Free Practice Questions for the CompTIA A+ 220-1202 Exam (2026 Updated)

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

The net use command in Windows is used to map (assign) a shared drive from the command line. The syntax typically looks like: net use X: \server\share where X is the drive letter and \server\share is the network path.

A. pathping tests network latency and packet loss.

B. nslookup is used for DNS troubleshooting.

D. tracert shows the route packets take to reach a destination — not for drive mapping.

Shreddingphysically destroys the platters, making data recovery virtually impossible. It ' s more effective and accessible than degaussing or low-level formatting.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Physical destruction methods like shredding are the most secure options for ensuring data on failed drives cannot be recovered.”

The best answer is B because Linux, macOS, and Windows handle application installation differently, so the technician should use the correct tool or deployment method for each operating system. The A+ Core 2 objectives specifically include diverse OS environments, macOS application installation file types such as .dmg, .pkg, and .app , and Linux tools such as apt-get and yum . The Mike Meyers/Mark Soper material explains that macOS software may be installed from the App Store, a .dmg disk image, or a .pkg installer, while Linux commonly uses package-management tools and distro software stores. The All-in-One Exam Guide also emphasizes that package managers install and update software while handling dependencies, which is especially important in Linux. A single Windows batch script would not properly apply to macOS and Linux. Sending users to the manufacturer’s website bypasses organizational control, and manual installation on every system is inefficient and error-prone.

Mobile OS updates can sometimes cause compatibility issues with specific apps, including corporate email clients. The most likely resolution is to check for and apply an update to the affected application, especially if it hasn’t been updated to support the latest OS version.

B. Registering with MDM might be required for access but wouldn’t address app crashes due to incompatibility.

C. A third-party client might help, but it’s not the best first step if the default app is expected to work.

D. Clearing the cache can help resolve some minor issues, but updating the app directly addresses compatibility concerns.

The question asks where to find ownership and business criticality details for a server. That type of “who owns it, what does it support, and how important is it” data is maintained in a Configuration Management Database (CMDB) as part of configuration/asset management. Quentin Docter discusses asset management as lifecycle tracking and emphasizes accountability, including assigning responsibility and tracking who is associated with assets.

The All-in-One guide similarly describes asset management databases as tracking details such as “who has the asset,” “what type of asset,” and “where this asset is located,” which supports the idea that ownership and operational relevance are stored in such systems.

An SLA defines service expectations, an SOP defines procedures, and an EULA covers licensing—none are intended to be the authoritative inventory/ownership record for a specific server. Therefore, CMDB is the correct answer.

The correct answer is C. Browser policy, because the listed requirements apply specifically to browser-level behavior and settings, not general network traffic or system-wide configuration. Browser policies allow administrators to centrally control how browsers behave on managed systems.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that modern browsers support administrative templates or policies that govern password storage, trusted sites, security levels, history handling, and URL restrictions. These policies ensure consistent behavior across all user systems without relying on manual configuration.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide clarifies that while Group Policy can deploy browser policies, the object being configured is still the browser itself. The question asks what is best to configure, not how it is delivered. Browser policies directly control password management, trusted URLs, and security zones.

The Mike Meyers / Mark Soper Lab Manual further notes that web proxies and gateways filter traffic at the network level and cannot control local browser features such as password storage or history retention.

Because every listed requirement is a browser-specific control, the most accurate and targeted solution is Browser policy, making C the correct answer.

The correct answer is C. SAML. Security Assertion Markup Language is commonly used for single sign-on between an identity provider and a service provider, especially when an organization wants a third-party application to trust its existing identity service. The CompTIA A+ objectives include SSO, meaning single sign-on, and the objectives’ acronym list identifies SSO as a relevant exam term. In this scenario, the organization wants users to authenticate through its existing identity system rather than maintaining separate credentials for the third-party application. SAML is the best match because it passes authentication assertions between trusted parties. OTP means one-time password and is an authentication factor, not an SSO federation standard. ACL means access control list and controls permissions to resources. UAC is Windows User Account Control, which prompts for administrative approval on a local system. Therefore, SAML is the correct technology for third-party SSO integration.

