220-1202 CompTIA A+ Core 2 (2026 Exam Update) Questions and Answers

Screensaver lockshelp protect unattended workstations.

BIOS passwordsprevent unauthorized changes at startup or during boot.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“Applying a BIOS password adds a pre-boot security layer. Screensaver locks help protect logged-in sessions during idle times.”

Using many separate systems (endpoints) to attack one target is the defining characteristic of a Distributed Denial of Service (DDoS) attack. Mike Meyers’ Lab Manual defines DDoS as: “An attack on a computer or network device in which multiple computers send data and requests to the device in an attempt to overwhelm it so that it cannot perform normal operations.” That description exactly matches the scenario: many endpoints are coordinated to flood one endpoint, preventing legitimate use.

This is different from an on-path (man-in-the-middle) attack, which intercepts traffic between two parties; SQL injection, which targets databases via malicious input; and brute-force attacks, which attempt repeated authentication guesses. The key clue is multiple endpoints working together, which implies distribution (often via botnets) and service disruption by volume. That is why the correct classification is Distributed Denial of Service (D).

The correct answer is D. Internal wiki, because an internal wiki is specifically designed to store, maintain, and centrally manage organizational knowledge, including deployment procedures, configuration standards, and troubleshooting documentation. Large-scale software deployments require accurate, up-to-date, and version-controlled instructions that can be accessed by multiple technicians.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, organizations commonly use internal knowledge bases or wikis to document standard operating procedures (SOPs), deployment guides, and escalation paths. These platforms allow content to be updated quickly as procedures evolve, which is essential for complex deployments.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide emphasizes that internal wikis support collaboration and consistency. Unlike emails or files stored on individual systems, a wiki provides a single source of truth, reducing the risk of technicians following outdated or incorrect instructions.

The Mike Meyers / Mark Soper Lab Manual further explains that while file servers may store installation files and emails may contain announcements, neither is suitable for maintaining structured, searchable deployment documentation. A user’s desktop is never an appropriate location for organizational procedures.

Because large-scale deployments require centralized, standardized, and continuously updated documentation, the most appropriate reference location is an internal wiki, making D the correct answer.

This is part of the user education step after a security incident to prevent future occurrences.

From Quentin Docter – Complete Study Guide:

“User education and awareness is a crucial part of preventing phishing attacks. After an incident, it is vital to train users on recognizing suspicious messages.” .

In secure or isolated network segments, DHCP may be disabled to reduce the risk of unauthorized device connections or to maintain strict IP assignment control. In such cases, the help desk technician must manually configure IP settings (including IP address, subnet mask, gateway, and DNS servers). This ensures the workstation communicates properly within that segment.

A. DNS server restriction is unrelated to manual IP configuration.

B. Allow lists refer to traffic access, but manual IP assignment is due to lack of DHCP, not allow lists.

D. NAC servers control access but don ' t replace the need for IP addressing.

RAM is an electrostatic-sensitive component. When removing or transporting RAM modules, they should be stored in antistatic bags to protect against electrostatic discharge (ESD), which can damage the memory. This is a standard best practice in hardware handling.

A. Demagnetization is not applicable to RAM.

C. Plugging in power to ground is not safe or recommended for static protection.

D. Installing identical memory pairs is applicable for dual-channel configuration, but not directly related to transporting or handling RAM.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Resource Monitor provides real-time monitoring of system performance and resource usage, including CPU, memory, disk, and network usage. It helps technicians identify performance bottlenecks (e.g., high memory or CPU usage) that can cause slowdowns in applications over time without producing crash errors.

A. Reliability history logs application crashes or errors — not helpful if the app doesn’t crash.

B. Computer Management is a broad utility with limited real-time monitoring capability.

D. Disk is too vague — tools like CHKDSK can help with disk errors but not general performance degradation.

In a domain environment, printers are typically deployed via a print server. Users can browse available printers on the server and install them directly.

All-in-One Exam Guidementions:

“In a corporate domain, printers are managed via a centralized print server. Users can select the desired printer from the server’s shared list.”

Device encryptionensures that even if someone bypasses biometrics or has physical access to the phone, they cannot read the stored data without the encryption key.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Encryption is the most effective way to protect data at rest. Even if the device is lost or stolen, encryption ensures the data remains inaccessible without the correct key or passcode.”

The combination of extreme slowness , browser redirection to unknown sites , outdated antivirus , and blocked access to security settings strongly indicates a malware infection localized to that device (especially since other workstations and network diagnostics are normal). Quentin Docter lists browser redirection as a common security symptom (“Your browser is redirected to websites”) and stresses that if you experience even one of these security symptoms, you should “immediately rectify the security issue or quarantine the system .”

