CompTIA 220-1202 CompTIA A+ Core 2 2025 Exam Exam Practice Test

Comprehensive and Detailed Explanation From Exact Extract:

Group Policyis the standard administrative tool for setting user permissions across domain-joined systems.

FromQUENTIN DOCTER – COMPLETE Study Guide:

“Use Group Policy to enforce user rights, including disabling guest account access on domain computers.”

Comprehensive and Detailed Explanation From Exact Extract:

Smishing (SMS phishing) is a type of social engineering attack where attackers send fraudulent text messages to trick users into revealing sensitive information or downloading malware. These messages often impersonate banks, delivery services, or official institutions to lure the victim into clicking malicious links.

A. Impersonation is an in-person or voice-based tactic.

B. Vishing refers to voice phishing over phone calls.

C. Spear phishing is a targeted email-based phishing method.

Comprehensive and Detailed Explanation From Exact Extract:

The net use command in Windows is used to map (assign) a shared drive from the command line. The syntax typically looks like: net use X: \server\share where X is the drive letter and \server\share is the network path.

A. pathping tests network latency and packet loss.

B. nslookup is used for DNS troubleshooting.

D. tracert shows the route packets take to reach a destination — not for drive mapping.

Comprehensive and Detailed Explanation From Exact Extract:

If the system fails to boot after removing the USB installation media, it often means the BIOS is not pointing to the correct boot device. This typically involves an issue with the BIOS settings—such as UEFI being disabled when the OS was installed in UEFI mode.

FromAll-in-One Exam Guideby Travis Everett:

“One of the most common post-installation issues is failing to configure the boot mode correctly in BIOS. If an OS is installed in UEFI mode, the UEFI boot must be enabled, otherwise the system won’t detect the bootloader.”

Comprehensive and Detailed Explanation From Exact Extract:

Outdated images and website data often result from cached files in the browser. The Internet Options panel in Windows (specifically under the General tab) allows users to clear browsing history, including cached images and files, which forces the browser to load the most current versions of web content.

A. Administrative Tools is used for advanced system management, not browser settings.

B. Windows Defender Firewall controls network traffic and security rules, not caching.

D. Ease of Access provides accessibility features for users with disabilities — unrelated to web browsing issues.

The correct answer is C. Setting up image deployment for PXE , because PXE (Preboot Execution Environment) allows operating system installations and upgrades to be performed over the network without using removable storage. Since all removable media is disabled for security reasons, PXE-based deployment preserves existing security controls while enabling centralized OS upgrades.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , PXE is commonly used in enterprise environments to deploy or upgrade operating systems at scale. PXE works by booting client machines from a network interface and pulling installation images from a secured deployment server.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that PXE is especially valuable when USB drives and external media are restricted. It ensures consistency, reduces human error, and maintains compliance with organizational security policies.

The Mike Meyers / Mark Soper Lab Manual reinforces that copying ISO files locally still requires write access and may violate security baselines. External drives are explicitly prohibited, and hardware tokens are authentication tools—not deployment mechanisms.

Because PXE enables secure, centralized, removable-media-free OS upgrades , it is the most appropriate solution, making C the correct answer.

Removing users from the local admin group prevents them from installing unauthorized software.

From Quentin Docter – Complete Study Guide :

“Local admin privileges allow users to install unauthorized apps. Removing them from this group restricts installations and helps prevent malware.” .

Comprehensive and Detailed Explanation From Exact Extract:

Windows Helloprovides alternative sign-in options including facial recognition, fingerprint scans, and PINs, reducing dependence on passwords.

FromAll-in-One Exam Guide:

“Windows Hello offers a range of biometric and PIN-based login methods designed to simplify access while enhancing security.”

“It can be used in place of a password, ideal for users who frequently forget credentials.”

Comprehensive and Detailed Explanation From Exact Extract:

The correct answer isVNC (Virtual Network Computing). VNC is a graphical desktop-sharing system that uses the Remote Frame Buffer protocol (RFB) to remotely control another computer. It is platform-independent and widely supported on Linux, which makes it ideal for providinginteractive remote support for a Linux-based operating system. It allows the technician not only to view the remote desktop session but also tocontrol it, fulfilling the need to see and interact with the user’s session.

A. VPN(Virtual Private Network) creates a secure tunnel to a network but doesnot provide desktop sharing or session controlby itself.

C. SSH(Secure Shell) provides secure command-line access to Unix/Linux systems but does not offergraphical desktop interaction, which is a requirement in this case.

