220-1202 CompTIA A+ Core 2 (2026 Exam Update) Questions and Answers

Windows Helloallows biometric and PIN-based login, which are easier and more user-friendly than passwords.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Windows Hello supports biometric authentication and PINs, providing easier and secure access especially for users who have trouble remembering passwords.”

After containment and remediation, one of the final steps in incident response is user education. Since the root cause was a phishing attack, it is essential to educate users about identifying phishing attempts, safe browsing practices, and how to handle suspicious communications. This improves overall security posture and helps prevent future incidents.

A. Installing additional tools may be helpful but is a long-term step.

C. Flashing router firmware is not warranted unless the network hardware is known to be compromised.

D. Suggesting more advanced tools might be excessive given that the EDR successfully contained the incident.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

This scenario involves a mismatch in device time settings, which can affect synchronization and authentication across the network. Using a Network Time Protocol (NTP) server ensures all networked devices maintain accurate and synchronized clocks.

From Travis Everett – All-in-One Exam Guide:

“NTP servers keep all devices on a network in sync. This prevents time drift, which can cause authentication issues with domain logins, certificates, and applications.” .

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

The correct answer is A. Check for malicious applications, because excessive data usage, device overheating, and rapid battery drain are classic indicators of mobile malware or spyware running in the background.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, malicious applications can continuously transmit data, mine cryptocurrency, or monitor user activity, all of which cause increased network usage and battery consumption—even when the device appears idle.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that the first step in mobile troubleshooting is identifying whether unauthorized or malicious apps are present. Reviewing installed applications and running a mobile security scan can quickly confirm the root cause.

The Mike Meyers / Mark Soper Lab Manual explains that disabling networks or enabling airplane mode only masks symptoms temporarily and does not remove malware. Factory resets are effective but should be used after confirming malware or if other remediation steps fail.

Because the symptoms strongly suggest malicious background activity, the most appropriate first action is to check for malicious applications, making A the correct answer.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

Before deploying an application update broadly, best practice is to test it in an isolated environment to avoid breaking production systems. The All-in-One guide defines sandbox testing clearly: “a sandbox is a place where you can experiment without messing up the primary system,” typically a virtualized environment, and it “entails checking out new and updated applications without putting the systems and data you depend on at risk.” That directly aligns with rolling out a new application update across the organization.

Mike Meyers’ Lab Manual repeats the same concept: sandbox testing uses an isolated environment and snapshots to test changes safely before production deployment. It’s positioned as a documented business process within change-management best practices, reinforcing why it comes early—before impact spreads.

A backup/rollback plan is important too, but the question asks for the first step when applying a new update to everyone. Testing first helps identify compatibility issues, installation failures, and side effects early—so you don’t deploy a bad update at scale. Therefore, Sandbox testing (C) is correct.

Microsoft Edge most commonly blocks “unrecognized” or “potentially unsafe” downloads through Microsoft Defender SmartScreen, which is a reputation-based protection feature integrated into Windows/Edge. When SmartScreen cannot establish trust in a downloaded file (often because the file type is commonly abused or the file has low reputation), it can warn or block the download even if the technician believes the file is legitimate. In this scenario, the technician should adjust SmartScreen settings (rather than disabling antivirus, UAC, or the firewall) to permit the download while keeping other protections intact. This aligns with Windows security management concepts: Windows includes built-in protections (Microsoft Defender and related safeguards) that can be configured through Windows Security, and technicians should tune the specific protection causing the block instead of broadly weakening system security. Also, browser security options are managed from the browser’s Settings area, reinforcing that the correct fix is changing the browser’s download/reputation protection behavior rather than network or privilege controls.

The Linux machine likely formatted the drive in a file system like ext4, which Windows cannot natively read. Reformatting the drive toexFATallows cross-platform compatibility.

FromAll-in-One Exam Guide:

“When migrating data between OSes, using a file system like exFAT ensures compatibility. Windows cannot read Linux-native file systems such as ext4 without third-party tools.”