In malware removal best practices, the first operational containment step after verifying symptoms is to isolate/quarantine the infected system to prevent spread, credential theft, or further compromise. Disconnecting the device from the network accomplishes this containment so investigation (logs, scans, offline tools, safe mode, etc.) can be done without risking other systems. Clearing cache (B) is too narrow and doesn’t address blocked security settings/outdated AV. Firewall checks (A) and raising settings (D) don’t contain the threat and may be prevented by the malware itself. Therefore, the next step is to disconnect and investigate .

SSO issues are often related to cached session data, cookies, or browser artifacts. The fact that the user can access the company portal but not one specific SaaS tool suggests a session or token problem. Using a private/incognito browsing window allows a clean session to be initiated, which often resolves SSO conflicts.

A. Reenrolling MFA is not related unless access issues stem from failed multifactor authentication.

C. Bypassing SSO may not be possible depending on the SaaS tool and company policies.

D. Factory resetting a device is a last resort and unnecessary in this case.

Once a malware incident has been confirmed, the immediate next step is to contain the threat. Quarantining infected systems prevents the malware from spreading to other devices and isolates the malicious code for further analysis or remediation.

B. Educating end users is important but occurs later in the incident response process.

C. Disabling System Restore is part of cleanup, not containment.

D. Updating and scanning should occur after the system is quarantined to prevent further infection or spread.

Removing users from the local admin group prevents them from installing unauthorized software.

From Quentin Docter – Complete Study Guide:

“Local admin privileges allow users to install unauthorized apps. Removing them from this group restricts installations and helps prevent malware.” .

To work remotely without physically transporting a workstation, the user needs:

C. RDP (Remote Desktop Protocol): Allows graphical remote access to a Windows PC at the office.

D. VPN (Virtual Private Network): Establishes a secure tunnel to access the corporate network remotely, making the internal PC reachable.

A. SPICE is used in virtual machine environments and is not typically used for end-user remote desktop access.

B. SSH is a text-based remote access tool used mostly for Linux systems.

E. RMM (Remote Monitoring and Management) is used by IT administrators for support — not end-user remote access.

F. WinRM is used for Windows remote management via PowerShell, not for full desktop access.

Running atnear full storage capacitysignificantly slows down smartphones. iOS in particular requires space for caching and temporary files. Performance improves when storage is cleared.

FromMike Meyers ' Lab Manual:

“Lack of free space causes mobile operating systems to struggle with temp files and updates. Performance improves significantly with adequate storage.”

Remote wipeis a mobile device management (MDM) feature that allows administrators to erase data remotely if a device is lost or stolen, preventing unauthorized access to corporate or personal information.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Remote wipe features enable a device to be cleared of all sensitive data if it is lost or stolen. This is one of the most effective ways to prevent unauthorized access to corporate resources.”

Remote wipe is the best option to prevent unauthorized access to data when a mobile device is lost or stolen—especially if the user is unaware of the loss. It allows administrators or mobile device management (MDM) systems to remotely erase all data on the device, rendering it unusable for unauthorized users.

A. Encryption protects the data, but if the device remains powered and logged in, it may still be accessible.

C. Geofencing can restrict features based on location but does not erase data.

D. Facial recognition helps secure access but can be bypassed in some cases or fail in practical situations.

Virtualization settings are typically found within the BIOS/UEFI firmware configuration. To prevent unauthorized users from changing these settings, the technician should set a BIOS password. This ensures only administrators with the password can access or modify BIOS settings, including virtualization support.

B. The guest account is a user-level feature in Windows and doesn’t control BIOS access.

C. A screen lock prevents casual access to the desktop but doesn’t protect firmware settings.

D. AutoRun controls how media and devices behave when inserted — unrelated to BIOS security.

The correct answer is B. exFAT, because exFAT (Extended File Allocation Table) is designed to provide cross-platform compatibility between Windows and macOS while supporting large files and large storage devices. When an external hard drive must be readable and writable by both operating systems without additional drivers or configuration, exFAT is the preferred choice.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, exFAT was developed to overcome the limitations of FAT32, such as file size and volume size restrictions, while maintaining broad operating system support. Both Windows and macOS include native support for exFAT, making it ideal for removable storage devices.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that NTFS is fully supported on Windows but only has limited or read-only support on macOS by default. APFS is Apple’s proprietary filesystem and is not natively supported by Windows. XFS is a Linux filesystem and is incompatible with both Windows and macOS without third-party tools.

The Mike Meyers / Mark Soper Lab Manual reinforces that for external drives shared across platforms, exFAT offers the best balance of compatibility, performance, and simplicity.