D. RDP(Remote Desktop Protocol) is primarily a Microsoft protocol, and although it can be made to work on Linux, it isnot natively supported on legacy Linux systems, and thusless suitablethan VNC in this scenario.

CompTIA A+ 220-1102 Core 2 Objective Reference:

Objective 1.8 – Given a scenario, use features and tools of the operating system.

Under this objective, candidates are expected to be familiar with remote access technologies, includingRDP, SSH, and VNC, and understand their appropriate uses and limitations on different platforms such as Windows and Linux.

Comprehensive and Detailed Explanation From Exact Extract:

Disk optimization tools can sometimes corrupt theMaster Boot Record (MBR). If BIOS sees the drive but can ' t boot, repairing the MBR using installation media is the correct next step.

FromAll-in-One Exam Guide:

“When BIOS recognizes the drive but no OS is found, the issue is often with the boot record. Use installation media to access recovery tools and repair the MBR or boot loader.”

Comprehensive and Detailed Explanation From Exact Extract:

To ensure the authenticity of a downloaded application, the most reliable method is to verify the file’s hash (e.g., SHA256, MD5) against the value provided by the legitimate vendor. If the hash values match, the file has not been altered or tampered with. This verification confirms the integrity and authenticity of the executable.

B. Process IDs are dynamic and not unique to specific software.

C. Running in safe mode doesn’t validate legitimacy—it only runs the app in a minimal environment.

D. File names can be spoofed; matching the name does not prove authenticity.

The correct answer is A. Hashing , because hashing is specifically designed to verify file integrity and detect whether a file has been altered after its original creation or distribution. A hash is a fixed-length value generated by running a file through a hashing algorithm such as SHA-256 or SHA-1. Even a single-bit change in the file will produce a completely different hash value.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , hashing is commonly used to validate downloaded software by comparing the calculated hash of the downloaded file with the hash published by the vendor. If the two values match, the technician can be confident that the file has not been modified or tampered with.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that hashing ensures integrity , not confidentiality or authentication. SSL certificates secure data in transit, but they do not validate files after download. Plug-ins and extensions provide additional browser functionality but have no role in verifying file integrity.

The Mike Meyers / Mark Soper Lab Manual reinforces that hashing is a standard best practice in secure software deployment and malware prevention. It allows technicians to confirm that files are exactly as the publisher intended.

Because the requirement is to confirm that files have not been modified , hashing is the correct and most reliable method, making A the correct answer.

The symptoms point strongly to a bootleg/malicious application from an untrusted source: ran dom pop-ups (high number of ads), increased data usage (high network traffic/data-usage warnings), and abnormal restrictions such as failing OS updates or blocking access to sensitive apps (unexpected application behavior). These are specifically listed as common mobile security symptoms associated with malicious apps and untrusted APK sources. When a device shows multiple signs of compromise and normal remediation options (like

Comprehensive and Detailed Explanation From Exact Extract:

Persistent pop-ups urging antivirus updates are likelyscareware or adware. The correct approach is toverify existing antivirus settings, run a trusted security scan, and avoid interacting with unknown pop-ups.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Users should verify antivirus status using trusted tools before responding to alerts. Fake updates are common vectors for malware.”

Comprehensive and Detailed Explanation From Exact Extract:

Credential managers or password vaults (e.g., Windows Credential Manager, KeePass, or LastPass) store passwords securely. The integrity of such tools heavily depends on the strength of the master password protecting the vault. If compromised, all saved credentials could be exposed. Therefore, setting a secure master password is crucial.

A. Login time restrictions are general user account settings, not specific to credential managers.

C. TPM is used more commonly for full disk encryption, not specifically required for password managers.

D. The lock screen protects general access but does not protect stored credentials alone.

When a system begins randomly crashing after a hardware change (installing a GPU) and the correct vendor driver update does not resolve it, the best next troubleshooting step is to collect evidence about what is failing. Windows records crash details, driver faults, and unexpected shutdowns in Event Viewer (System/Application logs) and related reliability tools. Quentin Doc ter specifically states that Event Viewer should be the first place you look when the solution is not evident because applications and the OS often create log entries that help verify operation and diagnose problems. These logs can reveal whether the crash is tied to a display driver fault, power/kernel events, or another subsystem. Docter also notes you can often find more information about application crashes by reviewing the Application log, and for instability/shutdown patterns you “start combing through the logs” in Event Viewer to determine whether the system lost power or crashed. Mike Meyers adds that Event Viewer is the tool used to read and understand Windows logs (Application/System/Setup/Security) for diagnosing what’s happening on a system.

