Practice Free 220-1202 CompTIA A+ Core 2 (2026 Exam Update) Exam Questions Answers With Explanation

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Standard Operating Procedures (SOPs) define the mandatory steps and expectations technicians must follow during support calls. This includes documentation standards such as logging user info, asset details, and issue descriptions in the ticketing system. Implementing SOPs ensures consistency and accountability.

A. SLAs define response/resolution times but not documentation practices.

B. Call categories organize types of issues but don ' t guide technician actions.

D. Knowledge base articles provide solutions to known problems but don ' t ensure proper ticket documentation.

If the phone works on Wi-Fi but not off Wi-Fi, the most likely issue is that cellular data is disabled (or restricted). This aligns directly with the CompTIA A+ objective language for mobile troubleshooting, which explicitly includes “wireless/cellular data network (enable/disable).” After travel, users often enable airplane mode or disable cellular data to avoid roaming charges, and sometimes forget to re-enable it.

Quentin Docter’s mobile connectivity discussion repeatedly distinguishes Wi-Fi access from cellular connectivity and treats cellular settings as a primary area to verify when Internet access is not available away from Wi-Fi. While data caps/limits could throttle service, they usually don’t make all non-Wi-Fi browsing and email impossible immediately. VPN issues might block some access, but the simplest “most likely” resolution based on the symptom is re-enabling cellular data. Reinstalling the SIM is possible, but again not the first, most likely fix given the scenario framing. Therefore, Enable cellular data (A) is correct.

The net use command in Windows is used to map (assign) a shared drive from the command line. The syntax typically looks like: net use X: \server\share where X is the drive letter and \server\share is the network path.

A. pathping tests network latency and packet loss.

B. nslookup is used for DNS troubleshooting.

D. tracert shows the route packets take to reach a destination — not for drive mapping.

In emotionally sensitive situations, it is critical that the technicianprojects confidenceand maintains a calm, positive demeanor to reassure the customer.

FromAll-in-One Exam Guide:

“Confidence and empathy are key when working with distressed users. Demonstrating competence can help ease the customer ' s anxiety.”

Event Viewer is the best tool to analyze the root cause of service failures in Windows. It provides detailed logs from system processes, including errors, warnings, and crash reports related to services and applications. When a service starts and stops unexpectedly, Event Viewer will often record the cause, such as dependency failures or access violations.

B. Task Manager shows active processes but doesn ' t retain logs or causes of failure.

C. Internet Options is used for configuring browser settings, not troubleshooting services.

D. Process Explorer is powerful but more suited for live monitoring and detailed process trees, not post-failure log analysis.

A zero-day vulnerability demands an emergency change to quickly secure the system, even if downtime is needed.

From Mike Meyers ' Lab Manual:

“Emergency changes bypass standard scheduling to quickly address critical vulnerabilities that pose immediate risks.” .

The correct answer is C. In-place upgrades, because this migration method preserves existing user data, applications, and settings while upgrading the operating system to a newer version. Since a large percentage of users store documents locally, maintaining those files during the upgrade is a key requirement.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, an in-place upgrade replaces the operating system files while keeping user profiles, installed applications, and local data intact. This significantly reduces the risk of data loss and minimizes disruption to users.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that clean installs erase the existing OS and require data backup and restoration, which is time-consuming and risky when users store files locally. Zero-touch deployments are automated but typically rely on standardized images and centralized data storage, which does not align with this scenario.

The Mike Meyers / Mark Soper Lab Manual reinforces that in-place upgrades are ideal when preserving user environments is a priority and when systems already meet the requirements for the newer OS.

Because the goal is to upgrade Windows while retaining locally stored documents, in-place upgrades are the most appropriate solution, making C the correct answer.

BitLocker To Go is a Microsoft encryption feature specifically designed for removable drives such as USB flash drives and external hard drives. It allows users to protect the data on these devices by requiring a password to decrypt the contents, thereby preventing unauthorized access in the event the device is lost or stolen.

A is correct because BitLocker To Go is directly tied to password-protecting removable media.

B and C are unrelated to BitLocker To Go; Secure Boot and VPN encryption are entirely different security layers.

D applies to BitLocker (not BitLocker To Go) and full disk encryption on internal drives using TPM.

When a spreadsheet becomes very large, opening and processing it requires more memory (RAM). If the system doesn ' t have sufficient memory, it may fail to load the file properly. Upgrading or increasing the available RAM can resolve performance and loading issues with very large files.