The correct answer is D. Connect a wrist strap to a metal frame, because this action directly prevents electrostatic discharge (ESD), which is one of the most common causes of accidental hardware damage during device disassembly. Even when a device is powered off, static electricity stored in the technician’s body can discharge into sensitive components such as RAM, CPUs, and system boards.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the most effective way to prevent ESD is to equalize electrical potential between the technician and the device. An ESD wrist strap, when connected to a grounded metal surface such as a computer chassis, safely dissipates static electricity before it can damage components.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while antistatic mats and bags are useful, they are secondary controls. The wrist strap provides continuous grounding throughout the repair process, whereas mats and bags only protect components when they are placed on or inside them.

The Mike Meyers / Mark Soper Lab Manual reinforces that working on plastic surfaces does not guarantee grounding, and placing components in antistatic bags is something done after removal, not immediately after powering down.

Therefore, once the device is turned off, the next and most important step is to connect a wrist strap to a metal frame, making D the correct answer.

A low-level format (also referred to as a zero-fill or full format) writes over every sector on a storage device, effectively destroying the existing data and making recovery nearly impossible. Unlike degaussing, which renders the drive unusable, a low-level format maintains the integrity of the device, allowing it to be repurposed or reused.

A. Deleting partitions does not fully erase data; it only removes references in the partition table.

B. EFS (Encrypting File System) encrypts files but does not securely wipe them.

D. Degaussing destroys the magnetic structure of a drive, making it inoperable and not reusable.

Most public Wi-Fi networks requireinteraction with a captive portal(e.g., terms of use or login). Dismissing it prevents the user from gaining internet access. Reconnecting and completing the portal page is essential.

FromAll-in-One Exam Guide:

“Many public hotspots require user acknowledgment or login via a captive portal. Skipping this step results in no internet access.”

Disk optimization tools can sometimes corrupt theMaster Boot Record (MBR). If BIOS sees the drive but can ' t boot, repairing the MBR using installation media is the correct next step.

FromAll-in-One Exam Guide:

“When BIOS recognizes the drive but no OS is found, the issue is often with the boot record. Use installation media to access recovery tools and repair the MBR or boot loader.”

The correct answer is D. Roaming profiles, because roaming profiles allow users to log in to any domain-joined workstation and automatically access their personal settings, documents, and configuration without storing data locally on each machine. This is ideal for environments with hot-desking or shared workstations.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, roaming profiles store user data centrally on a server rather than on individual computers. When a user logs in, their profile is loaded; when they log out, changes are saved back to the server. This minimizes data duplication and reduces the risk of data being left behind on shared systems.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that roaming profiles improve security by preventing sensitive user data from being permanently stored on multiple endpoints. This also simplifies backup and recovery, since user data resides in a centralized location.

The Mike Meyers / Mark Soper Lab Manual clarifies that portable drives introduce data loss risks, cloud email only addresses messaging data, and certificate storage does not manage user profiles or documents.

Because the goal is to maintain data security while allowing mobility and minimizing data transfer, roaming profiles are the most appropriate solution, making D the correct answer.

Hash values(like SHA256) are published by vendors to verify file integrity. A match confirms the file hasn’t been tampered with.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“Use hash values to ensure downloaded software matches the vendor’s published version and hasn ' t been modified.”

The correct answer is C. Perform a clean installation . When ransomware has encrypted files and the organization does not pay the ransom, the priority is to remove all traces of malware and rebuild the system from a trusted state. Quentin Docter’s Complete Study Guide explains that in ransomware situations, remediation may not be possible because user files are encrypted. It further states that in cases where no one can be certain what the malware payload has done, the proper remediation might be to sanitize the drive and reinstall the operating system from an image or manually reinstall it. A recovery partition or Windows Recovery Environment repair may leave infected files, settings, persistence mechanisms, or damaged user data behind. Upgrading to Windows 11 does not guarantee malware removal. A clean installation removes the existing compromised OS and provides the best path to full operation, followed by restoring clean data from known-good backups.

