Practice Free 220-1202 CompTIA A+ Core 2 (2026 Exam Update) Exam Questions Answers With Explanation

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) ? DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app ? the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

RAM is an electrostatic-sensitive component. When removing or transporting RAM modules, they should be stored in antistatic bags to protect against electrostatic discharge (ESD), which can damage the memory. This is a standard best practice in hardware handling.

A. Demagnetization is not applicable to RAM.

C. Plugging in power to ground is not safe or recommended for static protection.

D. Installing identical memory pairs is applicable for dual-channel configuration, but not directly related to transporting or handling RAM.

Many modern commercial software applications (including photo editors like Adobe Photoshop) offer tiered features based on user subscriptions or license levels. If certain features are locked and prompt for a login, the issue is likely due to a missing or unassigned software license. Assigning the correct license through a centralized license management system (such as Adobe Admin Console or Microsoft 365 portal) will enable those features.

B. VPN connection does not affect local software licensing.

C. Repairing the application does not resolve license entitlement.

D. Reinstalling the software won’t help unless the license is assigned.

To work remotely without physically transporting a workstation, the user needs:

C. RDP (Remote Desktop Protocol): Allows graphical remote access to a Windows PC at the office.

D. VPN (Virtual Private Network): Establishes a secure tunnel to access the corporate network remotely, making the internal PC reachable.

A. SPICE is used in virtual machine environments and is not typically used for end-user remote desktop access.

B. SSH is a text-based remote access tool used mostly for Linux systems.

E. RMM (Remote Monitoring and Management) is used by IT administrators for support — not end-user remote access.

F. WinRM is used for Windows remote management via PowerShell, not for full desktop access.

Mobile Device Management (MDM) is used to control, monitor, and enforce policies on mobile devices. It allows IT teams to restrict app installations, push approved apps, and monitor device compliance. Deploying MDM would prevent unauthorized applications, such as password crackers, from being installed on company-managed devices.

A. Group Policy is for managing Windows environments and not applicable to smartphones.

B. PAM (Privileged Access Management) controls administrative access, not app installation.

C. Anti-malware can help detect malicious apps but doesn’t prevent their installation proactively.

Facial recognition is a biometric authentication method that ties access to a unique physical feature of the user. Unlike passcodes or pattern locks—which can be easily shared—facial recognition provides a more secure and non-transferable form of access. It also enhances user convenience and is widely supported by modern smartphones.

A. Pattern locks can still be shared and are less secure.

C. Device encryption protects data but does not prevent screen access if a passcode is shared.

D. Multifactor authentication typically applies to app or account access, not basic phone unlocking.

When Disk Management can’t remove certain partitions (often recovery, OEM, or protected partitions), the next step is to use a more powerful command-line tool with administrative rights— DiskPart —from an elevated prompt . Mike Meyers’ Lab Manual states: “The diskpart utility is a fully featured partitioning tool” and notes it “lacks many of the safety features built into Disk Management,” but it can “delete any partition of any type at any time.” It also describes using DiskPart’s clean command to “wipe all partition and volume information off the currently selected disk,” which is exactly what you’d do when you need to repurpose a drive and GUI tools won’t cooperate.

The All-in-One Exam Guide reinforces the same capability: DiskPart can delete partitions regardless of type and is available through the command prompt utilities for low-level disk work. Returning the drive to the manufacturer is unnecessary, malware removal isn’t the issue, and clearing a BIOS password on the old PC has no bearing on partition removal. The correct next step is using the CLI elevated.

Operating systems periodically reach a status known as " end of life " (EOL), at which point the developer (e.g., Microsoft, Apple) ceases to provide security updates, patches, or technical support. When this happens, the OS becomes vulnerable and non-compliant with security best practices, which is why organizations typically receive advance notifications from vendors or support teams.

A. Manufacturer support expiration only applies to hardware, not OS patching.

C. Security software may be upgraded or removed, but that does not affect patching the OS itself.

D. The release of a new version doesn’t automatically stop updates for the current version.

VPN clients often create virtual network adapters. If the software wasn ' t uninstalled properly or crashed during install, leftover (often hidden) virtual adapters can prevent reinstallation. The proper solution is to delete hidden network adapters using Device Manager (with “Show hidden devices” enabled).