A. Restore points roll back system settings, not individual file content.

C. Defragmentation optimizes disk performance but won’t help with memory issues.

D. Network speed has no effect if the file is stored and opened locally.

Spear phishingtargets a specific individual using personalized tactics, as seen in emails impersonating a CEO to deceive a secretary.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“Spear phishing targets specific individuals or roles within an organization using tailored messages to increase success rates.”

The correct answer is B. Restarting the print spooler from services, because the problem is isolated to one user and the print job is stuck or failed in the local print queue. This strongly indicates a print spooler service issue on the user’s workstation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the print spooler manages print jobs sent from applications to printers. If the spooler service hangs or becomes unstable, print jobs may fail even though network connectivity and the printer itself are functioning correctly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that restarting the print spooler is a standard troubleshooting step when jobs remain in a failed or paused state. This clears the queue and reloads the service without requiring a full system reboot.

The Mike Meyers / Mark Soper Lab Manual reinforces that reinstalling printers should be done only after service-level troubleshooting has failed. Printing from another computer is unnecessary because other users are already printing successfully, confirming the printer and network are operational.

Because the failure is local to the user and visible in the queue, restarting the print spooler service is the most logical and efficient next step, making B the correct answer.

A VPN is the best choice because it is designed to provide secure remote access to an internal network over the Internet by creating an encrypted tunnel. Once the VPN is established, the remote user’s device effectively becomes part of the corporate network and can use the appropriate tools for each server type (for example, SSH to Linux and RDP to Windows) without exposing those management services directly to the public Internet. Quentin Docter explains that a VPN “extends your company’s internal network across the Internet,” creating a private connection through “encryption and encapsulation,” and that the host becomes part of the internal network (often receiving an internal IP). The All-in-One guide reinforces this by describing VPNs as an encrypted tunnel over the open Internet.

By comparison, RDP is “used exclusively with Microsoft operating systems,” so it doesn’t meet the Linux requirement. FTP is for file transfers, not full secure remote access, and RMM is primarily for centralized IT monitoring/management rather than a general user remote-access method.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

The correct answer is D. Chain of custody process, because chain of custody ensures that evidence collected during an incident response is tracked, preserved, and legally defensible. It documents who collected the evidence, when it was collected, how it was stored, and who accessed it throughout the investigation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, chain of custody is essential when evidence may be used in disciplinary actions, audits, or legal proceedings. Any gap in documentation can render evidence inadmissible.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that chain of custody provides accountability and prevents claims of evidence tampering. Each transfer of evidence must be logged and verified.

The Mike Meyers / Mark Soper Lab Manual clarifies that while order of volatility determines the sequence of data collection, it does not track ownership or handling. Data integrity best practices ensure evidence is not altered, but they do not provide a record of custody.

Because the question focuses on handling and accountability, the required process is chain of custody, making D the correct answer.

If a system becomes unresponsive while opening a specific spreadsheet, the issue is likely tied to the file’s size or the complexity of its content (e.g., embedded formulas, macros, or graphics). High memory utilization caused by the file can lead to temporary freezing or application " Not Responding " messages. Checking the spreadsheet ' s file size and monitoring system memory in Task Manager will help isolate performance bottlenecks.

A. Anti-malware logs are important for security troubleshooting but less likely relevant to spreadsheet-related performance issues.

B. Workstation repair is for system-wide problems and not necessary for a single-file issue.

C. Bandwidth relates to network usage and wouldn’t impact opening a local file.

A blue screen or sudden shutdown generates diagnostic records that persist after reboot, and the primary Windows tool to review those records is Event Viewer . Quentin Docter states: “ Event Viewer should be the first place you look when you are trying to solve a problem whose solution is not evident ,” because the system and applications “will often create an entry… that can be used to… diagnose problems.” He also specifically notes for unexpected shutdowns: “ The first place to check is Event Viewer on the System tab ,” where kernel and EventLog entries help determine whether the system lost power or shut down abnormally.

Mike Meyers reinforces that Event Viewer is how you read Windows logs (Application, Security, Setup, System) and that the details pane shows information about the selected event, which is exactly what you need when the on-screen error flashes too quickly. Performance Monitor is for counters/trends, Device Manager focuses on hardware status/drivers, and System Information shows configuration—not the crash/shutdown event details. Hence, Event Viewer (C) is correct.

This is macOS “Gatekeeper”-style behavior: the OS warns when an app is not from a trusted source (for example, not signed/not from an identified developer). In Quentin Docter’s macOS section, the correct place to control what apps are allowed is Security & Privacy. He states that in Security & Privacy, “the applications downloaded on the device can also be controlled; you can select whether apps can be downloaded only from the App Store or from App Store And Identified Developers, which is the default.” He also notes many advanced settings in Security & Privacy require unlocking with an administrator password.