Therefore, exFAT is the best filesystem choice, making B the correct answer.

The correct syntax for mapping a network drive in Windows is:

net use Z: \\WinNAS\shared

This command connects the specified network share and maps it as drive Z:.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“Use net use followed by the desired drive letter and the UNC path to map network shares.”

This is macOS “Gatekeeper”-style behavior: the OS warns when an app is not from a trusted source (for example, not signed/not from an identified developer). In Quentin Docter’s macOS section, the correct place to control what apps are allowed is Security & Privacy. He states that in Security & Privacy, “the applications downloaded on the device can also be controlled; you can select whether apps can be downloaded only from the App Store or from App Store And Identified Developers, which is the default.” He also notes many advanced settings in Security & Privacy require unlocking with an administrator password.

Although the exact control is on the General area of Security & Privacy (not the Privacy tab itself), among the answer choices the closest and intended match is Privacy (A) because it points to the correct macOS security settings area in System Preferences/System Settings. Accessibility and Finder do not manage app trust controls, and iCloud relates to syncing/account services rather than software signing enforcement.

The correct answer is C. net use, which is the Windows command-line utility used to display, create, and remove mapped network drives and SMB (Server Message Block) connections. When working remotely through command-line interfaces, technicians often rely on net use to quickly verify which network shares are currently connected.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that SMB is the protocol Windows uses for file and printer sharing, and mapped drives are maintained through SMB sessions. The net use command lists all active connections, including the drive letter, remote UNC path, and connection status.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that net use is especially valuable for remote troubleshooting because it does not require a graphical interface. This makes it ideal when administering multiple systems via command prompt or remote shell.

The Mike Meyers / Mark Soper Lab Manual clarifies that systeminfo displays OS and hardware details, hostname only shows the system name, and nslookup is used for DNS queries. None of those commands provide information about mapped SMB shares.

Since the task is to verify existing SMB mappings, net use is the only command that directly fulfills this requirement, making C the correct answer.

The correct answer is C. Browser policy, because the listed requirements apply specifically to browser-level behavior and settings, not general network traffic or system-wide configuration. Browser policies allow administrators to centrally control how browsers behave on managed systems.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that modern browsers support administrative templates or policies that govern password storage, trusted sites, security levels, history handling, and URL restrictions. These policies ensure consistent behavior across all user systems without relying on manual configuration.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide clarifies that while Group Policy can deploy browser policies, the object being configured is still the browser itself. The question asks what is best to configure, not how it is delivered. Browser policies directly control password management, trusted URLs, and security zones.

The Mike Meyers / Mark Soper Lab Manual further notes that web proxies and gateways filter traffic at the network level and cannot control local browser features such as password storage or history retention.

Because every listed requirement is a browser-specific control, the most accurate and targeted solution is Browser policy, making C the correct answer.

A .bat file (batch file) is a script file in DOS, OS/2, and Microsoft Windows. It contains a series of commands that are executed by the command-line interpreter. In Windows environments, batch files are commonly used to automate log-in tasks, such as mapping network drives, launching applications, or setting environment variables during the user ' s logon process.

B. .sh is a shell script used in Linux/Unix environments.

C. .py is a Python script, which can be used for automation but is not commonly run directly at user logon in standard Windows environments.

D. .js is JavaScript, used mainly in web development and not for system-level scripting in Windows logon automation.

The correct answer is B. Task Manager, because Task Manager allows technicians to view, manage, and terminate running processes, including those that are frozen or unresponsive. If an application process is already running but not responding, launching it again will fail until the existing process is stopped.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Task Manager is the primary Windows tool for troubleshooting application hangs, excessive resource usage, and nonresponsive programs. Technicians can end the task and relaunch the application cleanly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Resource Monitor provides detailed performance metrics but is not optimized for quickly terminating frozen applications. Event Viewer logs errors but does not resolve active process issues.

The Mike Meyers / Mark Soper Lab Manual reinforces that Registry Editor should never be used for live application troubleshooting due to the risk of system instability.

Because the issue involves an unresponsive background process, Task Manager is the fastest and safest tool to resolve the problem, making B the correct answer.

The correct answer is B. Create and assign a security group with adequate permissions, because group-based permission management is the most efficient and scalable way to control access to shared resources. By assigning permissions to a group rather than individual users, administrators reduce administrative overhead and simplify future changes.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, security groups are a best practice for managing access to files, folders, and repositories. Permissions are assigned once to the group, and users inherit those permissions by being members of the group.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that granting administrative permissions is excessive and violates the principle of least privilege. Applying permissions individually increases complexity and the risk of configuration errors, especially as team membership changes.