A. OS updates won’t fix a leftover driver or adapter issue.

B. Mapping an adapter to the software is not a standard or viable solution.

C. Firmware updates apply to physical adapters, not virtual VPN adapters.

The correct answer is B. Kerberos token, because Kerberos authentication relies heavily on precise system time synchronization between clients, servers, and the Key Distribution Center (KDC). Kerberos uses time-stamped tickets to prevent replay attacks, and even small time discrepancies can cause authentication failures.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Kerberos requires clocks on all participating systems to be synchronized within a narrow tolerance (typically five minutes). If system time is inaccurate, Kerberos will reject authentication requests, resulting in login failures and access denial.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that Kerberos tokens include timestamps to ensure tickets are valid only for a short time window. This security design protects against attackers reusing captured authentication data.

The Mike Meyers / Mark Soper Lab Manual reinforces that time synchronization issues are a common cause of Kerberos-related login problems in domain environments. Services like TACACS+, RADIUS, and WPA do not depend on strict system time synchronization in the same way Kerberos does.

Because Kerberos authentication cannot function correctly without accurate system time, B is the correct answer.

Adding ten high-end graphics/animation desktops can dramatically increase the electrical load on the room’s existing circuits. High-performance CPUs and GPUs draw substantially more wattage than typical office PCs, and that wattage translates into higher current (amperage) on the circuit. Mike Meyers’ Lab Manual explains the relationship V × A = W and warns that wiring and circuits have amperage ratings; pushing too much current can overheat wiring and trigger safety devices. It also explains that circuit breakers are rated for a specified amperage and will open (trip) when overloaded to prevent overheating and damage. Therefore, before deployment, the technician should calculate expected power draw per system and ensure the desktops are distributed across sufficient circuits (or that electrical upgrades are made) to avoid repeated breaker trips, overheating risks, and downtime. While temperature and humidity matter for environmental control, the question is specifically about introducing multiple power-hungry workstations, making circuit power consumption the most critical planning factor for safe, stable operation. This aligns with A+ operational/environmental concepts around proper power handling and avoiding overload conditions.

Just recognizing the device isn’t enough—audio output must be routed to it manuallyby setting it as the default playback device in sound settings.

FromMark Soper – Mike Meyers ' Lab Manual:

“If audio is still playing through the internal speaker, verify that the Bluetooth headset is set as the default playback device. This can be configured under Windows Sound Settings.”

With integrated graphics, “VRAM” is often not dedicated memory on a discrete card—graphics may instead borrow system RAM. Quentin Docter explains this directly: if the video card is built into the motherboard, it “likely won’t have its own memory but will share system memory,” meaning the total system RAM is split between the OS and video usage. Docter then answers the key “where do I change this?” question: “Shared memory is configured in the system BIOS/UEFI,” and some BIOS/UEFI setups allow you to set aside a specific amount (example given: 512 MB) for video memory.

That is exactly why the machine can have plenty of DRAM yet fail a VRAM check: the BIOS/UEFI allocation for integrated graphics may be set too low. Adjusting BIOS/UEFI settings to reserve more memory for the integrated GPU is the most direct way to attempt meeting a VRAM requirement (when supported). Device Manager and System Configuration won’t change reserved video memory allocation, and “Virtual RAM” (paging) is unrelated to VRAM. Therefore, BIOS options is correct.

ApplicationsandLibraryare core system directories in macOS. TheApplicationsfolder contains installed applications. TheLibraryfolder contains support files, preferences, and other system-related files.

From theQuentin Docter – CompTIA A+ Complete Study Guide:

“macOS organizes system and user files into several key folders. Among them, Applications and Library are standard system folders where apps and related files are stored.”

Thepowercfg commandis a built-in utility for controlling power settings including hibernation. It can be used in scripts and does not require domain access.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“The powercfg command provides granular control of power settings, useful for scripting and configuring systems without Group Policy access.”

The requirement is secure remote access to both Linux and Windows servers while working from home. A VPN is designed to securely extend internal network access across the public Internet. Quentin Docter states that a “virtual private network (VPN) extends your company’s internal network across the Internet,” allowing clients to connect “securely and privately,” and that it creates a secure tunnel “through the process of encryption and encapsulation,” making the remote host appear as part of the internal network with an internal IP.

Mike Meyers’ Lab Manual reinforces that VPNs work by “setting up an encrypted tunnel between the two points—over the open Internet—creating what we call a virtual private network (VPN),” enabling remote users to function as if they were plugged into the office LAN.

