View Full CompTIA 220-1202 Exam Dumps and Practice Test Dumps.

 

Question 261

Which Windows command can display detailed information about a user’s current network connections and listening ports?

1. hostname
2. netstat
3. gpupdate
4. tasklist

Correct Answer: 2

Explanation

The netstat command provides information about active network connections, listening ports, and related network activity. Technicians can use it when investigating connectivity problems, unexpected connections, or applications that are listening for incoming traffic. Additional command options can provide more detailed information depending on the troubleshooting requirement. A listening port is not automatically evidence of malicious activity because legitimate applications and services commonly require network ports. Technicians should identify the associated application and compare the results with expected system behavior before taking corrective action.

Question 262

Which Windows utility can provide a detailed view of CPU, memory, disk, and network performance?

1. Character Map
2. Notepad
3. Resource Monitor
4. Disk Cleanup

Correct Answer: 3

Explanation

Resource Monitor provides a detailed graphical view of system resource usage, including processor, memory, disk, and network activity. It can help technicians investigate performance problems that require more detail than a basic overview. For example, a technician can examine which processes are generating significant disk activity or consuming available memory. The information should be interpreted alongside the user’s symptoms and normal workload. High resource usage does not automatically indicate a malfunction because demanding applications may legitimately consume substantial system resources during normal operation.

Question 263

A Windows technician wants to identify the exact operating system version and build number. Which utility is suitable?

1. System Information
2. Print Management
3. Disk Management
4. Task Scheduler

Correct Answer: 1

Explanation

System Information provides detailed information about the Windows operating system and installed hardware. It can display the operating system name, version, build information, system model, processor, memory, and other configuration details. This information is useful when checking software compatibility, diagnosing operating-system-specific problems, or confirming whether a required update is installed. Technicians should collect the exact version rather than relying only on a general Windows name because different builds can behave differently. Relevant findings should be documented in the support record when appropriate.

Question 264

Which Windows command can determine the IP address associated with a domain name?

1. route
2. nslookup
3. taskkill
4. chkdsk

Correct Answer: 2

Explanation

The nslookup command is used to query DNS information and can determine whether a domain name resolves to an IP address. It is useful for diagnosing name-resolution problems affecting websites, servers, and internal resources. A technician can compare the result with another DNS server when investigating inconsistent responses. If the name does not resolve, the technician should check DNS configuration, connectivity to the configured DNS server, and whether the domain itself has valid records. Successful resolution alone does not guarantee that the destination service is reachable.

Question 265

Which Windows recovery option is most appropriate for restoring system configuration after a recently installed driver causes instability?

1. Disk Cleanup
2. Storage Spaces
3. System Restore
4. Print Management

Correct Answer: 3

Explanation

System Restore can return supported system configuration information to an earlier restore point created before the problematic driver installation. This can be useful when a recent change causes instability, application failures, or startup problems. System Restore does not function as a complete backup of personal files, so important user data should be protected separately. The technician should select an appropriate restore point and explain the expected result before proceeding. If no suitable restore point exists, driver rollback or another recovery method may be necessary.

Question 266

Which Windows feature allows an administrator to schedule a script to run automatically every day at a specific time?

1. Task Scheduler
2. Event Viewer
3. Device Manager
4. Credential Manager

Correct Answer: 1

Explanation

Task Scheduler allows Windows to execute programs, scripts, and administrative tasks according to configured triggers. A technician can create a task that runs daily at a specified time or in response to another supported event. Scheduled tasks can be useful for backups, maintenance, monitoring, and administrative automation. Because tasks may execute with elevated privileges, technicians should verify their commands, triggers, and security settings carefully. Unfamiliar scheduled tasks should also be investigated because attackers can sometimes use scheduled execution to maintain unwanted activity.

Question 267

A Linux administrator wants to display the amount of available and used memory on a system. Which command is appropriate?

