Free and Premium CompTIA 220-1202 Dumps Questions Answers

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

The correct answer is D. Connect a wrist strap to a metal frame, because this action directly prevents electrostatic discharge (ESD), which is one of the most common causes of accidental hardware damage during device disassembly. Even when a device is powered off, static electricity stored in the technician’s body can discharge into sensitive components such as RAM, CPUs, and system boards.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the most effective way to prevent ESD is to equalize electrical potential between the technician and the device. An ESD wrist strap, when connected to a grounded metal surface such as a computer chassis, safely dissipates static electricity before it can damage components.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while antistatic mats and bags are useful, they are secondary controls. The wrist strap provides continuous grounding throughout the repair process, whereas mats and bags only protect components when they are placed on or inside them.

The Mike Meyers / Mark Soper Lab Manual reinforces that working on plastic surfaces does not guarantee grounding, and placing components in antistatic bags is something done after removal, not immediately after powering down.

Therefore, once the device is turned off, the next and most important step is to connect a wrist strap to a metal frame, making D the correct answer.

Outdated images and website data often result from cached files in the browser. The Internet Options panel in Windows (specifically under the General tab) allows users to clear browsing history, including cached images and files, which forces the browser to load the most current versions of web content.

A. Administrative Tools is used for advanced system management, not browser settings.

B. Windows Defender Firewall controls network traffic and security rules, not caching.

D. Ease of Access provides accessibility features for users with disabilities — unrelated to web browsing issues.

When DHCP isn’t enabled, static IPs must be assigned manually, so the engineering team provides the IP details.

From Travis Everett – All-in-One Exam Guide:

“If DHCP is unavailable, technicians need the static IP configuration to connect devices to the network.” .

Extra icons in the system tray after an update often indicate new background apps loading at startup, increasing boot time. The Mike Meyers Lab Manual explains that “autostarting programs will slow down your system,” and Windows provides control through Task Manager’s Startup tab to enable/disable startup programs—specifically calling this out as useful “especially if Windows is slow to load.” The All-in-One Exam Guide gives the same practical step: open Task Manager’s Startup tab and “review the enabled applications for any you don’t need,” then disable unnecessary ones to regain speed.

Importantly, the All-in-One answer guidance explicitly notes that disabling unnecessary startup programs is the least disruptive first action: “Andre’s best option would be to disable unnecessary startup programs… A system restore might help… but it’ll be much slower and more disruptive.”

Uninstalling the update or restoring the system are more disruptive and should come later if simpler optimization fails. Antivirus scanning can be appropriate if no obvious cause exists, but the clear clue here is new startup items (system tray icons).

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple ' s proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

A low-level format (also referred to as a zero-fill or full format) writes over every sector on a storage device, effectively destroying the existing data and making recovery nearly impossible. Unlike degaussing, which renders the drive unusable, a low-level format maintains the integrity of the device, allowing it to be repurposed or reused.

A. Deleting partitions does not fully erase data; it only removes references in the partition table.

B. EFS (Encrypting File System) encrypts files but does not securely wipe them.

D. Degaussing destroys the magnetic structure of a drive, making it inoperable and not reusable.

Carbon fiber filamentcan producefine particles or fumesduring printing, which may be harmful when inhaled. Wearing anair filter maskis essential to protect the respiratory system.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“When working with advanced materials like carbon fiber, always use appropriate personal protective equipment such as air filter masks to prevent inhalation of dangerous particles.”

Content filtering allows administrators to block or allow access to websites based on categories (e.g., social media, adult content, streaming). On a SOHO (Small Office/Home Office) router, this is often built-in or available via DNS-level filtering, and is the most appropriate method for enforcing browsing policies without needing to touch each individual device.

A. Secure management access protects router admin interfaces but doesn’t control user browsing.

B. Group Policy Editor is a Windows tool, not used on routers.

D. A firewall can block specific IPs or ports, but it doesn ' t categorize web content.

The key clue is “uses built-in sensors to monitor targets without their consent.” In the All-in-One Exam Guide’s mobile security coverage, it explains that modern devices can be abused for unauthorized location tracking and that device settings or apps may send location information “to third parties, sometimes without explicit consent or knowledge.” It also warns about unauthorized camera and microphone activation , stating that “app features, malware, and unauthorized network connections can potentially be used to activate… built-in cameras and microphones,” which enables an attacker to “effectively spy on anyone near it.” The Mike Meyers Lab Manual mirrors this exactly: unauthorized tracking can occur without explicit consent and built-in cameras/microphones are “of particular concern” because they let an attacker spy nearby.

