Register
Question 1
What should a user check first if their WiFi connection shows limited connectivity?
Correct Answer:
SSID visibility
Explanation:
When troubleshooting limited connectivity issues with a WiFi connection, the first step should be checking the SSID visibility. The SSID, or Service Set Identifier, is the name of the wireless network. If the SSID is not visible, it indicates that the wireless network may be hidden or turned off, which prevents devices from connecting to it. Ensuring that the SSID is broadcasting allows the user to see and connect to the correct network. In scenarios where the SSID is not visible, devices may try to connect to other available networks, leading to limited or no connectivity. By confirming that the SSID is visible, the user can ensure they are attempting to connect to the correct network and diagnose further if issues persist. Checking network cable connections is important for wired connections but may not be applicable in a WiFi troubleshooting context. Similarly, while firewall settings can impact connectivity, they typically do so after a device has connected to the network. Lastly, router placement can affect signal strength and coverage, but it is often not the first factor to check when a device shows limited connectivity. Ensuring the SSID is visible is a direct and immediate step to resolve connection issues.
Question 2
What password practice should a technician implement to secure a private PC in a public workspace?
Correct Answer:
Require authentication on wake-up
Explanation:
Requiring authentication on wake-up is a crucial practice for securing a private PC in a public workspace. This means that when the computer goes into sleep or hibernation mode, it will need a password or some form of authentication to be re-accessed. This effectively prevents unauthorized access to the system when the owner is away from their desk, which is particularly important in a public environment where others can easily approach the unattended device. Implementing this measure significantly enhances security by ensuring that sensitive data remains protected, even in situations where the device is temporarily left unattended. Without this requirement, anyone could simply wake the computer and access potentially sensitive information. This practice is a standard recommendation for security in both personal and professional environments. While the other options might improve security in different contexts, they do not specifically address the immediate risk of unauthorized access when a computer is left unattended in a public area.
Question 3
What best practice could have prevented a corporate network from being infected by a malicious application on a flash drive?
Correct Answer:
Disabling AutoRun
Explanation:
Disabling AutoRun is a key best practice for preventing a corporate network from being infected by malicious applications on a flash drive. When AutoRun is enabled, any media such as a USB flash drive can automatically execute executables stored on it as soon as it is plugged into a computer. This feature can quickly lead to the unintentional propagation of malware without any user interaction, making it easier for malicious software to infect systems. By disabling AutoRun, an organization can ensure that plugged-in flash drives do not automatically launch programs, thereby providing an additional layer of security. This requires users to manually access the contents of the flash drive, giving them an opportunity to inspect files before executing any software, and reducing the risk of malware spreading across the network. Other practices, such as implementing strong passwords, changing default credentials, or removing guest accounts, focus on securing access controls and user accounts, but they do not specifically address the threat posed by malicious files on external drives. While important for overall security, they do not directly mitigate the risk of malware execution from a USB flash drive, making disabling AutoRun the most effective preventive measure in this context.
Question 4
What is an essential practice after removing malware from a user's system?
Correct Answer:
Educating the user
Explanation:
After removing malware from a user's system, educating the user is an essential practice. This step is crucial because it helps the user understand how the malware might have infiltrated their system and what preventative measures they can take in the future. It empowers users by enhancing their awareness of safe browsing habits, recognizing phishing attempts, avoiding suspicious downloads, and maintaining robust security practices, such as using antivirus software and keeping their operating system and applications updated. The knowledge gained through education not only aids the individual but also promotes a culture of cybersecurity awareness, reducing the likelihood of future infections for that user, as well as for the broader network or organization. By fostering a more informed user base, IT professionals can bolster the overall security posture of the systems they manage. Options such as creating a backup, reinstalling the operating system, and running a diagnostic check are all valid actions to consider in the context of system maintenance or recovery, but they do not address the fundamental aspect of preventing future malware infections as effectively as user education does.
Question 5
What type of attacks attempts to overload a server with traffic?
Correct Answer:
Denial of Service (DoS) attack
Explanation:
A Denial of Service (DoS) attack is specifically designed to overwhelm a server with excessive traffic, making it difficult or impossible for legitimate users to access the services provided by that server. This type of attack floods the target with so many requests that it cannot handle the load, leading to service degradation or complete shutdown. In a DoS attack, malicious actors may use various methods to generate fake traffic or send numerous requests to the server. The intent is to exhaust the server's resources, such as bandwidth, memory, or CPU, effectively denying access to real users. This can be particularly damaging for websites and online services, as it can result in loss of business and trust. Other attack types mentioned do not primarily focus on overwhelming servers with traffic. A Man-in-the-Middle attack involves intercepting communication between two parties without their knowledge, while a Phishing attack aims to deceive individuals into providing sensitive information. A Brute Force attack tries to gain unauthorized access by systematically guessing passwords but does not involve overloading a server with traffic. Therefore, the nature of a Denial of Service attack aligns directly with the concept of overloading servers.
Question 1
Exam overview

About this Exam

The CompTIA A+ certification is the industry standard for establishing a career in IT.

This specific practice test focuses on the Core 2 (220-1102) exam, which validates the skills required to support mobile devices, troubleshoot networking and security issues, and manage operating systems (Windows, macOS, Linux, Chrome OS, Android, and iOS).

It’s designed for aspiring IT professionals, help desk technicians, and field service technicians looking to prove their foundational knowledge.

More details

Additional Information

What the Course Entails and Exam Details

The CompTIA A+ Core 2 (220-1102) exam covers several critical domains.

These include Operating Systems (installing, configuring, and maintaining Windows, plus familiarity with other OSs), Security (identifying and mitigating vulnerabilities, managing privacy), Software Troubleshooting (resolving PC and mobile OS issues, and malware removal), and Operational Procedures (best practices for safety, communication, and professionalism).

Candidates will need to demonstrate practical knowledge of command-line tools and scripting basics.


What to Expect in the Final Exam

The official CompTIA A+ 220-1102 exam consists of a maximum of 90 questions.

It features a combination of multiple-choice questions (single and multiple response), drag-and-drop activities, and performance-based questions (PBQs) that test practical skills in a simulated environment.

The exam duration is 90 minutes.

To pass, candidates must achieve a minimum score of 700 (on a scale of 100-900).

No reference materials are allowed during the test.


How to Study and Exam Centers

Effective preparation requires a multi-faceted approach. Start with the official CompTIA A+ study guides and complete thorough review of the exam objectives.

Utilize practice exams: Taking reputable CompTIA A+ Core 2 practice tests is crucial for familiarizing yourself with the question formats (especially PBQs) and identifying knowledge gaps.

Hands-on experience: Set up a lab environment using virtual machines to practice installing and configuring operating systems and troubleshooting security settings.

Where to take the exam: The CompTIA A+ exams are administered globally. Candidates can schedule their tests through Pearson VUE, which offers options for taking the exam in person at an authorized testing center or via online proctoring from the comfort of their home or office.


Job Opportunities from the Course

Earning the CompTIA A+ certification validates your foundational IT skills and opens doors to a variety of entry-level and mid-level IT support roles. Some common job titles include:

  • IT Support Specialist

  • Help Desk Technician

  • Field Service Technician

  • Desktop Support Analyst

  • Junior Network Administrator

  • Associate Systems Administrator

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

0 min

Arizona Security Guard Knowledge Practice Exam

0 min

Certified Professional in Accessibility Core Competencies (CPACC) Practice Exam

0 min

Certified in Healthcare Privacy and Security (CHPS) Practice

0 min

Certiport CyberSecurity Certification Practice Exam

0 min

Certiport Network Security Practice Exam

0 min