Although the exact control is on the General area of Security & Privacy (not the Privacy tab itself), among the answer choices the closest and intended match is Privacy (A) because it points to the correct macOS security settings area in System Preferences/System Settings. Accessibility and Finder do not manage app trust controls, and iCloud relates to syncing/account services rather than software signing enforcement.

Domain join capability is a key Windows edition differentiator. In Quentin Docter’s Windows editions comparison, Home explicitly “lacks support for… joining to a domain,” while Pro “can join a Windows server domain.” This applies across Windows 10/11 edition families: Home is positioned for consumers and does not include domain-join features, whereas Pro includes the business feature set.

The All-in-One guide states the same concept: “Windows Home systems cannot become part of a domain; to do that, you’ll need something like Windows Pro.” The Mike Meyers Lab Manual reinforces that Pro is the baseline edition for domain membership in business environments.

Given the answer choices, Windows 11 Pro is the correct selection for joining a domain.

Antivirus/antimalware detection depends heavily on its definitions/signatures. If those are outdated, new malware variants may not be recognized. Quentin Docter explains that the “definitions database” is a core antivirus component and that its effectiveness depends on “the frequency of updates and the comprehensiveness of the database signatures.” He adds that new signatures are discovered frequently and added to the database, meaning stale definitions leave gaps.

Docter is also explicit that security software “is not perfect” and that malware may get around it, “especially a new threat (and especially if you haven’t updated your definitions lately).” That statement directly matches this scenario: the software exists, but it failed to detect the infection—most likely because the detection data wasn’t current.

The other answers don’t fit as well: folder permissions and user permissions can limit what malware can change, but they don’t explain why security software didn’t detect it. Port security relates to network access control, not local signature detection. Therefore, Outdated definitions (B) is the best explanation.

This scenario involves a mismatch in device time settings, which can affect synchronization and authentication across the network. Using a Network Time Protocol (NTP) server ensures all networked devices maintain accurate and synchronized clocks.

From Travis Everett – All-in-One Exam Guide:

“NTP servers keep all devices on a network in sync. This prevents time drift, which can cause authentication issues with domain logins, certificates, and applications.” .

The correct answer is C. net use, which is the Windows command-line utility used to display, create, and remove mapped network drives and SMB (Server Message Block) connections. When working remotely through command-line interfaces, technicians often rely on net use to quickly verify which network shares are currently connected.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that SMB is the protocol Windows uses for file and printer sharing, and mapped drives are maintained through SMB sessions. The net use command lists all active connections, including the drive letter, remote UNC path, and connection status.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that net use is especially valuable for remote troubleshooting because it does not require a graphical interface. This makes it ideal when administering multiple systems via command prompt or remote shell.

The Mike Meyers / Mark Soper Lab Manual clarifies that systeminfo displays OS and hardware details, hostname only shows the system name, and nslookup is used for DNS queries. None of those commands provide information about mapped SMB shares.

Since the task is to verify existing SMB mappings, net use is the only command that directly fulfills this requirement, making C the correct answer.

Before any change is implemented, it must bedocumentedas part of change management procedures. This ensures transparency, review, and tracking.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Documenting a change is the first step in change management. This includes defining the scope, purpose, impact, and implementation plan before approval or scheduling.”

Linux commonly uses Linux-native filesystems (such as ext4, XFS, BTRFS, and others). The All-in-One Exam Guide explicitly states: “Linux users have lots to choose from; most use ext4, but you will see others with names like BTRFS, XFS, ZFS, and so on.” That directly links XFS to Linux.

By contrast, the same source identifies NTFS, FAT32, and exFAT as Windows file systems, with exFAT mainly for removable media, showing that FAT32/NTFS are primarily Windows-associated in A+ context. Quentin Docter also explains Linux’s ext-family filesystems (ext3/ext4) as Linux defaults in many distributions, reinforcing that Linux has its own native filesystem ecosystem rather than using NTFS/APFS as its typical format.

APFS is Apple’s filesystem for macOS/iOS devices, not Linux. FAT32 is cross-platform but not “typically associated” with Linux as a primary filesystem. Therefore, XFS (B) is the best answer.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) ? DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app ? the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

TheServicestool in Windows allows a technician to view service dependencies and status. If the print spooler can ' t start due to a dependency, Services is the correct tool to inspect and manage them.

FromAll-in-One Exam Guide:

“The Services console allows technicians to view, start, and configure system services, including setting recovery actions and viewing dependencies.”

