View Full CompTIA 220-1202 Exam Dumps and Practice Test Dumps.

 

Question 381

Which Windows tool can help determine whether a specific application is generating repeated system errors?

1. Disk Management
2. Event Viewer
3. Character Map
4. Credential Manager

Correct Answer: 2

Explanation

Event Viewer records information about system, application, security, and other Windows events. A technician can use application logs to investigate repeated crashes, failures, warnings, or other unexpected behavior. Events can include timestamps, sources, severity levels, and identifiers that help correlate a problem with a particular application or service. The technician should focus on entries that match the reported symptoms and time of occurrence rather than treating every warning as a serious problem. Event Viewer is especially useful when troubleshooting intermittent application failures.

Question 382

Which Windows command can display the path packets take toward a remote destination?

1. tracert
2. tasklist
3. ipconfig
4. whoami

Correct Answer: 1

Explanation

The Windows tracert command identifies the network hops between the local computer and a specified destination. It can help technicians determine where connectivity becomes delayed or fails along a route. Each hop generally represents a router or other Layer 3 device encountered by packets. Asterisks in the output do not always indicate a network failure because some devices intentionally suppress responses. Technicians should compare traceroute results with other connectivity tests and understand the expected network path before concluding that a particular hop is malfunctioning.

Question 383

A user reports that Windows cannot install an update because insufficient storage is available. Which action is appropriate?

1. Increase screen resolution
2. Remove unnecessary files using approved cleanup methods
3. Disable the keyboard
4. Change the computer hostname

Correct Answer: 2

Explanation

Insufficient storage can prevent Windows updates from downloading, extracting, or installing required files. A technician should first determine which drive is low on space and identify unnecessary files that can be safely removed. Windows storage-management and cleanup tools can help remove temporary data and other unnecessary content. Important user files should not be deleted simply to create space. The technician should also consider organizational retention requirements and verify that adequate free space remains after cleanup. If storage remains insufficient, additional approved storage options may be necessary.

Question 384

Which Windows utility can help identify programs and features installed on a computer?

1. Apps and Features
2. Task Scheduler
3. Resource Monitor
4. Disk Management

Correct Answer: 1

Explanation

Windows Apps and Features provides a location for viewing and managing installed applications and supported system components. Technicians can use it when troubleshooting software problems, removing unwanted programs, or checking whether a particular application is installed. Depending on the Windows version, the interface may also provide options for modifying, repairing, or uninstalling supported applications. Before removing software, technicians should verify that it is not required by another application or organizational workflow. Software removal should follow approved procedures, particularly on managed business computers.

Question 385

Which security control helps protect stored data if a laptop is stolen?

1. Disk encryption
2. Screen brightness
3. Printer sharing
4. Browser history

Correct Answer: 1

Explanation

Disk encryption protects data stored on a computer by transforming it into an encrypted form that requires appropriate authentication or recovery information to access. This is particularly important for laptops because portable devices can be lost or stolen. Windows systems may use BitLocker, while macOS systems can use FileVault. Encryption does not prevent the physical theft of the device, but it can reduce the risk of unauthorized access to stored information. Technicians should ensure that recovery information is protected and that encryption status is verified according to organizational requirements.

Question 386

Which Windows security feature is designed to encrypt an entire supported volume?

1. Windows Sandbox
2. BitLocker
3. Task Scheduler
4. System Restore

Correct Answer: 2

Explanation

BitLocker is a Windows volume-encryption technology designed to protect data stored on supported drives. When properly configured, it can help prevent unauthorized access to information if a storage device is removed or a computer is lost. BitLocker relies on appropriate authentication and recovery mechanisms, so recovery information should be protected carefully. Technicians should verify encryption status and follow organizational procedures for key recovery. Encryption should not be confused with backup because encrypted data can still be lost through deletion, hardware failure, or corruption without a separate backup.

Question 387

Which type of attack attempts to overwhelm a service or network resource with excessive traffic or requests?

1. Credential stuffing
2. Denial-of-service
3. Shoulder surfing
4. Tailgating

Correct Answer: 2

Explanation

A denial-of-service attack attempts to make a system, service, or network resource unavailable by overwhelming it with traffic, requests, or other resource-consuming activity. The target may experience slow performance or become unable to serve legitimate users. Technicians responding to suspected denial-of-service activity should follow incident-response procedures and coordinate with appropriate network or security personnel. Possible responses can include traffic filtering, rate limiting, upstream assistance, and investigation of affected systems. The exact response depends on the organization’s infrastructure and security controls.

