220-1202 Practice Questions

A Material Safety Data Sheet (MSDS), now more commonly known as a Safety Data Sheet (SDS), is a document that provides comprehensive information about a substance or mixture for use in workplace chemical management. For a battery backup, which contains hazardous materials like lead and acid, the SDS details crucial safety information. This includes first-aid measures, firefighting procedures, and steps to take in case of an accidental release, all of which fall under the category of emergency procedures.

A. Installation instructions are found in the product's user or technical manual, not the SDS, which focuses on chemical safety.

C. Configuration steps are part of the operational guide for the device, not a document concerning hazardous material safety.

D. Voltage is a technical specification of the device and would be listed on the product label or in its technical manual, not the SDS.

1. Occupational Safety and Health Administration (OSHA). (2012). Hazard Communication Standard: Safety Data Sheets. OSHA 3514. Section 1910.1200(g) specifies the required 16 sections of an SDS, including Section 4 (First-aid measures), Section 5 (Fire-fighting measures), and Section 6 (Accidental release measures).

2. University of California, Office of the President. (n.d.). UC Laboratory Safety Manual, Chapter 5.3 Safety Data Sheets. Retrieved from ucsd.edu. Section 5.3.1 states, "SDSs describe the physical and chemical properties of a product and the health hazards, and guidelines for its safe handling, storage, and disposal."

The term "end of life" (EOL) specifically refers to the phase in a software product's lifecycle when the vendor ceases all support. This includes halting the development of patches and security updates. Receiving a notification that security updates will no longer be issued is a direct indicator that the operating system has reached its EOL date. Continuing to use an EOL OS poses a significant security risk as new vulnerabilities will not be remediated by the vendor.

A. Manufacturer support is for the hardware, not the operating system software. The OS vendor (e.g., Microsoft) is responsible for OS updates.

C. Removing a feature from a future version does not affect security updates for the current, supported version of the OS.

D. A new OS release does not immediately trigger the end of life for the previous version; vendors typically support older versions for a period.

1. Microsoft Corporation. (2023). Microsoft Lifecycle Policy. Microsoft Docs. Retrieved from https://learn.microsoft.com/en-us/lifecycle/policies/fixed. The "End of support" section states, "End of support is the date when Microsoft no longer provides fixes, updates, or online technical assistance."

2. CompTIA. (2023). CompTIA A+ Core 2 (220-1202) Exam Objectives. Version 5.0. Section 1.3, "Given a scenario, use features and tools of the Microsoft Windows 10 and 11 operating systems," includes "Windows versions and lifecycles" as a key knowledge area.

3. Souppaya, M., & Scarfone, K. (2013). NIST Special Publication 800-12 Rev. 1: An Introduction to Information Security. National Institute of Standards and Technology. p. 51, Section 4.4.2. Discusses the importance of managing the software lifecycle, including disposal/end-of-life, as a security control. https://doi.org/10.6028/NIST.SP.800-12r1

An Acceptable Use Policy (AUP) is a formal document that an organization uses to define the rules and guidelines that employees must follow when using corporate assets, such as computers, networks, and internet access. Its primary purpose is to outline permitted and prohibited activities to ensure the security, legality, and proper use of the organization's technological resources. This directly matches the description in the question.

B. A Mutual Non-Disclosure Agreement (MNDA) is a legal contract governing the confidentiality of shared information, not general resource use.

C. Digital Rights Management (DRM) is a technology used to control access to copyrighted digital content, not a policy for employees.

D. An End-User License Agreement (EULA) is a legal contract between a software vendor and a user for a specific application.

1. SANS Institute. (2022). Security Policy Templates: Acceptable Use Policy. This resource, often used in academic settings, defines an AUP's purpose as outlining "the acceptable use of computer equipment."

2. National Institute of Standards and Technology (NIST). (2020). SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations. Control family PL-4, "Rules of Behavior," describes the requirement for organizations to establish and make readily available the rules describing responsibilities and expected behavior with regard to information and system usage, which is the function of an AUP.

3. University of Texas at Austin. (n.d.). Information Resources Use and Security Policy. This is an example of a university AUP that explicitly states rules for "permitted activities" for its employees and students.

To remotely access and use a Windows PC at the office, a user typically needs two components. First, a Virtual Private Network (VPN) is required to establish a secure, encrypted connection (a "tunnel") from the user's home network to the company's private network. Once connected to the network via the VPN, the user can then use Remote Desktop Protocol (RDP), a proprietary Microsoft protocol, to view and interact with the graphical user interface of their office Windows PC as if they were physically present.

