CompTIA A+ Core 2 Certification Exam 220-1202 Practice Test 2

Disabling SSID broadcast stops the network name from appearing in a nearby device's list of available Wi-Fi networks, though the network can still be joined if someone knows the exact name. Encryption standard, admin password, and port forwarding are all separate settings that don't control the SSID's visibility.

Each remote access method carries a distinct security consideration: RDP exposed directly to the internet is a frequent brute-force target and should sit behind a VPN, SSH with password login is vulnerable to credential guessing compared to key-based authentication, unapproved third-party screen-sharing tools bypass IT's normal vetting, and VPN access from personal devices needs posture checks so unmanaged devices don't become a backdoor into the network.

Bias and hallucinations are both well-documented technical limitations of AI tools, directly affecting the accuracy and fairness of generated content, which is exactly what a policy about relying on AI output should flag. Data source labeling, integration complexity, and licensing cost are relevant AI governance topics but are not themselves technical limitations of the tool's output.

PowerShell scripts use the .ps1 file extension and provide a more modern, capable scripting environment than legacy batch files. Batch scripts use .bat, and .vbs and .sh are used for VBScript and shell scripts on other platforms, not modern Windows PowerShell automation.

Actively listening without interrupting, then restating the issue to confirm understanding, de-escalates frustration and shows the customer they're being heard before moving to a solution. Interrupting, deflecting responsibility, or ending the call are all likely to increase the customer's frustration rather than resolve it professionally.

A Material Safety Data Sheet documents the safe handling and disposal requirements for hazardous materials like batteries and toner. An SLA defines service expectations between parties, an AUP governs acceptable use of systems, and an NDA governs confidentiality, none of which cover disposal procedures.

An emergency change is used when a change must be implemented quickly, outside the normal schedule, typically due to an urgent security or operational risk like active exploitation. A standard change is pre-approved and low-risk, a normal change follows the regular review and approval timeline, and a change freeze is a period during which changes are restricted, not a type of change request.

A legitimate antivirus alert on a centrally managed endpoint would appear as a system notification, not inside a browser window, and the management console confirming the device is current and alert-free strongly indicates the browser pop-up is fake and unrelated. The scenario specifically rules out a lapsed subscription or console error, and a BSOD does not present as a browser pop-up.

An incorrect system date or time is a very common cause of widespread certificate warnings, since certificate validity is checked against the system clock, and it explains why only this one workstation is affected while colleagues browsing the same sites see no warnings. An ISP outage would prevent browsing entirely, and hosting provider changes or keyboard layout are unrelated.

Root access removes many of the OS's normal security restrictions, so checking for unauthorized applications and addressing the root/developer-mode access itself, up to and including resetting the device, directly targets the security exposure causing the high traffic and data usage. Wallpaper, autorotate, and the contacts list are unrelated to root-level security exposure.

A full-screen alert tied to browsing a specific site, pushing installation of an unfamiliar cleaner app, is a classic fake security warning designed to trick the user into installing actual malware. This is not how a phone's legitimate built-in security features behave, and it is unrelated to OS updates or battery health.

Many mobile OSs include an aggressive power-saving option that disconnects Wi-Fi while the device sleeps to save battery, matching a pattern where the issue only occurs on this device and only during sleep. A DHCP pool exhaustion would affect multiple devices trying to join, not just this one, and a SIM card issue affects cellular service rather than Wi-Fi.

Since only one app is affected while everything else works normally, the issue is most likely with that app itself, so checking for an update or reinstalling it is the appropriate first, least disruptive step. A factory reset is excessive for a single misbehaving app, and battery replacement or autorotate settings are unrelated to an app failing to launch.

Gradually worsening performance concentrated around disk activity, with normal CPU/RAM usage, points toward a disk health issue such as a failing or heavily fragmented drive; checking S.M.A.R.T. status is the direct next step. Insufficient RAM would typically show elevated memory usage, and GPU drivers and network configuration are unrelated to disk-activity spikes during file operations.