The requirement is that vendor users can work only during certain times , which is enforced by setting logon-hour restrictions on the accounts. Quentin Docter explicitly describes this control under “Setting Time Restrictions,” stating: “Configure user accounts so that logins can occur only during times that the user can be expected to be working,” and explains that in Active Directory you can open the user account and click Logon Hours to configure permitted and denied hours. This directly matches option D.

Option C (account expiration) is useful for contractors, and Docter even notes account expiration is “best used on contractor accounts,” but that controls the end date of access, not daily working hours . Alerts (B) would only notify after the fact, and timeout policies (A) are about inactivity/session controls rather than restricting when logons are allowed. Mike Meyers also lists “login time restrictions” as an account management best practice, reinforcing that restricting logon times is a valid security control.

The correct answer is C. BAT, because batch files are specifically designed to execute a sequence of commands automatically in Windows environments. They are commonly used for startup tasks such as launching applications, mapping network drives, setting environment variables, or running maintenance scripts.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, batch files (.bat) are text-based scripts interpreted by the Windows Command Processor (cmd.exe). They are lightweight, easy to create, and can be placed directly in startup folders or scheduled through system tasks.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that batch files are ideal for automation because they do not require compilation and can run without user interaction. This makes them well-suited for startup operations that must execute consistently every time the system boots or a user logs in.

The Mike Meyers / Mark Soper Lab Manual contrasts batch files with other file types: .sh files are used in Linux and macOS, .msi files are installer packages, and .exe files are compiled programs that may prompt user interaction or security warnings.

Because batch files are native to Windows, scriptable, and commonly used for startup automation, C. BAT is the correct answer.

Mobile OS updates can sometimes cause compatibility issues with specific apps, including corporate email clients. The most likely resolution is to check for and apply an update to the affected application, especially if it hasn’t been updated to support the latest OS version.

B. Registering with MDM might be required for access but wouldn’t address app crashes due to incompatibility.

C. A third-party client might help, but it’s not the best first step if the default app is expected to work.

D. Clearing the cache can help resolve some minor issues, but updating the app directly addresses compatibility concerns.

For persistent printing issues due to spooler service, ensure theprint spooler is started and set to Automatic. This maintains print capability across reboots.

FromMike Meyers ' Lab Manual:

“If users lose printing capabilities on reboot, the print spooler service must be configured to start automatically and be confirmed as running.”

Because the gateway and internal file shares work, the device has basic network connectivity. The two symptoms that remain— certificate errors and authentication errors —share a very common underlying cause: incorrect system time. Quentin Docter explains that certificate problems often come from “ the proper setting of time and date ,” stating that “ The time on the host should always be checked along with the expiration of the SSL certificate.” If the clock is wrong, certificates can appear “not yet valid” or “expired,” triggering browser certificate warnings even when the site is fine.

Mike Meyers also ties time drift directly to authentication failures: “ All clocks—including those in computers—experience time drift… This clock drift can cause problems with time-sensitive applications and services (especially authentication services). ” That matches the exact scenario: apps show authentication errors while browsing shows certificate errors. Duplicate IP or DHCP “bad address” typically causes intermittent or total connectivity problems (which would likely break file shares), not specifically certificate/auth failures. Therefore, time drift is the best diagnosis.

Resource Monitor provides real-time monitoring of system performance and resource usage, including CPU, memory, disk, and network usage. It helps technicians identify performance bottlenecks (e.g., high memory or CPU usage) that can cause slowdowns in applications over time without producing crash errors.

A. Reliability history logs application crashes or errors — not helpful if the app doesn’t crash.

B. Computer Management is a broad utility with limited real-time monitoring capability.

D. Disk is too vague — tools like CHKDSK can help with disk errors but not general performance degradation.

In the context of artificial intelligence, " hallucinations " refer to instances where an AI system generates information that is plausible-sounding but factually incorrect or entirely fabricated. This is a known limitation of large language models, including generative AI tools.

