View Full CompTIA 220-1202 Exam Dumps and Practice Test Dumps.
Question 281
Which Windows tool can be used to manage local user accounts and groups?
- Disk Management
- Local Users and Groups
- Resource Monitor
- Performance Monitor
Correct Answer: 2
Explanation
Local Users and Groups provides administrative controls for managing accounts and groups on supported Windows systems. A technician can use it to create or disable local accounts, change membership, and configure certain account properties. Group membership can determine which permissions a user receives when accessing system resources. Technicians should follow the principle of least privilege when assigning users to groups and should avoid granting administrative membership unless it is genuinely required. Changes to user accounts should also be documented according to organizational support procedures.
Question 282
Which Windows command can force a computer to shut down after a specified period?
- route
- shutdown
- whoami
- hostname
Correct Answer: 2
Explanation
The Windows shutdown command can shut down or restart a computer and can also support delayed actions through appropriate options. It can be useful for administrative tasks, maintenance windows, or remote system management. Before initiating a shutdown, technicians should verify that users are aware of the action and that important work has been saved. An unexpected shutdown can cause data loss or interrupt services. Technicians should use the command carefully, especially on shared systems or servers where other users may depend on active services.
Question 283
Which Windows utility can repair component-store corruption that may prevent system files from being repaired normally?
- DISM
- Notepad
- Paint
- Disk Cleanup
Correct Answer: 1
Explanation
Deployment Image Servicing and Management, or DISM, can service and repair Windows images and the component store. It is useful when corruption affects the Windows component store and prevents tools such as System File Checker from successfully replacing damaged system files. A technician may use an appropriate DISM repair operation before running SFC again. The technician should review command output for errors and ensure that required repair sources are available. Repair procedures should be performed carefully because operating-system changes can affect system stability.
Question 284
Which Windows feature allows a user to return to a previous version of certain system settings without restoring personal documents?
- Storage Spaces
- System Restore
- Print Management
- Character Map
Correct Answer: 2
Explanation
System Restore can return supported system files, drivers, registry settings, and installed-program configuration to an earlier restore point. It is designed primarily for system configuration recovery rather than restoring personal documents such as photographs or user-created files. This distinction is important when choosing a recovery method. If a user accidentally deletes an important personal document, a backup or file-recovery solution may be more appropriate. Before performing System Restore, technicians should review the available restore points and explain the potential effect on recently installed software or drivers.
Question 285
Which Windows feature can restrict an application from communicating through specific network connections?
- Windows Defender Firewall
- Disk Management
- Task Scheduler
- System Information
Correct Answer: 1
Explanation
Windows Defender Firewall can control network traffic based on configured rules, applications, ports, profiles, and connection characteristics. It can help prevent unauthorized network communication while allowing legitimate services to operate. When troubleshooting an application that cannot connect, a technician should check firewall rules before disabling the firewall entirely. Temporarily turning off security controls can expose a system to unnecessary risk. A better approach is to identify the required traffic and create or modify an appropriate rule according to organizational security policy.
Question 286
A Windows system repeatedly crashes immediately after a newly installed driver is introduced. What should the technician try first?
- Format the entire drive
- Remove all user accounts
- Roll back the driver
- Replace the monitor
Correct Answer: 3
Explanation
Rolling back the driver is an appropriate troubleshooting step when system instability begins immediately after a driver update or installation. Windows can restore the previous driver version when a compatible earlier version is available. This approach targets the suspected cause without unnecessarily changing unrelated system components. The technician should document the driver version involved and verify whether the system becomes stable after the rollback. If rollback is unavailable, the technician may need to obtain a known-compatible driver from an approved source.
Question 287
Which command-line tool can display the current Windows user account name?
- netstat
- whoami
- tracert
- nslookup
Correct Answer: 2
Explanation
The Windows whoami command displays information about the account currently being used to run the command. It is useful when a technician needs to confirm the current security context, especially during remote support or administrative troubleshooting. Knowing the active account can help explain why a user can access one resource but not another. If the account lacks required permissions, the technician should follow approved elevation procedures rather than sharing administrator credentials. This supports least privilege while providing accurate information during troubleshooting.
