CompTIA A+ Practice Test (220-1202)

By linking each asset to a unique user identifier, capturing their role and the assignment date - This is correct. Effective asset management requires detailed documentation that links each asset to the specific user responsible for it. Including their role and the assignment date provides traceability and accountability, ensuring assets are tracked over time and are aligned with organizational roles.

By summarizing all assigned users in a single document without specific asset details - This approach lacks the specificity needed for effective asset management. Without tying users to specific assets, it is difficult to track usage, ownership or accountability.

By listing the user's name and the total number of assets they have access to - While listing the total number of assets might provide a general sense of asset allocation, it fails to document specific asset-user relationships, roles or timelines, which are critical for detailed management and accountability.

By providing a general overview of all users without designating specific assets or assignment timelines - A general overview of users does not provide the necessary detail to track assets effectively. This approach is insufficient for ensuring proper asset management.

Chrome Education Upgrade (formerly called a Chromebook management license) unlocks ChromeOS device management in the Google Admin console. With this upgrade applied to each Chromebook, administrators can push or block apps and extensions, apply hundreds of security policies, and restrict or allow user sign-ins.

Incorrect options:

• Google Workspace provides productivity and collaboration apps; it does not on its own grant full ChromeOS device-level management-an upgrade license is still required.
• CloudReady (now ChromeOS Flex) is an operating-system replacement for non-Chromebook hardware and does not itself provide centralized management.
• Chrome Remote Desktop is a remote-access tool, not a fleet-management platform.

Creating a sandbox virtual machine provides a completely separate guest OS where the developer can install and test the beta software. Because the VM is isolated, any problems are contained, and the VM can be reverted or discarded without impacting the host. Containers share the host kernel, so a kernel-level fault could still affect the system. Dual-booting offers no runtime isolation, and merely taking a snapshot of the host does not prevent the beta software from changing the live OS while it is running.

Configuring the Windows Time service (W32Time) to poll a reliable external NTP server ensures the operating-system clock is automatically corrected at regular intervals, preventing ongoing drift while the PC is powered on. Replacing display drivers, disabling Fast Startup, or clearing the TPM do not affect timekeeping.

Type 1 (bare-metal) hypervisors load directly on a computer's hardware without relying on a traditional host OS. This allows virtual machines to run with minimal overhead and typically provides better performance and security isolation. In contrast, Type 2 hypervisors install on top of a host operating system, while container runtimes and VDI are different virtualization technologies altogether.

Most Bluetooth accessories (such as headsets) are only discoverable while they are in pairing or discovery mode. Until the headset is placed in that mode-often done by holding the power or dedicated Bluetooth button until an LED flashes-it will not broadcast its identifier and will not appear in the phone's device list. Enabling developer options, turning on NFC, or toggling airplane mode do not make the accessory discoverable.

Checking for sufficient storage space is the most logical first step in this situation because insufficient storage can prevent applications from updating, despite the presence of an active internet connection. Clearing the app cache, checking app compatibility, or reinstalling the app might address other issues but aren't typically the first steps if the primary issue is just an update failure.

Windows 11 Home (64-bit) can address up to 128 GB of physical memory. This cap is imposed by the OS edition, not by the 64-bit architecture itself. Higher editions raise the ceiling: Windows 11 Pro and Education allow up to 2 TB, while Enterprise and Pro for Workstations support as much as 6 TB.

The correct answer is 'Outbound rules', as this feature specifically controls the traffic that is allowed to leave the system based on the application.

In contrast, 'Inbound rules' govern incoming traffic, and 'Connection security rules' focus on defining security for connections rather than individual application traffic. Therefore, the 'Outbound rules' option aligns best with regulating application access for network usage.

You can configure and rollback updates in Windows 10 by opening Windows Settings and selecting Update & Security followed by Windows Updates

Rebooting the system is often one of the first and simplest troubleshooting steps in dealing with performance issues. It can clear temporary memory, stop processes that may be consuming resources, and help reset the application environment.