A. Data privacy refers to the protection of personal or sensitive data, not content accuracy.

C. Appropriate use relates to ethical and policy-based concerns, not factual correctness.

D. Plagiarism involves presenting someone else ' s work as your own — this situation is about accuracy, not ownership.

The correct answer is C. Switch the NIC settings from manual to automatic, which allows the computer to obtain an IP address dynamically from the DHCP server. When a static IP address is no longer required, reverting the network configuration to DHCP ensures the system integrates properly with the current network design.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, DHCP simplifies network management by automatically assigning IP addresses, subnet masks, gateways, and DNS settings. Leaving a static IP in place can cause address conflicts or connectivity issues, especially when the device is repurposed.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that DHCP reservations are used when a device must always receive the same IP address, which is unnecessary in this scenario. Creating exclusions or manually changing the static IP does not meet the requirement to remove static addressing altogether.

The Mike Meyers / Mark Soper Lab Manual reinforces that switching the NIC to automatic configuration is the correct way to return a system to standard network operation and avoid manual IP management.

Because the static IP is no longer needed, enabling DHCP by setting the NIC to automatic configuration is the correct solution, making C the correct answer.

A low-level format (also referred to as a zero-fill or full format) writes over every sector on a storage device, effectively destroying the existing data and making recovery nearly impossible. Unlike degaussing, which renders the drive unusable, a low-level format maintains the integrity of the device, allowing it to be repurposed or reused.

A. Deleting partitions does not fully erase data; it only removes references in the partition table.

B. EFS (Encrypting File System) encrypts files but does not securely wipe them.

D. Degaussing destroys the magnetic structure of a drive, making it inoperable and not reusable.

In a domain environment, printers are typically deployed via a print server. Users can browse available printers on the server and install them directly.

All-in-One Exam Guidementions:

“In a corporate domain, printers are managed via a centralized print server. Users can select the desired printer from the server’s shared list.”

The correct answer is D. Guest . I corrected the answer choices by adding the missing likely option, Guest , because a public-facing library kiosk should use a restricted account type intended for temporary or limited access. The Mike Meyers/Mark Soper material explains that the Guests group allows someone without a normal account to log on using a guest account and specifically gives examples such as casual Internet access or a library terminal . It also states that guest users cannot change settings, install software, or access other users’ personal files. Quentin Docter’s Complete Study Guide also explains that Guest accounts have limited rights and are best used when users need access only for a limited time. A Power User account has unnecessary privileges. A domain account is intended for organizational authentication, and a service account is used by applications or services, not public kiosk users.

The best answer is B because Linux, macOS, and Windows handle application installation differently, so the technician should use the correct tool or deployment method for each operating system. The A+ Core 2 objectives specifically include diverse OS environments, macOS application installation file types such as .dmg, .pkg, and .app , and Linux tools such as apt-get and yum . The Mike Meyers/Mark Soper material explains that macOS software may be installed from the App Store, a .dmg disk image, or a .pkg installer, while Linux commonly uses package-management tools and distro software stores. The All-in-One Exam Guide also emphasizes that package managers install and update software while handling dependencies, which is especially important in Linux. A single Windows batch script would not properly apply to macOS and Linux. Sending users to the manufacturer’s website bypasses organizational control, and manual installation on every system is inefficient and error-prone.

Linux commonly uses Linux-native filesystems (such as ext4, XFS, BTRFS, and others). The All-in-One Exam Guide explicitly states: “Linux users have lots to choose from; most use ext4, but you will see others with names like BTRFS, XFS, ZFS, and so on.” That directly links XFS to Linux.

By contrast, the same source identifies NTFS, FAT32, and exFAT as Windows file systems, with exFAT mainly for removable media, showing that FAT32/NTFS are primarily Windows-associated in A+ context. Quentin Docter also explains Linux’s ext-family filesystems (ext3/ext4) as Linux defaults in many distributions, reinforcing that Linux has its own native filesystem ecosystem rather than using NTFS/APFS as its typical format.

