CompTIA A+ Core 2 (220-1202) Practice Questions with Explanations

Correct answer: C

ext4 (fourth extended filesystem) is the standard and most commonly used filesystem for Linux operating systems. It is the default filesystem for most modern Linux distributions and is designed specifically for Linux, offering reliability, performance, and scalability.

Why the other options are wrong:

• A. exFAT is a filesystem primarily used for USB drives and memory cards, designed by Microsoft for cross-platform compatibility, not Linux.
• B. APFS (Apple File System) is the filesystem used by macOS and iOS, not Linux.
• D. NTFS (New Technology File System) is the filesystem used by Windows operating systems, not Linux.

Correct answer: C

Proposing the change is the first step in proper change management procedures. Before any approval, scheduling, or implementation can occur, the technician must formally propose the change to document the need, scope, and justification for upgrading the end- of-life switches. This establishes the change request that will then go through approval and scheduling workflows.

Why the other options are wrong:

• A. Implementation cannot occur first; changes must be proposed, approved, and scheduled before implementation.
• B. Approval comes after the change has been proposed and documented.
• D. Scheduling occurs after the change is proposed and approved, not before.

Correct answer: A

Event Viewer is the primary Windows tool for diagnosing service failures and interruptions. It logs detailed information about services stopping unexpectedly, including error codes and timestamps that help identify the root cause of why a service stops at certain points in its execution.

Why the other options are wrong:

• B. Task Manager shows running processes and performance but doesn't provide the detailed diagnostic logs needed to understand why a service fails at specific points.
• C. Internet Options configures browser settings and has no relevance to troubleshooting service failures.
• D. Process Explorer shows process details and relationships but lacks the historical event logging necessary to determine why a service stops intermittently.

Correct answer: D

A zero-day vulnerability is, by definition, a vulnerability that has been discovered and exploited by attackers before the vendor is aware of it or has released a patch. The term 'zero-day' refers to the fact that vendors have had zero days to develop and release a fix.

Why the other options are wrong:

• A. Spoofing is an attack technique (impersonation), not a vulnerability classification.
• B. Brute-force is an attack method, not a type of vulnerability.
• C. DoS (Denial of Service) is an attack, not a vulnerability type or a descriptor of patch availability.

Correct answer: C

The 'net use' command is the standard Windows command-line tool for mapping network drives and shared resources. It allows technicians to establish persistent or temporary connections to shared folders on remote servers from a command-line interface.

Why the other options are wrong:

• A. Pathping tests network connectivity and routing but does not map network drives.
• B. Nslookup performs DNS name resolution lookups and does not map network drives.
• D. Tracert traces the route packets take to a destination but does not map network drives.

Correct answer: C

When an issue recurs immediately after resolution, it indicates a persistent underlying problem that requires deeper investigation beyond the initial fix. Escalation to a higher support level ensures the root cause is identified rather than applying temporary solutions repeatedly.

Why the other options are wrong:

• A. Simply reconnecting remotely to verify current status does not address the recurring nature of the problem.
• B. Documentation for end-user self-service is inappropriate when a technical issue demonstrates a pattern requiring professional diagnosis.
• D. Keeping the ticket open without action and closing it arbitrarily does not resolve the recurring issue.

Correct answer: D

For distributing custom images to 800 devices across multiple vendor classes and user groups, a network-based remote installation tool (such as Windows Deployment Services, SCCM, or similar solutions) is the most efficient and scalable approach. It allows centralized management, supports multiple device types, and can be configured with different profiles for different user groups without manual intervention on each device.

Why the other options are wrong:

• A. xcopy is a file-copying utility designed for small-scale transfers, not bulk OS image deployment to hundreds of devices.
• B. robocopy is a file synchronization tool, not an imaging solution, and would not efficiently deploy complete OS images across 800 devices.
• C. Using a local tool on each device would be extremely time-consuming and impractical for 800 devices and would lack centralized control.

Correct answer: C

Standard operating procedures (SOPs) establish consistent, documented guidelines and checklists that technicians must follow on every call. SOPs specifically address documentation requirements such as contact information, asset tags, and issue descriptions, ensuring consistency across all help desk interactions.