1. du
2. free
3. chmod
4. mount

Correct Answer: 2

Explanation

The Linux free command displays information about system memory, including used, available, and related memory values. It is useful when investigating performance problems, application failures, or systems that appear to be running low on memory. Technicians should interpret Linux memory statistics correctly because cached memory may still be available for reuse by applications when required. Memory usage should therefore be considered alongside process activity and system behavior. If an application consistently consumes excessive memory, additional investigation may be required to identify a configuration or software issue.

Question 268

Which Linux command can display the contents of a text file directly in the terminal?

1. cat
2. chmod
3. ps
4. who

Correct Answer: 1

Explanation

The Linux cat command can display the contents of text files directly in the terminal. It is commonly used for quickly reviewing configuration files, logs, scripts, and other text-based information. For very large files, commands such as less may be more practical because they allow the technician to move through the content interactively. Technicians should be careful when using commands that can modify or overwrite files and should verify the correct file path before working with important system configuration data.

Question 269

Which Linux command can move or rename a file?

1. grep
2. mv
3. df
4. uname

Correct Answer: 2

Explanation

The Linux mv command is used to move files or directories from one location to another and can also rename them within the same file system. Before using the command, technicians should verify the source and destination paths to prevent accidental movement of important files. When a destination already contains a file with the same name, the operation may overwrite it depending on the command options and environment. Administrative permissions may also be required when moving protected system files or directories.

Question 270

Which Linux command can display a file one screen at a time for easier reading?

1. touch
2. less
3. mkdir
4. kill

Correct Answer: 2

Explanation

The less command allows technicians to view large text files one screen at a time rather than displaying the entire file immediately. It is particularly useful when reviewing logs, configuration files, and lengthy command output. Users can move forward and backward through the content and search for specific information. Unlike commands that edit or modify files, less is primarily a viewing utility. Technicians should use appropriate log-filtering commands when necessary to locate relevant entries efficiently in very large files.

Question 271

Which macOS feature provides a searchable index for quickly locating applications, documents, and other content?

1. FileVault
2. Spotlight
3. Keychain Access
4. Migration Assistant

Correct Answer: 2

Explanation

Spotlight is the macOS search feature used to locate applications, documents, settings, and other indexed content quickly. It can help users find files without manually browsing through folders. Technicians may also use Spotlight to locate system utilities or configuration items during support sessions. Search results depend on indexing and system configuration, so missing results may require investigation of indexing status or search settings. Spotlight itself does not provide data protection; security features such as FileVault and appropriate access controls serve different purposes.

Question 272

A macOS technician needs to review system and application messages for troubleshooting. Which utility should be used?

1. Console
2. Calculator
3. Migration Assistant
4. Keychain Access

Correct Answer: 1

Explanation

Console is a macOS utility that provides access to system and application logs. Technicians can use it to investigate errors, warnings, crashes, and other events generated by the operating system or installed applications. Filtering and searching logs can help identify entries related to a particular application or time period. Because logs can contain large amounts of information, technicians should focus on entries that correlate with the reported symptoms. Console data should be interpreted alongside other diagnostics rather than treating every warning as evidence of a serious fault.

Question 273

Which macOS utility can assist with transferring user data from another Mac or supported source?

1. Disk Utility
2. Activity Monitor
3. Migration Assistant
4. Terminal

Correct Answer: 3

Explanation

Migration Assistant helps transfer supported user information, applications, settings, and other data from another Mac or compatible source. It is commonly used when setting up a replacement Mac or moving a user’s environment to a new computer. Before starting a migration, technicians should verify available storage, compatibility, and the existence of appropriate backups. The transfer can take considerable time depending on the amount of data and connection method. Technicians should also confirm that required applications and user files are available after migration.

Question 274

Which mobile security feature can erase managed data from a lost company-owned device?

1. Remote wipe
2. Screen rotation
3. Airplane mode
4. Bluetooth discovery

Correct Answer: 1

Explanation

Remote wipe allows authorized administrators to erase data from a supported lost or stolen device. Organizations commonly manage this capability through mobile device management systems and security policies. It can reduce the risk of sensitive business information being accessed by unauthorized individuals. Before relying on remote wipe, organizations should establish clear authorization procedures and maintain appropriate backups because erased information may not be recoverable from the device. Technicians should also verify device enrollment and management status so that remote security actions function as intended.