Question 288
Which Windows utility is most appropriate for viewing warnings and errors recorded by the operating system?
- Event Viewer
- Calculator
- Disk Cleanup
- Paint
Correct Answer: 1
Explanation
Event Viewer provides access to Windows event logs containing information about system activity, applications, security events, and other components. Technicians can use these logs to investigate crashes, service failures, authentication problems, and other issues. Events commonly include timestamps, severity levels, sources, and event identifiers that can help correlate symptoms with specific failures. However, not every warning represents a serious problem. Technicians should focus on events that match the reported issue and time period instead of assuming that every logged event requires corrective action.
Question 289
Which Linux command can display the current working directory?
- grep
- pwd
- chmod
- kill
Correct Answer: 2
Explanation
The Linux pwd command displays the full path of the current working directory. It is particularly useful when working in a terminal because commands may operate differently depending on the current directory. Technicians can use pwd to confirm their location before creating, modifying, moving, or deleting files. This simple verification step can help prevent mistakes when working with important directories. It is especially valuable during remote troubleshooting, where a technician should carefully confirm paths before executing administrative commands.
Question 290
Which Linux command is commonly used to search for matching text within files?
- grep
- mount
- passwd
- uname
Correct Answer: 1
Explanation
The Linux grep command searches text for patterns and displays matching lines. It is useful for reviewing configuration files, log files, scripts, and command output without manually reading every line. Technicians can combine grep with other commands to narrow large amounts of information during troubleshooting. For example, a technician may search logs for a particular error message or service name. Care should be taken when interpreting search results because matching text does not necessarily prove that the related event is the root cause.
Question 291
Which Linux command can change the permissions assigned to a file?
- df
- chmod
- top
- cat
Correct Answer: 2
Explanation
The Linux chmod command changes file and directory permissions. Permissions determine whether users or groups can read, write, or execute a particular resource. A technician may use chmod when an application cannot access a required file or when permissions need to be tightened for security. Changes should follow the principle of least privilege, because granting excessive permissions can expose sensitive information or allow unauthorized modifications. Technicians should verify the current ownership and permissions before making changes and confirm that the application functions afterward.
Question 292
Which Linux command can display information about mounted file systems and their available space?
- df
- mkdir
- passwd
- ps
Correct Answer: 1
Explanation
The Linux df command reports disk-space usage for mounted file systems. It can show total capacity, used space, available space, and utilization percentages. This information is useful when applications fail because a file system is approaching or has reached its capacity limit. Technicians should identify which mounted file system is affected rather than assuming the entire storage device is full. After locating the problem, unnecessary files can be removed according to organizational policies, or additional storage capacity can be provisioned when appropriate.
Question 293
Which macOS security feature encrypts the contents of a supported startup disk?
- Spotlight
- FileVault
- Console
- Migration Assistant
Correct Answer: 2
Explanation
FileVault provides full-volume encryption for supported macOS startup disks, helping protect stored data if a computer is lost or stolen. Encryption reduces the risk of unauthorized access to information stored on the drive when appropriate authentication controls are also used. Technicians should ensure that recovery information is handled securely and that users understand the importance of authorized credentials. Enabling encryption may require planning because recovery procedures can differ from those used on an unencrypted system. Organizations should document their recovery and key-management practices.
Question 294
A macOS application stops responding and prevents normal interaction. Which action can the technician use to close it?
- Force Quit
- Disk Partition
- FileVault
- Migration Assistant
Correct Answer: 1
Explanation
Force Quit allows a macOS user or technician to terminate an application that is no longer responding normally. It is useful when a program becomes frozen and cannot be closed through its regular interface. Before forcing an application to close, technicians should consider whether unsaved work may be lost. If the same application repeatedly becomes unresponsive, the technician should investigate possible causes such as insufficient resources, corrupted application data, compatibility problems, or software updates. Repeated Force Quit operations alone do not address the underlying issue.