The correct answer is C. XDR (Extended Detection and Response), which is designed to provide holistic security visibility across endpoints, networks, servers, cloud workloads, and email systems. Unlike traditional endpoint-only solutions, XDR correlates data from multiple security layers to detect and respond to advanced threats.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, XDR expands upon EDR by integrating telemetry from network traffic, firewalls, identity systems, and cloud platforms. This enables detection of threats that move laterally or originate outside a single host.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that XDR is specifically designed to detect attacks that bypass endpoint protections by analyzing network-level behavior, command-and-control traffic, and cross-system activity.

The Mike Meyers / Mark Soper Lab Manual contrasts XDR with other options: RADIUS is an authentication protocol, UAC is a local Windows privilege control, and antivirus focuses only on known malware signatures at the host level. None of those provide network-wide visibility and coordinated response.

Because the question explicitly mentions traffic outside the host and at the network level, XDR is the only technology designed to meet that requirement, making C the correct answer.

One of the most common causes for performance degradation on smartphones isstorage or memory overloaddue to excessive apps.Uninstalling unused appsis a basic but effective first diagnostic step.

FromTravis Everett – All-in-One Exam Guide:

“Start troubleshooting sluggish smartphones by clearing unused apps and files before performing advanced diagnostics or resets.”

Linux is an open-source operating system that is freely available and does not require traditional licensing fees. It is highly versatile and scalable, making it suitable for both workstations and servers. Many enterprise environments use Linux to reduce software costs and benefit from robust server features.

B. Windows requires per-device or per-user licensing for both workstation and server editions.

C. macOS is proprietary and limited to Apple hardware with licensing restrictions.

D. Chrome OS is designed for lightweight devices and lacks server functionality.

The correct answer is C. Change the User Account Control (UAC) settings, because the credential prompt during installation indicates that the system is requesting administrative privileges. In Windows environments, UAC is designed to prevent unauthorized system changes by prompting for administrator approval when elevated permissions are required.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, UAC acts as a security boundary between standard user activities and system-level changes such as software installation. If a user does not have sufficient privileges, the system will request administrator credentials before proceeding.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that technicians can temporarily adjust UAC settings or provide proper elevation to allow legitimate installations. This is especially common in corporate environments where users operate with standard accounts.

The Mike Meyers / Mark Soper Lab Manual reinforces that restarting the computer or using a different browser does not change permission requirements. Contacting the software vendor is unnecessary when the issue is clearly related to local security controls.

Because the installation is blocked by privilege restrictions enforced by UAC, adjusting User Account Control settings or providing proper elevation is the correct and most efficient resolution, making C the correct answer.

Whalingis a form of phishing that targets high-profile individuals or involves pretending to be them (e.g., CEOs) to trick lower-level employees into transferring funds or sensitive data.

FromQuentin Docter – CompTIA A+ Study Guide:

“Whaling is a phishing tactic targeting executives or masquerading as one. The attacker crafts emails that exploit authority and urgency to manipulate recipients.”

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

The user needs to deliver a project status presentation to external stakeholders, which implies hosting a meeting with screen sharing, invitations, and attendee management. Quentin Docter defines videoconferencing as screen-sharing software that allows more than one person to share screens and includes “additional functionality, such as calendar invite, call-in numbers, and attendee management.” He lists Microsoft Teams, WebEx, Zoom, and GoToMeeting as examples and states these tools “are often used to present ideas and collaborate between groups of people.” That exactly matches presenting to external stakeholders.

The other options don’t fit the requirement: WinRM is a Windows remote management protocol (administration, not presentations), RMM is used by IT providers to manage many systems remotely (not stakeholder presentations), and secure file transfer is for moving files rather than delivering a live presentation. Since videoconferencing platforms commonly provide screen sharing, chat, and meeting controls designed for external audiences, Videoconferencing (C) is the correct software type.

The correct answer is B. Kerberos token, because Kerberos authentication relies heavily on precise system time synchronization between clients, servers, and the Key Distribution Center (KDC). Kerberos uses time-stamped tickets to prevent replay attacks, and even small time discrepancies can cause authentication failures.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Kerberos requires clocks on all participating systems to be synchronized within a narrow tolerance (typically five minutes). If system time is inaccurate, Kerberos will reject authentication requests, resulting in login failures and access denial.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that Kerberos tokens include timestamps to ensure tickets are valid only for a short time window. This security design protects against attackers reusing captured authentication data.

The Mike Meyers / Mark Soper Lab Manual reinforces that time synchronization issues are a common cause of Kerberos-related login problems in domain environments. Services like TACACS+, RADIUS, and WPA do not depend on strict system time synchronization in the same way Kerberos does.

Because Kerberos authentication cannot function correctly without accurate system time, B is the correct answer.