CompTIA 220-1102 - CompTIA A+ Certification Core 2 Exam

The appropriate choice is "Acceptable Use Policy" (Option D). This policy defines the rules for how users should use the system, including login expectations and proper behavior when using company resources. It's typically displayed as a splash screen to remind users of their responsibilities.

End-user license agreement (Option A) pertains to the terms of software usage.

Non-disclosure agreement (Option B) deals with confidentiality but is unrelated to login behavior.

Regulatory compliance (Option C) relates to adherence to laws and regulations, but it is not typically displayed on a splash screen for login expectations.

CompTIA A+ Core 2 References:

4.6 - Explain the importance of prohibited content/activity and acceptable use policies​​.

Device data encryption (Option D) ensures that even if the device is lost or stolen, its data cannot be accessed without proper credentials, even while offline. Encryption protects the data at rest, making it unreadable without the decryption key.

Remote wipe (Option A) requires the device to be online to receive the wipe command.

Mandatory screen locks (Option B) provide a layer of security but can be bypassed with physical access in some cases.

Location applications (Option C) help track the device but don't protect data.

CompTIA A+ Core 2 References:

2.7 - Explain methods for securing mobile devices, including encryption

In the event of a security breach, documenting the incident is crucial for tracking, analysis, and resolution. The appropriate steps should ensure thorough documentation and communication:

Option A: Record the details in the ticketing system.Correct Answer. The ticketing system is the primary tool for IT support to track incidents. Recording the details in the ticketing system ensures that all relevant information is documented systematically, can be easily accessed, and tracked through the resolution process.

This aligns with best practices in incident documentation and support systems information management as outlined in the CompTIA A+ Core 2 (220-1102) Exam Objectives, Section 4.1​​.

Option B: Take screenshots and attach them to the root cause analysis.While screenshots can be useful, the first step should be to record the details in the ticketing system. Screenshots may be added later as supplementary information.

Option C: Discuss the incident with the company’s legal team.Involving the legal team is important for certain aspects of a security breach, but the initial step should still be to document the incident in the ticketing system.

The correct answers are B. .pkg and F. .dmg.

pkg (Package Installer) – This is the standard macOS package format for software installations. It often includes installation scripts and can be used for software distribution.

dmg (Disk Image File) – A macOS disk image file that contains software installers. Users typically mount the file and drag the application into the Applications folder to install it.

Why Other Options Are Incorrect:

A. .yum – This is used for Linux package management and is not compatible with macOS.

C. .msi – This is the Windows Installer package format, not used on macOS.

D. .ps1 – This is a PowerShell script file used in Windows, not for installing macOS applications.

E. .exe – This is an executable file format for Windows applications and does not run on macOS without third-party emulation (e.g., Wine).

CompTIA A+ 220-1102 Exam Reference:

Objective 1.7 – Identify common features and tools of the macOS/Linux client operating systems.

When a workstation has not received the latest policy changes, the gpupdate command is used to manually apply the latest group policies from the domain controller.

Option A: sfc /scannowThis command is used to scan and repair corrupted system files, not to update group policies.

Option B: gpupdate /forceThis command forces the workstation to reapply all group policies, ensuring that the latest policies are applied immediately.

Option C: chkdsk /yThis command checks the integrity of the file system and fixes logical file system errors, not to update group policies.

Option D: xcopy /ZpThis command is used for copying files and directories, not for updating group policies.

WEP (Wired Equivalent Privacy) is known to be the weakest wireless security protocol due to its vulnerabilities and ease of being compromised.

WEP: The oldest and weakest protocol, susceptible to various attacks and easily cracked.

WPA2: Much stronger security with AES encryption, currently one of the most secure standards.

TKIP: Used with WPA, stronger than WEP but weaker than WPA2 with AES.

AES: Advanced Encryption Standard, used in WPA2 and known for strong security.

For managing permissions where a specific folder needs to have different access controls than its parent, turning off inheritance for that specific folder is the correct approach.

Option A: Turn off inheritance on the requested folder only and set the requested permissions to each file manuallyThis is partially correct, but setting permissions manually for each file is inefficient and error-prone.

