View Full CompTIA 220-1202 Exam Dumps and Practice Test Dumps.

 

Question 241

Which Windows command can display a list of currently running processes?

1. tasklist
2. hostname
3. gpupdate
4. route

Correct Answer: 1

Explanation

The tasklist command displays information about processes currently running on a Windows computer. It can help technicians identify active applications and background processes when troubleshooting performance, application failures, or suspicious activity. The output can include process identifiers that can be used with other commands for additional troubleshooting. Technicians should review the process name and context before terminating anything because many Windows processes are essential to system operation. When a process appears unusual, additional investigation should be performed rather than immediately assuming it is malicious.

Question 242

Which Windows command can force a specific process to terminate?

1. whoami
2. taskkill
3. ipconfig
4. nslookup

Correct Answer: 2

Explanation

The taskkill command can terminate a running Windows process using identifiers such as the process ID or image name. It is useful when an application stops responding and cannot be closed through normal methods. Some processes require elevated permissions before they can be terminated. Technicians should confirm the target process carefully because ending a critical Windows process can cause instability or data loss. If the same application repeatedly requires forced termination, the technician should investigate the underlying cause instead of treating task termination as the permanent solution.

Question 243

Which Windows command can display the IP address associated with a hostname through DNS resolution?

1. nslookup
2. tasklist
3. net use
4. chkdsk

Correct Answer: 1

Explanation

The nslookup command queries DNS information and can help determine whether a hostname resolves to an IP address. It is commonly used when troubleshooting website access, internal network resources, or other name-resolution problems. Technicians can compare responses from different DNS servers to identify whether the issue is local or related to a particular DNS service. A successful DNS lookup does not guarantee that the destination service is available. Additional tests, such as ping or application-specific connectivity checks, may still be required.

Question 244

A technician wants to verify whether a Windows computer can reach its default gateway. Which tool is most appropriate?

1. ping
2. format
3. taskkill
4. gpresult

Correct Answer: 1

Explanation

The ping command can be used to test basic IP connectivity between a Windows computer and its default gateway. A successful response indicates that the device can communicate with that gateway at the network layer. If the gateway does not respond, the technician should investigate the network adapter, IP configuration, wireless or wired connection, and local network equipment. Some networks may block ICMP traffic, so a failed ping does not always prove that the gateway is unavailable. Additional network tests should be performed when necessary.

Question 245

Which Windows command checks a disk for file-system errors and can attempt repairs?

1. chkdsk
2. hostname
3. shutdown
4. gpupdate

Correct Answer: 1

Explanation

The chkdsk command checks supported storage volumes for file-system errors and can attempt repairs when appropriate options are used. It can be useful when users experience file-access problems, unexpected system behavior, or signs of storage corruption. Some repair operations may require the volume to be locked or checked during a restart. Technicians should understand that file-system repair is different from recovering physically damaged hardware. Important data should be backed up before significant repair operations whenever possible, especially when a drive may be failing.

Question 246

Which Windows utility allows a technician to view hardware devices and manage their associated drivers?

1. Device Manager
2. Task Scheduler
3. Disk Cleanup
4. Resource Monitor

Correct Answer: 1

Explanation

Device Manager provides a centralized view of hardware devices installed in Windows and their associated drivers. Technicians can use it to identify disabled devices, missing drivers, driver conflicts, and hardware configuration problems. Warning symbols can provide useful clues, but the technician should also review device properties and error information. Drivers should be updated from trusted sources and matched to the correct hardware and operating system. When troubleshooting a recently introduced problem, technicians should consider whether a driver change occurred immediately before the symptoms appeared.

Question 247

Which Windows administrative tool can identify services that are currently stopped, running, or configured to start automatically?

1. Services
2. Disk Management
3. Character Map
4. Paint

Correct Answer: 1

Explanation

The Windows Services console provides information about installed system and application services. Technicians can determine whether a service is running and review its startup configuration. This can be useful when an application depends on a background service that has stopped unexpectedly. However, technicians should avoid disabling unfamiliar services simply to reduce resource usage. Some services are required by Windows or other applications. Before changing a service, the technician should understand its purpose, dependencies, and expected startup behavior and should document significant configuration changes.

