Practice Free 220-1202 CompTIA A+ Core 2 2025 Exam Exam Questions Answers With Explanation

Comprehensive and Detailed Explanation From Exact Extract:

An " OS Not Found " error typically indicates that the computer is attempting to boot from a drive that doesn ' t contain a valid operating system or bootable partition. The presence of a USB drive might be confusing the boot order. Therefore, the first step a technician should take is to verify and adjust the boot sequence in the system’s firmware (BIOS or UEFI). It ' s possible that the USB drive is being prioritized over the internal hard drive, which may cause the system to miss the OS entirely.

A. Running data recovery tools is premature before confirming boot order.

B. Repartitioning the disk would destroy existing data—this should not be done until confirmed the OS is actually missing.

D. Switching between UEFI and BIOS (legacy mode) might help in rare cases, but it is not the first step in standard OS boot issue troubleshooting.

If the PC can ping the domain controller by IP , basic connectivity exists. Domain join, however, depends heavily on name resolution (finding the domain and locating domain services), so incorrect DNS is the most likely cause. Mike Meyers explains a key diagnostic pattern: when you ping a URL/name and get “could not find host,” the system “can’t get an IP address for that Web site,” which “points to a DNS failure.” This same logic applies to domains: if the client can reach the DC by IP but can’t properly resolve domain names/services, the join fails.

Quentin Docter reinforces that one of the “key things” for TCP/IP to work effectively is that “a hostname must resolve to an IP address—an action usually performed by a DNS server,” and he highlights nslookup as a tool to verify DNS server entries.

Firewall issues could block some traffic, but the clue “ping by IP works” points away from total network blockage. IPv6 enabled is normal, and “not connected” contradicts successful ping. Therefore, DNS settings are incorrect (A) .

The correct answer is B. Task Manager , because Task Manager allows technicians to view, manage, and terminate running processes , including those that are frozen or unresponsive. If an application process is already running but not responding, launching it again will fail until the existing process is stopped.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , Task Manager is the primary Windows tool for troubleshooting application hangs, excessive resource usage, and nonresponsive programs. Technicians can end the task and relaunch the application cleanly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Resource Monitor provides detailed performance metrics but is not optimized for quickly terminating frozen applications. Event Viewer logs errors but does not resolve active process issues.

The Mike Meyers / Mark Soper Lab Manual reinforces that Registry Editor should never be used for live application troubleshooting due to the risk of system instability.

Because the issue involves an unresponsive background process , Task Manager is the fastest and safest tool to resolve the problem, making B the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple ' s proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

Comprehensive and Detailed Explanation From Exact Extract:

Thefirst stepin troubleshooting degraded mobile performance is typically arestart. This clears RAM and stops background processes that might be causing issues.

FromAll-in-One Exam Guide:

“Before taking invasive measures like a factory reset, always restart the device. A reboot clears temporary files and can significantly improve responsiveness.”

Comprehensive and Detailed Explanation From Exact Extract:

In a domain environment, printers are typically deployed via a print server. Users can browse available printers on the server and install them directly.

All-in-One Exam Guidementions:

“In a corporate domain, printers are managed via a centralized print server. Users can select the desired printer from the server’s shared list.”

Online collaboration tools (for example, Microsoft 365/OneDrive, Google Workspace/Drive) typically store documents in cloud storage and rely on a sync client to make those files appear locally on each device. If the user can’t see the document on the laptop, the most direct remediation is to synchronize the remote (cloud) folder so the document downloads to the laptop and stays consistent across devices. The All-in-One guide explains that productivity platforms are “designed to be synchronized across multiple devices,” allowing work to be paused on one device and resumed on another, and that many sync problems come down to configuration or a partial sync that leaves data not fully downloaded. It also notes that enabling/adjusting synchronization settings is often the fix. Quentin Docter similarly describes synced files becoming accessible through File Explorer once server/client synchronization is configured and highlights “Documents” as a common sync data type. Mike Meyers reinforces that file services like OneDrive/Google Drive use an installed app on each device to specify what gets synchronized.

Antivirus/antimalware detection depends heavily on its definitions/signatures . If those are outdated, new malware variants may not be recognized. Quentin Docter explains that the “definitions database” is a core antivirus component and that its effectiveness depends on “the frequency of updates and the comprehensiveness of the database signatures.” He adds that new signatures are discovered frequently and added to the database, meaning stale definitions leave gaps.