That specific “surveillance via sensors” behavior aligns best with stalkerware (a spyware-style category focused on covert monitoring). By contrast, a rootkit’s hallmark is hiding itself using low-level OS control, and a Trojan primarily masquerades as something harmless. Therefore, D is the best answer.

A low-cost home lab for practicing server management and scripting strongly points to Linux because it is widely available at no cost and is designed to support many server-style workloads. The All-in-One guide states plainly: “Linux is a popular, free, open source operating system,” and notes that there are many distributions (distros), giving flexibility for different needs. Quentin Docter adds key context about Linux’s purpose: Linus Torvalds created it as “a completely open source operating system for the world to use… completely free for anyone to use,” and highlights that many Linux distributions exist today.

From a cost standpoint, Docter’s licensing section defines open source as “not only… free, but the source code… is also shared,” and explicitly lists “OSs such as Linux” as open source examples. This directly supports “low-cost.”

Finally, Linux is a common target environment for real server administration and scripting practice (shell tools, package repositories, services), making it the best match versus ChromeOS/macOS/Windows for this lab goal.

In Windows, accessibility tools such as speech recognition are found under the Ease of Access settings. This section includes options for users who require assistive technologies, including screen readers, magnifiers, and voice control interfaces like speech recognition. Setting up speech recognition allows users to control the system and input text using voice commands.

A. Time and Language is for setting regional preferences and language packs.

B. Personalization adjusts themes, backgrounds, and colors.

C. System includes display, storage, notifications, and power settings, but not accessibility tools.

Among the options, threat (end-user) education most directly addresses both preventing malware installation and preventing accidental disclosure of sensitive information, because it changes user behavior—the number one target of many attacks. Quentin Docter emphasizes: “By far the best prevention of security threats is the education of your end users regarding common threats,” explaining that the most effective method is teaching users not to open suspicious files and to open only those they’re reasonably sure are malware-free. Docter adds that trained users can better identify Trojans and phishing scams and should also learn guidelines for protecting sensitive information and recognizing social engineering threats.

Docter also states clearly that even when antimalware tools exist, “user education is much more effective” in preventing certain notification-based and trick-based malware installs. While Secure Boot, firewalls, and email gateways are valuable technical controls, they don’t cover the broad human-risk dimension of both malware installs and sensitive data disclosure as effectively as education/training. Hence B is correct.

The correct answer is D. Smishing, which is a form of phishing attack conducted via SMS text messages. The key indicators in this scenario are the unexpected text message and the embedded link prompting the user to reset a password. These attacks rely on urgency and fear to trick users into clicking malicious links or providing credentials.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, smishing attacks often impersonate legitimate organizations such as banks, IT departments, or service providers. The attacker claims that an account action is required, such as resetting an expired password, to prompt immediate user response.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that smishing is distinct from other phishing variants based on delivery method. Vishing uses voice calls, spear phishing targets specific individuals via email, and whaling targets high-level executives. Since this attack is delivered via text message, it is classified as smishing.

The Mike Meyers / Mark Soper Lab Manual reinforces that modern attackers increasingly use SMS because users often trust text messages more than emails. This makes smishing a highly effective and common attack vector.

Because the attack uses SMS with a malicious link, smishing is the correct answer.

The requirement is secure remote access to both Linux and Windows servers while working from home. A VPN is designed to securely extend internal network access across the public Internet. Quentin Docter states that a “virtual private network (VPN) extends your company’s internal network across the Internet,” allowing clients to connect “securely and privately,” and that it creates a secure tunnel “through the process of encryption and encapsulation,” making the remote host appear as part of the internal network with an internal IP.

Mike Meyers’ Lab Manual reinforces that VPNs work by “setting up an encrypted tunnel between the two points—over the open Internet—creating what we call a virtual private network (VPN),” enabling remote users to function as if they were plugged into the office LAN.

FTP is not secure by default and is file-transfer-only (not full network access). RDP is Windows-focused and provides a remote desktop session, not generalized secure access to mixed OS servers. RMM is a management platform for IT monitoring/maintenance, not the primary secure access method for end users. Therefore, VPN (B) best meets the requirement.

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

Cryptominersexploit system resources to mine cryptocurrency, often without user consent, leading to high CPU and GPU usage.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Cryptomining malware can cause significant performance degradation by monopolizing system resources like CPU and GPU to mine digital currency.”