The correct answer is B. Task Manager , because Task Manager allows technicians to view, manage, and terminate running processes , including those that are frozen or unresponsive. If an application process is already running but not responding, launching it again will fail until the existing process is stopped.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , Task Manager is the primary Windows tool for troubleshooting application hangs, excessive resource usage, and nonresponsive programs. Technicians can end the task and relaunch the application cleanly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Resource Monitor provides detailed performance metrics but is not optimized for quickly terminating frozen applications. Event Viewer logs errors but does not resolve active process issues.

The Mike Meyers / Mark Soper Lab Manual reinforces that Registry Editor should never be used for live application troubleshooting due to the risk of system instability.

Because the issue involves an unresponsive background process , Task Manager is the fastest and safest tool to resolve the problem, making B the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

In emotionally sensitive situations, it is critical that the technicianprojects confidenceand maintains a calm, positive demeanor to reassure the customer.

FromAll-in-One Exam Guide:

“Confidence and empathy are key when working with distressed users. Demonstrating competence can help ease the customer ' s anxiety.”

Comprehensive and Detailed Explanation From Exact Extract:

After containment and remediation, one of the final steps in incident response is user education. Since the root cause was a phishing attack, it is essential to educate users about identifying phishing attempts, safe browsing practices, and how to handle suspicious communications. This improves overall security posture and helps prevent future incidents.

A. Installing additional tools may be helpful but is a long-term step.

C. Flashing router firmware is not warranted unless the network hardware is known to be compromised.

D. Suggesting more advanced tools might be excessive given that the EDR successfully contained the incident.

Comprehensive and Detailed Explanation From Exact Extract:

Mobile Device Management (MDM) allows an organization to enforce security policies, such as denying network access to jailbroken/rooted devices.

From the All-in-One Exam Guide by Travis Everett and Andrew Hutz:

“MDM software allows administrators to monitor, manage, and secure mobile devices connected to enterprise networks. One key feature is the detection and denial of access for rooted or jailbroken devices”.

Quentin Docter also confirms:

“An MDM solution can check if a device has been rooted and prevent it from accessing the network, ensuring compliance with corporate security standards”.

MDM hardening often includes enforcing stronger authentication on mobile devices. The phrase “unique to each user” points to something inherent to the individual— biometrics —rather than something the user knows (password/pattern) or something they have (PIV/smart card). Quentin Docter explains: “ Biometric devices use physical characteristics to identify the user. This type of authentication is considered something that you are ,” and lists common implementations including “ fingerprint… scanners .” This exactly matches a fingerprint, which is unique per person and commonly enforced via device policies in MDM environments.

Docter also notes mobile devices increasingly implement biometrics for access control, specifically citing “ fingerprint access control ” adopted by manufacturers. A drawn pattern and a password are knowledge factors and can be shared/observed, while a PIV card is a possession factor (something you have) and can be lost or loaned. Because the question specifies a hardening technique “unique to each user,” the best match is the biometric factor: fingerprint (B) .

The correct answer is A. Remove account administrative rights , because unauthorized software installation is most commonly possible when users have local administrator privileges . In Windows environments, installing most applications requires elevated permissions. If users are members of the local Administrators group, they can bypass many built-in security controls and install software without IT approval.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , the principle of least privilege is fundamental to endpoint security. Users should only be granted the minimum permissions necessary to perform their job functions. Removing administrative rights prevents users from installing unapproved applications and significantly reduces malware risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while technologies like firewalls, SmartScreen, and Endpoint Detection and Response (EDR) provide important layers of protection, they do not directly stop users from installing software if they already have administrative access. EDR detects and responds to threats, but it does not prevent intentional installation by privileged users.

The Mike Meyers / Mark Soper Lab Manual reinforces that controlling user permissions is the most effective preventive control against unauthorized changes to a system. Removing admin rights stops the root cause rather than reacting after installation occurs.

Therefore, to prevent future unauthorized software installations, removing account administrative rights is the most direct and effective solution, making A the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Device encryptionensures that even if someone bypasses biometrics or has physical access to the phone, they cannot read the stored data without the encryption key.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Encryption is the most effective way to protect data at rest. Even if the device is lost or stolen, encryption ensures the data remains inaccessible without the correct key or passcode.”

Hash values(like SHA256) are published by vendors to verify file integrity. A match confirms the file hasn’t been tampered with.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“Use hash values to ensure downloaded software matches the vendor’s published version and hasn ' t been modified.”