Docter is also explicit that security software “is not perfect” and that malware may get around it, “especially a new threat (and especially if you haven’t updated your definitions lately).” That statement directly matches this scenario: the software exists, but it failed to detect the infection—most likely because the detection data wasn’t current.

The other answers don’t fit as well: folder permissions and user permissions can limit what malware can change, but they don’t explain why security software didn’t detect it . Port security relates to network access control, not local signature detection. Therefore, Outdated definitions (B) is the best explanation.

The correct answer is D. Folder redirection , because folder redirection allows specific user folders—such as Documents, Desktop, and Downloads —to be stored on a network share rather than the local computer. This ensures centralized storage, easier backups, and improved data security.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , folder redirection is commonly used in domain environments to store user data on file servers. This prevents data loss if a workstation fails and allows users to access their files from multiple systems.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that folder redirection works seamlessly with roaming profiles and Group Policy, ensuring that users do not need to manually save files to network drives.

The Mike Meyers / Mark Soper Lab Manual clarifies that file attributes only affect file behavior, UAC controls privilege elevation, and security groups control access permissions—but none of these determine where user folders are stored.

Because the requirement is to store documents on a network location instead of locally , configuring folder redirection is the correct and intended solution, making D the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Windows Helloallows biometric and PIN-based login, which are easier and more user-friendly than passwords.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Windows Hello supports biometric authentication and PINs, providing easier and secure access especially for users who have trouble remembering passwords.”

Comprehensive and Detailed Explanation From Exact Extract:

Virtualization settings are typically found within the BIOS/UEFI firmware configuration. To prevent unauthorized users from changing these settings, the technician should set a BIOS password. This ensures only administrators with the password can access or modify BIOS settings, including virtualization support.

B. The guest account is a user-level feature in Windows and doesn’t control BIOS access.

C. A screen lock prevents casual access to the desktop but doesn’t protect firmware settings.

D. AutoRun controls how media and devices behave when inserted — unrelated to BIOS security.

Because the employee needs graphical interface (GUI) access to Linux servers, the best option is VNC (Virtual Network Computing) . VNC is specifically designed for remote control and sharing of desktops , meaning it can present the full graphical desktop of the Linux server to the remote user and allow interaction as if they were sitting at the machine. Quentin Docter describes VNC as “a remote control tool for the sharing of desktops,” typically using TCP port 5900, and notes it is similar to RDP but is an open-source protocol; it can support encryption via plug-ins (important for secure remote use). Mike Meyers’ Lab Manual reinforces the key distinction: SSH provides command-line access , but “when you need remote access to the full graphical desktop, you need a remote desktop application,” and many of those use VNC (or RDP).

By contrast, SSH and Telnet are primarily text-console tools (Telnet is also unencrypted/insecure), and WinRM is Windows-focused remote management rather than the standard way to provide GUI access to Linux desktops.

The AppData folder is located inside a user profile (for example, C:\Users\ < username > \AppData ) and is hidden by default in Windows, so users often can’t browse to it unless hidden items are displayed. The correct way to make the folder visible and easy to navigate is to adjust File Explorer Options (Folder Options). Mike Meyers’ Lab Manual explains that the View tab in Folder Options provides Advanced settings where you can “ Show hidden files, folders, and drives ” because “File Explorer hides them by default.” That directly enables AppData visibility in normal navigation.

The All-in-One guide provides the same workflow: accessing File Explorer Options opens a dialog where the “View options” include the setting to “Show hidden files, folders, and drives,” and it notes hidden extensions and other view behaviors are managed here as well.

Indexing affects search performance, not visibility. Privacy and Ease of Access don’t control hidden folder display. Therefore, configure File Explorer Options (B).

Comprehensive and Detailed Explanation From Exact Extract:

These symptoms strongly suggest malware activity—likely from the newly installed app. The first action should be torun a malware scanto detect and isolate malicious software.

FromQuentin Docter – CompTIA A+ Study Guide:

“Signs of malware infection include rapid battery drain and overheating. The first step should be a malware scan using trusted mobile antivirus apps.”

The Local Users and Groups Manager (lusrmgr.msc) is the utility for managing user accounts, including renaming the default Administrator.

From Quentin Docter – Complete Study Guide :

“The lusrmgr.msc snap-in allows renaming and managing local user accounts, including the default administrator.” .

