Pass the CompTIA A+ 220-1202 Questions and answers with CertsForce

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

BitLocker To Go is a Microsoft encryption feature specifically designed for removable drives such as USB flash drives and external hard drives. It allows users to protect the data on these devices by requiring a password to decrypt the contents, thereby preventing unauthorized access in the event the device is lost or stolen.

A is correct because BitLocker To Go is directly tied to password-protecting removable media.

B and C are unrelated to BitLocker To Go; Secure Boot and VPN encryption are entirely different security layers.

D applies to BitLocker (not BitLocker To Go) and full disk encryption on internal drives using TPM.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

The correct answer is C. Windows Server 2022, because Windows Server editions are specifically designed to run server workloads, such as file services, Active Directory, DNS, DHCP, virtualization, and application hosting.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Windows Server operating systems differ significantly from desktop versions. They support server roles, higher hardware limits, and enterprise features not available in client editions.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that Windows 10 Enterprise and Windows 11 Pro are client operating systems intended for end-user workstations. While they can connect to servers, they are not designed to function as servers themselves.

The Mike Meyers / Mark Soper Lab Manual clarifies that version identifiers like 22H2 represent feature updates for Windows client operating systems, not standalone server products.

Because the question asks which version would most likely be installed on a server, the correct choice is Windows Server 2022, making C the correct answer.

To display a file’s contents in Linux, the standard command is cat. Quentin Docter states: “Sometime you just need to view the contents of a file. To view the contents of a file, use the cat command,” and shows an example cat /etc/hosts displaying the file output. He also lists essential Linux commands and explicitly defines cat as: “Displays the contents of a file.”

The other options do not meet the requirement: chmod changes file permissions, ls lists directory contents (or file names), and sudo runs a command with elevated privileges—none directly display a file’s contents by themselves. A+ also expects you to know that cat can do more than display; it can concatenate files and redirect output, but for this question the key function is simply viewing a file.

Therefore, the correct command is cat (B).

3-D rendering is a graphics-intensive workload, and minimum hardware checks for this type of software commonly fail due to GPU capability (including dedicated vs. integrated GPU support) and VRAM requirements. Quentin Docter explains that application “Display” requirements can include “a graphics processing unit (GPU). A specific GPU may be required if the application will process video or graphics.” He also notes that “VRAM requirements are typically related to applications that are graphic intensive, such as gaming,” which aligns strongly with 3-D rendering workloads.

Mike Meyers’ Lab Manual reinforces that “graphically demanding applications… state specific graphics requirements,” and that CompTIA focuses on “dedicated graphics cards versus integrated ones,” because integrated GPUs are often less capable for demanding graphics tasks. It also reminds that systems with integrated GPUs share RAM with graphics, which can matter when software checks VRAM.

Therefore, the first thing to verify is GPU requirements (B), not USB/NIC/PSU.

The best option is to create a lower-security network exclusively for the console. Many retro or legacy gaming consoles only support older Wi-Fi security standards such as WPA or even WEP, and they cannot connect to modern WPA2 or WPA3 networks. Downgrading the entire primary network would significantly weaken overall security, which is not recommended in any environment.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that legacy devices often lack firmware support for modern encryption standards and should be isolated rather than integrated directly into secure networks. Creating a separate SSID with reduced security limits exposure while still allowing connectivity for the unsupported device.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that lowering security settings on a primary router—even temporarily—introduces unnecessary risk. Switching encryption modes back and forth can also cause configuration instability and expose the network during the downgrade window.

The Mike Meyers / Mark Soper Lab Manual further reinforces the concept of network segmentation as a best practice. By creating a dedicated network for legacy or insecure devices, administrators reduce the attack surface and prevent lateral movement to sensitive systems.

Using a wired Ethernet adapter may not be supported by the console, and adding an older router introduces unmanaged vulnerabilities. Therefore, isolating the console on a separate, lower-security wireless network is the safest and most practical solution.

For persistent printing issues due to spooler service, ensure theprint spooler is started and set to Automatic. This maintains print capability across reboots.

FromMike Meyers ' Lab Manual:

“If users lose printing capabilities on reboot, the print spooler service must be configured to start automatically and be confirmed as running.”

A VPN is the best choice because it is designed to provide secure remote access to an internal network over the Internet by creating an encrypted tunnel. Once the VPN is established, the remote user’s device effectively becomes part of the corporate network and can use the appropriate tools for each server type (for example, SSH to Linux and RDP to Windows) without exposing those management services directly to the public Internet. Quentin Docter explains that a VPN “extends your company’s internal network across the Internet,” creating a private connection through “encryption and encapsulation,” and that the host becomes part of the internal network (often receiving an internal IP). The All-in-One guide reinforces this by describing VPNs as an encrypted tunnel over the open Internet.

By comparison, RDP is “used exclusively with Microsoft operating systems,” so it doesn’t meet the Linux requirement. FTP is for file transfers, not full secure remote access, and RMM is primarily for centralized IT monitoring/management rather than a general user remote-access method.

The correct answer is D. Enabling HTTPS-Only Mode, because HTTPS ensures that all communication between the browser and websites is encrypted using TLS (Transport Layer Security). This protects sensitive information such as usernames, passwords, and payment details from interception.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, HTTPS encrypts data in transit, preventing attackers from eavesdropping or modifying communications. HTTPS-only modes in modern browsers block or warn users when a site does not support secure connections.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that HTTPS is essential for protecting authentication credentials and financial information, especially on public or untrusted networks. Enforcing HTTPS-only connections ensures users cannot accidentally submit data over unencrypted HTTP.

The Mike Meyers / Mark Soper Lab Manual clarifies that disabling cookies or JavaScript may break website functionality but does not guarantee encryption. Pop-up blockers address nuisance behavior, not data security.

Because the objective is to encrypt browser communications and protect sensitive data, enabling HTTPS-Only Mode is the most effective and direct solution, making D the correct answer.