Badge readers are a core component of a Physical Access Control System (PACS). Their specific function is to authenticate an individual's identity via a credential (the badge) and then grant or deny entry to a restricted area. Crucially, every access attempt—whether successful or denied—is logged by the system, creating a detailed record of who accessed or attempted to access a specific location and at what time. This provides the precise function of detecting and recording access, which is essential for security audits and incident investigations.

A. Bollards are physical barriers that prevent vehicle access; they do not detect or record who is passing through.

B. Video surveillance records activity visually but does not inherently authenticate identity or create a structured access log like a badge system.

D. A fence is a static physical barrier designed to prevent or deter access, not to actively detect or log it.

1. National Institute of Standards and Technology (NIST). (2013, June). NIST Special Publication 800-116 Revision 1: A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS). Section 2.1, "PACS Overview," describes how a PACS "automates the passage of authorized people... while detecting and logging unauthorized entry attempts." The card reader is the key component for this interaction.

2. Massachusetts Institute of Technology (MIT). (n.d.). IS&T Knowledge Base - Card Readers. The documentation describes the function of card access systems: "MIT ID card readers are installed at the entrances to many buildings... to provide security and access control." These systems inherently log all card swipes for security purposes.

According to the CompTIA malware removal process, the final step after all technical remediation is complete is to educate the end user. This is a critical preventative measure. The technician should explain how the infection likely occurred (e.g., phishing email, malicious download) and provide guidance on how to avoid similar incidents in the future. This empowers the user and helps secure the environment against reinfection, making it the most important subsequent action after the system is technically clean.

A. Performing a secondary antivirus scan is part of the remediation step itself to ensure the malware is gone, not a step taken after cleanup is complete.

C. Reimaging is a method of remediation, often used when cleanup is unsuccessful or impractical. It is not a post-cleanup step.

D. Reviewing system logs is part of the initial identification and research phase of the malware removal process, used to understand the scope of the infection.

1. Souppaya, M., & Scarfone, K. (2013). Guide to Malware Incident Prevention and Handling for Desktops and Laptops. National Institute of Standards and Technology (NIST). Special Publication 800-83 Rev. 1. Section 4.3, "Post-Incident Activity," p. 4-10. (This section emphasizes that a key post-incident activity is creating a follow-up report and educating users to prevent future incidents.)

2. University of California, Berkeley Information Security Office. (2022). Malware Removal. Retrieved from https://security.berkeley.edu/faq/malware-removal. (This university guide outlines the steps for malware removal, concluding with the importance of user education to prevent recurrence.)

The most secure and practical solution is to create a separate, isolated network (SSID) for the legacy device. Modern routers often support guest networks or multiple SSIDs, which can be configured with older security protocols like WPA without downgrading the security of the primary network (which should use WPA2 or WPA3). This practice, known as network segmentation, isolates the less-secure device, preventing it from being a potential entry point for an attacker to access more sensitive devices on the main network.

B. Downgrading the entire network's security to WPA, even temporarily, is a significant security risk and is highly impractical.

C. Using a wired connection does not meet the user's stated requirement for a "Wi-Fi connection" that must use WPA.

D. Adding an older router can create network issues like double NAT and introduces another unmanaged, potentially insecure device to the network.

1. Carnegie Mellon University, Software Engineering Institute. (2021). Best Practices for Home Network Security. Retrieved from https://insights.sei.cmu.edu/blog/best-practices-for-home-network-security/. See the section "Segment Your Network" which recommends using guest networks for less-trusted devices.

2. University of California, Berkeley, Information Security Office. (n.d.). Minimum Security Standards for Networked Devices. Retrieved from https://security.berkeley.edu/resources/minimum-security-standards-networked-devices. Standard 5.1 discusses network isolation for devices that cannot meet higher security requirements.

In a managed corporate environment, security policies are often implemented to prevent users from installing unauthorized software. An Access Control List (ACL) can be applied at the network level to block downloads from certain sites, or more commonly, on the endpoint itself through software restriction policies (like Microsoft's AppLocker). These policies function as a type of ACL, preventing non-approved executable files from running, which would cause the installation to fail. This is a standard security measure to maintain system integrity and prevent malware.

A. A full browser cache affects web page loading and performance; it does not prevent software installation from an executable file.

B. Slow internet speeds would delay the download of the installer but would not typically cause the installation process itself to fail repeatedly.

D. An unformatted hard drive would not have a functioning operating system, making it impossible for the user to even attempt to run an installer.

1. Microsoft. (2023, April 27). AppLocker (Windows). Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview. This document describes how AppLocker rules (a form of ACL) can be used to allow or deny apps from running.

2. Purdue University. (n.d.). Secure Purdue - Access Control Standard. Retrieved from https://www.purdue.edu/securepurdue/identity-access/access-control-standard.html. See section "System Access Controls," which outlines principles for restricting software installation and execution.

A Virtual Private Network (VPN) is the appropriate technology for this scenario. A VPN creates a secure, encrypted tunnel over a public network (the internet) to a private network (the town hall's server). This allows the town clerk's remote computer to securely connect to the town hall's network and access resources, such as documents on a server, as if the computer were physically present in the office. It provides both security through encryption and the necessary network access to internal resources from a remote location.

A. VNC (Virtual Network Computing) is a graphical desktop-sharing system used to remotely control another computer's screen, keyboard, and mouse, not for general network resource access.

B. RDP (Remote Desktop Protocol) is similar to VNC; it provides remote access to the desktop of a specific computer but does not grant broad network access to file servers.

D. SSH (Secure Shell) provides a secure command-line interface for remote administration of a server but is not the standard tool for accessing shared document folders.

1. Microsoft. (2021, September 20). What is VPN?. Windows Server Documentation. (Defines a VPN as a technology that "extends a private network across a public network" and enables users to "send and receive data across shared or public networks as if their computing devices were directly connected to the private network.")

2. Carnegie Mellon University, Software Engineering Institute. (2001). Home Network Security. CERT Coordination Center. Section: "Virtual Private Networks (VPNs)". (Describes VPNs as a method to "securely connect to a remote network through the Internet.")

3. Cisco. (n.d.). What Is a VPN?. Cisco Documentation. (Explains that a VPN "gives you online privacy and anonymity by creating a private network from a public internet connection.")

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer

able to access network resources.”), the Windows yellow triangle on the network icon is the classic

indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing

default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely

doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest,

lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should

regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x)

and a valid gateway/DNS.

below.

Explanation:

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/220-1202/page_225_img_1.jpg

1st CLI Resolution

copy "C:\Program Files\Testing\msvcp100.dll" "User-PC02\C$\Windows\System32" /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

below.

Explanation:

First Chat Response:When the user mentions setting up a new router, the best initial response to

maintain a helpful and professional tone is:

>Select reply:"I am happy to assist you today."

Second Chat Response:When the user states that they need to set up basic security settings:

>Select reply:"Is this the first router in your office?"

Third Chat Response:After learning it's a replacement router and the user is logged into the router's

web page:

>Select reply:"The first thing you need to do is change the default password."

Fourth Chat Response:For the response about password settings:

>Select reply:"Create a new password with an uppercase, a lowercase, and a special character."

Fifth Chat Response:When the router prompts to reboot:

>Select reply:"Yes, reboot please."

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default

credentials and using strong password policies, particularly in SOHO environments where routers are

often targeted.

below.

Explanation:

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote

Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security.

Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly

configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless

connection. Game consoles typically use peer-to-peer chat and online services that require open

access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of

DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming

and media devices on less restricted networks for full functionality.