The correct answer is D. Continuity. Continuity is an Apple ecosystem feature category that allows Apple devices to work together, such as moving activity between devices or integrating nearby Apple hardware. Among the choices, it is the feature most likely to rely on short-range wireless communication such as Bluetooth, often along with Wi-Fi and iCloud. The A+ materials identify Bluetooth as a personal-area-network technology used for nearby device communication, pairing, and synchronization. The Mike Meyers/Mark Soper material also explains that mobile devices commonly expand and communicate wirelessly through Bluetooth with nearby accessories and devices. Terminal is a command-line interface, not a Bluetooth feature. Gestures are touchpad or touchscreen motions used for input. Mission Control is a macOS interface feature for viewing open windows and desktops. Continuity is the only listed feature that strongly depends on communication between nearby Apple devices.

If the phone works on Wi-Fi but not off Wi-Fi, the most likely issue is that cellular data is disabled (or restricted). This aligns directly with the CompTIA A+ objective language for mobile troubleshooting, which explicitly includes “wireless/cellular data network (enable/disable).” After travel, users often enable airplane mode or disable cellular data to avoid roaming charges, and sometimes forget to re-enable it.

Quentin Docter’s mobile connectivity discussion repeatedly distinguishes Wi-Fi access from cellular connectivity and treats cellular settings as a primary area to verify when Internet access is not available away from Wi-Fi. While data caps/limits could throttle service, they usually don’t make all non-Wi-Fi browsing and email impossible immediately. VPN issues might block some access, but the simplest “most likely” resolution based on the symptom is re-enabling cellular data. Reinstalling the SIM is possible, but again not the first, most likely fix given the scenario framing. Therefore, Enable cellular data (A) is correct.

The correct answer is B. VNC . The key phrase is graphical interface access . VNC, or Virtual Network Computing, is a remote-control technology used to share and control graphical desktops. Quentin Docter’s Complete Study Guide explains that VNC is a remote control tool for desktop sharing, uses a client-server model, and allows remote control of the host where the VNC server is installed. The Mike Meyers/Mark Soper material also explains that SSH is excellent for command-line administrative tasks, but when full graphical desktop access is needed, a remote desktop application is required; VNC is identified as cross-platform and usable for remote graphical control. SSH provides secure command-line access, not a full graphical interface by default. WinRM is mainly a Windows remote-management technology. Telnet is an insecure text-based remote access protocol and should not be used for secure remote administration.

Group Policyis the standard administrative tool for setting user permissions across domain-joined systems.

FromQUENTIN DOCTER – COMPLETE Study Guide:

“Use Group Policy to enforce user rights, including disabling guest account access on domain computers.”

If unauthorized or non-standard applications are appearing on systems and users are receiving licensing prompts, it’s likely users are installing software themselves. Removing users from the local administrators group will prevent them from installing software without approval and reduce the likelihood of introducing unapproved or malicious programs.

A. Deploying a PKI helps with secure communications but doesn’t address user software installation rights.

C. Blocking suspicious websites is helpful but doesn’t prevent local installations.

D. Stricter UAC may add prompts but can still be bypassed by admin users.

The correct answer is C. Switch the NIC settings from manual to automatic, which allows the computer to obtain an IP address dynamically from the DHCP server. When a static IP address is no longer required, reverting the network configuration to DHCP ensures the system integrates properly with the current network design.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, DHCP simplifies network management by automatically assigning IP addresses, subnet masks, gateways, and DNS settings. Leaving a static IP in place can cause address conflicts or connectivity issues, especially when the device is repurposed.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that DHCP reservations are used when a device must always receive the same IP address, which is unnecessary in this scenario. Creating exclusions or manually changing the static IP does not meet the requirement to remove static addressing altogether.

The Mike Meyers / Mark Soper Lab Manual reinforces that switching the NIC to automatic configuration is the correct way to return a system to standard network operation and avoid manual IP management.

Because the static IP is no longer needed, enabling DHCP by setting the NIC to automatic configuration is the correct solution, making C the correct answer.

The correct answer is C. Cryptominer . Cryptominer malware secretly uses a victim computer’s processing resources to mine cryptocurrency for an attacker. Because cryptocurrency mining requires heavy computation, this malware commonly causes unusually high CPU or GPU usage. The All-in-One Exam Guide explains that cryptominers take control of a computer’s hardware resources to mine cryptocurrency and that a telltale sign may be inexplicably high GPU or CPU utilization. The Mike Meyers/Mark Soper material states the same concept: cryptominer malware uses the target system’s CPU or GPU, and one sign of infection is unexplained high resource usage. A keylogger records keystrokes, a Trojan disguises itself as legitimate software while performing malicious actions, and a rootkit hides itself using low-level OS access. Those malware types can be dangerous, but high CPU usage most strongly points to a cryptominer.