Why the other options are wrong:

• A. Service-level agreements define response and resolution time targets but do not establish documentation procedures or requirements.
• B. Call categories are classification systems for organizing ticket types but do not mandate specific documentation fields or processes.
• D. Knowledge base articles provide solutions and reference information but do not establish documentation standards or requirements for technicians.

Correct answer: D

A management profile (also called Mobile Device Management or MDM profile) is the mechanism for applying corporate restrictions and policies to Apple devices. It allows IT administrators to enforce security policies, configure settings, restrict app installations, and manage device compliance without requiring physical device access.

Why the other options are wrong:

• A. App Store is for downloading applications, not enforcing corporate restrictions.
• B. VPN configuration is one specific network setting but doesn't provide comprehensive corporate restrictions.
• C. Apple ID is for personal account authentication and services, not corporate policy enforcement.

Correct answer: D

A Virtual Private Network (VPN) is the standard solution for securely accessing company resources from a remote location like a home office. VPNs encrypt the connection and authenticate the user before granting access to internal company files and systems. This is the industry-standard approach for remote work security.

Why the other options are wrong:

• A. A WAN connects multiple office locations together, not individual remote workers to company resources.
• B. A wireless network is a local connectivity method and doesn't address accessing company files securely from home.
• C. Proxy settings manage web traffic filtering but don't provide secure authenticated access to internal company file systems.

Correct answer: A

After a mobile OS upgrade, the most likely issue is that the email application is incompatible with the new OS version or requires an update. Updating the failed software addresses version mismatches and compatibility issues that emerge after OS upgrades.

Why the other options are wrong:

• B. MDM registration manages device policies and security but does not resolve application compatibility or functionality issues after an upgrade.
• C. Installing a third-party client is unnecessary when the original application may simply need updating to work with the new OS.
• D. Clearing the cache partition addresses storage and temporary data issues, not compatibility problems caused by OS upgrades.

Correct answer: B

Video surveillance is the primary technology used to detect and record access to restricted areas. Security cameras provide continuous monitoring and recording of who enters and exits restricted zones, creating an audit trail of access events. This technology serves both as a deterrent and as evidence in security incidents. While badge readers control access, they do not detect or record visual access. Bollards and fences are physical barriers that prevent access but do not provide detection or recording capabilities.

Why the other options are wrong:

• A. Bollards are physical barriers that prevent vehicle access but do not detect or record access attempts.
• C. Badge readers control access permissions but do not inherently detect or record visual access to areas.
• D. Fences are physical perimeter barriers that prevent access but do not detect or record unauthorized access attempts.

Correct answer: B

When a user can access the main portal via SSO but cannot access a specific SaaS application, the issue is often caused by local session state, cached cookies, or browser- specific conflicts. Using a private browsing window eliminates cached credentials and local session data, allowing the browser to create a clean SSO flow to the SaaS application without interference from previous sessions.

Why the other options are wrong:

• A. Reenrolling an MFA device would only be necessary if MFA itself was failing, not if SSO to one specific application is broken.
• C. Bypassing SSO entirely defeats the purpose of troubleshooting the SSO issue and is not a diagnostic step.
• D. Factory reset is an extreme measure inappropriate as a first troubleshooting step for an application-specific SSO problem.

Correct answer: C

Resource Monitor provides real-time visibility into CPU, memory, disk, and network usage by individual processes and applications. When an application is slowing without errors or crashes, Resource Monitor is the best tool to identify which system resources are being consumed excessively, guiding further investigation.

Why the other options are wrong:

• A. Reliability history shows system crashes and warnings but not real-time resource consumption or gradual performance degradation without errors.
• B. Computer Management is a general administration tool useful for services and processes but does not provide detailed real-time resource monitoring.
• D. Disk defragmentation is a maintenance operation and not a diagnostic tool; it also assumes the issue is disk-related without investigation.

Correct answer: D

Image deployment captures a pre-configured operating system and applications as a single image that can be rapidly deployed to multiple workstations simultaneously. This is significantly faster than installing the OS individually on each machine.