APFS is Apple’s filesystem for macOS/iOS devices, not Linux. FAT32 is cross-platform but not “typically associated” with Linux as a primary filesystem. Therefore, XFS (B) is the best answer.

Standard Operating Procedures (SOPs) define the mandatory steps and expectations technicians must follow during support calls. This includes documentation standards such as logging user info, asset details, and issue descriptions in the ticketing system. Implementing SOPs ensures consistency and accountability.

A. SLAs define response/resolution times but not documentation practices.

B. Call categories organize types of issues but don ' t guide technician actions.

D. Knowledge base articles provide solutions to known problems but don ' t ensure proper ticket documentation.

Public Wi-Fi networks often usecaptive portals, which require accepting terms or authenticating via the pop-up page before full access is granted. Closing it prematurely stops full connection.

FromTravis Everett – All-in-One Exam Guide:

“Captive portals intercept the first HTTP request and present a login or acknowledgment screen. Without completing it, access is denied.”

When a system begins randomly crashing after a hardware change (installing a GPU) and the correct vendor driver update does not resolve it, the best next troubleshooting step is to collect evidence about what is failing. Windows records crash details, driver faults, and unexpected shutdowns in Event Viewer (System/Application logs) and related reliability tools. Quentin Docter specifically states that Event Viewer should be the first place you look when the solution is not evident because applications and the OS often create log entries that help verify operation and diagnose problems. These logs can reveal whether the crash is tied to a display driver fault, power/kernel events, or another subsystem. Docter also notes you can often find more information about application crashes by reviewing the Application log, and for instability/shutdown patterns you “start combing through the logs” in Event Viewer to determine whether the system lost power or crashed. Mike Meyers adds that Event Viewer is the tool used to read and understand Windows logs (Application/System/Setup/Security) for diagnosing what’s happening on a system.

The correct answer is C. SSH (Secure Shell), because SSH is the standard method for secure, command-line-based remote management of network devices, including switches, routers, and firewalls. Network switches typically do not provide graphical interfaces, and administrators interact with them using a command-line interface (CLI).

According to the Quentin Docter – CompTIA A+ Complete Study Guide, SSH is widely used to securely access and manage network infrastructure devices. It encrypts all communication between the technician’s system and the remote device, protecting credentials and command output from interception.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that SSH allows administrators to execute commands remotely and capture text-based output, which can easily be copied and shared for documentation or escalation. This makes it ideal for fulfilling requests that involve running commands and returning results.

The Mike Meyers / Mark Soper Lab Manual clarifies that RDP and VNC are graphical desktop-sharing tools typically used for managing workstations or servers, not network switches. WinRM is used for Windows system management, not network hardware.

Because the task involves secure CLI access to a network switch, SSH is the correct and expected tool, making C the correct answer.

The recurring print issue suggests theprint spooler service is not set to start automatically, causing it to stop between sessions. Ensuring it is set tostart automaticallyand manuallystarting the servicewill resolve the issue.

FromMark Soper – Mike Meyers ' Lab Manual:

“The print spooler is essential for print services. If it isn’t configured to start automatically, users may experience recurring failures.”

“Manually starting the service or setting it to ' Automatic ' in the Services panel resolves persistent print availability problems.”

The correct answer is C. XDR (Extended Detection and Response), which is designed to provide holistic security visibility across endpoints, networks, servers, cloud workloads, and email systems. Unlike traditional endpoint-only solutions, XDR correlates data from multiple security layers to detect and respond to advanced threats.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, XDR expands upon EDR by integrating telemetry from network traffic, firewalls, identity systems, and cloud platforms. This enables detection of threats that move laterally or originate outside a single host.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that XDR is specifically designed to detect attacks that bypass endpoint protections by analyzing network-level behavior, command-and-control traffic, and cross-system activity.

The Mike Meyers / Mark Soper Lab Manual contrasts XDR with other options: RADIUS is an authentication protocol, UAC is a local Windows privilege control, and antivirus focuses only on known malware signatures at the host level. None of those provide network-wide visibility and coordinated response.

