Free 220-1102 Practice Test Questions and Answers (2026)

Contactless electronic payments on Android devices, such as those made through Google Pay or Samsung Pay, primarily utilize Near Field Communication (NFC) technology. NFC is a short-range wireless protocol that allows two devices to establish communication when brought within a few centimeters of each other. For a payment to be processed, the NFC chip in the phone must be enabled to communicate with the NFC reader in the point-of-sale (POS) terminal. If this setting is disabled, the phone cannot transmit the necessary payment credentials, causing the transaction to fail.

A. Wi-Fi is used for connecting to the internet over a local wireless network, not for the direct tap-to-pay communication with a payment terminal.

B. Nearby Share is an Android feature for sharing files and links between devices; it is not used for processing point-of-sale financial transactions.

D. Bluetooth is a short-range wireless technology for connecting peripherals like headphones, but it is not the standard protocol used for tap-to-pay systems.

1. Google Wallet Help Center. "Set up tap to pay." Google LLC. In the section "Step 1: Turn on NFC

" the documentation states

"To make tap-to-pay transactions

you need to have NFC (near field communication) turned on." This is official vendor documentation directly confirming the requirement.

2. Android Open Source Project. "Near Field Communication." In the overview section

the documentation describes the Android NFC framework and its modes of operation

including "Card emulation mode: The NFC device can act as an NFC card

to be accessed by an external NFC reader

such as an NFC point-of-sale terminal." This confirms NFC's role in emulating a payment card for transactions.

3. Madlmayr

G.

Langer

J.

& Scharinger

J. (2008). NFC Devices: Security and Privacy. In Proceedings of the Third International Conference on Availability

Reliability and Security (ARES '08). IEEE Computer Society

USA

642–647. DOI: https://doi.org/10.1109/ARES.2008.143. This academic paper discusses the architecture of NFC-based systems

explicitly referencing its use in payment applications where a mobile device emulates a contactless smart card (Section 2

"NFC Architecture").

The change management process follows a structured lifecycle to minimize risk and disruption. After a change request is planned, tested, and analyzed for risk, it is presented to a change management review board (often called a Change Advisory Board or CAB) for approval. The board's approval is the formal authorization to proceed. Therefore, the immediate next step in the process is the scheduled implementation of the approved change. All prerequisite activities, such as risk analysis and testing, have already been completed and validated during the review phase.

A. Perform risk analysis: This is a critical step that must be completed before the change is submitted to the board for approval.

B. Assign a change coordinator: This role is typically assigned at the beginning of the change process to oversee the request from submission through completion.

D. Verify testing results: Test results are verified and presented to the review board before they grant approval to ensure the change is effective and stable.

1. University of California

Berkeley

Information Services and Technology. (n.d.). Change Management Process. Section 5.0

"Change Management Process Flow." The document outlines the standard workflow where the "Change Implementation" phase directly follows the "Change Approval" phase.

2. The University of Texas at Austin

Information Technology Services. (2021). ITS Change Management Process. The process flow diagram on page 5 explicitly shows that the step following "CAB Approval" is "Implement Change."

3. Purdue University

Information Technology. (n.d.). IT Change Management. In the "Process" section

the workflow states

"Once a change is approved

it is ready to be implemented by the assigned implementer(s)." This confirms implementation is the next action after approval.

The process of modifying an iOS device to install applications from outside the official App Store is known as jailbreaking. This action intentionally bypasses critical security features built into the operating system, such as application sandboxing and code signing. By removing these protections, the device becomes vulnerable to malware that can be installed through unofficial sources. Such malicious applications can gain unauthorized, high-level privileges to access sensitive hardware, including the camera and microphone, and operate them without the user's knowledge or consent, leading to the symptoms described.

A. A counterfeit Lightning cable primarily risks causing charging problems, data sync issues, or physical damage to the device; it does not alter the OS to permit unauthorized software installation.

B. Unenrolling from Mobile Device Management (MDM) removes an organization's control and policies from the device but does not compromise the core security architecture of the iOS operating system itself.