Comprehensive and Detailed Explanation From Exact Extract:

Cloud-based software often enforcesdevice limitsper license. Before reinstallation or switching software, checking license allocations is the most logical first step.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Many cloud apps enforce user or device count restrictions. When an install fails, check licensing before troubleshooting other areas.”

Comprehensive and Detailed Explanation From Exact Extract:

An evil twin is a rogue wireless access point set up to mimic a legitimate Wi-Fi network. Unsuspecting users may connect to it, giving attackers the opportunity to intercept traffic, steal credentials, or install malware. The evil twin often uses the same SSID as the real network to fool users.

A. Stalkerware is spyware installed to track user activity, typically on personal devices.

C. Tailgating is a physical security breach involving unauthorized entry behind someone with access.

D. Shoulder surfing involves observing a person entering confidential data, such as PINs or passwords.

When resolution requires another team, professionalism means clear communication , setting expectations, and explaining what will happen next. Quentin Docter describes escalation: when you don’t have the answer, “this process is called escalation,” and when a ticket is escalated, someone must “be responsible for communicating with the user.” He emphasizes “Clear Communication,” stating the problem description must be understandable to others because “the problem may have to be escalated,” and you should communicate work-arounds and progress transparently.

The All-in-One guide and Mike Meyers Lab Manual both stress empathy and respectful communication with frustrated users—use statements that acknowledge feelings and keep a nonaccusatory tone.

Option D best matches these best practices: explain what’s happening (app crashing), why another department must be involved, and what the user should expect (timeline/next steps/work-around if available). Transferring without explanation (A) increases frustration; a complaint (B) isn’t a solution; and working alone (C) ignores the required collaboration.

Comprehensive and Detailed Explanation From Exact Extract:

Image deployment is the fastest and most efficient method for installing operating systems on multiple machines. It involves creating a pre-configured image of an OS and deploying it across systems using tools like Windows Deployment Services (WDS) or third-party imaging solutions. This method saves time and ensures consistency across all devices.

A. Physical media is slow and not scalable.

B. Mountable ISOs are useful but still require manual installation.

C. Manual installation is time-consuming and not suitable for large-scale deployment.

Comprehensive and Detailed Explanation From Exact Extract:

Once the system is cleaned, the next priority is toeducate the useron safe practices to prevent recurrence.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Post-malware remediation should include user education to prevent reinfection and identify how the malware was introduced.”

Comprehensive and Detailed Explanation From Exact Extract:

Badge readers are electronic access control systems that require authorized users to scan a badge (e.g., RFID or magnetic strip cards) to gain access to restricted physical locations. These systems typically log all access attempts—successful or denied—providing both detection and recording of access events.

A. Bollards are physical barriers to prevent vehicle access.

B. Video surveillance can record access visually but does not track identity unless integrated with access control systems.

D. A fence restricts access but doesn ' t detect or record who entered.

Comprehensive and Detailed Explanation From Exact Extract:

When an OS reaches its end of life (EOL), it no longer receives updates or support, including critical security patches.

From the Quentin Docter Study Guide:

“End-of-life means the manufacturer no longer supports the OS with updates or security patches, which exposes systems to vulnerabilities unless upgraded”.

All-in-One Exam Guide adds:

“End-of-life notifications serve as a final warning that continued use of the OS will be insecure and unsupported. It’s crucial for administrators to plan migration”.

Antivirus/antimalware detection depends heavily on its definitions/signatures . If those are outdated, new malware variants may not be recognized. Quentin Docter explains that the “definitions database” is a core antivirus component and that its effectiveness depends on “the frequency of updates and the comprehensiveness of the database signatures.” He adds that new signatures are discovered frequently and added to the database, meaning stale definitions leave gaps.

Docter is also explicit that security software “is not perfect” and that malware may get around it, “especially a new threat (and especially if you haven’t updated your definitions lately).” That statement directly matches this scenario: the software exists, but it failed to detect the infection—most likely because the detection data wasn’t current.

The other answers don’t fit as well: folder permissions and user permissions can limit what malware can change, but they don’t explain why security software didn’t detect it . Port security relates to network access control, not local signature detection. Therefore, Outdated definitions (B) is the best explanation.

The correct answer is C. Listen to the customer’s concerns and acknowledge their frustrations , because effective communication and empathy are critical components of professional help desk interactions—especially when customers are upset.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , technicians should always demonstrate active listening, empathy, and professionalism. Acknowledging a user’s frustration helps de-escalate tense situations and builds trust.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that users who feel unheard are less cooperative and more dissatisfied. Before troubleshooting or escalation, technicians should validate the customer’s experience and reassure them that the issue will be addressed.