The Mike Meyers / Mark Soper Lab Manual further clarifies that mapping a network folder does not control permissions; it only provides access to a resource that is already governed by permissions. Group-based access ensures consistency, security, and minimal effort.

Because the requirement is to allow specific actions while preventing deletion—and to do so with the least amount of effort—creating and assigning a properly permissioned security group is the optimal solution, making B the correct answer.

A “utility failure” means the building’s AC power source has dropped out (blackout) or sagged severely, causing the workstation to lose power instantly and shut down. The best way to prevent an immediate shutdown during these events is an Uninterruptible Power Supply (UPS), which contains a battery and can continue supplying AC power long enough to keep the PC running briefly and allow a graceful shutdown. Mike Meyers’ Lab Manual states that a UPS “continues to supply AC power…during both brownouts and blackouts via a battery,” preventing the computer from instantly losing power when the utility fails. Quentin Docter likewise explains that UPS devices protect against “power sags and even power outages,” using stored battery energy so the administrator (or OS integration) can safely shut down rather than crash off.

A surge suppressor protects from spikes, not outages. A redundant PSU only helps if the PSU fails, and Docter notes it cannot keep a system running during a power outage. A line voltage regulator helps stabilize voltage but doesn’t provide power when utility power is absent.

When an OS is no longer receiving updates, it is generally because it has reachedend of life (EOL), meaning the vendor has ceased support.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“End-of-life refers to the point when an OS vendor no longer issues updates or support. Systems at EOL pose security risks and must be upgraded or isolated.”

A cable run under a carpet is vulnerable to compression, bending, and repeated physical stress from foot traffic, which can damage the cable jacket, distort the twists, loosen terminations, or partially break conductors—often showing up as intermittent connectivity. Quentin Docter notes that on a wired network, “other wired issues can include bad or poorly connected cables,” and you should check cabling and connections as a cause of intermittent problems. Putting a cable where people walk on it increases the chance it becomes “bad” over time or develops poor connections, producing the intermittent symptoms described in the answer option.

From a safety/professional practice perspective, Mike Meyers emphasizes that unmanaged cables are “dangerous tripping hazards” and that in business environments cables should be “carefully tucked away… or placed under cable runners,” using “proper cable management.” While that supports hazard reduction, the best reason in this question’s choices focuses on network reliability: repeated walking over the cable can cause intermittent issues. So the correct answer is D.

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple ' s proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

Windows Helloprovides alternative sign-in options including facial recognition, fingerprint scans, and PINs, reducing dependence on passwords.

FromAll-in-One Exam Guide:

“Windows Hello offers a range of biometric and PIN-based login methods designed to simplify access while enhancing security.”

“It can be used in place of a password, ideal for users who frequently forget credentials.”

VPN clients often create virtual network adapters. If the software wasn ' t uninstalled properly or crashed during install, leftover (often hidden) virtual adapters can prevent reinstallation. The proper solution is to delete hidden network adapters using Device Manager (with “Show hidden devices” enabled).

A. OS updates won’t fix a leftover driver or adapter issue.

B. Mapping an adapter to the software is not a standard or viable solution.

C. Firmware updates apply to physical adapters, not virtual VPN adapters.

The correct answer is B. diskmgmt.msc, which opens the Disk Management console in Windows. Disk Management is the primary built-in tool used to create, delete, resize, and format disk partitions.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that disk partitioning is commonly used to separate data for organizational, security, and backup purposes. Disk Management allows technicians to divide a single physical drive into multiple logical volumes, such as one partition for the operating system and another for user data.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide states that diskmgmt.msc provides a graphical interface for managing partitions, drive letters, file systems, and volumes without requiring third-party tools. This makes it the preferred and safest option for partitioning tasks on Windows systems.

The Mike Meyers / Mark Soper Lab Manual clarifies that tools like perfmon.msc monitor performance, lusrmgr.msc manages user accounts, and devmgmt.msc handles hardware devices. None of these tools can modify disk partitions.

Because the task specifically involves creating partitions, Disk Management is the correct and only appropriate tool, making B the correct answer.

The correct answer is C. exFAT . macOS can read and write several file systems, but among the listed choices, exFAT is the best answer because it is designed for broad compatibility and is commonly used on removable storage shared between Windows and macOS. The Sybex practice-test explanation states that macOS can only read NTFS partitions but can both read and write to exFAT partitions. The All-in-One Exam Guide also explains that macOS can read and write FAT32 and exFAT, while it only reads NTFS. NTFS is the standard modern Windows file system but is not writable by macOS without extra tools. ReFS is a Microsoft file system used for specific Windows storage scenarios, and XFS is a Linux/UNIX-style file system. Therefore, when a macOS system must write data to a volume from the listed options, exFAT is the correct choice.