Other options like uninstalling applications might be premature since the user did not recently install any new software. Running a system file check would also come later, as the first step should focus on clearing the current state of the operating system.

A Type 1 hypervisor (bare-metal hypervisor) installs directly on the physical hardware, giving virtual machines direct access to resources and eliminating the performance overhead of a host OS. Type 2 hypervisors run on top of an existing operating system, so they do not meet the performance requirement. A container engine relies on the host OS kernel, and a VDI client simply accesses a remote desktop, so neither provides the desired virtualization layer.

The IT team must provision the new hire's environment in advance. Creating the employee's user accounts and assigning the required hardware (laptop, peripherals, mobile device, etc.) ensures the person can authenticate to company resources and start work immediately. Tasks such as reviewing network performance metrics, scheduling performance appraisals, or decommissioning servers occur in other processes and are not part of a new-user setup checklist.

Windows may load a generic WLAN driver automatically, but many combo cards require a separate Bluetooth driver package. Installing the vendor-supplied Bluetooth driver (or using Windows Update to obtain it) will create the Bluetooth radio entry in Device Manager and allow the OS to activate the radio. Replacing the CMOS battery or disabling Secure Boot will not affect Bluetooth, and changing PCIe slots will not help until the correct driver is installed.

The Principle of Least Privilege states that every user, process, and device should be granted only the minimum rights and permissions necessary to perform required duties. In practice, Team A would receive access only to the resources it needs, but not to Team B's files.

Why the other options are incorrect:

• Shared Account Password Management (SAPM) focuses on securely storing and rotating shared privileged passwords; it does not address limiting normal user access to files.
• Privacy Restrictions is a vague term, not a formal security model for access control.
• Entry Control Roster (ECR) is a physical-security list of people authorized to enter a restricted area and is unrelated to file permissions.

Antistatic bags are used to protect sensitive components like motherboards, processors, memory and more from Electrostatic Discharge (ESD). They should be used when moving these types of components around between rooms or when shipping. An ESD wristband can also protect against ESD but not usable when moving around between areas like different rooms, hallways, etc.

Virtual Desktop Infrastructure (VDI) delivers full, persistent (or non-persistent) desktop operating systems as virtual machines hosted on a hypervisor cluster in the data center. End users connect through a broker over RDP-type protocols, so everything-CPU cycles, memory, and storage-remains on the server. Application virtualization delivers only individual apps, containers package code at the OS-kernel level, and a Type 2 hypervisor runs VMs on top of a client OS rather than on a dedicated host server.

The correct answer is to silence the personal phone or turn it off during the customer interaction. This approach shows professionalism and respect for the customer's time, ensuring that the focus remains on their issue without any personal distractions. Placing the phone on silent or turning it off prevents interruptions and conveys to the customer that they are a priority. The incorrect answers suggest handling personal calls during a customer interaction or discussing personal matters with customers, which diminishes professionalism and may lead to customer dissatisfaction.

Sandbox testing involves setting up an isolated environment that replicates the production setup. This allows you to test new updates, changes, or software without affecting the live environment. Using sandbox testing helps ensure that any issues are identified and resolved before implementing changes in the production environment. Other practices, like performing risk analysis and submitting change request forms, are equally important but come into play at different stages of the change management process.

Disabling Universal Plug and Play (UPnP) on a wireless router can significantly enhance the security of a network. UPnP can be exploited by malware to open ports without a user's knowledge, potentially allowing external threats to penetrate the network. Therefore, disabling it reduces the risks of such vulnerabilities. Changing the SSID does not inherently secure the network—this action just changes the network name. While disabling SSID broadcast may somewhat obscure the network from casual discovery, it is not a robust security measure as SSID can be discovered by more determined attackers using simple tools. Port forwarding/mapping is typically used to allow external devices to access services within the private network and is not a method to enhance network security.