The correct answer is C. Windows Server 2022, because Windows Server editions are specifically designed to run server workloads, such as file services, Active Directory, DNS, DHCP, virtualization, and application hosting.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Windows Server operating systems differ significantly from desktop versions. They support server roles, higher hardware limits, and enterprise features not available in client editions.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Windows 10 Enterprise and Windows 11 Pro are client operating systems intended for end-user workstations. While they can connect to servers, they are not designed to function as servers themselves.

The Mike Meyers / Mark Soper Lab Manual clarifies that version identifiers like 22H2 represent feature updates for Windows client operating systems, not standalone server products.

Because the question asks which version would most likely be installed on a server, the correct choice is Windows Server 2022, making C the correct answer.

Hash values(like SHA256) are published by vendors to verify file integrity. A match confirms the file hasn’t been tampered with.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“Use hash values to ensure downloaded software matches the vendor’s published version and hasn ' t been modified.”

A bollard is a sturdy physical barrier—often a steel or concrete post—designed to prevent vehicles or unauthorized individuals from ramming into or entering secure areas of a building. It provides physical security and is commonly used outside entrances to prevent forced entry.

A. PIV (Personal Identity Verification) cards are used for identity access control, not physical blocking.

B. Motion lighting may deter activity but doesn’t physically prevent entry.

C. Surveillance records activity but cannot stop a forced entry.

Smishing (SMS phishing) is a type of social engineering attack where attackers send fraudulent text messages to trick users into revealing sensitive information or downloading malware. These messages often impersonate banks, delivery services, or official institutions to lure the victim into clicking malicious links.

A. Impersonation is an in-person or voice-based tactic.

B. Vishing refers to voice phishing over phone calls.

C. Spear phishing is a targeted email-based phishing method.

When defaults are too permissive across multiple Windows workstations, the most efficient and scalable fix is to enforce a standardized security baseline using Group Policy. The All-in-One guide explains that Windows provides extensive “security features” such as requiring complex passwords, limiting logon times, and controlling whether users can install applications—“and the list goes on to thousands of security features.” It states that “To configure these features, you use group policies,” and that you configure them using the Group Policy Editor (gpedit.msc).

This directly matches the scenario: repeated unauthorized attempts suggest the need to tighten multiple security settings consistently. While enabling account lockout policies (D) is one good control, the question is broader—“default security settings may be too permissive”—so the best action is to implement the overall appropriate group policy that can include lockout, password complexity, auditing, and other controls together. Updates and password resets are useful, but they don’t systematically correct permissive baseline settings across systems. Therefore, implementing an appropriate group policy is the best answer.

Virtualizationallows the legacy OS to be run in a virtual machine (VM) on top of the newer OS. This method provides backward compatibility without requiring outdated operating systems on physical hardware.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Using virtualization is a preferred method when legacy applications are needed after migrating to newer operating systems. It allows legacy environments to exist securely within a modern OS framework.”

In emotionally sensitive situations, it is critical that the technicianprojects confidenceand maintains a calm, positive demeanor to reassure the customer.

FromAll-in-One Exam Guide:

“Confidence and empathy are key when working with distressed users. Demonstrating competence can help ease the customer ' s anxiety.”

A “central log-in” means users can authenticate using a centralized account database rather than separate local accounts on each PC—this is a core feature of a Windows domain . Mike Meyers explains that a Windows domain makes it easy for anyone with a domain account to log on to any computer in the domain with a single account , a process called “single sign-on (SSO),” and that users do not need a separate local account stored on every computer. The All-in-One guide reinforces the same: in a domain, the domain controller stores domain accounts and “a user logging on to any computer on the domain may use their one domain account to log on to the entire network.”

Active Directory is the directory service commonly used to implement domains, but the question asks what is required for centralized logon on the workstation side— the computer must be joined to the domain (domain membership). Workgroups use only local accounts, and Local Group Policy Editor manages policies locally, not centralized authentication.

Antivirus/antimalware detection depends heavily on its definitions/signatures. If those are outdated, new malware variants may not be recognized. Quentin Docter explains that the “definitions database” is a core antivirus component and that its effectiveness depends on “the frequency of updates and the comprehensiveness of the database signatures.” He adds that new signatures are discovered frequently and added to the database, meaning stale definitions leave gaps.

Docter is also explicit that security software “is not perfect” and that malware may get around it, “especially a new threat (and especially if you haven’t updated your definitions lately).” That statement directly matches this scenario: the software exists, but it failed to detect the infection—most likely because the detection data wasn’t current.