D. An out-of-date operating system can contain unpatched vulnerabilities, but the specific action described—modifying the device to sideload apps—is the direct cause, which is defined as jailbreaking.

1. Apple

Inc. (2023

July 26). Unauthorized modifications to iOS ("jailbreaking") can cause security vulnerabilities

instability

shortened battery life

and other issues. Apple Support

Article HT201954. Retrieved from https://support.apple.com/en-us/HT201954. The document states

"Jailbreaking" your iPhone...eliminates security layers designed to protect your personal information and your iOS device. With this security removed...hackers may steal your personal information

damage your device

attack your network

or introduce malware

spyware

or viruses."

2. Klieber

W. (2011

August 1). Three Security-Related Reasons to Not "Jailbreak" Your iPhone. Carnegie Mellon University

Software Engineering Institute (SEI) Blog. Retrieved from https://insights.sei.cmu.edu/blog/three-security-related-reasons-to-not-jailbreak-your-iphone/. The article explains that jailbreaking removes "sandboxing" protection

which "prevents applications from accessing data from other applications or from the operating system

" thereby allowing malicious code to access sensitive functions.

3. CompTIA. (2021). CompTIA A+ Core 2 (220-1102) Exam Objectives. Version 1.0

Section 2.6. The objective covers "security best practices for mobile devices

" where avoiding unauthorized sources for apps and not performing rooting/jailbreaking are fundamental principles to prevent malware and unauthorized access

which are the direct issues in the question.

The System Properties window in Windows 10 is the primary graphical user interface (GUI) for managing a computer's identity on a network. Within the "Computer Name" tab of this window, a technician can change the computer's name, switch from a workgroup to a domain, or change its domain membership. This is the standard manual procedure for joining a Windows workstation to an Active Directory domain when automated methods, such as a script, fail. The technician would navigate to this menu, click the "Change..." button, select the "Domain" option, and enter the corporate domain name.

A. User Accounts: This Control Panel applet is used for managing local user profiles, passwords, and account types, not for changing the computer's domain affiliation.

C. Windows Firewall: This utility is for configuring inbound and outbound network traffic rules and security settings, which is unrelated to domain join operations.

D. Network and Sharing: This center is used to configure network adapter settings, IP addressing, and file/printer sharing options, but not for joining the computer to a domain.

1. Microsoft Official Documentation: In the official support documentation for joining a Windows computer to a domain

the steps explicitly direct the user to the System Properties window. The path is detailed as: "Select Start > Settings > System > About. Under Device specifications > Related links

select Advanced system settings." This opens the System Properties dialog.

Source: Microsoft Support

"Join a Windows 10 computer to a domain

" Document ID: 10157

Section: "To join a computer to a domain."

2. University Courseware/IT Documentation: The University of Wisconsin-Madison's IT support documentation provides a step-by-step guide for this exact task. It instructs users to open the System Properties window and use the "Computer Name" tab to join the domain.

Source: University of Wisconsin-Madison

Division of Information Technology (DoIT)

"Windows 10 - Join a Computer to a Domain

" KB Article ID: 5383

Steps 4-6.

3. University Courseware/IT Documentation: Carnegie Mellon University's Computing Services provides instructions for joining a Windows computer to their domain

which also specifies using the System Properties window.

Source: Carnegie Mellon University

Computing Services

"Join a Windows Computer to the Andrew Domain

" Section: "Join a Windows Computer

" Step 3.

Breaking inheritance only at the confidential folder stops department-wide ACLs from flowing in.

After the break, the technician assigns the team-only ACL to that folder and re-enables inheritance for its children, allowing every file and subfolder created under it to automatically inherit the new, restricted permissions while leaving the rest of the departmental tree untouched.

A. Requires setting/maintaining ACLs on every file; new files would revert to default permissions, defeating confidentiality.

B. Removes permissions from the entire department root, unintentionally affecting all other folders and users.

C. Same over-broad scope as B and adds needless manual ACL work on every item.

1. Microsoft Learn

“Disable permission inheritance and convert inherited permissions” – Steps 2-4 (Windows Server & Windows 10 File Security) https://learn.microsoft.com/en-us/windows/security/operating-system-security/permissions/default-file-permissions

2. Microsoft TechNet

“How Inheritance Affects ACLs”

Sec. “Breaking inheritance on a child folder”

paragraph 3 (last updated 2020).