Comprehensive and Detailed Explanation From Exact Extract:

exFATis the only listed file system that supports both read and write access across Windows, macOS, and Linux (with appropriate drivers). It’s optimized for flash storage and external drives.

FromAll-in-One Exam Guide:

“exFAT is a lightweight file system with cross-platform read/write support, ideal for use on removable drives when compatibility is essential.”

Domain join capability is a key Windows edition differentiator. In Quentin Docter’s Windows editions comparison, Home explicitly “lacks support for… joining to a domain,” while Pro “can join a Windows server domain.” This applies across Windows 10/11 edition families: Home is positioned for consumers and does not include domain-join features, whereas Pro includes the business feature set.

The All-in-One guide states the same concept: “Windows Home systems cannot become part of a domain; to do that, you’ll need something like Windows Pro.” The Mike Meyers Lab Manual reinforces that Pro is the baseline edition for domain membership in business environments.

Given the answer choices, Windows 11 Pro is the correct selection for joining a domain.

The correct answer is B. Kerberos token , because Kerberos authentication relies heavily on precise system time synchronization between clients, servers, and the Key Distribution Center (KDC). Kerberos uses time-stamped tickets to prevent replay attacks, and even small time discrepancies can cause authentication failures.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , Kerberos requires clocks on all participating systems to be synchronized within a narrow tolerance (typically five minutes). If system time is inaccurate, Kerberos will reject authentication requests, resulting in login failures and access denial.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that Kerberos tokens include timestamps to ensure tickets are valid only for a short time window. This security design protects against attackers reusing captured authentication data.

The Mike Meyers / Mark Soper Lab Manual reinforces that time synchronization issues are a common cause of Kerberos-related login problems in domain environments. Services like TACACS+, RADIUS, and WPA do not depend on strict system time synchronization in the same way Kerberos does.

Because Kerberos authentication cannot function correctly without accurate system time , B is the correct answer.

The correct answer is C. XDR (Extended Detection and Response) , which is designed to provide holistic security visibility across endpoints, networks, servers, cloud workloads, and email systems . Unlike traditional endpoint-only solutions, XDR correlates data from multiple security layers to detect and respond to advanced threats.

According to the Quentin Docter – CompTIA A+ Complete Study Guide , XDR expands upon EDR by integrating telemetry from network traffic, firewalls, identity systems, and cloud platforms. This enables detection of threats that move laterally or originate outside a single host.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that XDR is specifically designed to detect attacks that bypass endpoint protections by analyzing network-level behavior , command-and-control traffic, and cross-system activity.

The Mike Meyers / Mark Soper Lab Manual contrasts XDR with other options: RADIUS is an authentication protocol, UAC is a local Windows privilege control, and antivirus focuses only on known malware signatures at the host level. None of those provide network-wide visibility and coordinated response.

Because the question explicitly mentions traffic outside the host and at the network level , XDR is the only technology designed to meet that requirement, making C the correct answer.

A patch released outside the normal schedule for a critical flaw is an out-of-band update, but proper operational procedure still requires controlled testing before broad production rollout. Quentin Docter explains that vendors release patches “usually every month and sometimes outside of the normal release cycle,” and that “ out-of-band patches ” are often responses to “ a critical vulnerability .” Because an urgent patch can also cause outages or incompatibilities, you should validate it in a safe environment first. Docter’s change management best practices emphasize sandbox testing: “ Sandbox testing is extremely useful when you want to test a change before placing it into production .”

The All-in-One guide defines sandbox testing as using an isolated environment to test changes “ without putting the systems and data you depend on at risk ,” typically via virtualization/snapshots. That aligns exactly with deploying to a small pilot group/lab first.

So the best first action is to test the patch on a limited set of systems in a lab/pilot (D), then expand deployment after validation and rollback planning.

The scenario strongly suggests the device has been compromised by malware delivered through a social-engineering message (an “unexpected overdue invoice” attachment). After the attempt, the phone shows system-wide performance issues affecting the browser and other apps, and a restart does not fix it—this matches common mobile malware symptoms such as sluggish response time and abnormal behavior that persists across reboots. When symptoms persist beyond a soft reset, the most reliable remediation is to return the device to a known-good state by performing a factory reset (wipe). Quentin Docter explains that a factory reset is much more effective and will remove malware along with applications, and that when a security symptom indicates malware, the device should be factory reset and then protected with antimalware before reinstalling apps.The All-in-One guide similarly teaches an escalation path: stop/uninstall suspect apps, and if these steps don’t resolve the behavior, use a factory reset to cleanse the device. ? turn27file4†L9-L14 ? Mike Meyers’ Lab Manual also lists factory resets among the key tools for resolving persistent mobile app security issues.