Why the other options are wrong:

• A. Physical media requires individual manual installation on each workstation, which is time-consuming.
• B. A mountable ISO still requires manual installation steps on each workstation rather than automated bulk deployment.
• C. Manual installation on each workstation is the slowest possible method for a large number of systems.

Correct answer: A

Virtualization technology is a BIOS/UEFI setting that controls CPU-level virtualization features. A BIOS password restricts access to BIOS settings, ensuring only administrators with the password can enable or disable virtualization. This provides hardware-level access control that prevents unauthorized users from modifying critical system features.

Why the other options are wrong:

• B. Guest accounts have minimal privileges but don't control BIOS settings access.
• C. Screen locks protect against physical access but don't restrict BIOS configuration.
• D. AutoRun settings control automatic execution of media, not virtualization technology.

Correct answer: B

Remote wipe is the best proactive protection against unauthorized access to sensitive data when a device is lost and the user is unaware of the loss. It allows IT to remotely erase all data on the device before a threat actor can access it, ensuring data confidentiality even if the device cannot be physically recovered.

Why the other options are wrong:

• A. Encryption protects data at rest but does not prevent access if the device is already compromised or the password is weak; it also requires the user to be aware of loss.
• C. Geofencing alerts on location anomalies but does not prevent data access and requires the user to take action after being notified.
• D. Facial recognition only prevents unauthorized unlock attempts but does not prevent data access if biometric authentication is bypassed or spoofed.

Correct answer: D

Background applications consume battery power and should be the first diagnostic step when a device charges fully but does not hold charge throughout the day. Since the device charges properly, the charger and power delivery are functioning correctly. Storage usage and software support status are less likely to cause rapid battery drain compared to runaway background processes.

Why the other options are wrong:

• A. Storage usage affects performance and available space but not battery drain rate.
• B. End of software support would be a longer-term concern, not an immediate battery drain issue.
• C. The device charges fully each night, indicating the charger wattage is adequate.

Correct answer: A

The immediate first step in malware incident response is to quarantine infected systems to prevent the malware from spreading to other computers on the network. This containment step must happen before any other remediation activities to limit the scope of the incident.

Why the other options are wrong:

• B. User education is important for prevention but comes after containment, not as the next immediate step.
• C. Disabling System Restore is a remediation step done after quarantine, to prevent malware restoration from recovery points.
• D. Updating anti-malware and scanning should occur after quarantine, not before, to prevent spread during the scan process.

Correct answer: D

BitLocker is Microsoft's built-in full disk encryption technology available on Windows Pro, Enterprise, and Education editions. It encrypts entire drives to protect data if a device is lost or stolen, making it the standard solution for comprehensive drive encryption on Windows laptops.

Why the other options are wrong:

• A. Active Directory manages user authentication and group policies, not drive encryption.
• B. NTFS is a file system; while it supports encryption, it's not full disk encryption like BitLocker.
• C. Encrypting File System (EFS) provides file-level encryption, not full drive encryption.

Correct answer: C

netstat is the best tool to troubleshoot database connectivity issues. It displays active network connections, listening ports, and connection states, allowing the technician to verify whether the application is successfully establishing a connection to the local database server on the expected port.

Why the other options are wrong:

• A. ipconfig displays IP configuration but does not show active connections or whether the application can reach the database server.
• B. nslookup is for DNS resolution; it would not help if the database server is accessed by IP or if DNS is not the issue.
• D. curl is a data transfer tool primarily for HTTP/HTTPS requests; it would not diagnose database connection issues on local servers.

Correct answer: B

VNC (Virtual Network Computing) is the correct choice because it provides remote desktop access with GUI interaction capabilities, allowing the technician to see the user's screen and control the session. VNC works cross-platform, making it ideal for connecting from Windows to Linux systems. While SSH provides secure remote access, it is command-line only and does not provide the visual interaction required. VPN only encrypts network traffic but does not provide remote desktop capabilities. RDP is Windows-specific and would not natively support legacy Linux systems.

Why the other options are wrong:

• A. VPN only provides encrypted network connectivity, not remote desktop or session interaction.
• C. SSH provides command-line access only, not the GUI visual interaction and control needed.
• D. RDP is designed for Windows systems and does not natively support Linux operating systems.

Correct answer: C

A Potentially Unwanted Program (PUP) is software bundled into installation packages without clear disclosure or user consent. Publishers often include PUPs like toolbars, adware, or tracking software alongside legitimate applications, which is the definition of undisclosed additional software bundled in an installation package.

Why the other options are wrong:

• A. A virus is malicious code that replicates and damages systems, not specifically software bundled within installation packages by publishers.
• B. Ransomware encrypts files for extortion; it's not characterized by being bundled as additional software in legitimate installation packages.
• D. A Trojan is malicious software disguised as legitimate, but the term doesn't specifically describe undisclosed bundled software in installation packages like PUPs do.

Correct answer: D

An in-place upgrade is the quickest method to move from Windows 10 to Windows 11 while preserving user data, applications, and settings. It upgrades the operating system while maintaining the existing installation, whereas other methods would require more time or result in data loss.

Why the other options are wrong:

• A. gpupdate is a Group Policy update command and is not a method for upgrading operating systems.
• B. Image deployment requires creating, managing, and deploying system images, which is more time-consuming than an in-place upgrade.
• C. A clean install erases all data and applications, requiring reinstallation of software and reconfiguration of settings, thus violating the requirement to not lose data.

Correct answer: D

Smishing is the specific term for SMS phishing-sending malicious or deceptive text messages to mobile devices to trick users into clicking links or providing information. It combines 'SMS' and 'phishing' and is the direct answer to unsolicited text message attacks.

Why the other options are wrong:

• A. Impersonation is a general social engineering technique but does not specifically describe text message attacks.
• B. Vishing is voice phishing conducted through phone calls, not text messages.
• C. Spear phishing typically refers to targeted email attacks, not SMS-based attacks.

Correct answer: A

BitLocker To Go is specifically designed to encrypt removable media such as USB drives and external hard drives. Training staff on this tool ensures that if removable media is lost or stolen, the data remains protected through encryption. This addresses the critical security need of protecting sensitive data that leaves the organization. BitLocker To Go creates password-protected encrypted volumes on portable devices to prevent unauthorized access in case of loss or theft.

Why the other options are wrong:

• B. Secure Boot and BIOS-level passwords are system-level security features, not the purpose of BitLocker To Go training.
• C. BitLocker To Go does not enforce VPN connectivity or involve hardware encryption modules for VPN.
• D. BitLocker To Go can work with TPM but is not specifically designed to configure laptop hard drives; it is primarily for removable media.

Correct answer: A

Verifying the date and time settings is the correct first step because MFA systems, particularly time-based authentication methods like TOTP, are highly sensitive to device time synchronization. When the user traveled to another country, their device may have retained the original timezone or incorrect time, causing MFA tokens to become invalid. This is a simple check that often resolves authentication issues before attempting more complex troubleshooting steps.

Why the other options are wrong:

• B. Mobile OS patches may help but are not the first troubleshooting step for a time- sensitive MFA issue.
• C. Reinstalling the application is premature without checking basic time synchronization first.
• D. Escalation to the developer should occur only after basic troubleshooting steps have been exhausted.

Correct answer: C

A low-level format writes over all sectors of the drive at the hardware level, making data unrecoverable while preserving the drive's functionality for repurposing. This method overwrites the entire disk surface, eliminating all data recovery possibilities while keeping the drive usable.

Why the other options are wrong:

• A. Deleting partitions only removes the partition table and logical structures; data remains physically on the drive and can be recovered with forensic tools.
• B. EFS (Encrypting File System) encrypts data but does not make it unrecoverable-the drive cannot be easily repurposed without decryption keys.
• D. Degaussing uses a magnetic field to erase data but typically destroys the drive's functionality, making it unsuitable for repurposing.

Correct answer: B

Ransomware specifically encrypts user files and displays messages demanding payment or action to decrypt them. This is the defining characteristic of ransomware attacks. The scenario directly describes encrypted files with system messages, which is the hallmark ransomware behavior.