Because the question explicitly mentions traffic outside the host and at the network level, XDR is the only technology designed to meet that requirement, making C the correct answer.

The correct answer is C. Lock the account after three failed attempts. A brute-force attack attempts many password guesses. Account lockout directly slows or stops this by preventing unlimited login attempts. Quentin Docter’s Complete Study Guide explains that administrators should configure user account settings to limit the number of failed login attempts before the account is locked for a period of time. It specifically notes that setting a failed login attempt counter and lockout duration slows the progress of password attacks. The same material notes that three failed attempts provides better security, although it may create more help desk calls. Restricting login times may reduce the attack window but does not stop repeated guessing during allowed hours. Requiring login after wake protects unattended sessions. Least privilege limits damage after compromise, but account lockout best mitigates brute-force password attempts.

The correct answer is A. Detailed guides for resolving common issues, because effective deployment documentation must support ongoing troubleshooting and support, not just initial installation. Including known issues and resolution steps allows future technicians to resolve problems efficiently and consistently.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, high-quality technical documentation should include error conditions, common failure points, and step-by-step remediation procedures. This information significantly reduces mean time to resolution (MTTR) and improves service quality.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that help desk documentation should evolve over time, incorporating lessons learned from previous incidents. Troubleshooting guides turn deployment documentation into a practical reference rather than a static record.

The Mike Meyers / Mark Soper Lab Manual further clarifies that email logs are informal and unstructured, vendor contact information is supplementary, and end-user manuals are not intended for technical troubleshooting. None of these provide actionable guidance for technicians resolving future issues.

Because the goal is to ensure long-term supportability and effective troubleshooting, the most important inclusion is detailed guides for resolving common issues, making A the correct answer.

The Local Users and Groups Manager (lusrmgr.msc) is the utility for managing user accounts, including renaming the default Administrator.

From Quentin Docter – Complete Study Guide:

“The lusrmgr.msc snap-in allows renaming and managing local user accounts, including the default administrator.” .

A blue screen or sudden shutdown generates diagnostic records that persist after reboot, and the primary Windows tool to review those records is Event Viewer . Quentin Docter states: “ Event Viewer should be the first place you look when you are trying to solve a problem whose solution is not evident ,” because the system and applications “will often create an entry… that can be used to… diagnose problems.” He also specifically notes for unexpected shutdowns: “ The first place to check is Event Viewer on the System tab ,” where kernel and EventLog entries help determine whether the system lost power or shut down abnormally.

Mike Meyers reinforces that Event Viewer is how you read Windows logs (Application, Security, Setup, System) and that the details pane shows information about the selected event, which is exactly what you need when the on-screen error flashes too quickly. Performance Monitor is for counters/trends, Device Manager focuses on hardware status/drivers, and System Information shows configuration—not the crash/shutdown event details. Hence, Event Viewer (C) is correct.

A zero-day vulnerability demands an emergency change to quickly secure the system, even if downtime is needed.

From Mike Meyers ' Lab Manual:

“Emergency changes bypass standard scheduling to quickly address critical vulnerabilities that pose immediate risks.” .

The correct answer is B. diskmgmt.msc, which opens the Disk Management console in Windows. Disk Management is the primary built-in tool used to create, delete, resize, and format disk partitions.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that disk partitioning is commonly used to separate data for organizational, security, and backup purposes. Disk Management allows technicians to divide a single physical drive into multiple logical volumes, such as one partition for the operating system and another for user data.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide states that diskmgmt.msc provides a graphical interface for managing partitions, drive letters, file systems, and volumes without requiring third-party tools. This makes it the preferred and safest option for partitioning tasks on Windows systems.

The Mike Meyers / Mark Soper Lab Manual clarifies that tools like perfmon.msc monitor performance, lusrmgr.msc manages user accounts, and devmgmt.msc handles hardware devices. None of these tools can modify disk partitions.

Because the task specifically involves creating partitions, Disk Management is the correct and only appropriate tool, making B the correct answer.