Question 295
Which mobile technology allows a smartphone to share its cellular internet connection with another device?
- NFC
- Tethering
- GPS
- Biometrics
Correct Answer: 2
Explanation
Tethering allows a mobile device to share its internet connection with another device, commonly through Wi-Fi, Bluetooth, or a physical connection. It can be useful when another computer or tablet lacks an available internet connection. Technicians should consider the mobile carrier’s policies, data limits, battery consumption, and security settings when enabling tethering. A strong password should be used when creating a mobile hotspot. Unsecured tethering can allow unauthorized users to connect and consume bandwidth or potentially expose connected devices to additional security risks.
Question 296
Which mobile feature uses a short-range wireless connection and can support contactless transactions?
- NFC
- GPS
- LTE
- IMAP
Correct Answer: 1
Explanation
Near Field Communication, or NFC, is a short-range wireless technology that enables compatible devices to exchange information when they are brought close together. It is commonly used for contactless payments, access systems, device pairing, and other short-range interactions. Because NFC applications can involve authentication or financial information, users should keep devices protected with appropriate security controls. Technicians should also verify that both devices support the required NFC functionality. NFC operates over a much shorter range than technologies designed for general wireless networking.
Question 297
Which authentication method uses a physical characteristic such as a fingerprint?
- Something you know
- Something you have
- Something you are
- Somewhere you work
Correct Answer: 3
Explanation
Biometric authentication is categorized as something you are because it relies on a physical or behavioral characteristic of the user. Examples include fingerprints, facial recognition, and iris patterns. Biometrics can provide convenient authentication, but they should generally be used as part of an overall security strategy rather than treated as a replacement for every other control. Technicians should understand the organization’s authentication policies and ensure that biometric enrollment is performed securely. If a biometric method fails, an approved alternative authentication method may be required.
Question 298
Which social-engineering technique involves an attacker following an authorized person through a secured entrance?
- Phishing
- Tailgating
- Vishing
- Smishing
Correct Answer: 2
Explanation
Tailgating occurs when an unauthorized individual follows an authorized person into a restricted physical area without independently authenticating. Attackers may attempt to appear legitimate or create a sense of urgency so employees hold doors open for them. Organizations can reduce this risk through access-control systems, security awareness training, visitor procedures, and physical barriers. Employees should follow established access policies rather than allowing unknown individuals to enter simply because they appear trustworthy. Suspicious physical access attempts should be reported to the appropriate security personnel.
Question 299
Which disposal method is most appropriate when a storage device contains highly sensitive information that must not be recoverable?
- Recycle the device without processing it
- Physically destroy the storage media
- Rename the files
- Move the files to another folder
Correct Answer: 2
Explanation
Physical destruction can be appropriate when highly sensitive information must be rendered unrecoverable and the storage device is no longer needed. Depending on the media type and organizational requirements, approved destruction methods may include shredding, pulverizing, or other controlled processes. Simply deleting files or changing their names does not necessarily make stored information unrecoverable. Technicians should follow documented disposal procedures and maintain appropriate records when required. Organizations may also use approved secure-erasure methods when physical destruction is unnecessary and the media will be reused.
Question 300
A technician needs to provide remote assistance to a user’s computer. What should be obtained before starting the session?
- User authorization and appropriate access
- The user’s personal password
- Permanent unrestricted access
- Permission to disable all security controls
Correct Answer: 1
Explanation
Remote support should begin only after obtaining appropriate user authorization and following organizational access procedures. The technician should use an approved remote-support tool and provide only the level of access required to perform the task. Users should not be asked to disclose passwords unnecessarily, and technicians should avoid creating permanent unrestricted access. During the session, the technician should explain significant actions and protect any sensitive information encountered. Proper authorization helps maintain user trust, supports accountability, and reduces the risk of unauthorized system access.