3. National University of Singapore

CS2100 File Security Lecture Notes

slide 28 – 29: “Breaking vs. Propagating NTFS ACL inheritance.”

Linux is the most appropriate operating system for this scenario. Many Linux distributions, such as Ubuntu Server or Debian, are available at no cost and operate under open-source licenses (e.g., GNU General Public License), which eliminates complex licensing agreements and fees. Linux is renowned for its stability and efficiency, making it ideal for running on older hardware. It includes robust, native tools for creating file servers, such as Samba, which allows seamless file sharing with Windows, macOS, and other Linux clients. This combination of zero cost, simple licensing, hardware flexibility, and powerful server capabilities directly meets all the customer's stated requirements.

A. Chrome OS is a lightweight, cloud-focused operating system designed for web browsing and is not intended to function as a file server or be installed on generic desktop hardware.

C. macOS is a proprietary operating system that is legally restricted to installation on Apple hardware only. It is not inexpensive and its licensing forbids use on a generic PC.

D. Windows requires purchasing a license. A server version would also necessitate Client Access Licenses (CALs), introducing both significant cost and licensing complexity, which the customer wants to avoid.

1. The Linux Foundation. (n.d.). What is Linux? Linux.com. Retrieved from https://www.linux.com/what-is-linux/. This official source states

"Linux is also distributed under an open source license... you can run Linux on a wide variety of hardware... From wristwatches to supercomputers

it is everywhere." This supports the no-cost

simple licensing

and hardware flexibility aspects.

2. Ubuntu. (n.d.). Ubuntu Server for scale-out computing. Canonical. Retrieved from https://ubuntu.com/server. The official documentation for a major Linux distribution highlights its use as a server platform

stating it is "the world’s most popular open-source operating system." This confirms its suitability for the server role.

3. Microsoft. (2023

October 12). Client Access Licenses (CAL) & Management Licenses. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/windows-server/get-started/client-access-licenses. This official vendor documentation details the requirement for CALs for devices or users accessing a Windows Server

demonstrating the licensing complexity and cost the customer wishes to avoid.

4. Google. (n.d.). What is ChromeOS? ChromeOS. Retrieved from https://www.google.com/chromebook/chromeos/. Google's official page describes ChromeOS as a cloud-first operating system for specific devices (Chromebooks)

which is inconsistent with the requirements of a local file server on old hardware.

The question describes the initial steps of the CompTIA A+ seven-step malware removal best practice procedure. The technician has completed Step 2 (Quarantine the infected system) and Step 3 (Disable System Restore). The immediate next action is Step 4: Remediate the infected systems. This step begins with updating the anti-malware software definitions (if possible from a clean, external source) and then performing a full antivirus scan to detect and remove the malicious software. This makes performing an antivirus scan the correct subsequent action.

B. Run Windows updates. This is part of Step 5 in the malware removal process, which is performed only after the system has been successfully cleaned.

C. Reimage the system. This is a method of remediation used as a last resort if scanning and manual removal are unsuccessful or if the system integrity is too compromised.

D. Enable System Restore. This is Step 6, which is done after the system is confirmed to be clean, to create a new, uninfected restore point.

---

1. Academic Courseware: Docter

Q.

& Dulaney

E. (2022). CompTIA A+ Complete Study Guide: Core 1 Exam 220-1101 and Core 2 Exam 220-1102 (5th ed.). John Wiley & Sons.

Reference: Chapter 21

"Security

" under the section "Best Practice Procedure for Malware Removal

" outlines the seven steps. Step 4

"Remediate the infected systems

" explicitly states to "run a scan with your antimalware software." This follows directly after Step 2 (Quarantine) and Step 3 (Disable System Restore).

2. Vendor Documentation: Microsoft Corporation. (2023). Remove malware from your Windows PC. Microsoft Support.

Reference: In the section "How do I remove malware like a virus?"

the primary recommended action after identifying a threat is to use security software like Microsoft Defender Antivirus to "scan for and remove threats." This aligns with performing a scan as the core remediation step.