FTP is not secure by default and is file-transfer-only (not full network access). RDP is Windows-focused and provides a remote desktop session, not generalized secure access to mixed OS servers. RMM is a management platform for IT monitoring/maintenance, not the primary secure access method for end users. Therefore, VPN (B) best meets the requirement.

When an iOS device approaches full storage capacity, performance can be significantly impacted. iOS requires a buffer of free space to perform background processes efficiently.

From theAll-in-One Exam Guide:

“iOS devices need several gigabytes of free space to maintain optimal performance. Near-full storage can cause sluggish operation and failures in updates or background tasks.”

The correct answer is B. exFAT, because exFAT (Extended File Allocation Table) is designed to provide cross-platform compatibility between Windows and macOS while supporting large files and large storage devices. When an external hard drive must be readable and writable by both operating systems without additional drivers or configuration, exFAT is the preferred choice.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, exFAT was developed to overcome the limitations of FAT32, such as file size and volume size restrictions, while maintaining broad operating system support. Both Windows and macOS include native support for exFAT, making it ideal for removable storage devices.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that NTFS is fully supported on Windows but only has limited or read-only support on macOS by default. APFS is Apple’s proprietary filesystem and is not natively supported by Windows. XFS is a Linux filesystem and is incompatible with both Windows and macOS without third-party tools.

The Mike Meyers / Mark Soper Lab Manual reinforces that for external drives shared across platforms, exFAT offers the best balance of compatibility, performance, and simplicity.

Therefore, exFAT is the best filesystem choice, making B the correct answer.

A low-cost home lab for practicing server management and scripting strongly points to Linux because it is widely available at no cost and is designed to support many server-style workloads. The All-in-One guide states plainly: “Linux is a popular, free, open source operating system,” and notes that there are many distributions (distros), giving flexibility for different needs. Quentin Docter adds key context about Linux’s purpose: Linus Torvalds created it as “a completely open source operating system for the world to use… completely free for anyone to use,” and highlights that many Linux distributions exist today.

From a cost standpoint, Docter’s licensing section defines open source as “not only… free, but the source code… is also shared,” and explicitly lists “OSs such as Linux” as open source examples. This directly supports “low-cost.”

Finally, Linux is a common target environment for real server administration and scripting practice (shell tools, package repositories, services), making it the best match versus ChromeOS/macOS/Windows for this lab goal.

The correct answer is A. Perform a factory reset, because the symptoms strongly indicate a serious mobile malware infection, potentially including spyware or a trojan installed from an unofficial app store. Random pop-ups, excessive data usage, blocked access to banking apps, and inability to update the OS are classic indicators that malicious software has gained deep system-level access.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile malware installed from unofficial sources can embed itself deeply into the operating system, sometimes gaining device administrator privileges. In such cases, standard remediation steps such as clearing cache or uninstalling apps may be ineffective.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that when a mobile device shows signs of persistent compromise—especially when core OS functions and security-sensitive applications are affected—the recommended first step is to perform a factory reset. This completely wipes user-installed applications and restores the device to a known-good state.

The Mike Meyers / Mark Soper Lab Manual reinforces that changing passwords is important after the device is secured, not before. Contacting support or clearing cache does not remove deeply embedded malware.

Therefore, to immediately address the security threat and regain control of the device, a factory reset is the most appropriate first action, making A the correct answer.

One of the most common causes for performance degradation on smartphones isstorage or memory overloaddue to excessive apps.Uninstalling unused appsis a basic but effective first diagnostic step.

FromTravis Everett – All-in-One Exam Guide:

“Start troubleshooting sluggish smartphones by clearing unused apps and files before performing advanced diagnostics or resets.”

Content filtering allows administrators to block or allow access to websites based on categories (e.g., social media, adult content, streaming). On a SOHO (Small Office/Home Office) router, this is often built-in or available via DNS-level filtering, and is the most appropriate method for enforcing browsing policies without needing to touch each individual device.

A. Secure management access protects router admin interfaces but doesn’t control user browsing.

B. Group Policy Editor is a Windows tool, not used on routers.

D. A firewall can block specific IPs or ports, but it doesn ' t categorize web content.

Most public Wi-Fi networks requireinteraction with a captive portal(e.g., terms of use or login). Dismissing it prevents the user from gaining internet access. Reconnecting and completing the portal page is essential.

