Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
A user keeps seeing malicious ads in the bottom-right corner of the screen. When the ads appear, the icon for the Internet browser process is visible in Task Manager. A technician runs an anti-malware scan that shows no results. Which of the following is the cause of this issue?
The correct answer is A. Browser notifications. The clue is that the browser process appears in Task Manager when the ads appear, but the anti-malware scan finds nothing. This points to allowed browser push notifications rather than an installed malware infection. Quentin Docter's Complete Study Guide explains that browser push notifications can be abused when a user is tricked into allowing notifications from a malicious site. The site can then push notifications to the operating system that look like system messages or advertisements. The guide also recommends periodically reviewing which sites are allowed to send notifications. A browser hijacker usually changes browser behavior such as search engines, home pages, or redirections. Browser cache stores website files but does not normally generate persistent malicious notifications. A remote access Trojan would involve unauthorized remote control, not simply browser-generated ad notifications with no malware scan result.
A client reports that their browser's home page changed. Every time they run an internet search, the results are returned from unfamiliar websites. Which of the following actions should a technician take first to resolve the issue? (Select two)
The symptoms suggest abrowser hijacker. Thefirst stepsshould be toremove any malicious extensionsandreset the startup pageto restore normal behavior.
FromAll-in-One Exam Guide:
''Browser hijackers often install as extensions and change homepage settings. Removing these extensions and resetting the startup configuration typically resolves the issue.''
A business is hiring a remote employee and must provide the employee with graphical interface access to the in-house Linux servers. Which of the following should the business use for this process?
The requirement is graphical interface access to Linux servers. SSH is excellent for secure command-line access, but it is not a GUI remote desktop by default. Mike Meyers explains this distinction clearly: ''The kind of remote command-line access you can get with SSH is great... When you need remote access to the full graphical desktop, you need a remote desktop application.'' He then notes that most remote desktop tools use ''either the Remote Desktop Protocol (RDP) or Virtual Network Computing (VNC),'' and that TightVNC is cross-platform.
The All-in-One guide repeats the same point: for a full graphical desktop, remote desktop applications commonly use RDP or VNC, and VNC solutions are cross-platform. Since the servers are Linux and the employee needs GUI access, VNC is the best answer among the choices. Telnet is insecure (clear-text credentials), and WinRM is Windows-focused management. Therefore, choose VNC (B).
Which of the following Linux commands is used to read another command's documentation?
The correct answer is C. man, which stands for manual. The man command is used in Linux and UNIX-based operating systems to display the official documentation for commands, configuration files, and system calls. This documentation includes descriptions, syntax, available options, and usage examples.
The Quentin Docter -- CompTIA A+ Complete Study Guide explains that Linux relies heavily on built-in documentation accessible from the command line. The man pages are considered the authoritative reference for how a command works and what options it supports. For example, running man cp displays documentation for the file copy command.
The Travis Everett & Andrew Hutz -- All-in-One Exam Guide emphasizes that learning to use man is essential for Linux administration and troubleshooting. Unlike graphical help systems, man pages are always available locally and do not require internet access.
The Mike Meyers / Mark Soper Lab Manual clarifies that chmod changes file permissions, cat displays file contents, and sudo allows commands to be run with elevated privileges. None of these commands provide documentation about other commands.
Because the question specifically asks about reading another command's documentation, the Linux command designed for that exact purpose is man, making C the correct answer.
A technician installs a Bluetooth headset for a user. During testing, the sound still comes from the speaker on the computer. The technician verifies the headset shows up in Device Manager. Which of the following would the technician most likely do to fix this issue?
Just recognizing the device isn't enough---audio output must be routed to it manuallyby setting it as the default playback device in sound settings.
FromMark Soper -- Mike Meyers' Lab Manual:
''If audio is still playing through the internal speaker, verify that the Bluetooth headset is set as the default playback device. This can be configured under Windows Sound Settings.''
An end user is unable to access the intranet. A technician needs to confirm whether the Windows web server is online and functioning. Which of the following default remote access technologies would the technician most likely use to remotely connect to the server?
The correct answer is C. RDP (Remote Desktop Protocol), because RDP is the default remote access technology for Windows servers. It allows technicians to remotely connect to the graphical desktop environment of a Windows server to verify services, logs, and system status.
According to the Quentin Docter -- CompTIA A+ Complete Study Guide, RDP is built into Windows operating systems and is commonly used by administrators to manage Windows servers and workstations. It provides full access to the desktop, making it ideal for checking whether services such as IIS (Internet Information Services) are running properly.
The Travis Everett & Andrew Hutz -- All-in-One Exam Guide explains that while SSH is commonly used for Linux and network devices, Windows servers typically rely on RDP for administrative access. VNC is a third-party remote desktop solution and is not enabled by default on Windows systems.
The Mike Meyers / Mark Soper Lab Manual reinforces that SPICE is primarily used in virtualized environments and is not a standard Windows remote access tool.
Because the technician needs to verify a Windows web server's operational status using a built-in method, RDP is the most appropriate and likely technology, making C the correct answer.
A technician needs to disable guest log-ins on domain-joined desktop machines. Which of the following should be used?
Group Policyis the standard administrative tool for setting user permissions across domain-joined systems.
FromQUENTIN DOCTER -- COMPLETE Study Guide:
''Use Group Policy to enforce user rights, including disabling guest account access on domain computers.''
Exam domains verified against: Official CompTIA 220-1202 exam guide, last checked October 2026.
Install and configure Windows, macOS, Linux, and mobile operating systems for end-user environments. Use Task Manager, Command Prompt, Disk Management, and other system tools to manage device performance, troubleshoot issues, and handle file system operations.
Implement encryption, access controls, and wireless security protocols to protect systems and data. Detect, remove, and prevent malware threats using appropriate tools and best practices.
Diagnose and resolve operating system and application issues, including connectivity and performance problems on mobile devices. Address unauthorized access and malware-related security concerns affecting software operation.
Document system changes and follow best practices for configuration management. Establish backup and recovery processes for workstations while adhering to safety protocols and maintaining clear communication with users.
Common questions about the exam itself