A. SPICE: While a remote-display protocol, it is more commonly associated with virtualized environments and is not the native solution for standard Windows remote access.

B. SSH: Secure Shell is primarily used for secure command-line access and file transfers, not for controlling a full graphical desktop environment.

E. RMM: Remote Monitoring and Management tools are used by IT administrators to manage multiple systems, not for end-user remote desktop access.

F. WinRM: Windows Remote Management is a protocol for managing systems via command-line interfaces like PowerShell, not for graphical access.

1. Microsoft Corporation. (2023). Remote Desktop clients. Microsoft Learn Documentation. This document describes how to use RDP to "connect to and control a remote PC."

2. Stanford University IT. (n.d.). How to Connect to the Stanford VPN with Cisco Secure Client. This university guide explains that a VPN is required to "access services on the Stanford network from a remote location." It is a prerequisite for accessing internal resources like a desktop computer.

3. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 8.3, "Securing TCP Connections: SSL," provides the foundational concepts for VPNs, explaining how they create a secure channel over an insecure network.

A Virtual Private Network (VPN) is the standard technology used to provide secure remote access to a private corporate network over a public network like the internet. By establishing an encrypted tunnel between the user's laptop and the company's network, the VPN allows the user to access internal resources, such as file servers, as if they were physically present in the office. This directly addresses the user's inability to access work files while at home.

A. A Wide-area network (WAN) is a broad network type, like the internet itself. It is not a specific configuration that a technician would set up to grant access.

B. A wireless network provides local connectivity (e.g., at the user's home). It does not inherently grant access to a remote corporate network's private resources.

C. Proxy network settings are used to route web traffic through an intermediary server, often for content filtering or anonymity, not for accessing internal file shares.

1. Microsoft Corporation. (2023). VPN connections in Windows. Microsoft Learn. Retrieved from learn.microsoft.com/en-us/windows/client-management/mdm/vpn-connections-in-windows. (This document details how VPNs are configured in Windows to connect to corporate networks).

2. Carnegie Mellon University. (n.d.). Software Engineering Institute - Virtual Private Network (VPN). Retrieved from resources.sei.cmu.edu/assetfiles/whitepaper/200301900152537.pdf. (Page 1, Section 1.1, describes a VPN's function in providing secure communication over an untrusted network).

3. Federal Communications Commission (FCC). (n.d.). Cybersecurity for Small Business - Secure Remote Access. Retrieved from www.fcc.gov/communications-business-opportunities/cybersecurity-small-businesses/secure-remote-access. (This official government source identifies VPNs as a primary method for securing remote access).

BitLocker To Go is a specific Microsoft Windows feature designed for full volume encryption of removable data drives, such as USB flash drives and external hard drives. The primary security purpose of deploying this technology and training staff on its use is to protect organizational data on these portable devices. By enforcing encryption, typically with a password or smart card, the data remains confidential and inaccessible to unauthorized individuals if the device is lost or stolen. This directly mitigates the risk of a data breach from lost removable media.

B. Secure Boot and BIOS passwords protect the system's pre-boot environment and firmware, not data on removable media.

C. VPNs (Virtual Private Networks) are used to encrypt data in transit over a network, which is unrelated to encrypting data at rest on a USB drive.

D. Using a TPM is characteristic of standard BitLocker Drive Encryption for internal system drives, not BitLocker To Go for removable media.

1. Microsoft. (2023, December 21). BitLocker To Go FAQ. Microsoft Learn. The document's overview states, "BitLocker To Go is BitLocker Drive Encryption on removable data drives... BitLocker To Go allows users to encrypt the contents of a removable data drive to protect the contents."

2. Carnegie Mellon University. (n.d.). Information Security Office - BitLocker To Go. This university documentation explicitly describes BitLocker To Go as a tool to "encrypt removable storage devices such as USB flash drives" to "protect the data on the device from being compromised in the event that the device is lost or stolen."

The user can upload files on the office Wi-Fi but not when outside, which strongly suggests the issue is with the cellular data connection. Dismissing an error notification is a key detail. Mobile operating systems and cellular carriers often have data usage limits or a "Data Saver" mode that can restrict background data or large file transfers to prevent overage charges. The error message likely warned of this limit. Checking the device's cellular data usage settings is the most logical first step to diagnose the root cause.

B. Enabling airplane mode would disable all wireless radios, including cellular, making it impossible to connect to any network.