Because the employee needs graphical interface (GUI) access to Linux servers, the best option is VNC (Virtual Network Computing). VNC is specifically designed for remote control and sharing of desktops, meaning it can present the full graphical desktop of the Linux server to the remote user and allow interaction as if they were sitting at the machine. Quentin Docter describes VNC as “a remote control tool for the sharing of desktops,” typically using TCP port 5900, and notes it is similar to RDP but is an open-source protocol; it can support encryption via plug-ins (important for secure remote use). Mike Meyers’ Lab Manual reinforces the key distinction: SSH provides command-line access, but “when you need remote access to the full graphical desktop, you need a remote desktop application,” and many of those use VNC (or RDP).

By contrast, SSH and Telnet are primarily text-console tools (Telnet is also unencrypted/insecure), and WinRM is Windows-focused remote management rather than the standard way to provide GUI access to Linux desktops.

The correct answer is B. Task Manager, because Task Manager allows technicians to view, manage, and terminate running processes, including those that are frozen or unresponsive. If an application process is already running but not responding, launching it again will fail until the existing process is stopped.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Task Manager is the primary Windows tool for troubleshooting application hangs, excessive resource usage, and nonresponsive programs. Technicians can end the task and relaunch the application cleanly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Resource Monitor provides detailed performance metrics but is not optimized for quickly terminating frozen applications. Event Viewer logs errors but does not resolve active process issues.

The Mike Meyers / Mark Soper Lab Manual reinforces that Registry Editor should never be used for live application troubleshooting due to the risk of system instability.

Because the issue involves an unresponsive background process, Task Manager is the fastest and safest tool to resolve the problem, making B the correct answer.

Multi-Factor Authentication (MFA) apps, especially time-based one-time password (TOTP) apps (e.g., Google Authenticator, Authy), rely on accurate time synchronization between the device and the authentication server. If the user recently traveled internationally, the device may have incorrect date/time settings due to time zone changes or failed synchronization, leading to MFA failure.

The most logical and non-intrusive first step is to verify and correct the date and time settings. This aligns with basic troubleshooting principles—start with the simplest and most likely cause before taking more drastic action.

An in-place upgrade is the fastest and most efficient way to upgrade from Windows 10 to Windows 11 while keeping all user data, applications, and settings intact. This method is often used when the hardware meets Windows 11 requirements and no system reconfiguration is necessary.

A. gpupdate is used to refresh Group Policy settings — unrelated to OS upgrades.

B. Image deployment typically replaces the current OS and may not retain user data unless specifically customized.

C. A clean install requires formatting the drive and starting fresh, which removes all data.

The correct answer is B. Create and assign a security group with adequate permissions, because group-based permission management is the most efficient and scalable way to control access to shared resources. By assigning permissions to a group rather than individual users, administrators reduce administrative overhead and simplify future changes.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, security groups are a best practice for managing access to files, folders, and repositories. Permissions are assigned once to the group, and users inherit those permissions by being members of the group.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that granting administrative permissions is excessive and violates the principle of least privilege. Applying permissions individually increases complexity and the risk of configuration errors, especially as team membership changes.

The Mike Meyers / Mark Soper Lab Manual further clarifies that mapping a network folder does not control permissions; it only provides access to a resource that is already governed by permissions. Group-based access ensures consistency, security, and minimal effort.

Because the requirement is to allow specific actions while preventing deletion—and to do so with the least amount of effort—creating and assigning a properly permissioned security group is the optimal solution, making B the correct answer.

If uploading fails only offsite,mobile data limits or restrictionsare the likely cause. Data caps or network management can interfere with uploads.

FromTravis Everett – All-in-One Exam Guide:

“When mobile users experience network issues, always check if the device has reached a data cap or roaming restriction.”

Open Ethernet ports in a public-facing area create a direct, high-trust entry point into the internal network. The most efficient fix is to remove that exposure by disabling the lobby ports and moving untrusted users to a segmented guest network. Quentin Docter explains why disabling unused/unauthorized access points matters: “Ports on a switch, router, or firewall not in use present an open door for an attacker to enter and should be disabled or disconnected.” That directly supports disabling lobby switch ports that shouldn’t be available to external users.