A properly functioning password manager ties saved credentials to the exact domain they were created for and will not autofill them on a different, look-alike domain, directly preventing credential theft on phishing sites. A pop-up blocker, private browsing, and clearing cache don't verify domain identity and wouldn't prevent autofill on a convincing fake site.

Zero-touch deployment uses deployment infrastructure to push an image to many machines automatically with no technician interaction at each device, matching the overnight, large-scale, minimal-interaction requirement. A USB clean install and repair installation both require per-machine interaction, and an in-place upgrade preserves the existing OS rather than deploying a fresh image.

Shredding physically destroys drives into unusable fragments, degaussing uses a strong magnetic field to erase data without necessarily destroying the drive body, erasing/wiping securely removes data so a drive can be reused, and a certification of destruction is the vendor's formal documentation that destruction occurred.

A locator application allows the device to be tracked if lost, and remote wipe allows data to be erased if the device cannot be recovered, directly matching both stated requirements. Content filtering, configuration profiles, and failed login restrictions are all valid mobile security measures but don't address locating a lost device or erasing its data.

Account expiration dates automatically deactivate an account after a set date, limiting the exposure window if offboarding is delayed or missed. A longer password alone doesn't address a lingering active account, and BIOS/UEFI passwords and disabling AutoRun address different risks rather than account lifecycle.

System Restore must be disabled before remediation so that a restore point doesn't preserve a copy of the infection, which could reinfect the system later if a restore is ever performed. Re-enabling System Restore, educating the user, and scheduling future scans all happen after remediation, not before.

Whaling is a targeted phishing attack aimed at a specific high-value individual, often impersonating an executive to pressure another employee into an action like a wire transfer. Shoulder surfing and tailgating are physical-proximity attacks, and an evil twin is a fake wireless access point, none of which match this targeted email scenario.

Ransomware encrypts a victim's files and demands payment for the decryption key, exactly matching the described scenario. Spyware secretly collects information, a keylogger records keystrokes, and a rootkit hides its presence at a system level, none of which encrypt files for ransom.

Storage sync/folder settings keep files current across devices, identity synchronization lets one set of credentials work across connected cloud services, licensing assignment controls which users have paid access, and videoconferencing is one of the core collaboration tool categories cloud productivity suites provide.

grep -r searches recursively through file contents for a matching string, exactly what's needed to locate a hardcoded value. find searches by filename rather than content, and cat only displays a file's contents rather than searching across many files.

FileVault provides full-disk encryption for the startup drive, and Time Machine provides continuous, versioned backups that individual files can be restored from. Spotlight is macOS's search feature, Mission Control manages virtual desktops and open windows, and Continuity links Apple devices together, none of which address encryption or backup.

A VPN creates an encrypted tunnel back to the corporate network, routing traffic securely and making the remote device appear to be on the corporate LAN. WWAN/cellular is an alternate internet source rather than a secure tunnel, a proxy exception bypasses proxy rules for specific traffic, and a metered connection setting only affects data usage limits.

File Explorer Options includes the View tab setting to hide extensions for known file types, directly controlling how filenames are displayed. Indexing Options controls search indexing, Programs and Features manages installed software, and Devices and Printers manages connected hardware.

ipconfig /all displays comprehensive adapter details including MAC address, DNS servers, and DHCP lease information. Ping tests connectivity, netstat shows active connections, and tracert traces the network path, none of which give a full configuration summary.

Event Viewer (eventvwr.msc) records detailed application, security, and system events including timestamps and error codes, making it the right tool to correlate crashes with a specific time window. Task Manager shows current running processes, Disk Cleanup frees space, and Resource Monitor shows real-time usage rather than historical logs.

The Local Group Policy Editor (gpedit.msc) is not included in Windows 11 Home; it is available starting with Pro and above. Pro, Enterprise, and Pro for Workstations all include gpedit.msc.