3. University IT Publication: Indiana University. (2024

January 18). What are viruses

worms

and Trojan horses? University Information Technology Services Knowledge Base.

Reference: In the section "What to do if you suspect an infection

" the guide advises to "Run a full scan of your system with up-to-date antivirus software." This is presented as a primary action for remediation after initial containment measures.

In the context of change management and project management, the scope defines the specific boundaries of a change or project. It explicitly outlines all the work, deliverables, features, and resources that are included, as well as what is excluded. This detailed definition of boundaries and deliverables directly corresponds to the "extent" of the change, ensuring all stakeholders have a clear and common understanding of what the change entails from start to finish.

B. Purpose: This explains the reason or justification for the change, not its boundaries or extent.

C. Analysis: This is the process of examining the change's requirements and potential effects, not the definition of its extent.

D. Impact: This refers to the potential consequences or effects of the change on the organization, which is assessed after the scope is defined.

1. Project Management Institute. (2021). A Guide to the Project Management Body of Knowledge (PMBOK® Guide) (7th ed.). Section 2.2.3

"Project Scope

" defines scope as the work required to deliver a product

service

or result with specified features and functions.

2. Carnegie Mellon University Open Learning Initiative. (n.d.). Project Management for Engineers. Module 3: Defining the Project

"Defining the Scope." This courseware states

"The project scope is a written statement that defines the work or tasks to be done or the products or services to be delivered by the project."

3. University of Washington

UW-IT. (n.d.). Change Management - Key Concepts. In its official documentation on IT change management

the scope is identified as a key component of a change request

detailing "what the change is" and "what is being changed

" which directly defines its extent.

The question asks for the best practice solution for implementing application security updates across an enterprise network. Automating the patching process is the industry standard for ensuring updates are deployed consistently, efficiently, and in a timely manner to all endpoints. This method minimizes the window of vulnerability that exists between the release of a patch and its application, significantly enhancing device security. Manual patching is prone to human error and is not scalable for an enterprise environment, making automation the superior solution.

B. Monitor the firewall configuration: This is a network security control measure, not a method for deploying application updates on individual endpoints.

C. Implement access control lists: ACLs are used to manage permissions and filter network traffic, which is unrelated to the process of installing software patches.

D. Document all changes: While change documentation is a critical part of IT governance and a best practice, it is a procedural step, not the technical solution for implementing the updates themselves.

1. National Institute of Standards and Technology (NIST). (2022). Guide to Enterprise Patch Management Technologies (Draft). NIST Special Publication 800-40r4. In Section 3.1

"Automated Patch Distribution

" the document states

"Automated patch distribution is a key component of enterprise patch management. It is the process of pushing patches down to clients automatically..." This highlights automation as a core technology for enterprise patching.

2. Microsoft. (2023). Automatically deploy software updates. Microsoft Learn | Microsoft Endpoint Configuration Manager Documentation. This official vendor documentation details the creation of automatic deployment rules (ADRs)

stating

"Use automatic deployment rules (ADR) to deploy required software updates... This deployment method is useful because you don't need to add new updates to the deployment as they're released." This exemplifies an automated solution for enterprise updates.

3. Alberts

C.

& Dorofee

A. (2004). Defining an Enterprise-Level Patch and Vulnerability Management Program. Carnegie Mellon University

Software Engineering Institute. CMU/SEI-2004-TN-036. Section 3.2

"Patch Deployment

" discusses the necessity of tools for patch deployment

noting that "automated tools are available to assist in this process

" which is essential for enterprise-scale operations.

The scenario describes a persistent malware symptom (a recurring message) that evades detection by a standard antivirus scan. This strongly suggests the presence of a rootkit or other advanced persistent threat designed to hide from security software. When initial remediation steps like scanning fail, the most reliable and comprehensive method to ensure complete removal and restore the system to a known-good state is to reimage the computer. This process wipes the storage drive and reinstalls the operating system and applications from a trusted source, eliminating any hidden malicious code.

A. Check for Windows updates: This is a crucial preventative security measure but will not remove malware that is already active on the system.