Question 248

A technician needs to identify a user’s account name and confirm the account being used during a support session. Which command should be used?

1. whoami
2. ipconfig
3. tracert
4. netstat

Correct Answer: 1

Explanation

The whoami command identifies the account associated with the current Windows session. This can be especially helpful when a technician is working remotely or troubleshooting permissions and needs to confirm which credentials are active. It can prevent confusion when multiple users or administrative accounts exist on the same computer. The command is simple but valuable during access-related troubleshooting. Once the active account is confirmed, the technician can determine whether the account has the permissions required for the task without unnecessarily granting additional privileges.

Question 249

Which Windows feature can automatically save copies of selected personal files for recovery?

1. File History
2. Device Manager
3. Windows Firewall
4. Task Scheduler

Correct Answer: 1

Explanation

File History can automatically maintain copies of selected personal files when it is configured with an appropriate backup destination. It allows users to recover earlier versions of supported files after accidental deletion or unwanted changes. Technicians should verify that File History is actually enabled and that backups are completing successfully before depending on it for recovery. It is not intended to replace every form of system backup. Organizations may use additional backup methods to protect operating-system configurations, applications, and business-critical data.

Question 250

Which Windows feature is designed to prevent unauthorized changes by requesting approval when administrative actions are attempted?

1. User Account Control
2. Disk Cleanup
3. Storage Spaces
4. Task Scheduler

Correct Answer: 1

Explanation

User Account Control, or UAC, helps prevent unauthorized system changes by requesting confirmation when an operation requires elevated privileges. It supports the principle of least privilege by allowing users to operate normally without continuously running applications with administrative permissions. UAC prompts can appear during software installation or other system-level changes. Users should carefully review unexpected prompts instead of approving them automatically. Disabling UAC broadly can reduce protection against unauthorized changes, so technicians should only modify its configuration when there is a legitimate requirement.

Question 251

Which Windows command can shut down or restart a computer from the command line?

1. shutdown
2. mkdir
3. nslookup
4. tasklist

Correct Answer: 1

Explanation

The Windows shutdown command can power off, restart, or perform other supported shutdown-related actions from the command line. It can be useful for remote administration, scripted maintenance, and troubleshooting situations where graphical controls are unavailable. Before restarting or shutting down a user’s system, technicians should warn the user when appropriate and ensure that important work is saved. Automated shutdown commands should be used carefully because unexpected restarts can interrupt applications, updates, or data transfers. Administrative permissions may also be required for certain operations.

Question 252

Which Windows command can update Group Policy settings on a computer without waiting for the normal refresh interval?

1. gpupdate
2. netstat
3. chkdsk
4. taskkill

Correct Answer: 1

Explanation

The gpupdate command requests an update of applicable Group Policy settings on a Windows computer. It is useful when a technician needs newly assigned policies to take effect without waiting for the regular background refresh. Depending on the policy and configuration, some changes may still require a logoff, restart, or additional processing. Technicians should verify that the computer can communicate with the relevant policy source and that the user or computer is within the correct policy scope. Policy results can be reviewed when troubleshooting unsuccessful application.

Question 253

Which Windows tool can identify errors related to applications, drivers, and system components through recorded event logs?

1. Event Viewer
2. Disk Management
3. Task Scheduler
4. File Explorer

Correct Answer: 1

Explanation

Event Viewer provides access to logs generated by Windows and installed applications. These logs can contain warnings, errors, informational events, and other records related to system activity. Technicians can use timestamps and event details to correlate failures with recent changes or recurring problems. Not every warning indicates a serious issue, so entries should be interpreted in context. A useful troubleshooting approach is to compare event records with the user’s symptoms and other diagnostic results rather than relying on isolated events.

Question 254

A user cannot access a shared folder because their account has permission to connect to the share but insufficient permissions on the files. What should the technician review?