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

The correct answer is C because the symptoms strongly indicate ransomware: files renamed with a new extension, files still unusable after renaming them back, and payment demands in cryptocurrency. Quentin Docter’s Complete Study Guide explains that ransomware commonly encrypts files, renames them with a unique extension, and places ransom instructions for payment. The Mike Meyers/Mark Soper material also states that ransomware encrypts accessible local or network data and demands payment for decryption keys. According to the CompTIA A+ malware-removal procedure, after investigating and verifying malware symptoms, the next step is to quarantine infected systems . Removing the machine from the network prevents the ransomware from spreading to shared drives or other systems. Reimaging and restoring from backup may be required later, and updating/scanning anti-malware is part of remediation, but isolation must happen first.

Least effort with correct access control is achieved by assigning permissions to a group and managing membership, rather than editing permissions user-by-user. Mike Meyers states this as a best practice: “ NTFS permissions are assigned both to user accounts and groups, although it’s considered a best practice to assign permissions to groups and then add user accounts to groups instead of adding permissions directly to individual user accounts. ” This reduces administrative overhead: once the group has the correct rights, adding/removing users is simple.

The CompTIA A+ practice rationale reinforces the same: “ Another best practice is to assign permissions to groups rather than users, and make users members of groups … as they change roles or positions.”

This question’s permission goal (“add,” “edit,” but “prevent deletion”) maps to carefully selected rights (for example, allow read/write/modify for needed actions while explicitly denying delete where appropriate), and the cleanest way is implementing that permission set once on a security group . Mapping drives (A) doesn’t enforce permissions by itself, admin rights (C) is excessive, and per-user permissions (D) is the most work.

Screensaver lockshelp protect unattended workstations.

BIOS passwordsprevent unauthorized changes at startup or during boot.

FromQUENTIN DOCTER - COMPTIA A+ COMPLETE study GUIDE:

“Applying a BIOS password adds a pre-boot security layer. Screensaver locks help protect logged-in sessions during idle times.”

The correct answer is C. Personalization. In Windows, desktop appearance settings such as the background image, colors, themes, lock screen, fonts, Start menu, and taskbar are managed through Personalization. Quentin Docter’s Complete Study Guide explains that right-clicking the Windows desktop and selecting Personalize opens the display/personalization settings, and the Background section is used to select a picture, slideshow, or static color for the desktop. The All-in-One Exam Guide confirms that Personalization settings handle user preferences such as the background picture and interface colors, and the background screen lets the user choose a solid color or picture. Device Manager is used for hardware devices and drivers. Accounts controls user sign-in and account settings. Privacy controls app permissions and data-sharing options. Therefore, Personalization is the correct place to change the desktop background image.

Virtualizationallows the legacy OS to be run in a virtual machine (VM) on top of the newer OS. This method provides backward compatibility without requiring outdated operating systems on physical hardware.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Using virtualization is a preferred method when legacy applications are needed after migrating to newer operating systems. It allows legacy environments to exist securely within a modern OS framework.”

To ensure the authenticity of a downloaded application, the most reliable method is to verify the file’s hash (e.g., SHA256, MD5) against the value provided by the legitimate vendor. If the hash values match, the file has not been altered or tampered with. This verification confirms the integrity and authenticity of the executable.

B. Process IDs are dynamic and not unique to specific software.

C. Running in safe mode doesn’t validate legitimacy—it only runs the app in a minimal environment.

D. File names can be spoofed; matching the name does not prove authenticity.

The correct answer is D. Continuity. Continuity is an Apple ecosystem feature category that allows Apple devices to work together, such as moving activity between devices or integrating nearby Apple hardware. Among the choices, it is the feature most likely to rely on short-range wireless communication such as Bluetooth, often along with Wi-Fi and iCloud. The A+ materials identify Bluetooth as a personal-area-network technology used for nearby device communication, pairing, and synchronization. The Mike Meyers/Mark Soper material also explains that mobile devices commonly expand and communicate wirelessly through Bluetooth with nearby accessories and devices. Terminal is a command-line interface, not a Bluetooth feature. Gestures are touchpad or touchscreen motions used for input. Mission Control is a macOS interface feature for viewing open windows and desktops. Continuity is the only listed feature that strongly depends on communication between nearby Apple devices.