Question 388

Which type of malware secretly records a user’s keystrokes?

1. Worm
2. Keylogger
3. Adware
4. Rootkit

Correct Answer: 2

Explanation

A keylogger is software or hardware designed to capture keystrokes made by a user. Attackers can use keyloggers to collect passwords, messages, financial information, or other sensitive data. Some keyloggers operate as malicious software, while specialized hardware can also capture keyboard input. If a keylogger is suspected, the technician should follow the organization’s incident-response process rather than simply deleting one suspicious file. The system may require isolation, security scanning, credential resets, and further investigation to determine how the compromise occurred.

Question 389

An attacker watches a user type a password while standing nearby. What technique is being used?

1. Shoulder surfing
2. Smishing
3. Vishing
4. Spoofing

Correct Answer: 1

Explanation

Shoulder surfing occurs when an attacker observes a person entering sensitive information, such as a password, PIN, or authentication code. It can happen in offices, public transportation, airports, cafés, or other areas where screens and keyboards are visible. Users can reduce this risk by positioning screens carefully, using privacy filters where appropriate, and avoiding entering sensitive information when unauthorized individuals are nearby. Technicians should include physical security awareness in user guidance because strong passwords alone cannot prevent information from being observed directly.

Question 390

Which social-engineering technique involves impersonating a trusted organization through email to obtain credentials?

1. Tailgating
2. Phishing
3. Dumpster diving
4. Shoulder surfing

Correct Answer: 2

Explanation

Phishing is a social-engineering technique in which attackers use fraudulent messages to trick users into revealing information, opening malicious files, or visiting deceptive websites. Attackers commonly impersonate banks, employers, delivery companies, or other trusted organizations. Users should inspect unexpected messages carefully and avoid clicking suspicious links or attachments. They should verify important requests through trusted communication channels. Technicians can support phishing resistance through security awareness training, email filtering, multifactor authentication, endpoint protection, and clear procedures for reporting suspicious messages.

Question 391

Which Windows feature can restrict an application from making unauthorized network connections?

1. Windows Defender Firewall
2. File History
3. Disk Management
4. System Restore

Correct Answer: 1

Explanation

Windows Defender Firewall uses rules to control network traffic entering or leaving a Windows computer. Rules can be configured according to applications, ports, protocols, addresses, and network profiles. If an application unexpectedly communicates across the network, a technician can review its firewall rules and determine whether the traffic is authorized. Disabling the firewall entirely is generally not an appropriate troubleshooting shortcut because it removes an important security control. Technicians should instead identify the required traffic and configure a narrowly scoped rule when authorized.

Question 392

Which principle requires a technician to obtain permission before accessing a customer’s private files during troubleshooting?

1. Data minimization
2. Authorized access
3. Open administration
4. Shared ownership

Correct Answer: 2

Explanation

Authorized access means technicians should access customer or organizational data only when they have appropriate permission and a legitimate support requirement. During troubleshooting, technicians may encounter personal files, credentials, documents, or other sensitive information that is unrelated to the issue. They should avoid opening or copying such information unnecessarily. Remote-support sessions should use approved tools and documented authorization. Following these practices protects privacy, maintains customer trust, and reduces the risk of inappropriate data exposure while still allowing technicians to perform legitimate support activities.

Question 393

Which backup approach provides a complete copy of selected data at the time the backup is performed?

1. Incremental
2. Differential
3. Full
4. Transactional

Correct Answer: 3

Explanation

A full backup creates a complete copy of the selected data during each backup operation. Because each full backup contains the complete dataset, restoration can be straightforward compared with methods that rely on multiple backup sets. The trade-off is greater storage consumption and potentially longer backup times. Organizations may schedule full backups periodically and combine them with incremental or differential backups between full operations. Technicians should verify backup completion and perform recovery testing because the existence of backup files alone does not guarantee that the required data can be restored successfully.

Question 394

Which Windows feature can restore system configuration to an earlier point without normally removing personal documents?