1. NTFS permissions
2. Display settings
3. DNS cache
4. Printer drivers

Correct Answer: 1

Explanation

NTFS permissions control access to files and folders stored on NTFS-formatted Windows volumes. When a user accesses a shared folder, both share permissions and NTFS permissions can affect access to network resources. The technician should review the user’s effective permissions and determine whether the requested access is justified. Permissions should follow least-privilege principles rather than being broadly increased. The technician should also verify whether group membership is affecting access. Any permission changes should be documented and performed according to organizational authorization procedures.

Question 255

Which security control requires users to provide more than one authentication factor before gaining access?

1. Multifactor authentication
2. File compression
3. Disk defragmentation
4. Network segmentation

Correct Answer: 1

Explanation

Multifactor authentication, or MFA, requires authentication using two or more distinct factor categories, such as something the user knows, has, or is. For example, a password combined with a security token or biometric factor provides multiple layers of authentication. MFA can reduce the impact of stolen passwords because an attacker may still lack the additional factor. Technicians should follow organizational MFA policies and ensure users understand how to protect authentication devices. MFA should be implemented carefully to maintain both security and reliable account recovery.

Question 256

Which physical security technique involves following an authorized person through a secured entrance without independently authenticating?

1. Tailgating
2. Phishing
3. Spoofing
4. Keylogging

Correct Answer: 1

Explanation

Tailgating occurs when an unauthorized individual follows an authorized person through a controlled entrance without completing the required authentication process. It exploits human behavior rather than a technical vulnerability. Organizations can reduce this risk through security awareness training, access badges, security personnel, controlled doors, and other physical safeguards. Employees should avoid allowing unknown individuals to enter restricted areas simply because they appear to be accompanying someone else. Suspicious attempts should be reported according to the organization’s physical-security procedures.

Question 257

Which type of malware records a user’s keystrokes to capture information such as usernames and passwords?

1. Keylogger
2. Worm
3. Adware
4. Rootkit

Correct Answer: 1

Explanation

A keylogger records keystrokes entered by a user and can potentially capture sensitive information such as usernames, passwords, messages, or financial details. Keyloggers may be implemented through malicious software or, in some cases, physical devices. Technicians investigating suspected keylogging should follow incident-response procedures, isolate affected systems when appropriate, and avoid entering additional sensitive credentials until the system is considered safe. Endpoint security tools, software updates, least privilege, and user awareness can reduce the risk of successful keylogging attacks.

Question 258

Which secure disposal method is most appropriate for a storage drive that contains highly sensitive information and will no longer be reused?

1. Physical destruction
2. Standard file deletion
3. Moving files to the recycle bin
4. Renaming the drive

Correct Answer: 1

Explanation

Physical destruction can be appropriate when a storage device containing highly sensitive information is being permanently retired and will not be reused. Simply deleting files or emptying the recycle bin does not necessarily remove recoverable data. Organizations should follow established media-disposal policies and use approved destruction procedures or certified disposal services when required. The chosen method should match the sensitivity of the information and the future use of the device. Disposal activities should also be documented to provide accountability and demonstrate that sensitive media was handled properly.

Question 259

A technician needs to verify whether a computer’s storage drive has enough free space for a major software installation. Which tool can provide this information quickly?

1. File Explorer
2. Character Map
3. Task Scheduler
4. Event Viewer

Correct Answer: 1

Explanation

File Explorer can display the available and used storage capacity of connected drives. Before installing software, technicians should verify that sufficient free space exists on the required volume. Low disk space can cause installation failures, application crashes, update problems, and degraded system performance. If space is insufficient, the technician should identify unnecessary data carefully and consider approved cleanup procedures. Important user files should never be deleted simply to create space without verifying their purpose and confirming that appropriate backups are available.

Question 260

Which professional practice helps protect a customer’s privacy during technical support?

1. Access only information necessary for the support task
2. Browse unrelated personal files
3. Copy customer data to a personal device
4. Share account details with other users

Correct Answer: 1

Explanation

Technicians should access only the information necessary to diagnose or resolve the customer’s reported problem. Avoiding unrelated personal files protects privacy and reduces the risk of unauthorized disclosure. Customer data should not be copied to personal devices or shared with people who do not have a legitimate business need. Technicians should follow organizational privacy, security, and data-handling policies throughout the support process. When sensitive information must be accessed, the technician should explain the reason and limit exposure to the minimum required.