The Mike Meyers / Mark Soper Lab Manual reinforces that blaming previous technicians or immediately escalating without communication can worsen the situation. Asking technical questions too early may come across as dismissive.

Because the goal is to communicate professionally and effectively , the technician should first listen and acknowledge the user’s frustration, making C the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Thepowercfg commandis a built-in utility for controlling power settings including hibernation. It can be used in scripts and does not require domain access.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“The powercfg command provides granular control of power settings, useful for scripting and configuring systems without Group Policy access.”

3-D rendering is a graphics-intensive workload, and minimum hardware checks for this type of software commonly fail due to GPU capability (including dedicated vs. integrated GPU support) and VRAM requirements. Quentin Docter explains that application “Display” requirements can include “ a graphics processing unit (GPU). A specific GPU may be required if the application will process video or graphics .” He also notes that “ VRAM requirements are typically related to applications that are graphic intensive, such as gaming ,” which aligns strongly with 3-D rendering workloads.

Mike Meyers’ Lab Manual reinforces that “ graphically demanding applications… state specific graphics requirements ,” and that CompTIA focuses on “ dedicated graphics cards versus integrated ones ,” because integrated GPUs are often less capable for demanding graphics tasks. It also reminds that systems with integrated GPUs share RAM with graphics, which can matter when software checks VRAM.

Therefore, the first thing to verify is GPU requirements (B) , not USB/NIC/PSU.

The correct answer is D. Chain of custody process , because chain of custody ensures that evidence collected during an incident response is tracked, preserved, and legally defensible . It documents who collected the evidence, when it was collected, how it was stored, and who accessed it throughout the investigation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , chain of custody is essential when evidence may be used in disciplinary actions, audits, or legal proceedings. Any gap in documentation can render evidence inadmissible.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that chain of custody provides accountability and prevents claims of evidence tampering. Each transfer of evidence must be logged and verified.

The Mike Meyers / Mark Soper Lab Manual clarifies that while order of volatility determines the sequence of data collection, it does not track ownership or handling. Data integrity best practices ensure evidence is not altered, but they do not provide a record of custody.

Because the question focuses on handling and accountability , the required process is chain of custody , making D the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

These symptoms strongly indicatemalware infectionor a malicious app running in the background. The first action should be torun a malware scanto identify and remove malicious components.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“If a mobile device is overheating and the battery drains rapidly after installing an app, this could point to malware. Begin by scanning the device with a mobile anti-malware application.”

The correct answer is A. Perform a factory reset , because the symptoms strongly indicate a serious mobile malware infection , potentially including spyware or a trojan installed from an unofficial app store. Random pop-ups, excessive data usage, blocked access to banking apps, and inability to update the OS are classic indicators that malicious software has gained deep system-level access .

According to the Quentin Docter – CompTIA A+ Complete Study Guide , mobile malware installed from unofficial sources can embed itself deeply into the operating system, sometimes gaining device administrator privileges. In such cases, standard remediation steps such as clearing cache or uninstalling apps may be ineffective.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that when a mobile device shows signs of persistent compromise—especially when core OS functions and security-sensitive applications are affected—the recommended first step is to perform a factory reset . This completely wipes user-installed applications and restores the device to a known-good state.

The Mike Meyers / Mark Soper Lab Manual reinforces that changing passwords is important after the device is secured, not before. Contacting support or clearing cache does not remove deeply embedded malware.

Therefore, to immediately address the security threat and regain control of the device, a factory reset is the most appropriate first action , making A the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Facial recognition is a biometric authentication method that ties access to a unique physical feature of the user. Unlike passcodes or pattern locks—which can be easily shared—facial recognition provides a more secure and non-transferable form of access. It also enhances user convenience and is widely supported by modern smartphones.

A. Pattern locks can still be shared and are less secure.

C. Device encryption protects data but does not prevent screen access if a passcode is shared.

D. Multifactor authentication typically applies to app or account access, not basic phone unlocking.

Comprehensive and Detailed Explanation From Exact Extract:

Apps like GPS or roaming services often drain battery during travel.Checking app utilizationhelps identify battery drain sources.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“Monitoring app activity can reveal high-power usage apps running in the background, especially when mobile data or GPS is active.”

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“ A small yellow triangle appeared in the taskbar. I am no longer able to access network resources. ”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease . After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment ( Output.txt ) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x ) and a valid gateway/DNS.

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS , which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x )

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.