1. System Restore
2. Disk Cleanup
3. Storage Spaces
4. Print Management

Correct Answer: 1

Explanation

System Restore can return supported Windows system settings, drivers, registry information, and certain installed-program configurations to an earlier restore point. It is useful when a recent software installation, driver change, or configuration modification causes system instability. System Restore is not intended to function as a replacement for file backups because personal documents are generally not restored through this process. Technicians should review available restore points and explain the potential impact before proceeding. Recovery actions should also be documented when performed on managed organizational systems.

Question 395

Which Windows command can display the current user’s security identity?

1. route
2. whoami
3. tracert
4. ipconfig

Correct Answer: 2

Explanation

The whoami command identifies the user account associated with the current Windows command session. This is useful when a technician needs to confirm whether commands are being executed under a standard user, administrator, or another account context. Incorrect account assumptions can lead to permission-related troubleshooting errors. Technicians should verify the active identity before performing administrative operations and should use approved elevation methods when necessary. The command can also provide useful information during remote support when the technician needs to confirm the current security context.

Question 396

Which Linux command can display the contents of a file one screen at a time?

1. less
2. chmod
3. mkdir
4. chown

Correct Answer: 1

Explanation

The Linux less command allows technicians to view text one screen at a time and navigate through larger files without displaying the entire file at once. It is useful for examining logs, configuration files, and command output that may contain many lines. Unlike simply printing an entire file to the terminal, less provides navigation controls that make searching and reviewing information easier. Technicians should still be cautious when viewing sensitive files, particularly during remote sessions, and should avoid unnecessarily copying confidential information into tickets or messages.

Question 397

Which mobile feature can automatically synchronize user data with an online service?

1. Cloud synchronization
2. NFC
3. GPS
4. Bluetooth discovery

Correct Answer: 1

Explanation

Cloud synchronization allows supported mobile applications or operating systems to keep selected data synchronized with an online service. Depending on the platform and application, synchronized information may include contacts, photographs, documents, settings, or application data. Technicians should verify which data is being synchronized and whether the account is authorized for organizational information. Cloud synchronization is not automatically equivalent to a complete backup because available retention, version history, and recoverability vary by service. Organizations should define approved cloud services and data-handling requirements.

Question 398

A technician needs to document the steps taken to resolve a user’s technical problem. Where should the information normally be recorded?

1. Personal notes only
2. The support ticket
3. A public social-media post
4. An unrelated application

Correct Answer: 2

Explanation

Technical actions, findings, and resolution details should normally be documented in the appropriate support ticket or service-management system. Good documentation creates a record of the symptoms, troubleshooting steps, changes made, and final resolution. It can help another technician continue the investigation if the issue returns and can support organizational reporting and accountability. Sensitive information such as passwords should not be placed in tickets. Documentation should be factual, concise, and relevant to the incident so that future technicians can understand what occurred.

Question 399

Which safety practice helps protect electronic components from electrostatic discharge during hardware service?

1. Use an ESD wrist strap
2. Work on a carpeted floor
3. Touch component contacts directly
4. Place components on fabric

Correct Answer: 1

Explanation

An ESD wrist strap helps reduce the risk of electrostatic discharge damaging sensitive electronic components during hardware service. The strap is used as part of an appropriate ESD-control procedure and should be connected according to the equipment and workplace requirements. Technicians should also handle components by appropriate edges, use suitable antistatic surfaces, and follow manufacturer safety instructions. Static damage may not always produce an immediate visible failure, making preventive measures important. Proper ESD practices help protect memory modules, processors, storage devices, expansion cards, and other components.

Question 400

A technician is preparing to make a significant configuration change on a production computer. What should be done before implementation?

1. Make the change without documentation
2. Disable all security controls
3. Follow the approved change-management process
4. Delete the existing configuration

Correct Answer: 3

Explanation

Significant changes to production systems should follow the organization’s approved change-management process. This typically involves documenting the proposed change, assessing its potential impact, obtaining appropriate approval, scheduling the work, and preparing a rollback or recovery plan. Following this process reduces unexpected service interruptions and makes troubleshooting easier if the change produces an unintended result. Technicians should not bypass established controls simply because a change appears straightforward. After implementation, the result should be verified and the change record updated with the outcome and any relevant observations.