A repeated failure to open Task Manager —a core Windows troubleshooting utility—strongly suggests the system is compromised and critical tools are being interfered with. In malware-response methodology, Quentin Docter emphasizes that the first step is to “identify and verify the malware symptoms” before proceeding to containment and remediation. If Task Manager cannot be launched at all, that behavior itself is a highly suspicious symptom consistent with malicious activity attempting to prevent the administrator from viewing or stopping processes.

Docter also explains that when systems are compromised by a virus or other malware, the threat agent may embed persistent access methods, and in some cases the only way to be sure it’s fully removed is to reinstall the OS—highlighting how deeply malware can integrate and disrupt normal tools.

The other options do not plausibly block Task Manager: a developer application may increase CPU/RAM usage but typically won’t prevent Task Manager from opening; Windows Update set to manual affects patching behavior; and moving the pagefile can affect performance but not usually stop Task Manager from launching.

Operating systems periodically reach a status known as " end of life " (EOL), at which point the developer (e.g., Microsoft, Apple) ceases to provide security updates, patches, or technical support. When this happens, the OS becomes vulnerable and non-compliant with security best practices, which is why organizations typically receive advance notifications from vendors or support teams.

A. Manufacturer support expiration only applies to hardware, not OS patching.

C. Security software may be upgraded or removed, but that does not affect patching the OS itself.

D. The release of a new version doesn’t automatically stop updates for the current version.

This scenario describes a rogue access point — a malicious or unauthorized wireless access point that uses the same SSID as the legitimate network. Users may connect to it unknowingly, which can result in limited network access, data interception, or redirection of traffic. The inability to reach internal file servers supports this being an unauthorized AP with no connection to internal resources.

A. A DNS issue would impact name resolution, not connectivity to file servers directly.

B. VLAN issues generally affect segmentation, not mimic SSID problems.

C. An incorrect IP address could cause connectivity issues, but not in the presence of a malicious AP broadcasting the same SSID.

exFATis the only listed file system that supports both read and write access across Windows, macOS, and Linux (with appropriate drivers). It’s optimized for flash storage and external drives.

FromAll-in-One Exam Guide:

“exFAT is a lightweight file system with cross-platform read/write support, ideal for use on removable drives when compatibility is essential.”

3-D rendering is a graphics-intensive workload, and minimum hardware checks for this type of software commonly fail due to GPU capability (including dedicated vs. integrated GPU support) and VRAM requirements. Quentin Docter explains that application “Display” requirements can include “a graphics processing unit (GPU). A specific GPU may be required if the application will process video or graphics.” He also notes that “VRAM requirements are typically related to applications that are graphic intensive, such as gaming,” which aligns strongly with 3-D rendering workloads.

Mike Meyers’ Lab Manual reinforces that “graphically demanding applications… state specific graphics requirements,” and that CompTIA focuses on “dedicated graphics cards versus integrated ones,” because integrated GPUs are often less capable for demanding graphics tasks. It also reminds that systems with integrated GPUs share RAM with graphics, which can matter when software checks VRAM.

Therefore, the first thing to verify is GPU requirements (B), not USB/NIC/PSU.

BitLocker To Go is a Microsoft encryption feature specifically designed for removable drives such as USB flash drives and external hard drives. It allows users to protect the data on these devices by requiring a password to decrypt the contents, thereby preventing unauthorized access in the event the device is lost or stolen.

A is correct because BitLocker To Go is directly tied to password-protecting removable media.

B and C are unrelated to BitLocker To Go; Secure Boot and VPN encryption are entirely different security layers.

D applies to BitLocker (not BitLocker To Go) and full disk encryption on internal drives using TPM.