He also describes guest network isolation: guests “never need to connect to the organization’s servers and internal systems,” so a guest SSID should be created that “isolates guest traffic from production traffic.” This is exactly what option B accomplishes: it prevents contractors from gaining internal wired access while still providing Internet access through a controlled guest network.

WPA3 (A) only improves Wi-Fi encryption; it doesn’t stop wired port access. Monitoring traffic (C) is reactive. Signage (D) is weak administrative control compared to disabling the ports.

Mobile Device Management (MDM) is used to control, monitor, and enforce policies on mobile devices. It allows IT teams to restrict app installations, push approved apps, and monitor device compliance. Deploying MDM would prevent unauthorized applications, such as password crackers, from being installed on company-managed devices.

A. Group Policy is for managing Windows environments and not applicable to smartphones.

B. PAM (Privileged Access Management) controls administrative access, not app installation.

C. Anti-malware can help detect malicious apps but doesn’t prevent their installation proactively.

If internal resources (such as intranet or internal apps) can ' t be accessed but external sites work, this often points to aDNS issue, where the system isn ' t resolving internal domain names correctly.

FromAll-in-One Exam Guide:

“When internet access is functional but internal sites fail to load, the issue usually lies with DNS resolution. Internal resources often require internal DNS servers, which may not be configured correctly.”

The correct answer is C. exFAT . macOS can read and write several file systems, but among the listed choices, exFAT is the best answer because it is designed for broad compatibility and is commonly used on removable storage shared between Windows and macOS. The Sybex practice-test explanation states that macOS can only read NTFS partitions but can both read and write to exFAT partitions. The All-in-One Exam Guide also explains that macOS can read and write FAT32 and exFAT, while it only reads NTFS. NTFS is the standard modern Windows file system but is not writable by macOS without extra tools. ReFS is a Microsoft file system used for specific Windows storage scenarios, and XFS is a Linux/UNIX-style file system. Therefore, when a macOS system must write data to a volume from the listed options, exFAT is the correct choice.

Single sign-on (SSO)allows users to authenticate once and gain access to multiple systems without re-entering credentials, which significantly enhances user convenience while maintaining security.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Single sign-on streamlines authentication by allowing users to log in once and access all authorized resources, reducing credential fatigue and improving security.”

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

AnNDA (Non-Disclosure Agreement)is used to ensure confidentiality of sensitive company information, especially when interacting with external parties.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“An NDA ensures that confidential information is not disclosed to unauthorized individuals, especially important in external communications.”

After containment and remediation, one of the final steps in incident response is user education. Since the root cause was a phishing attack, it is essential to educate users about identifying phishing attempts, safe browsing practices, and how to handle suspicious communications. This improves overall security posture and helps prevent future incidents.

A. Installing additional tools may be helpful but is a long-term step.

C. Flashing router firmware is not warranted unless the network hardware is known to be compromised.

D. Suggesting more advanced tools might be excessive given that the EDR successfully contained the incident.

A zero-day vulnerability demands an emergency change to quickly secure the system, even if downtime is needed.

From Mike Meyers ' Lab Manual:

“Emergency changes bypass standard scheduling to quickly address critical vulnerabilities that pose immediate risks.” .

If the system fails to boot after removing the USB installation media, it often means the BIOS is not pointing to the correct boot device. This typically involves an issue with the BIOS settings—such as UEFI being disabled when the OS was installed in UEFI mode.

FromAll-in-One Exam Guideby Travis Everett:

“One of the most common post-installation issues is failing to configure the boot mode correctly in BIOS. If an OS is installed in UEFI mode, the UEFI boot must be enabled, otherwise the system won’t detect the bootloader.”

A corruptedMaster Boot Record (MBR)is a common issue after disk manipulation. Booting from installation media and using tools like bootrec to repair the MBR can resolve the problem.