C. Enable Windows Firewall: A firewall controls network traffic to prevent unauthorized access; it is not a tool for removing existing malware infections.

D. Run System File Checker: This utility repairs corrupted or missing Windows system files but is not designed to detect or remove malicious software.

1. National Institute of Standards and Technology (NIST). (2005). Special Publication 800-83: Guide to Malware Incident Prevention and Handling for Desktops and Laptops. Section 3.3.3

"Eradication and Recovery

" states

"For some incidents

containing and eradicating the malware is not cost-effective or practical

or it may not provide a high enough level of confidence that the malware has been eradicated successfully... In these cases

the most effective and efficient way to recover from an incident is to reimage the compromised hosts from a master image."

2. Stanford University Information Security. (n.d.). Malware and Ransomware. In the section "What to do if your device is infected

" the guidance states

"The most reliable way to clean an infected system is to erase the hard drive and reinstall the operating system and applications."

3. Microsoft Support. (n.d.). Recover your Windows PC. The "Reset this PC" feature with the "Remove everything" option is described as a method to reinstall Windows and remove all applications and settings. This is a built-in reimaging function used to restore a PC to a clean

factory state

which is a standard procedure for irremovable malware.

The subnet mask 255.255.255.255 (also known as a /32 mask) defines a network that contains only a single host address. In this configuration, the device at 192.168.0.74 considers itself to be the only member of its local network. Consequently, it cannot communicate with any other IP address, including the default gateway at 192.168.0.1. To access the internet, the device must be able to send traffic to its default gateway. Since the incorrect subnet mask places the gateway outside the device's local network, all external communication fails.

A. The ipconfig command displays the configured IP settings; it does not provide the operational status of the default gateway device.

B. The IP address 192.168.0.74 is a standard private IP address. An APIPA address would be in the 169.254.0.0 to 169.254.255.255 range.

C. The IP address and default gateway are on the same intended logical subnet (192.168.0.x). The incorrect subnet mask is the root cause of the communication failure.

1. Microsoft Corporation. (2023). TCP/IP fundamentals for Windows. Microsoft Learn. In the "Subnet masks" section

it is explained that the subnet mask is used to determine the network ID and host ID from an IP address. A mask of 255.255.255.255 leaves zero bits for the host ID

effectively isolating the host from others on the physical segment

including its gateway.

2. Postel

J.

& Mogul

J. (1985). Internet Standard Subnetting Procedure. RFC 950. IETF. Section 2.1 discusses the structure of the subnet mask. A mask of all ones (255.255.255.255) logically implies a subnet with a single address

making communication with a separate gateway address impossible.

3. Kurose

J. F.

& Ross

K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 5

Section 5.4.2

"The IP Addressing Scheme

" details how a device uses its IP address and subnet mask to determine its subnet address. This process is used to decide whether to send a packet directly to a destination on the same subnet or to the default gateway for routing. With a /32 mask

the gateway is not on the same subnet.

The primary risk of using a wireless network with open authentication is that data is transmitted "in the clear," making it susceptible to interception by malicious actors on the same network. A Virtual Private Network (VPN) mitigates this risk by creating an encrypted tunnel between the specialist's device and a trusted remote server. All network traffic, including sensitive company data, is routed through this secure tunnel. This ensures the confidentiality and integrity of the data, even though the underlying Wi-Fi network is insecure. This is the most direct and effective first action to protect data in transit.

A. Manually configuring an IP address, a subnet mask, and a default gateway only changes how the device is addressed on the network; it provides no encryption or security for the data itself.

C. In Windows, changing the network location to "private" makes the device more discoverable and relaxes firewall rules, which is intended for trusted home or office networks, not insecure public ones.

D. Multi-Factor Authentication (MFA) is an identity and access management control that secures the authentication process. It does not encrypt the data transmitted over the network after a user has logged in.