Outdated images and website data often result from cached files in the browser. The Internet Options panel in Windows (specifically under the General tab) allows users to clear browsing history, including cached images and files, which forces the browser to load the most current versions of web content.

A. Administrative Tools is used for advanced system management, not browser settings.

B. Windows Defender Firewall controls network traffic and security rules, not caching.

D. Ease of Access provides accessibility features for users with disabilities — unrelated to web browsing issues.

Online collaboration tools (for example, Microsoft 365/OneDrive, Google Workspace/Drive) typically store documents in cloud storage and rely on a sync client to make those files appear locally on each device. If the user can’t see the document on the laptop, the most direct remediation is to synchronize the remote (cloud) folder so the document downloads to the laptop and stays consistent across devices. The All-in-One guide explains that productivity platforms are “designed to be synchronized across multiple devices,” allowing work to be paused on one device and resumed on another, and that many sync problems come down to configuration or a partial sync that leaves data not fully downloaded. It also notes that enabling/adjusting synchronization settings is often the fix. Quentin Docter similarly describes synced files becoming accessible through File Explorer once server/client synchronization is configured and highlights “Documents” as a common sync data type. Mike Meyers reinforces that file services like OneDrive/Google Drive use an installed app on each device to specify what gets synchronized.

These symptoms strongly indicatemalware infectionor a malicious app running in the background. The first action should be torun a malware scanto identify and remove malicious components.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“If a mobile device is overheating and the battery drains rapidly after installing an app, this could point to malware. Begin by scanning the device with a mobile anti-malware application.”

The first step in the IT change management process is to identify and propose the change. In this case, the technician notices a need (end-of-life network switches), so the appropriate action is to formally propose a change. This proposal would be documented and submitted for approval before any planning or implementation occurs.

According to the CompTIA A+ 220-1102 objectives under Operational Procedures (Domain 4.0), the change management process follows these typical steps:

Submit a change request (Propose the change)

Review and approval (Approve the change)

Planning and scheduling (Schedule the change)

Implementation

Documentation and review

Therefore, proposing the change is the correct first step in accordance with standard ITIL-based change management practices.

AVPN (Virtual Private Network)creates a secure tunnel between the clerk’s home device and the town server, ensuring private and authenticated access.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“VPNs are essential for remote access to internal resources, providing secure connections over public networks.”

The correct answer is B. Getting assistance to lift the hardware . A rack-mounted UPS can be very heavy because it contains one or more internal batteries. When replacing or installing heavy rack-mounted equipment, the technician must consider personal safety and proper lifting techniques before performing the work. The Sybex practice-test explanations state that a UPS, also called a battery backup, can range in size from a small unit to equipment as large as an entire server rack, and it contains batteries and fuses used to provide power protection during power problems. The same source also explains that technicians should bend at the knees, lift with the legs, observe weight limitations, and use a partner lift or cart when needed. Compressed air is related to cleaning, not replacing a UPS. Low-voltage regulations and fire suppression systems may be relevant to facility planning, but the immediate safety concern when replacing rack-mounted hardware is safe lifting and handling.

Facial recognition is a biometric authentication method that ties access to a unique physical feature of the user. Unlike passcodes or pattern locks—which can be easily shared—facial recognition provides a more secure and non-transferable form of access. It also enhances user convenience and is widely supported by modern smartphones.

A. Pattern locks can still be shared and are less secure.

C. Device encryption protects data but does not prevent screen access if a passcode is shared.

D. Multifactor authentication typically applies to app or account access, not basic phone unlocking.

With integrated graphics, “VRAM” is often not dedicated memory on a discrete card—graphics may instead borrow system RAM. Quentin Docter explains this directly: if the video card is built into the motherboard, it “likely won’t have its own memory but will share system memory,” meaning the total system RAM is split between the OS and video usage. Docter then answers the key “where do I change this?” question: “Shared memory is configured in the system BIOS/UEFI,” and some BIOS/UEFI setups allow you to set aside a specific amount (example given: 512 MB) for video memory.

That is exactly why the machine can have plenty of DRAM yet fail a VRAM check: the BIOS/UEFI allocation for integrated graphics may be set too low. Adjusting BIOS/UEFI settings to reserve more memory for the integrated GPU is the most direct way to attempt meeting a VRAM requirement (when supported). Device Manager and System Configuration won’t change reserved video memory allocation, and “Virtual RAM” (paging) is unrelated to VRAM. Therefore, BIOS options is correct.

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.