The other answers don’t fit as well: folder permissions and user permissions can limit what malware can change, but they don’t explain why security software didn’t detect it. Port security relates to network access control, not local signature detection. Therefore, Outdated definitions (B) is the best explanation.

Authenticator apps, such as Google Authenticator or Microsoft Authenticator, can be configured to sendpush notificationsto users for approval when logging in. This is a form of multi-factor authentication.

FromAll-in-One Exam Guide:

“Push-based two-factor authentication uses an authenticator app to send a notification to a mobile device. The user must approve the login attempt in real time, ensuring the request is valid.”

The amount of installed RAM is the key factor in determining whether a 64-bit OS is needed. A 32-bit operating system cannot effectively address more than 4GB of RAM. Since this system has 16GB of RAM, a 64-bit OS is required to utilize the full memory.

B. An Intel i7 CPU supports both 32-bit and 64-bit OS installations, so it alone doesn’t determine the need.

C. HDD size does not influence OS architecture selection.

D. Ethernet speed is a network consideration and not related to OS architecture.

The correct answer is A. .app, because macOS applications packaged as .app files are typically self-contained application bundles. This means that all required application files are stored within a single directory that appears as one file in Finder. When the .app file is moved to the Trash, the application is effectively removed from the system.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, macOS applications are commonly distributed as .app bundles, allowing for simple installation and removal. This design contrasts with Windows, where applications often install files across multiple directories and require uninstallers.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that dragging a .app file to the Trash is generally sufficient to uninstall the software, although some applications may leave behind preference files or caches. However, from an exam perspective, .app is the only option that supports this uninstall behavior.

The Mike Meyers / Mark Soper Lab Manual further clarifies that .msi and .exe are Windows formats, .rpm is used by Linux package managers, and .pkg installers often install system-wide components that require a formal uninstallation process.

Because .app files support simple drag-to-trash uninstallation, A is the correct answer.

3G networks generally do not provide the bandwidth required for seamless HD video streaming. With only two signal bars and a 3G connection, the mobile device likely cannot maintain the necessary data throughput, resulting in timeouts or buffering failures. This is a classic symptom of insufficient network speed or signal strength.

A. Lack of Wi-Fi may contribute, but the root cause is the low mobile bandwidth, not the Wi-Fi state.

B. A website subscription lapse would return an account error, not a timeout.

D. Full device storage can affect downloads but not streaming from the internet.

With integrated graphics, “VRAM” is often not dedicated memory on a discrete card—graphics may instead borrow system RAM. Quentin Docter explains this directly: if the video card is built into the motherboard, it “likely won’t have its own memory but will share system memory,” meaning the total system RAM is split between the OS and video usage. Docter then answers the key “where do I change this?” question: “Shared memory is configured in the system BIOS/UEFI,” and some BIOS/UEFI setups allow you to set aside a specific amount (example given: 512 MB) for video memory.

That is exactly why the machine can have plenty of DRAM yet fail a VRAM check: the BIOS/UEFI allocation for integrated graphics may be set too low. Adjusting BIOS/UEFI settings to reserve more memory for the integrated GPU is the most direct way to attempt meeting a VRAM requirement (when supported). Device Manager and System Configuration won’t change reserved video memory allocation, and “Virtual RAM” (paging) is unrelated to VRAM. Therefore, BIOS options is correct.

AnNDA (Non-Disclosure Agreement)is used to ensure confidentiality of sensitive company information, especially when interacting with external parties.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“An NDA ensures that confidential information is not disclosed to unauthorized individuals, especially important in external communications.”

Multi-Factor Authentication (MFA) requires at least two different types of authentication factors:

Something you know (e.g., password or PIN)

Something you have (e.g., smartphone or hardware token)

Something you are (e.g., fingerprint or facial recognition)

Option A, sending a code to the user’s phone, is an example of " something you have " — a physical device that receives a one-time passcode. Combined with a password, this forms a proper MFA implementation.

B. Date of birth is another knowledge-based factor (like a password), not a second factor type.

C. Solving a math problem is not a recognized authentication factor.

D. A PIN is also " something you know " and does not count as a distinct MFA factor when paired with a password.

These symptoms strongly suggest malware activity—likely from the newly installed app. The first action should be torun a malware scanto detect and isolate malicious software.

FromQuentin Docter – CompTIA A+ Study Guide:

“Signs of malware infection include rapid battery drain and overheating. The first step should be a malware scan using trusted mobile antivirus apps.”