Option B: Turn off inheritance at the top-level folder and remove all inherited permissionsThis action would disrupt permissions for all other folders and files, not just the confidential folder.

Option C: Turn off inheritance at the top-level folder and set permissions to each file and subfolder manuallyThis approach is overly broad and inefficient, impacting more than just the specific folder that needs restricted access.

Option D: Turn off inheritance on the requested folder only, set the requested permissions, and then turn on inheritance under the child foldersThis ensures the specific folder has unique permissions while allowing those permissions to propagate to its children, maintaining security and ease of management.

In this case, abnormal behavior after opening a suspicious email suggests malware might have infected the device. A full factory reset is recommended to remove any persistent malware, especially when a restart does not resolve the issue. Deleting the email or reinstalling the browser will not remove the malware already on the device.

A jailbroken iPhone (Option D) allows users to bypass Apple's restrictions to install unauthorized apps and modify system settings. This situation suggests the phone may have been compromised or tampered with, potentially voiding warranties and exposing the device to security vulnerabilities.

APK Source (Option A) refers to Android packages, not applicable to iPhones.

Connectivity issues (Option B) doesn't explain the comparison to an identical phone.

Developer Mode (Option C) is typically used for app development, not indicative of the situation.

CompTIA A+ Core 2 References:

2.7 - Explain mobile device security, including risks of jailbreaking

Restarting a smartphone is a basic troubleshooting step that often resolves temporary software glitches or minor errors that might be preventing the screen rotation from working correctly. It's a quick and easy step to try before moving on to more complex solutions.

Here's why the other options are not the best first step:

A. Remove the screen protector: While a thick or improperly installed screen protector could potentially interfere with the sensors responsible for screen rotation, it's less likely to be the cause.

B. Update the smartphone’s software: While software updates can fix bugs and improve functionality, they are not always necessary for resolving a screen rotation issue.

D. Replace the smartphone: Replacing the smartphone is a drastic measure and should only be considered if other troubleshooting steps fail.

Troubleshooting Steps:

Restart the smartphone: This often clears temporary software issues.

Check for software updates: If a restart doesn't work, updating the operating system or any relevant apps might resolve the issue.

Calibrate the accelerometer: Some smartphones have a calibration tool for the accelerometer, the sensor that detects orientation. Check the device settings for this option.

Check for hardware issues: If the problem persists, there might be a hardware issue with the accelerometer or other components. In this case, contacting the manufacturer or a repair center might be necessary.

Cross-site scripting (XSS) (Option C) allows attackers to inject malicious scripts into web pages viewed by users. When the user visits the compromised site, the script runs in the user's browser, potentially allowing the attacker to steal data or perform unauthorized actions. XSS is a common vulnerability in web applications that allows code execution.

DoS (Option A) disrupts services but doesn't involve executing code on a user's device.

Spoofing (Option B) involves impersonating another device or user but doesn't execute code.

SQL injection (Option D) attacks a database and is unrelated to executing code on the user's computer.

CompTIA A+ Core 2 References:

2.4 - Explain common social engineering attacks, including XSS​​.

Time drift occurs when the internal clock of a computer is not properly synchronized, often leading to discrepancies like being an hour behind. In this case, the workstation is the only device affected, indicating that it's likely a local issue. Time drift can happen if the system clock isn't syncing properly with an NTP (Network Time Protocol) server or if automatic daylight savings adjustments aren't enabled. It's less likely to be a CMOS battery issue since the technician has already verified the correct date and the system clock isn’t completely reset (which is what happens when the CMOS battery fails).

Comprehensive and Detailed In-Depth Explanation:

The Resource Monitor provides real-time data on CPU, memory, disk, and network usage, making it the best tool to identify performance degradation over time. It allows technicians to check which processes are consuming excessive system resources.

A. Reliability history – Incorrect. Reliability Monitor tracks system errors and crashes, but it does not help diagnose ongoing performance issues.

B. Computer management – Incorrect. Computer Management provides system utilities but does not offer real-time monitoring of resource usage.

D. Disk defragment – Incorrect. Disk defragmentation improves disk access times but is unrelated to an application gradually slowing down.