Comprehensive and Detailed Explanation From Exact Extract:

MDR (Managed Detection and Response)provides outsourced threat monitoring and response using multiple tools. The use of athird-party providerfor protection and incident handling confirms MDR.

FromQuentin Docter – CompTIA A+ Study Guide:

“MDR provides 24/7 threat detection and response through outsourced experts using advanced tools across client environments.”

Comprehensive and Detailed Explanation From Exact Extract:

An incident report documents key details such as the cause of the outage, steps taken to resolve it, and measures to prevent recurrence. It is a post-mortem analysis often shared with stakeholders to improve future response.

According to the Quentin Docter – CompTIA A+ Complete Study Guide:

“An incident report provides a summary of an event that disrupted normal operations and includes a timeline of what occurred, how the issue was diagnosed and fixed, and who was involved in the resolution”.

This is reaffirmed in Travis Everett’s All-in-One Guide:

“Documentation after an incident helps technical teams and management review the situation and learn from it. This is formalized in an incident report”.

Comprehensive and Detailed Explanation From Exact Extract:

Thepowercfg commandis a built-in utility for controlling power settings including hibernation. It can be used in scripts and does not require domain access.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“The powercfg command provides granular control of power settings, useful for scripting and configuring systems without Group Policy access.”

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS , which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x )

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

Comprehensive and Detailed Explanation From Exact Extract:

Standard Operating Procedures (SOPs) define the mandatory steps and expectations technicians must follow during support calls. This includes documentation standards such as logging user info, asset details, and issue descriptions in the ticketing system. Implementing SOPs ensures consistency and accountability.

A. SLAs define response/resolution times but not documentation practices.

B. Call categories organize types of issues but don ' t guide technician actions.

D. Knowledge base articles provide solutions to known problems but don ' t ensure proper ticket documentation.

Comprehensive and Detailed Explanation From Exact Extract:

Background applications can significantly drain a smartphone’s battery, even when the device is idle. A technician should first review which apps are running in the background and consuming power through the battery usage section of the OS. Disabling or restricting power-hungry apps often resolves poor battery life.

A. Storage usage doesn’t significantly affect battery life.

B. End of software support is unrelated to battery performance unless it ' s causing inefficient processes, which would still be secondary.

C. Charger wattage affects charging speed, not battery life after charging.

Comprehensive and Detailed Explanation From Exact Extract:

Mobile OS updates can sometimes cause compatibility issues with specific apps, including corporate email clients. The most likely resolution is to check for and apply an update to the affected application, especially if it hasn’t been updated to support the latest OS version.

B. Registering with MDM might be required for access but wouldn’t address app crashes due to incompatibility.

C. A third-party client might help, but it’s not the best first step if the default app is expected to work.

D. Clearing the cache can help resolve some minor issues, but updating the app directly addresses compatibility concerns.

Password complexity rules and account lockout thresholds are controlled through security policies , which are managed via Group Policy on a local system using the Local Group Policy Editor (gpedit.msc) . The All-in-One guide explains that Windows security policies can enforce rules like “forcing anyone who logs on… to use a password that’s at least eight characters long,” and that these are configured via policy tools. It further highlights that “ The Group Policy Editor (gpedit.msc) includes the same items as Local Security Policy… plus many other policies ,” making gpedit the best match when the exam asks how to edit these settings.

Mike Meyers’ Lab Manual repeats this exact exam-relevant point: gpedit includes the security policy settings and is the tool to look for on the A+ exam when the question is about configuring password policy and account policies.

The other snap-ins don’t fit: Task Scheduler manages scheduled tasks, Local Users and Groups manages accounts/groups (not password policy enforcement rules), and Performance Monitor tracks performance. Therefore, gpedit is correct.

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“ A small yellow triangle appeared in the taskbar. I am no longer able to access network resources. ”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease . After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment ( Output.txt ) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) ? DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x ) and a valid gateway/DNS.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app ? the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot