[Dec 06, 2025] 220-1102 PDF Recently Updated Questions Dumps to Improve Exam Score [Q481-Q495]

NEW QUESTION 481
A system drive is nearly full, and a technician needs lo tree up some space. Which of the following tools should the technician use?

Disk Cleanup

Resource Monitor

Disk Defragment

Disk Management

NEW QUESTION 482
A systems administrator is creating periodic backups of a folder on a Microsoft Windows machine. The source data is very dynamic, and files are either added or deleted regularly. Which of the following utilities can be used to ‘mirror the source data for the backup?

copy

xcopy

robocopy

Copy-Item

NEW QUESTION 483
A hotel’s Wi-Fi was used to steal information on a corporate laptop. A technician notes the following security log:
SRC: 192.168.1.1/secrets.zip Protocol SMB >> DST: 192.168.1.50/capture
The technician analyses the following Windows firewall information:

Which of the following protocols most likely allowed the data theft to occur?

1

53

110

445

NEW QUESTION 484
A technician needs to add an individual as a local administrator on a Windows home PC. Which of the following utilities would the technician MOST likely use?

Settings > Personalization

Control Panel > Credential Manager

Settings > Accounts > Family and Other Users

Control Panel > Network and Sharing Center

NEW QUESTION 485
Which of the following must be maintained throughout the forensic evidence life cycle when dealing with a piece of evidence?

Security policy

Information management

Acceptable use

Chain of custody

NEW QUESTION 486
A developer reports that a workstation’s database file extensions have been changed from .db to .enc. The developer is also unable to open the database files manually. Which of the following is the best option for recovering the data?

Accessing a restore point

Rebooting into safe mode

Utilizing the backups

Using an AV to scan the affected files

The scenario described in the question suggests that the workstation has been infected by a ransomware, which is a type of malware that encrypts the files on the target system and demands a ransom for the decryption key12. The file extension .enc is commonly used by some ransomware variants to mark the encrypted files34. The developer is unable to open the database files manually because they are encrypted and require the decryption key, which is usually held by the attacker.
The best option for recovering the data is to utilize the backups, assuming that the backups are recent, valid, and not affected by the ransomware. Backups are copies of the data that are stored in a separate location or device, and can be used to restore the data in case of a disaster, such as a ransomware attack . By restoring the data from the backups, the developer can avoid paying the ransom and losing the data permanently.
Accessing a restore point is not a good option, because restore points are snapshots of the system settings and configuration, not the data files. Restore points can help to undo some system changes, such as installing a faulty driver or software, but they cannot recover the encrypted data files .
Rebooting into safe mode is also not a good option, because safe mode is a diagnostic mode that allows the system to run with minimal drivers and services, but it does not affect the data files. Safe mode can help to troubleshoot some system issues, such as malware infections, but it cannot decrypt the data files .
Using an AV to scan the affected files is also not a good option, because an AV is a software that can detect and remove some malware, but it cannot decrypt the data files. An AV can help to prevent or remove some ransomware infections, but it cannot recover the encrypted data files .
Reference:
1: CompTIA A+ Certification Exam Core 2 Objectives, page 10 2: CompTIA A+ Core 2 (220-1102) Complete Video Course, Lesson 26 Documentation 3: How to remove .enc file virus (Ransomware virus removal guide) 4: Enc File Extension – What is an .enc file and how do I open it? : CompTIA A+ Certification Exam Core 2 Objectives, page 13 : CompTIA A+ Core 2 (220-1102) Complete Video Course, Lesson 26 Documentation : What is a restore point? : How to use System Restore on Windows 10 : [What is Safe Mode?] : [How to boot into Safe Mode on Windows 10] : CompTIA A+ Certification Exam Core 2 Objectives, page 10 : [Can antivirus software remove ransomware?]

NEW QUESTION 487
A customer’s workstation cannot connect to the internet. A technician runs a command on the workstation to view the network settings. The following is a partial readout of the response:

Which of the following is the most likely cause of the issue?

The IP address is incorrect.

The subnet mask is incorrect.

The gateway setting is incorrect.

The DNS servers are incorrect.

The physical address is spoofed.

NEW QUESTION 488
A call center handles inquiries into billing issues for multiple medical facilities. A security analyst notices that call center agents often walk away from their workstations, leaving patient data visible for anyone to see. Which of the following should a network administrator do to BEST prevent data theft within the call center?

Encrypt the workstation hard drives.

Lock the workstations after five minutes of inactivity.

Install privacy screens.

Log off the users when their workstations are not in use.

NEW QUESTION 489
The calendar application on an employee’s smartphone is experiencing frequent crashes, and the smartphone has become unresponsive. Which of the following should a technician do first to resolve the issue?

Reinstall the application on the smartphone.

Update the smartphone’s OS.

Reset the smartphone to factory settings.

Reboot the smartphone.

NEW QUESTION 490
Which of the following is used to ensure users have the appropriate level of access to perform their job functions?

Access control list

Multifactor authentication

Least privilege

Mobile device management

NEW QUESTION 491
A police officer often leaves a workstation for several minutes at a time. Which of the following is the BEST way the officer can secure the workstation quickly when walking away?

Use a key combination to lock the computer when leaving.

Ensure no unauthorized personnel are in the area.

Configure a screensaver to lock the computer automatically after approximately 30 minutes of inactivity.

Turn off the monitor to prevent unauthorized visibility of information.

NEW QUESTION 492
A user enabled a mobile device’s screen lock function with pattern unlock. The user is concerned someone could access the mobile device by repeatedly attempting random patterns to unlock the device. Which of the following features BEST addresses the user’s concern?

Remote wipe

Anti-maIware

Device encryption

Failed login restrictions

NEW QUESTION 493
Which of the following Is used to identify potential issues with a proposed change poor lo implementation?

Request form

Rollback plan

End-user acceptance

Sandbox testing

NEW QUESTION 494
After a computer upgrade at an imaging lab. the upgraded computers are not able to obtain an IP address. Which of the following is most likely the issue?

TheswitchIs only providing IPv6 addresses.

TheOS must be updated to be compatible with the imaging software.

Theswitchhas port security enabled.

Theswitchdoes not support multicast traffic.

NEW QUESTION 495
A user receives a call from someone claiming to be a technical support agent. The caller asks the user to log in to the computer.
Which of the following security measures should the user take to ensure security and privacy?

Only accept calls from known people.

Disregard any suspicious emails.

Update the antivirus software.

Enable two-factor authentication.

Install a malware scanner.