Pass the CompTIA A+ 220-1202 Questions and answers with CertsForce

The correct answers are D. Use PIN authentication and F. Enable screen timeout, because both controls directly protect a mobile device from unauthorized physical access. Physical access controls are designed to prevent someone from using a device if it is lost, stolen, or left unattended.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, mobile device security begins with lock-screen controls, such as PINs, passwords, biometrics, and automatic locking mechanisms. A PIN authentication requirement ensures that even if an attacker physically possesses the device, they cannot access its contents without the correct credentials.

The guide further explains that screen timeout (automatic locking after inactivity) is a critical security feature. Without it, a device left unattended—even briefly—could be accessed by unauthorized individuals. Enabling a short timeout greatly reduces this risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide reinforces that VPNs and antivirus software protect data in transit and against malware, not physical access. Likewise, disabling hotspots and enabling location services are management or tracking features, not access prevention mechanisms.

The Mike Meyers / Mark Soper Lab Manual emphasizes that physical security controls focus on preventing interaction with the device itself, making PIN authentication and automatic screen locking the most effective measures.

Therefore, D and F are the correct answers.

MDM hardening often includes enforcing stronger authentication on mobile devices. The phrase “unique to each user” points to something inherent to the individual—biometrics—rather than something the user knows (password/pattern) or something they have (PIV/smart card). Quentin Docter explains: “Biometric devices use physical characteristics to identify the user. This type of authentication is considered something that you are,” and lists common implementations including “fingerprint… scanners.” This exactly matches a fingerprint, which is unique per person and commonly enforced via device policies in MDM environments.

Docter also notes mobile devices increasingly implement biometrics for access control, specifically citing “fingerprint access control” adopted by manufacturers. A drawn pattern and a password are knowledge factors and can be shared/observed, while a PIV card is a possession factor (something you have) and can be lost or loaned. Because the question specifies a hardening technique “unique to each user,” the best match is the biometric factor: fingerprint (B).

The correct answer is C. Disconnect the power, because safety is the first priority when working inside a computer case. Before opening the system, all power sources must be removed to prevent electrical shock and hardware damage.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, technicians should always shut down the system and disconnect the power cable before opening a computer. Even powered-off systems can still carry electrical current if they remain plugged in.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that unexpected noises are often caused by fans, loose cables, or failing hard drives. Opening the case while the system is powered can cause injury or damage sensitive components.

The Mike Meyers / Mark Soper Lab Manual reinforces the standard safety sequence: power off the system, unplug it, discharge residual power, and then apply grounding measures before touching internal components.

Because disconnecting power eliminates electrical hazards and protects both the technician and the equipment, C is the correct answer.

Thefirst stepin troubleshooting degraded mobile performance is typically arestart. This clears RAM and stops background processes that might be causing issues.

FromAll-in-One Exam Guide:

“Before taking invasive measures like a factory reset, always restart the device. A reboot clears temporary files and can significantly improve responsiveness.”

The correct answer isVNC (Virtual Network Computing). VNC is a graphical desktop-sharing system that uses the Remote Frame Buffer protocol (RFB) to remotely control another computer. It is platform-independent and widely supported on Linux, which makes it ideal for providinginteractive remote support for a Linux-based operating system. It allows the technician not only to view the remote desktop session but also tocontrol it, fulfilling the need to see and interact with the user’s session.

A. VPN(Virtual Private Network) creates a secure tunnel to a network but doesnot provide desktop sharing or session controlby itself.

C. SSH(Secure Shell) provides secure command-line access to Unix/Linux systems but does not offergraphical desktop interaction, which is a requirement in this case.

D. RDP(Remote Desktop Protocol) is primarily a Microsoft protocol, and although it can be made to work on Linux, it isnot natively supported on legacy Linux systems, and thusless suitablethan VNC in this scenario.

CompTIA A+ 220-1102 Core 2 Objective Reference:

Objective 1.8 – Given a scenario, use features and tools of the operating system.

Under this objective, candidates are expected to be familiar with remote access technologies, includingRDP, SSH, and VNC, and understand their appropriate uses and limitations on different platforms such as Windows and Linux.

The correct answer is C. BAT, because batch files are specifically designed to execute a sequence of commands automatically in Windows environments. They are commonly used for startup tasks such as launching applications, mapping network drives, setting environment variables, or running maintenance scripts.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, batch files (.bat) are text-based scripts interpreted by the Windows Command Processor (cmd.exe). They are lightweight, easy to create, and can be placed directly in startup folders or scheduled through system tasks.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that batch files are ideal for automation because they do not require compilation and can run without user interaction. This makes them well-suited for startup operations that must execute consistently every time the system boots or a user logs in.

The Mike Meyers / Mark Soper Lab Manual contrasts batch files with other file types: .sh files are used in Linux and macOS, .msi files are installer packages, and .exe files are compiled programs that may prompt user interaction or security warnings.

Because batch files are native to Windows, scriptable, and commonly used for startup automation, C. BAT is the correct answer.

A management profile is used to enforce corporate policies on Apple devices. These profiles are installed via an MDM (Mobile Device Management) solution and control access, restrictions, Wi-Fi settings, app installations, and more. They’re critical for managing devices in a business environment.

A. The App Store allows software downloads but doesn’t control policies.

B. VPN configuration is used for secure remote connections, not enforcement of restrictions.

C. Apple ID is for personal account access to Apple services, not corporate device management.

A repeated failure to open Task Manager —a core Windows troubleshooting utility—strongly suggests the system is compromised and critical tools are being interfered with. In malware-response methodology, Quentin Docter emphasizes that the first step is to “identify and verify the malware symptoms” before proceeding to containment and remediation. If Task Manager cannot be launched at all, that behavior itself is a highly suspicious symptom consistent with malicious activity attempting to prevent the administrator from viewing or stopping processes.

Docter also explains that when systems are compromised by a virus or other malware, the threat agent may embed persistent access methods, and in some cases the only way to be sure it’s fully removed is to reinstall the OS—highlighting how deeply malware can integrate and disrupt normal tools.

The other options do not plausibly block Task Manager: a developer application may increase CPU/RAM usage but typically won’t prevent Task Manager from opening; Windows Update set to manual affects patching behavior; and moving the pagefile can affect performance but not usually stop Task Manager from launching.

Anincident reportsummarizes what happened during an outage, the timeline, the actions taken, and the resolution, which is exactly what management typically requests post-incident.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Incident reports document the events of an IT issue or outage, including detection, response, and resolution. They are crucial for post-incident review and management accountability.”

Authenticator apps (e.g., Microsoft Authenticator, Google Authenticator, Duo) often support push notifications. When the user logs in, the app sends a push to their mobile device, prompting the user to approve or deny the authentication request — a common and user-friendly form of multi-factor authentication (MFA).

A. Phone call verification is a separate method involving voice-based confirmation.

C. Hardware tokens generate one-time codes but do not send push notifications.

D. SMS sends a text message with a code — again, no push mechanism.