CompTIA A+ Core 2 Certification Exam 220-1202 Practice Test 5

After confirming symptoms, the infected system is isolated (quarantined) to prevent further spread, System Restore is disabled so it doesn't retain an infected restore point, the malware is then removed, and finally System Restore is re-enabled with ongoing scans scheduled to catch any recurrence.

Whether customer data submitted to an AI tool stays private or is used to train a public model is specifically a private vs. public data handling concern. Bias concerns unfair skew in outputs, hallucinations concern fabricated information, and a plagiarism policy concerns content originality, none of which address data handling and training consent.

WinRM (Windows Remote Management) is designed specifically to allow remote PowerShell command execution and management without a graphical session. RDP and VNC both provide graphical desktop sessions rather than command-line-only management, and SPICE is used for remote access to virtual machine consoles rather than PowerShell administration.

.sh is the standard file extension for shell scripts on macOS and Linux, both of which share a Unix-based shell environment. .ps1 and .bat are Windows-specific scripting extensions and wouldn't be the natural choice on macOS.

Each category covers a distinct kind of protected or licensed data: PII includes personal identifiers like an address or government ID, healthcare data includes medical diagnosis and treatment records, payment card information includes card numbers used in transactions, and an open-source license governs how freely distributed source code can be reused.

A standard change is used for routine, pre-approved, low-risk updates like this cosmetic wiki edit, avoiding unnecessary full review overhead. An emergency change is for urgent risk situations, a normal change involves the full review process for higher-impact changes, and a change freeze exception is a special case during a restricted period, not a change type for routine work.

Redirection that only occurs when clicking search results, while direct URL navigation works fine, points to a malicious extension or hijacker specifically intercepting search-result clicks rather than a general network or certificate problem. A failing cable would affect all traffic, not just search clicks, and SSL certificate issues or printer driver conflicts are unrelated to this specific redirect pattern.

Files being altered or renamed combined with fake alerts from an unrecognized program strongly indicates an active malware infection rather than legitimate software behavior. A real antivirus update wouldn't rename user files as part of normal operation, and a corrupted profile or failing keyboard wouldn't cause both file tampering and fake security alerts together.

Restoring the device out of its jailbroken state removes the underlying vulnerability that allows unofficial app installs without warnings, and checking for and removing unauthorized applications directly addresses the immediate risk and the data usage spike. Flashlight app settings, ringtone defaults, and saved Wi-Fi networks are unrelated to a jailbreak or its security consequences.

Many free, official app-store games use aggressive built-in advertising as their monetization model, and ads confined to that one app, downloaded from an official source, point to the app's own ad behavior rather than malware. A hidden unrelated malicious app would typically not confine its ad behavior to just one specific app's interface, and OS updates or brightness sensors don't explain app-specific ad volume.

Since storage and connectivity are already confirmed fine, a partial download failure often points to a corrupted app store cache or an outdated app store client itself, making that the next logical thing to check. Screen calibration, Bluetooth, and SIM card issues are unrelated to app store download failures.

A BSOD that occurs specifically when one USB device is used strongly points to that device's driver as the cause, since a faulty or incompatible driver can crash the system when the hardware is active. Power supply, unrelated update history, and monitor cables wouldn't explain a crash tied specifically to using one USB peripheral.

A password expiration policy forces periodic password changes, directly addressing passwords that have never been updated in years. Account lockout addresses repeated failed login attempts, restricting login times limits when an account can be used, and disabling the guest account addresses a different, unrelated risk.

exFAT supports individual files larger than 4GB, unlike FAT32, while remaining broadly compatible with Windows and many FAT-aware devices like cameras. FAT32 caps individual file size at 4GB, NTFS is not universally supported by older FAT-only camera equipment, and ext4 is Linux-native rather than broadly cross-compatible with camera hardware.

Leaving an enticingly labeled USB drive somewhere it will be found and plugged in out of curiosity is a classic baiting technique that relies on curiosity to get a victim to introduce malicious media into a system. Vishing is phone-based, tailgating is physical entry-following, and shoulder surfing is visually observing credentials being entered.

A keylogger specifically records keystrokes, matching the first finding, and spyware covers broader covert monitoring like webcam and screen activity, matching the second finding. Adware displays unwanted ads, a cryptominer consumes CPU/GPU resources, and a boot sector virus infects the boot process, none of which match silent keystroke logging or covert monitoring.

AES is the encryption algorithm used by both WPA2 and WPA3 to protect wireless data, which is why the migration is mainly about authentication and protocol improvements rather than swapping out the core encryption algorithm. TKIP was used with the original WPA and is considered weaker, and WEP/RC4 are older, insecure standards not used by WPA2/WPA3.

EFS encrypts individual files and folders tied to a specific user's credentials, so even with physical drive access, the files remain unreadable without proper authentication, while still allowing normal access when the correct user is logged in. BitLocker encrypts the whole drive rather than per-user files, NTFS permissions alone don't encrypt data, and the firewall controls network traffic rather than file encryption.

Motion sensors detect movement within a space and can trigger an alert even if a door sensor or alarm isn't tripped directly, matching the after-hours detection requirement. An access control vestibule controls entry flow, a badge reader authenticates at the door, and equipment locks secure specific items rather than detecting movement in a room.

Personalization settings control taskbar elements like the search box, and Update and Security's active hours setting prevents automatic restarts during specified business hours, directly matching both requirements. Ease of Access, Time and Language, and Network and Internet don't control taskbar appearance or update restart timing.

gpupdate refreshes Group Policy settings on demand, and adding /force reapplies all policies immediately rather than waiting for the standard refresh interval. This differs from gpresult, which only reports on currently applied policy rather than refreshing it.

Changing a service's startup type to Disabled in the Services management console, or the Services tab, prevents it from starting at every boot going forward, not just for the current session. The Startup tab controls login applications rather than services, Disk Cleanup frees storage space, and Resource Monitor only displays current usage.

Windows 11 Pro supports domain join and Group Policy application at a lower licensing cost than Enterprise, without requiring the extra features Enterprise or Pro for Workstations provide. Home doesn't support domain join or Group Policy at all.

A repair installation reinstalls or repairs Windows system files while preserving existing user data and installed applications, directly matching the requirement to fix the OS without a full wipe. A clean install erases everything, image deployment overwrites with a different reference image, and multiboot setup manages multiple separate OS installations rather than repairing one.

Since the installer is only on physical media and the target machines lack optical drives, converting the DVD to a mountable ISO file, a documented distribution method, solves the immediate deployment problem. RAM requirements, OS compatibility, and hardware tokens are separate considerations that don't address the missing optical drive issue.