FromAll-in-One Exam Guide:

“Many public hotspots require user acknowledgment or login via a captive portal. Skipping this step results in no internet access.”

Older tablets may not support newer app versions due toincompatible or unsupported operating systems. App developers often drop support for outdated OS versions.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“When an app won ' t install on an older device, check the OS version. Most apps require a minimum OS level for compatibility and security.”

The correct answer is D. Guest . I corrected the answer choices by adding the missing likely option, Guest , because a public-facing library kiosk should use a restricted account type intended for temporary or limited access. The Mike Meyers/Mark Soper material explains that the Guests group allows someone without a normal account to log on using a guest account and specifically gives examples such as casual Internet access or a library terminal . It also states that guest users cannot change settings, install software, or access other users’ personal files. Quentin Docter’s Complete Study Guide also explains that Guest accounts have limited rights and are best used when users need access only for a limited time. A Power User account has unnecessary privileges. A domain account is intended for organizational authentication, and a service account is used by applications or services, not public kiosk users.

The correct answer is D. Smishing, which is a form of phishing attack conducted via SMS text messages. The key indicators in this scenario are the unexpected text message and the embedded link prompting the user to reset a password. These attacks rely on urgency and fear to trick users into clicking malicious links or providing credentials.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, smishing attacks often impersonate legitimate organizations such as banks, IT departments, or service providers. The attacker claims that an account action is required, such as resetting an expired password, to prompt immediate user response.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that smishing is distinct from other phishing variants based on delivery method. Vishing uses voice calls, spear phishing targets specific individuals via email, and whaling targets high-level executives. Since this attack is delivered via text message, it is classified as smishing.

The Mike Meyers / Mark Soper Lab Manual reinforces that modern attackers increasingly use SMS because users often trust text messages more than emails. This makes smishing a highly effective and common attack vector.

Because the attack uses SMS with a malicious link, smishing is the correct answer.

If uploading fails only offsite,mobile data limits or restrictionsare the likely cause. Data caps or network management can interfere with uploads.

FromTravis Everett – All-in-One Exam Guide:

“When mobile users experience network issues, always check if the device has reached a data cap or roaming restriction.”

This is a classic symptom of graphics performance limitations: modern games stress GPU/VRAM far more than older or lightweight titles. The All-in-One guide explains that “graphically demanding applications… state specific graphics requirements,” and highlights that CompTIA focuses on “dedicated graphics cards versus integrated ones.” It further clarifies that integrated GPUs are typically less powerful than dedicated GPUs and that demanding software (including games) often assumes dedicated graphics, with VRAM requirements frequently included.

On many “gaming-ready” laptops, the system may have both integrated and discrete graphics, and performance issues occur if the game runs on the integrated GPU instead of the discrete GPU. Selecting dedicated graphics (for the application or globally, depending on the platform) forces the workload onto the more capable GPU and typically resolves lag. Overclocking RAM is not the first-line fix and adds instability risk, NIC teaming is irrelevant to local rendering performance, and hyperthreading helps some CPU workloads but won’t solve a GPU-bound modern game. Therefore, Select dedicated graphics (C) is best.

An incident report documents key details such as the cause of the outage, steps taken to resolve it, and measures to prevent recurrence. It is a post-mortem analysis often shared with stakeholders to improve future response.

According to the Quentin Docter – CompTIA A+ Complete Study Guide:

“An incident report provides a summary of an event that disrupted normal operations and includes a timeline of what occurred, how the issue was diagnosed and fixed, and who was involved in the resolution”.

This is reaffirmed in Travis Everett’s All-in-One Guide:

“Documentation after an incident helps technical teams and management review the situation and learn from it. This is formalized in an incident report”.

The correct answer is B. Restarting the print spooler from services, because the problem is isolated to one user and the print job is stuck or failed in the local print queue. This strongly indicates a print spooler service issue on the user’s workstation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the print spooler manages print jobs sent from applications to printers. If the spooler service hangs or becomes unstable, print jobs may fail even though network connectivity and the printer itself are functioning correctly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that restarting the print spooler is a standard troubleshooting step when jobs remain in a failed or paused state. This clears the queue and reloads the service without requiring a full system reboot.