---

1. National Institute of Standards and Technology (NIST) Special Publication 800-46 Revision 2

Guide to Enterprise Telework

Remote Access

and Bring Your Own Device (BYOD) Security. Section 3.2.2

"Protecting Confidentiality and Integrity

" states

"Organizations should protect the confidentiality and integrity of telework communications... Virtual private networks (VPNs) are the typical solution used to provide confidentiality for communications." This document establishes VPNs as the standard for securing communications over untrusted networks.

2. Carnegie Mellon University

Information Security Office

Public Wireless Security. This university resource advises

"Use a Virtual Private Network (VPN) client. A VPN client encrypts the traffic between your computer and the university's network... When using a public wireless network

a VPN is the most important step you can take to protect your data." This directly supports using a VPN as the primary security measure on an insecure network.

3. Microsoft Corporation

Official Windows Support Documentation. In the article "Make a Wi-Fi network public or private in Windows

" Microsoft explains the network profiles. The "Public" profile is recommended for networks in public places (like coffee shops or airports)

as it hides the computer from other devices on the network and blocks certain apps. The "Private" profile is for trusted networks. This confirms that changing the location to "private" (Option C) would be the incorrect security choice.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_54_img_1.jpg

. Explanation: https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_374_img_1.jpg https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_374_img_2.jpg https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_374_img_3.jpg

below:

Explanation:

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_47_img_1.jpg

Click on 802.11 and Select ac

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_48_img_1.jpg

Click on SSID and select CORP

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_48_img_2.jpg

Click on Frequency and select 5GHz

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_48_img_3.jpg

At Wireless Security Mode, Click on Security Mode

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_49_img_1.jpg

Select the WPA2

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_49_img_2.jpg

Ann needs to connect to the BYOD SSID, using 2.4GHZ. The selected security method chose should be

WPA PSK, and the password should be set to TotallySecret.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_50_img_1.jpg

.

Explanation:

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_164_img_4.jpg

The user is experiencing a system error that prevents them from using the Testing program. The error

message indicates that the file MSVCP100.dll is missing from the computer. This file is part of the

Microsoft Visual C++ 2010 Redistributable Package, which is required by some applications to run

properly. The error may have occurred due to a corrupted or incomplete software deployment.

To resolve this issue, the user needs to restore the missing file and register it in the system. One

possible way to do this is to copy the file from another computer that has the Testing program

installed and working, and then use the regsvr32 command to register it. The steps are as follows:

On another computer (User-PC02) that has the Testing program installed and working, locate the file

MSVCP100.dll in the folder C:\Program Files\Testing.

Share the folder C:\Windows\System32 on User-PC02 by right-clicking on it, selecting Properties,

then Sharing, then Advanced Sharing, then checking Share this folder, then clicking OK.

On the user’s computer (User-PC01), open a command prompt as an administrator by clicking Start,

typing cmd, right-clicking on Command Prompt, and selecting Run as administrator.

In the command prompt, type the following command to copy the file MSVCP100.dll from User-PC02

to User-PC01: copy "C:\Program Files\Testing\msvcp100.dll" "\\User-PC02\C$\Windows\System32"

After the file is copied, type the following command to register it in the system: regsvr32

msvcp100.dll

Restart the user’s computer and try to run the Testing program again.

Therefore, based on the instructions given by the user, the correct answers are:

Select Event Viewer Issue: 2187

Select First Command: copy "C:\Program Files\Testing\msvcp100.dll" "\\User-

PC02\C$\Windows\System32"

Select Second Command: regsvr32 msvcp100.dll

below.

Explanation:

Classification: a) Phishing

This email is a phishing attempt, as it tries to trick the user into clicking on a malicious link that could

compromise their account or personal information. Some suspicious items in this email are:

The email has a generic greeting and does not address the user by name.

The email has spelling errors, such as “unusal” and “Locaked”.

The email uses a sense of urgency and fear to pressure the user into clicking on the link.

The email does not match the official format or domain of the IT Help Desk at CompTIA.

The email has two black bat icons, which are not related to CompTIA or IT support.

The appropriate resolution for this email is

A. Report email to Information Security. The user should not click on the link, reply to the email, or

provide any personal or account information. The user should forward the email to the Information

Security team or use a professional email form to report the phishing attempt. The user should also

delete the email from their inbox and trash folder.