C. While rebooting is a general troubleshooting step, it does not address the specific symptom of failure only on cellular data.

D. Bluetooth is a short-range wireless technology used for connecting peripherals and is not used for uploading files to corporate servers.

1. Google. (n.d.). Reduce & manage mobile data usage on Android. Android Help. This guide explains how to check data usage and how Data Saver mode can "prevent some apps from sending or receiving data in the background."

2. Apple Inc. (2024). View or change cellular data settings on iPhone. Apple Support. Document ID: S1112. This guide details how to monitor cellular data usage per app and how Low Data Mode works, which "helps apps on your iPhone reduce their network data use."

3. Federal Communications Commission (FCC). (2023, August 10). Managing Your Wireless Data Usage. Consumer Guide. This official guide explains how carriers may "throttle" or slow data speeds after a certain usage threshold is reached, which could cause uploads to fail.

This scenario describes a classic "evil twin" attack, which uses a rogue wireless access point. The attacker sets up an AP with the same SSID as a legitimate, trusted network but with weaker or no security. Unsuspecting users connect to it, allowing the attacker to intercept their traffic. The ability to access the internet but not internal corporate resources (like file shares) is a key indicator, as the rogue AP is connected to the internet but not to the secure internal corporate LAN.

A. An unreachable DNS server would typically prevent internet browsing by domain name, which contradicts the scenario where users can access the internet.

B. A VLAN misconfiguration is an internal network setup error and would not explain the appearance of a new, unsecured wireless network.

C. An incorrect IP address is a symptom of connecting to the rogue network (which likely has its own DHCP server), but the root cause is the rogue AP itself.

1. National Institute of Standards and Technology (NIST). (2012). Special Publication 800-153: Guidelines for Securing Wireless Local Area Networks (WLANs). Section 3.1.1, "Rogue Access Points," describes how unauthorized APs can be used to bypass network security and how "evil twins" specifically mimic legitimate APs to steal credentials or launch man-in-the-middle attacks.

2. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 8, "Security in Computer Networks," discusses Wi-Fi security threats, including rogue access points used in "evil twin" attacks to trick users into connecting to a malicious network.

3. Stallings, W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson. Chapter 17, "Wireless Network Security," details various attacks on wireless networks, including the rogue access point and man-in-the-middle attacks facilitated by mimicking a legitimate SSID.

When an application stops working immediately after a major operating system upgrade, the most common cause is an incompatibility between the existing app version and the new OS. The OS update may have introduced changes to APIs, security policies, or system functions that the older app cannot handle. The app developer typically releases a patch or update to ensure compatibility with the new OS. Therefore, checking for and applying an update for the specific application is the most direct and likely solution.

B. The user was already accessing corporate email, implying the device was likely already managed. This is a configuration step, not a fix for a software crash.

C. Installing a third-party client is a workaround, not a solution for the specified corporate application, and may violate security policies.

D. Clearing the cache can resolve minor performance issues but is unlikely to fix a fundamental incompatibility caused by an OS upgrade.

1. Google. (n.d.). Android Developers - Meet Google Play's target API level requirement. Official vendor documentation. This resource explains that developers must update their apps to target new API levels introduced in OS updates, demonstrating the direct link between OS versions and app compatibility.

2. Apple. (n.d.). Developer Documentation - Adopting new API features. Official vendor documentation. This guide instructs developers on how to update their applications to work with new features and requirements in updated versions of iOS, highlighting the need for app updates post-OS upgrade.

3. Vogel, L. (2016). Android Development Tutorial. vogella.com. (Widely cited in academic syllabi). Section 1.4, "Android Platform and Fragmentation," discusses the challenges developers face in maintaining app compatibility across different Android OS versions and devices, reinforcing that OS updates often necessitate app updates.

Videoconferencing platforms provide real-time two-way audio, video, screen-sharing, and recording—features specifically designed for interactive meetings and training sessions between distributed participants such as a CEO and remote staff.

B. Screen sharing alone lacks integrated audio/video conferencing and participant interaction tools.

C. Remote Desktop is for single-user remote control, not multi-party meetings.

D. VDI delivers full desktops to users, not a meeting/training medium.

1. Cisco Webex Technical Overview, §2 “Videoconferencing capabilities” (Cisco Systems, 2022).

2. MIT OpenCourseWare, “Distributed Collaboration Technologies,” Lecture 6 slides, p.7 “Video conferencing for group communication” (MIT, 2021).