CompTIA A+ Practice Test (220-1102)

The windows command line utility, pathping combines the functions of the commands tracert and ping.

The correct answer is 'List of all departments that use email services.' When upgrading a critical system like an email server, it's essential to identify and document all affected departments or users. This information helps in assessing the scope of the change, planning for potential disruptions, and ensuring proper communication with all stakeholders.

Windows 10 Pro, Enterprise, and Pro for Workstations editions all support joining a domain, using RDP, and BitLocker data encryption. However, the question asks for the 'best' edition considering the organization's needs. Among these editions, Windows 10 Pro is typically the most suitable choice for businesses that require these features without the additional advanced features (such as DirectAccess, AppLocker, etc.) and cost associated with the Enterprise edition. Windows 10 Home does not support these features, making it unsuitable for the described needs. Pro for Workstations offers additional support for high-end hardware which may be unnecessary for typical business deployments, so it's not the best fit if the organization doesn't have specialized hardware requirements.

Disabling Universal Plug and Play (UPnP) on a wireless router can significantly enhance the security of a network. UPnP can be exploited by malware to open ports without a user's knowledge, potentially allowing external threats to penetrate the network. Therefore, disabling it reduces the risks of such vulnerabilities. Changing the SSID does not inherently secure the network—this action just changes the network name. While disabling SSID broadcast may somewhat obscure the network from casual discovery, it is not a robust security measure as SSID can be discovered by more determined attackers using simple tools. Port forwarding/mapping is typically used to allow external devices to access services within the private network and is not a method to enhance network security.

The 7 steps of the malware removal process are:

1. Identify and research malware symptoms
2. Quarantine the infected systems
3. Disable System Restore (if Windows OS)
4. Remediate the infected systems
5. Schedule scans and run updates,
6. Enable System Restore and create a restore point (if Windows OS)
7. Educate the end-user.

rmdir - This is correct. The rmdir command (short for remove directory) is used in the Windows command line to delete a directory. It is specifically designed for this purpose and will successfully remove an empty directory.

del - This is incorrect. The del command is used to delete one or more files, not entire directories. Attempting to use it on a directory will result in an error.

move - This is incorrect. The move command is used to relocate or rename files and directories, but it does not delete them.

chkdsk - This is incorrect. The chkdsk (Check Disk) command is a utility used to scan for and repair file system errors on a disk drive. It does not remove directories.

On Linux and Unix systems the ls commands lists the contents of the current directory. This includes both files and subdirectories by default.

You should assume the user's login and PC are compromised. Its possible that the PC has malware that was used to send the emails, steal the user's password or that only the account credentials were compromised and the PC is not infected. Until you can determine how the credentials were compromised, you should assume anything that belongs to the user is unsafe.

Quarantining the infected systems is essential because it prevents the malware from spreading to other devices or compromising additional data. By isolating the infected system, you can safely analyze and remediate the infection.

Restarting the computer may not specifically address the malware problem and could allow it to spread further. Removing suspected infected files without proper assessment can lead to loss of important data, while updating software does not directly address the immediate risk posed by the existing malware.

Because this is a non-domain (local) user account the Local Security Policy is the cause of the issue. Accessing the policy to determine account requirements will solve the problem.

Running an in-place repair installation (also called a repair upgrade) from Windows installation media reinstalls the core Windows files, boot components, and registry hives while offering the option Keep personal files and apps. Selecting this option replaces the missing or corrupted system files yet leaves the user's data, applications, and settings untouched, restoring the computer to a bootable, functional state.

Startup Repair or SFC can sometimes fix boot problems, but either may fail if multiple protected files are gone. Re-imaging would certainly work but would wipe applications, causing additional downtime.

The /r switch will locate bad sectors and recover the information it can from the drive.

Verifying that NFC is enabled on the device is crucial because if NFC is turned off, the device cannot communicate with nearby NFC-enabled devices.

Other options, like ensuring the screen is on or restarting the device, are also valid troubleshooting steps, but they do not address the fundamental issue of whether the feature is active. Ensuring the option is turned on is typically the first step in resolving connectivity issues in this scenario.

Preboot Execution Environment, or PXE, allows you to image PC's from a central server containing a client image.

Isolating the affected workstation from the network by disconnecting it or isolating its network access is crucial as this stops the malware from spreading to other systems and allows the technician to safely analyze and mitigate the infection. While informing the security team or documenting the incident are important steps, they do not prevent the malware from potentially spreading to other networked systems. Running antivirus scans should occur after the system has been isolated to prevent interference or additional spreading during the scan process.

The message usually appears when the firmware cannot find a bootable operating system on the device at the top of its boot list. If the BIOS/UEFI boot order is set to start from a USB stick or network device that does not contain Windows, or if the internal drive is listed after those devices, the firmware will fail to load the OS and display the error. Correcting the boot sequence so that the internal SSD/HDD is first typically resolves the problem. The other options do not prevent the firmware from locating boot files during the POST phase.

The correct answer is Python (.py). Python is a versatile, cross-platform scripting language that can effectively handle complex tasks on both Windows and Linux systems.

Python offers several advantages for this scenario:

1. Cross-platform compatibility: Python scripts can run on both Windows and Linux with minimal modifications.
2. Rich library ecosystem: Python has extensive libraries for system information gathering, file operations (for backups), and executing system commands (for updates).
3. Ease of use: Python's syntax is relatively easy to learn and maintain, which is beneficial for a junior technician.
4. Powerful capabilities: Python can handle complex operations required for system information gathering, backups, and updates.

While .bat files are useful for Windows automation, they are not cross-platform. .sh scripts are primarily for Unix-like systems and wouldn't work natively on Windows. .js (JavaScript) could potentially be used with Node.js, but it's not as commonly used for system-level tasks and may require additional setup.

Python's versatility makes it the ideal choice for creating a single script that can perform complex, cross-platform tasks efficiently.

Configuring MAC Filtering will only allow approved MAC Addresses to connect to the router. This is the BEST option of those given, CompTIA questions are often worded like this. In reality the best option would be to change the WiFi password and verify the encryption settings first, but this was not an option.

When incremental backups are used changes are saved in increments. After the full backup, subsequent backups only include the changes since the last incremental backup. This makes backups smaller and faster.

Port Security also known as MAC Filtering is used to restrict which devices can physically connect to the network. This is done by whitelisting which MAC addresses (the physical address of a Networking Interface Card (NIC) are permitted on the network. It is most commonly done where a network port like an RJ-45 is publicly accessible like in an office waiting area.