The suspicious items to select are:

b) From address

d) Hyperlinks

These items indicate that the email is not from a legitimate source and that the link is potentially

malicious. The other items are not suspicious in this case, as the to address is the user’s own email

and there are no attachments.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_254_img_1.jpg

Classification: b) Spam

This email is a spam email, as it is an unsolicited and unwanted message that tries to persuade the

user to participate in a survey and claim a reward. Some suspicious items in this email are:

The email offers a free wireless headphone as an incentive, which is too good to be true.

The email does not provide any details about the survey company, such as its name, address, or

contact information.

The email contains an external survey link, which may lead to a malicious or fraudulent website.

The email does not have an unsubscribe option, which is required by law for commercial emails.

The appropriate resolution for this email is C. Unsubscribe. The user should look for an unsubscribe

link or button at the bottom of the email and follow the instructions to opt out of receiving future

emails from the sender. The user should also mark the email as spam or junk in their email client,

which will help filter out similar emails in the future. The user should not click on the survey link,

reply to the email, or provide any personal or financial information.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_255_img_1.jpg

Classification: c) Legitimate

This email is a legitimate email, as it is from a trusted source and has a valid purpose. There are no

suspicious items in this email, as the from address, the to address, the attachment, and the email

body are all consistent and relevant. The appropriate resolution for this email is B. Perform no

additional actions. The user can open the attachment and review the orientation material as

instructed. The user does not need to report, unsubscribe, or delete this email.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_255_img_2.jpg

Classification: a) Phishing

This email is a phishing attempt, as it tries to deceive the user into downloading and running a

malicious attachment that could compromise their system or data. Some suspicious items in this

email are:

The email has a generic greeting and does not address the user by name or username.

The email has an urgent tone and claims that a security patch needs to be installed immediately.

The email has an attachment named “patch1.exe”, which is an executable file that could contain

malware or ransomware.

The email does not match the official format or domain of CompTIA Information Security.

The appropriate resolution for this email is A. Report email to Information Security. The user should

not open the attachment, reply to the email, or provide any personal or account information. The

user should forward the email to the Information Security team or use a professional email form to

report the phishing attempt. The user should also delete the email from their inbox and trash folder.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_256_img_1.jpg

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_257_img_1.jpg

Classification: c) Legitimate

This email is a legitimate email, as it is from a trusted source and has a valid purpose. There are no

suspicious items in this email, as the from address, the to address, and the email body are all

consistent and relevant. The appropriate resolution for this email is B. Perform no additional actions.

The user can reply to the email and thank the sender for the interview opportunity. The user does

not need to report, unsubscribe, or delete this email.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_257_img_2.jpg

for the

solution.

Explanation:

Host 2 and Media Server put them to Quarantine.

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/CompTIA_220-1102_Dumps/page_57_img_1.jpg

To fulfill the customer's goal of saving cloud documents during a power failure, the Computer and Monitor must remain powered to allow user interaction. Additionally, the Cable Modem and Wi-Fi Router must be on the UPS to maintain the internet connection required for cloud synchronization.

The Printer should be moved to the Wall Outlet. Laser printers draw significant in-rush current (often peaking above 1000W) when heating their fusers. This can overload a UPS or the surge strip feeding it, causing dropped loads or battery damage. Isolating the printer on the wall ensures it does not trip the power path to the UPS. The Scanner is sensitive to voltage spikes but does not require battery backup, making the Surge Protector the appropriate destination.

Columbia University, Health IT Certificate Program, Component 4: Introduction to Information and Computer Science, Unit 7-4 Lecture Handout.

Relevant Quote: "Never plug laser printer into UPS. Due to power requirements, will instantly drain available UPS battery power."

Schneider Electric (APC), User Manual: Smart-UPS 750/1000/1500 VA.

Relevant Section: Installation / Basic Operation.

Guidance: "Laser printers draw significantly more power than other types of equipment and may overload the UPS."

University of Houston, Section 26 33 53: Static Uninterruptible Power Supply, Master Specifications.

Context: Defines technical standards for UPS load management and isolation of critical vs. non-critical loads to prevent system bypass during overloads.