Travis Everett – All-in-One Exam Guideexplains:

“A damaged MBR may result in the OS not loading. Booting from recovery or installation media and selecting startup repair or running bootrec commands can restore functionality.”

The key requirements are (1) avoid expensive licensing fees and (2) keep files locally. Linux best matches both. Quentin Docter explains that open source software is “freer than free,” meaning the application is free and the source code is shared, and he explicitly lists “OSs such as Linux” as open source examples. That directly supports the licensing-cost goal. By contrast, Windows and macOS are commercial, licensed operating systems.

Chrome OS often works best when users rely heavily on cloud-based services and synchronization, which conflicts with the customer’s preference that “all files be kept locally” (even though local storage exists, Chrome OS is commonly positioned around cloud workflows). Linux supports fully local file storage and gives the organization control over storage location, backup choices, and offline access.

The All-in-One guide reinforces the idea that some developers (including Linus Torvalds for Linux) made software “freely available for everyone,” highlighting Linux as a no-licensing-fee option compared with commercial licensing models. Therefore, the best recommendation is Linux (A).

Event Viewer is the primary tool used to investigate system-level errors and logs, including BSODs. When a BSOD occurs, Windows logs the error codes and associated system behavior under “System” logs in Event Viewer. This allows the technician to review crash events, identify error codes (e.g., STOP codes), and pinpoint hardware or driver issues.

B. Performance Monitor is used for real-time performance tracking and trend analysis, not crash logs.

C. System Information displays system specs but not crash logs or events.

D. Device Manager shows device status and driver issues but doesn’t retain error logs related to BSODs.

These symptoms strongly indicatemalware infectionor a malicious app running in the background. The first action should be torun a malware scanto identify and remove malicious components.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“If a mobile device is overheating and the battery drains rapidly after installing an app, this could point to malware. Begin by scanning the device with a mobile anti-malware application.”

Aclean installensures all malware is eliminated by completely wiping and reinstalling the OS. System restore or repair may leave traces.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“If malware cannot be completely removed, perform a clean installation of the operating system. This ensures no remnants remain on the machine.”

Once the system is cleaned, the next priority is toeducate the useron safe practices to prevent recurrence.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Post-malware remediation should include user education to prevent reinfection and identify how the malware was introduced.”

The correct answer is D. Research the attendees’ time zones. Because the colleagues are around the world, the technician should first determine each attendee’s time zone before scheduling. Otherwise, the meeting might be set at an unreasonable or impossible time for some participants. The A+ materials emphasize professional communication, sensitivity, and respecting users’ schedules and circumstances. The All-in-One Exam Guide states that technicians should be culturally sensitive and, when a customer’s schedule or customs affect work, the technician should adapt professionally. Videoconferencing tools are appropriate for this type of meeting; Quentin Docter’s Complete Study Guide explains that videoconferencing software includes features such as calendar invites, call-in numbers, attendee management, screen sharing, and collaboration. However, before configuring software or sending the invite, the technician must know when the meeting can reasonably occur for all global attendees. Dressing appropriately comes later, just before the meeting.

Windows 11 features a“Do Not Disturb”mode under Notification settings, which is designed to suppress interruptions during tasks like videoconferencing.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Windows 11 introduces Do Not Disturb and Focus Assist under notification settings, enabling users to mute alerts during presentations or calls.”

The correct answer is D. Disk encryption . A laptop used while traveling internationally has a higher risk of loss, theft, or unauthorized physical access. Disk encryption protects the data even if the attacker removes the drive and connects it to another computer. Quentin Docter’s Complete Study Guide explains that BitLocker uses drive encryption to protect files, including startup and login-related files, and that a TPM can safely store the encryption key so it is not stored on the encrypted disk. It also notes that BitLocker helps mitigate data loss because a removed drive remains encrypted. The Mike Meyers/Mark Soper material similarly states that BitLocker encrypts the whole drive and protects data if a portable computer or hard drive is stolen. A screen lock is useful, but it only protects an active or idle session. Content filtering controls web access, and restricted login times limit when users can sign in, but neither provides strong protection for stored data on a stolen laptop.

