while still allowing connectivity for the unsupported device.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that lowering security settings on a primary router—even temporarily—introduces unnecessary risk. Switching encryption modes back and forth can also cause configuration instability and expose the network during the downgrade window.

The Mike Meyers / Mark Soper Lab Manual further reinforces the concept of network segmentation as a best practice. By creating a dedicated network for legacy or insecure devices, administrators reduce the attack surface and prevent lateral movement to sensitive systems.

Using a wired Ethernet adapter may not be supported by the console, and adding an older router introduces unmanaged vulnerabilities. Therefore, isolating the console on a separate, lower-security wireless network is the safest and most practical solution.

Adding ten high-end graphics/animation desktops can dramatically increase the electrical load on the room’s existing circuits. High-performance CPUs and GPUs draw substantially more wattage than typical office PCs, and that wattage translates into higher current (amperage) on the circuit. Mike Meyers’ Lab Manual explains the relationship V × A = W and warns that wiring and circuits have amperage ratings; pushing too much current can overheat wiring and trigger safety devices. It also explains that circuit breakers are rated for a specified amperage and will open (trip) when overloaded to prevent overheating and damage. Therefore, before deployment, the technician should calculate expected power draw per system and ensure the desktops are distributed across sufficient circuits (or that electrical upgrades are made) to avoid repeated breaker trips, overheating risks, and downtime. While temperature and humidity matter for environmental control, the question is specifically about introducing multiple power-hungry workstations, making circuit power consumption the most critical planning factor for safe, stable operation. This aligns with A+ operational/environmental concepts around proper power handling and avoiding overload conditions.

If unauthorized or non-standard applications are appearing on systems and users are receiving licensing prompts, it’s likely users are installing software themselves. Removing users from the local administrators group will prevent them from installing software without approval and reduce the likelihood of introducing unapproved or malicious programs.

A. Deploying a PKI helps with secure communications but doesn’t address user software installation rights.

C. Blocking suspicious websites is helpful but doesn’t prevent local installations.

D. Stricter UAC may add prompts but can still be bypassed by admin users.

Credential managers or password vaults (e.g., Windows Credential Manager, KeePass, or LastPass) store passwords securely. The integrity of such tools heavily depends on the strength of the master password protecting the vault. If compromised, all saved credentials could be exposed. Therefore, setting a secure master password is crucial.

A. Login time restrictions are general user account settings, not specific to credential managers.

C. TPM is used more commonly for full disk encryption, not specifically required for password managers.

D. The lock screen protects general access but does not protect stored credentials alone.

The correct answer is C. .sh. Linux and UNIX systems commonly use shell scripts, especially Bash or sh scripts, for automation. Quentin Docter’s Complete Study Guide explains that Bash stands for Bourne Again Shell and is backward compatible with the Bourne shell, or sh. It also states that Linux and UNIX scripts often end with the .sh extension to indicate that the file contains a script. The Mike Meyers/Mark Soper material also states that scripts automate computing tasks and that A+ candidates should identify script file types including .bat, .ps1, .sh, .py, .js, and .vbs. It specifically associates the appropriate extension with the shell being used. .vbs is Visual Basic Script, .ps1 is PowerShell, and .bat is a Windows batch file. For Linux shell automation, .sh is the best answer.