The Mike Meyers / Mark Soper Lab Manual reinforces that reinstalling printers should be done only after service-level troubleshooting has failed. Printing from another computer is unnecessary because other users are already printing successfully, confirming the printer and network are operational.

Because the failure is local to the user and visible in the queue, restarting the print spooler service is the most logical and efficient next step, making B the correct answer.

In a domain environment, printers are typically deployed via a print server. Users can browse available printers on the server and install them directly.

All-in-One Exam Guidementions:

“In a corporate domain, printers are managed via a centralized print server. Users can select the desired printer from the server’s shared list.”

AVPN (Virtual Private Network)creates a secure tunnel between the clerk’s home device and the town server, ensuring private and authenticated access.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“VPNs are essential for remote access to internal resources, providing secure connections over public networks.”

A Potentially Unwanted Program (PUP) is software that a user may not have knowingly installed. It often gets bundled with legitimate software and installs without full disclosure. PUPs can affect performance, change system settings, or display unwanted ads but are not necessarily malicious like viruses or ransomware.

A. Viruses replicate and spread; they are generally more harmful and not " bundled " in the same way.

B. Ransomware encrypts files for payment and is deliberately malicious.

D. A Trojan disguises itself as legitimate software to perform malicious actions but is not typically pre-bundled by legitimate publishers.

The correct answer is C. Personalization. In Windows, desktop appearance settings such as the background image, colors, themes, lock screen, fonts, Start menu, and taskbar are managed through Personalization. Quentin Docter’s Complete Study Guide explains that right-clicking the Windows desktop and selecting Personalize opens the display/personalization settings, and the Background section is used to select a picture, slideshow, or static color for the desktop. The All-in-One Exam Guide confirms that Personalization settings handle user preferences such as the background picture and interface colors, and the background screen lets the user choose a solid color or picture. Device Manager is used for hardware devices and drivers. Accounts controls user sign-in and account settings. Privacy controls app permissions and data-sharing options. Therefore, Personalization is the correct place to change the desktop background image.

The symptoms suggest abrowser hijacker. Thefirst stepsshould be toremove any malicious extensionsandreset the startup pageto restore normal behavior.

FromAll-in-One Exam Guide:

“Browser hijackers often install as extensions and change homepage settings. Removing these extensions and resetting the startup configuration typically resolves the issue.”

End-user education is crucial after malware removal to prevent recurrence. Teaching safe browsing habits and security awareness completes the remediation cycle.

Mark Soper – Mike Meyers ' Lab Manualstates:

“Educating the user after malware remediation is part of the CompTIA malware response methodology. This includes training on phishing and safe practices.”

The correct answer is D. Research the attendees’ time zones. Because the colleagues are around the world, the technician should first determine each attendee’s time zone before scheduling. Otherwise, the meeting might be set at an unreasonable or impossible time for some participants. The A+ materials emphasize professional communication, sensitivity, and respecting users’ schedules and circumstances. The All-in-One Exam Guide states that technicians should be culturally sensitive and, when a customer’s schedule or customs affect work, the technician should adapt professionally. Videoconferencing tools are appropriate for this type of meeting; Quentin Docter’s Complete Study Guide explains that videoconferencing software includes features such as calendar invites, call-in numbers, attendee management, screen sharing, and collaboration. However, before configuring software or sending the invite, the technician must know when the meeting can reasonably occur for all global attendees. Dressing appropriately comes later, just before the meeting.

User offboarding involves disabling the departing user ' s access to company systems and facilities. Two key tasks typically include:

Deactivating physical access credentials (e.g., key fobs or badges) to prevent unauthorized entry (B).

Suspending or disabling the user’s email account to prevent future use and to retain business communications (D).

A. Quarantining a hard drive is not standard unless malware or legal issues are involved.

C. Purging PII must follow legal retention policies; it ' s not typically an immediate offboarding task.

E. Disabling network ports may be relevant in some cases but is not a standard offboarding step.

F. Blocking MAC addresses is not typical unless the device is considered a security threat.

The symptoms point to malicious or rogue content: frequent “security warning” pop-ups that push “tools” is a classic sign of scam/rogue apps, and the new fast battery drain suggests an unwanted process running in the background. The CompTIA objectives explicitly list mobile security symptoms such as “high number of ads,” “fake security warnings,” and “unexpected application behavior,” which aligns with this scenario. On the browser side, Quentin Docter notes that if you continually receive pop-ups or overlays, “you may be infected with malware,” and recommends scanning with antivirus/antimalware software. He also explains that clearing browsing data/cache is sometimes necessary to resolve browser-related problems and details how to clear cache/browsing data.