Question 275

Which mobile device management feature can prevent users from installing applications from unauthorized sources?

1. Device encryption
2. Application restrictions
3. Remote display
4. Screen timeout

Correct Answer: 2

Explanation

Application restrictions allow administrators to control which applications users can install or run on managed mobile devices. Restricting unauthorized application sources can reduce the risk of malware, data leakage, and unsupported software being introduced into a company environment. MDM policies can also enforce approved application lists or block specific categories of software. Organizations should define these restrictions according to business requirements and security policies. Technicians should document policy changes and verify that essential applications remain available after restrictions are applied.

Question 276

A technician receives a suspicious phone call from someone claiming to be an IT administrator and requesting a user’s login code. What should the technician recognize this as?

1. Vishing
2. Shoulder surfing
3. Dumpster diving
4. Tailgating

Correct Answer: 1

Explanation

Vishing is a social-engineering attack conducted through voice communication, often using impersonation and urgency to persuade a victim to disclose sensitive information. A caller pretending to be an IT administrator and requesting an authentication code is using a common vishing technique. Technicians should verify unexpected requests through trusted communication channels and should never disclose authentication codes simply because the caller appears authoritative. Suspicious calls should be reported according to organizational procedures so that security teams can investigate possible attempts against other employees.

Question 277

Which security control is designed to detect and block malicious software on an endpoint?

1. Disk Cleanup
2. Antivirus or endpoint protection
3. File compression
4. Screen calibration

Correct Answer: 2

Explanation

Antivirus or endpoint protection software is designed to detect, block, quarantine, and sometimes remove malicious software from computers and other supported devices. Modern endpoint security solutions can use signatures, behavioral analysis, cloud intelligence, and other detection techniques. Technicians should keep security software and its detection components updated according to organizational policies. A security alert should not automatically be ignored or dismissed as a false positive without investigation. If malware is confirmed, the technician should follow the organization’s incident-response and containment procedures.

Question 278

A user reports that a browser suddenly redirects searches to unfamiliar websites. What should the technician investigate?

1. Browser hijacking or unwanted extensions
2. Monitor resolution
3. Printer spooler settings
4. Disk partition alignment

Correct Answer: 1

Explanation

Unexpected browser redirects can indicate browser hijacking, malicious software, or an unwanted browser extension. The technician should review installed extensions, browser settings, recently installed applications, and security alerts. Suspicious extensions should not simply be trusted because they appear in the browser interface. The technician should use approved security tools to scan the system and restore legitimate browser settings when appropriate. If the behavior affects multiple users or systems, the issue may require broader security investigation rather than being treated as an isolated browser configuration problem.

Question 279

Which backup strategy is commonly recommended to maintain multiple copies of important data on different types of storage or locations?

1. 1-1-1 strategy
2. 3-2-1 backup strategy
3. 2-0-0 strategy
4. Single-copy strategy

Correct Answer: 2

Explanation

The 3-2-1 backup strategy recommends maintaining at least three copies of important data, using at least two different storage types, with at least one copy kept offsite. The approach reduces the risk that a single hardware failure, theft, disaster, or malware incident will destroy every available copy. Backup schedules should be based on the organization’s recovery requirements, and backups should be tested regularly. Simply creating multiple copies is not enough if the organization cannot successfully restore them when needed.

Question 280

A technician is troubleshooting a customer issue and discovers that a requested fix could affect other users. What should the technician do before making the change?

1. Apply the change immediately
2. Ignore the potential impact
3. Follow change-management and authorization procedures
4. Disable the affected system permanently

Correct Answer: 3

Explanation

A change that could affect multiple users should follow the organization’s change-management and authorization procedures. These procedures can require documenting the proposed change, assessing its potential impact, obtaining approval, scheduling appropriate downtime, and preparing a rollback plan. This reduces the chance that an individual troubleshooting action will create a larger service interruption. Technicians should communicate expected effects to affected users or stakeholders when required. Even technically simple changes can have significant consequences in shared environments, so controlled implementation is important.