The Local Users and Groups Manager (lusrmgr.msc) is the utility for managing user accounts, including renaming the default Administrator.

From Quentin Docter – Complete Study Guide:

“The lusrmgr.msc snap-in allows renaming and managing local user accounts, including the default administrator.” .

A bollard is a sturdy physical barrier—often a steel or concrete post—designed to prevent vehicles or unauthorized individuals from ramming into or entering secure areas of a building. It provides physical security and is commonly used outside entrances to prevent forced entry.

A. PIV (Personal Identity Verification) cards are used for identity access control, not physical blocking.

B. Motion lighting may deter activity but doesn’t physically prevent entry.

C. Surveillance records activity but cannot stop a forced entry.

RADIUS (Remote Authentication Dial-In User Service)provides centralized Authentication, Authorization, and Accounting (AAA) for users who connect and use a network service.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“RADIUS is a widely used protocol for implementing AAA in network environments, allowing centralized control over user access and accounting.”

Resource Monitor provides real-time monitoring of system performance and resource usage, including CPU, memory, disk, and network usage. It helps technicians identify performance bottlenecks (e.g., high memory or CPU usage) that can cause slowdowns in applications over time without producing crash errors.

A. Reliability history logs application crashes or errors — not helpful if the app doesn’t crash.

B. Computer Management is a broad utility with limited real-time monitoring capability.

D. Disk is too vague — tools like CHKDSK can help with disk errors but not general performance degradation.

To prevent unauthorized physical access to a mobile device, the company must ensure the device locks quickly and requires an authentication factor before anyone can use it. PIN authentication directly blocks access by requiring a passcode to unlock the device—Quentin Docter lists PIN lock as one of the primary “screen lock” methods used to secure mobile devices, explaining it as the most common unlock method (typically 4–6 digits, sometimes alphanumeric).

Screen timeout (auto-lock) reduces the window in which an unattended phone remains usable; the All-in-One guide notes that systems can be set to an automatic timeout and screen lock, requiring credentials after a short period of inactivity. Mike Meyers’ Lab Manual reinforces that you should “protect your data from access by putting a good screen lock on the device,” and that these locks commonly require a password/PIN/pattern/biometric to regain access after locking.

Hotspots, VPN, antivirus, and location services are valuable, but they do not primarily stop someone holding the device from opening it and accessing data.

An Acceptable Use Policy (AUP) outlines the rules and guidelines for employees or users regarding the appropriate use of company systems, resources, and internet access. It defines permitted and prohibited activities, helping to mitigate security risks and establish clear behavioral expectations.

B. MNDA (Mutual Non-Disclosure Agreement) deals with confidentiality, not usage guidelines.

C. DRM (Digital Rights Management) controls access to copyrighted content.

D. EULA (End User License Agreement) pertains to software licensing, not internal policies.

A “central log-in” means users can authenticate using a centralized account database rather than separate local accounts on each PC—this is a core feature of a Windows domain . Mike Meyers explains that a Windows domain makes it easy for anyone with a domain account to log on to any computer in the domain with a single account , a process called “single sign-on (SSO),” and that users do not need a separate local account stored on every computer. The All-in-One guide reinforces the same: in a domain, the domain controller stores domain accounts and “a user logging on to any computer on the domain may use their one domain account to log on to the entire network.”

Active Directory is the directory service commonly used to implement domains, but the question asks what is required for centralized logon on the workstation side— the computer must be joined to the domain (domain membership). Workgroups use only local accounts, and Local Group Policy Editor manages policies locally, not centralized authentication.

UPS batteries are heavy and often located at the bottom of racks to maintain balance. Safe removal requires the use of correct lifting techniques to avoid injury. OSHA and workplace safety standards emphasize ergonomic handling when dealing with heavy equipment.

A. Fire suppression readiness is important for fire safety but not specifically relevant to battery removal.

C. Antistatic bags are for electronic components, not heavy battery modules.

D. A face mask is not generally necessary unless there is a chemical leak, which is not indicated here.