220-1202 Exam Dumps - CompTIA A+ Questions and Answers

Persistent pop-ups urging antivirus updates are likelyscareware or adware. The correct approach is toverify existing antivirus settings, run a trusted security scan, and avoid interacting with unknown pop-ups.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Users should verify antivirus status using trusted tools before responding to alerts. Fake updates are common vectors for malware.”

Within the Windows ecosystem, Microsoft introduced ReFS (Resilient File System) as the next-generation filesystem concept designed to improve integrity and resilience, particularly for large storage and fault-tolerant configurations. Among the options, XFS is a Linux filesystem, APFS is Apple’s modern filesystem, and exFAT is primarily intended for removable media compatibility—not as an NTFS successor.

In the provided CompTIA A+ practice material set, ReFS is explicitly identified as “Resilient File System (ReFS)” and discussed as a Windows storage/filesystem technology. This aligns with the exam framing that ReFS is the Windows-side “successor” concept compared with NTFS in capability and design goals for modern storage scenarios.

Therefore, the correct answer is ReFS (A).

If unauthorized or non-standard applications are appearing on systems and users are receiving licensing prompts, it’s likely users are installing software themselves. Removing users from the local administrators group will prevent them from installing software without approval and reduce the likelihood of introducing unapproved or malicious programs.

A. Deploying a PKI helps with secure communications but doesn’t address user software installation rights.

C. Blocking suspicious websites is helpful but doesn’t prevent local installations.

D. Stricter UAC may add prompts but can still be bypassed by admin users.

Authenticator apps, such as Google Authenticator or Microsoft Authenticator, can be configured to sendpush notificationsto users for approval when logging in. This is a form of multi-factor authentication.

FromAll-in-One Exam Guide:

“Push-based two-factor authentication uses an authenticator app to send a notification to a mobile device. The user must approve the login attempt in real time, ensuring the request is valid.”

The correct answer is C. RDP (Remote Desktop Protocol), because RDP is the default remote access technology for Windows servers. It allows technicians to remotely connect to the graphical desktop environment of a Windows server to verify services, logs, and system status.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, RDP is built into Windows operating systems and is commonly used by administrators to manage Windows servers and workstations. It provides full access to the desktop, making it ideal for checking whether services such as IIS (Internet Information Services) are running properly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while SSH is commonly used for Linux and network devices, Windows servers typically rely on RDP for administrative access. VNC is a third-party remote desktop solution and is not enabled by default on Windows systems.

The Mike Meyers / Mark Soper Lab Manual reinforces that SPICE is primarily used in virtualized environments and is not a standard Windows remote access tool.

Because the technician needs to verify a Windows web server’s operational status using a built-in method, RDP is the most appropriate and likely technology, making C the correct answer.

Aclean installensures all malware is eliminated by completely wiping and reinstalling the OS. System restore or repair may leave traces.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“If malware cannot be completely removed, perform a clean installation of the operating system. This ensures no remnants remain on the machine.”

MDR (Managed Detection and Response)provides outsourced threat monitoring and response using multiple tools. The use of athird-party providerfor protection and incident handling confirms MDR.

FromQuentin Docter – CompTIA A+ Study Guide:

“MDR provides 24/7 threat detection and response through outsourced experts using advanced tools across client environments.”

The correct answer is C. Setting up image deployment for PXE, because PXE (Preboot Execution Environment) allows operating system installations and upgrades to be performed over the network without using removable storage. Since all removable media is disabled for security reasons, PXE-based deployment preserves existing security controls while enabling centralized OS upgrades.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, PXE is commonly used in enterprise environments to deploy or upgrade operating systems at scale. PXE works by booting client machines from a network interface and pulling installation images from a secured deployment server.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that PXE is especially valuable when USB drives and external media are restricted. It ensures consistency, reduces human error, and maintains compliance with organizational security policies.

The Mike Meyers / Mark Soper Lab Manual reinforces that copying ISO files locally still requires write access and may violate security baselines. External drives are explicitly prohibited, and hardware tokens are authentication tools—not deployment mechanisms.

Because PXE enables secure, centralized, removable-media-free OS upgrades, it is the most appropriate solution, making C the correct answer.

The correct answer is D. Chain of custody process, because chain of custody ensures that evidence collected during an incident response is tracked, preserved, and legally defensible. It documents who collected the evidence, when it was collected, how it was stored, and who accessed it throughout the investigation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, chain of custody is essential when evidence may be used in disciplinary actions, audits, or legal proceedings. Any gap in documentation can render evidence inadmissible.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that chain of custody provides accountability and prevents claims of evidence tampering. Each transfer of evidence must be logged and verified.

The Mike Meyers / Mark Soper Lab Manual clarifies that while order of volatility determines the sequence of data collection, it does not track ownership or handling. Data integrity best practices ensure evidence is not altered, but they do not provide a record of custody.

Because the question focuses on handling and accountability, the required process is chain of custody, making D the correct answer.

These symptoms strongly suggest malware activity—likely from the newly installed app. The first action should be torun a malware scanto detect and isolate malicious software.

FromQuentin Docter – CompTIA A+ Study Guide:

“Signs of malware infection include rapid battery drain and overheating. The first step should be a malware scan using trusted mobile antivirus apps.”