220-1202 Exam Dumps - CompTIA A+ Questions and Answers

The scenario strongly suggests the device has been compromised by malware delivered through a social-engineering message (an “unexpected overdue invoice” attachment). After the attempt, the phone shows system-wide performance issues affecting the browser and other apps, and a restart does not fix it—this matches common mobile malware symptoms such as sluggish response time and abnormal behavior that persists across reboots. When symptoms persist beyond a soft reset, the most reliable remediation is to return the device to a known-good state by performing a factory reset (wipe). Quentin Docter explains that a factory reset is much more effective and will remove malware along with applications, and that when a security symptom indicates malware, the device should be factory reset and then protected with antimalware before reinstalling apps.The All-in-One guide similarly teaches an escalation path: stop/uninstall suspect apps, and if these steps don’t resolve the behavior, use a factory reset to cleanse the device. 【 turn27file4†L9-L14 】 Mike Meyers’ Lab Manual also lists factory resets among the key tools for resolving persistent mobile app security issues.

Comprehensive and Detailed Explanation From Exact Extract:

Remote wipe is the best option to prevent unauthorized access to data when a mobile device is lost or stolen—especially if the user is unaware of the loss. It allows administrators or mobile device management (MDM) systems to remotely erase all data on the device, rendering it unusable for unauthorized users.

A. Encryption protects the data, but if the device remains powered and logged in, it may still be accessible.

C. Geofencing can restrict features based on location but does not erase data.

D. Facial recognition helps secure access but can be bypassed in some cases or fail in practical situations.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“ A small yellow triangle appeared in the taskbar. I am no longer able to access network resources. ”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease . After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment ( Output.txt ) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x ) and a valid gateway/DNS.

The correct answers are C. GPT and E. NTFS . The GUID Partition Table (GPT) partitioning scheme is required because it supports more than four primary partitions and disks larger than 2TB. Since the SSD is 4TB and requires at least five primary partitions, MBR is not suitable.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , MBR is limited to four primary partitions and a maximum disk size of 2TB. GPT removes these limitations and is required for modern systems using UEFI firmware, including Windows 11.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Windows installations on large disks should use GPT in combination with NTFS, which is the preferred Windows file system due to its support for large files, permissions, encryption, and reliability features.

The Mike Meyers / Mark Soper Lab Manual clarifies that FAT16 cannot support large volumes, XFS is a Linux file system, and APFS is designed for Apple systems. None of these are appropriate for a Windows 11 installation.

Because the requirement involves disk size, partition count, and Windows compatibility , the correct combination is GPT for partitioning and NTFS for the file system, making C and E the correct answers.

Comprehensive and Detailed Explanation From Exact Extract:

Memory usage is critically high, suggesting many applications or background processes. Closing unnecessary programs will immediately free up RAM.

FromTravis Everett – All-in-One Exam Guide:

“High memory usage with moderate CPU load usually means too many applications are open. Close unnecessary apps or use Task Manager to end processes.”

When a system begins randomly crashing after a hardware change (installing a GPU) and the correct vendor driver update does not resolve it, the best next troubleshooting step is to collect evidence about what is failing. Windows records crash details, driver faults, and unexpected shutdowns in Event Viewer (System/Application logs) and related reliability tools. Quentin Doc ter specifically states that Event Viewer should be the first place you look when the solution is not evident because applications and the OS often create log entries that help verify operation and diagnose problems. These logs can reveal whether the crash is tied to a display driver fault, power/kernel events, or another subsystem. Docter also notes you can often find more information about application crashes by reviewing the Application log, and for instability/shutdown patterns you “start combing through the logs” in Event Viewer to determine whether the system lost power or crashed. Mike Meyers adds that Event Viewer is the tool used to read and understand Windows logs (Application/System/Setup/Security) for diagnosing what’s happening on a system.

The correct answer is A. Remove account administrative rights , because unauthorized software installation is most commonly possible when users have local administrator privileges . In Windows environments, installing most applications requires elevated permissions. If users are members of the local Administrators group, they can bypass many built-in security controls and install software without IT approval.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , the principle of least privilege is fundamental to endpoint security. Users should only be granted the minimum permissions necessary to perform their job functions. Removing administrative rights prevents users from installing unapproved applications and significantly reduces malware risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while technologies like firewalls, SmartScreen, and Endpoint Detection and Response (EDR) provide important layers of protection, they do not directly stop users from installing software if they already have administrative access. EDR detects and responds to threats, but it does not prevent intentional installation by privileged users.

The Mike Meyers / Mark Soper Lab Manual reinforces that controlling user permissions is the most effective preventive control against unauthorized changes to a system. Removing admin rights stops the root cause rather than reacting after installation occurs.

Therefore, to prevent future unauthorized software installations, removing account administrative rights is the most direct and effective solution, making A the correct answer.

To prevent unauthorized physical access to a mobile device, the company must ensure the device locks quickly and requires an authentication factor before anyone can use it. PIN authentication directly blocks access by requiring a passcode to unlock the device—Quentin Docter lists PIN lock as one of the primary “screen lock” methods used to secure mobile devices, explaining it as the most common unlock method (typically 4–6 digits, sometimes alphanumeric).

Screen timeout (auto-lock) reduces the window in which an unattended phone remains usable; the All-in-One guide notes that systems can be set to an automatic timeout and screen lock, requiring credentials after a short period of inactivity. Mike Meyers’ Lab Manual reinforces that you should “protect your data from access by putting a good screen lock on the device,” and that these locks commonly require a password/PIN/pattern/biometric to regain access after locking.

Hotspots, VPN, antivirus, and location services are valuable, but they do not primarily stop someone holding the device from opening it and accessing data.

A cable run under a carpet is vulnerable to compression, bending, and repeated physical stress from foot traffic, which can damage the cable jacket, distort the twists, loosen terminations, or partially break conductors—often showing up as intermittent connectivity . Quentin Docter notes that on a wired network, “other wired issues can include bad or poorly connected cables,” and you should check cabling and connections as a cause of intermittent problems. Putting a cable where people walk on it increases the chance it becomes “bad” over time or develops poor connections, producing the intermittent symptoms described in the answer option.

From a safety/professional practice perspective, Mike Meyers emphasizes that unmanaged cables are “dangerous tripping hazards” and that in business environments cables should be “carefully tucked away… or placed under cable runners,” using “proper cable management.” While that supports hazard reduction, the best reason in this question’s choices focuses on network reliability: repeated walking over the cable can cause intermittent issues. So the correct answer is D.