Because the user tapped the pop-up and then battery life worsened, the best practical fix is to remove the likely malicious application(s) (uninstall unknown apps) and clear browser cache to eliminate stored site data/scripts fueling the pop-ups. A factory reset is a stronger last resort, but least disruptive remediation is A.

The correct answer is A. Hashing, because hashing is specifically designed to verify file integrity and detect whether a file has been altered after its original creation or distribution. A hash is a fixed-length value generated by running a file through a hashing algorithm such as SHA-256 or SHA-1. Even a single-bit change in the file will produce a completely different hash value.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, hashing is commonly used to validate downloaded software by comparing the calculated hash of the downloaded file with the hash published by the vendor. If the two values match, the technician can be confident that the file has not been modified or tampered with.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that hashing ensures integrity, not confidentiality or authentication. SSL certificates secure data in transit, but they do not validate files after download. Plug-ins and extensions provide additional browser functionality but have no role in verifying file integrity.

The Mike Meyers / Mark Soper Lab Manual reinforces that hashing is a standard best practice in secure software deployment and malware prevention. It allows technicians to confirm that files are exactly as the publisher intended.

Because the requirement is to confirm that files have not been modified, hashing is the correct and most reliable method, making A the correct answer.

Single sign-on (SSO)allows users to authenticate once and gain access to multiple systems without re-entering credentials, which significantly enhances user convenience while maintaining security.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Single sign-on streamlines authentication by allowing users to log in once and access all authorized resources, reducing credential fatigue and improving security.”

Multi-Factor Authentication (MFA) requires at least two different types of authentication factors:

Something you know (e.g., password or PIN)

Something you have (e.g., smartphone or hardware token)

Something you are (e.g., fingerprint or facial recognition)

Option A, sending a code to the user’s phone, is an example of " something you have " — a physical device that receives a one-time passcode. Combined with a password, this forms a proper MFA implementation.

B. Date of birth is another knowledge-based factor (like a password), not a second factor type.

C. Solving a math problem is not a recognized authentication factor.

D. A PIN is also " something you know " and does not count as a distinct MFA factor when paired with a password.

In enterprise environments, network-based deployment solutions (such as Windows Deployment Services or SCCM) allow administrators to push images across the network to hundreds of devices efficiently. These tools support hardware-specific drivers (for different vendor classes) and can accommodate user-group configurations using task sequences or answer files.

A and B (xcopy and robocopy) are file-level tools and not designed for full OS image deployment.

C. Using local tools per device is inefficient for large-scale rollouts (800 devices).

D. Network-based deployment is the industry standard for this scale.

TheDo Not Disturbsetting in Windows Notification settings allows users to suppress all notification banners and sounds during presentations or video calls.

FromTravis Everett – All-in-One Exam Guide:

“Use Windows ‘Do Not Disturb’ to prevent notifications from interrupting full-screen apps like video conferencing.”

When a technician exhausts all troubleshooting steps within their knowledge and the issue remains unresolved, the best practice is to escalate the issue to a higher-level technician or team. Additionally, the technician should clearly communicate the next steps to the customer to maintain transparency and reduce frustration. This ensures continuity of support and upholds customer satisfaction.

B. Dismissing the customer is unprofessional and violates proper customer service protocols.

C. Interrupting the customer and providing excuses escalates the tension and is inappropriate.

D. Continuing to ask questions without new troubleshooting steps wastes time and increases frustration.

If internal resources (such as intranet or internal apps) can ' t be accessed but external sites work, this often points to aDNS issue, where the system isn ' t resolving internal domain names correctly.

FromAll-in-One Exam Guide:

“When internet access is functional but internal sites fail to load, the issue usually lies with DNS resolution. Internal resources often require internal DNS servers, which may not be configured correctly.”

Disk optimization tools can sometimes corrupt theMaster Boot Record (MBR). If BIOS sees the drive but can ' t boot, repairing the MBR using installation media is the correct next step.

FromAll-in-One Exam Guide:

“When BIOS recognizes the drive but no OS is found, the issue is often with the boot record. Use installation media to access recovery tools and repair the MBR or boot loader.”