Why the other options are wrong:

• A. Keyloggers record keystroke input; they do not encrypt files or display messages about encryption.
• C. Phishing is a social engineering attack via email or messages; it does not encrypt files on the system.
• D. Cryptominers use system resources to mine cryptocurrency but do not encrypt user files or generate encryption-related messages.

Correct answer: D

When a specific spreadsheet causes temporary unresponsiveness and the title bar shows 'not responding,' it indicates the application is consuming excessive system resources. File size and memory utilization inspection through Task Manager reveals whether the spreadsheet is consuming excessive RAM or causing memory-related performance issues. This diagnostic approach identifies resource-based performance problems.

Why the other options are wrong:

• A. Anti-malware logs check for malicious activity, not resource consumption issues.
• B. Workstation repair options are too generic and don't address specific spreadsheet performance.
• C. Bandwidth status in Task Manager monitors network usage, not the local memory/file size causing unresponsiveness.

Correct answer: D

Speech recognition is an accessibility feature in Windows and is configured through the Ease of Access settings. This is where users can enable and configure speech recognition, voice commands, and other accessibility options designed to assist users with disabilities or accessibility needs.

Why the other options are wrong:

• A. Time and Language settings control regional preferences, language packs, and input methods, not speech recognition.
• B. Personalization settings manage themes, colors, lock screen, and start menu appearance, not accessibility features.
• C. System settings cover general device information, storage, and power options, not speech recognition configuration.

Correct answer: D

A rogue wireless access point broadcasting the same SSID as the legitimate network can intercept connections while appearing legitimate. Users can access the internet through it but cannot reach internal file servers, which indicates an unauthorized access point that lacks proper network configuration or intentionally restricts access to internal resources.

Why the other options are wrong:

• A. An unreachable DNS server would prevent internet access entirely, not selective access where internet works but file shares don't.
• B. VLAN misconfiguration would not cause an entirely separate unsecured network to broadcast with the same name.
• C. Incorrect IP addresses would not result in internet connectivity while blocking file server access in this manner.

Correct answer: B

When replacing heavy batteries from a rack-mounted UPS system, the technician must prioritize safety by using appropriate lifting techniques and guidelines to prevent back injury or dropping batteries. This is a critical safety requirement when handling heavy components at the bottom of a rack.

Why the other options are wrong:

• A. Fire suppression systems are not relevant to battery replacement procedures when power is off and batteries are discharged.
• C. While antistatic bags protect electronics from static discharge, batteries are not sensitive to static electricity and this is not the priority safety concern.
• D. A face mask is not necessary when batteries are fully discharged; harmful fumes are not a concern in this scenario.

Correct answer: B

Hallucinations occur when AI systems generate plausible-sounding but factually incorrect information. This is a well-documented limitation of large language models where the AI confidently produces false data that appears coherent. The scenario describes exactly this phenomenon-factually incorrect information in an otherwise credible-sounding draft.

Why the other options are wrong:

• A. Data privacy concerns protecting personal information, not factual inaccuracy in generated content.
• C. Appropriate use refers to ethical guidelines for using AI, not inherent technical limitations.
• D. Plagiarism involves copying existing work; hallucinated content is original but false.

Correct answer: A

An Acceptable Use Policy (AUP) defines permitted and prohibited activities when using organizational resources. It communicates expectations to employees regarding appropriate use of company equipment and systems.

Why the other options are wrong:

• B. MNDA (Mutual Non-Disclosure Agreement) governs confidentiality between parties, not permitted activities for resource usage.
• C. DRM (Digital Rights Management) controls access to copyrighted content, not organizational resource usage policies.
• D. EULA (End User License Agreement) governs software licensing terms, not organizational resource usage policies.

Correct answer: B

When an operating system no longer receives security updates and patches, it has reached end of life status. End of life means the manufacturer is ceasing support and no longer issuing updates, security patches, or technical support for that OS version. This is an official lifecycle stage that indicates the OS version is aging out of support. While support expiration is related, the specific message about no longer issuing security updates directly indicates the OS has transitioned to end of life status.

Why the other options are wrong:

• A. While related, 'support expiring' is less precise than 'end of life' which specifically refers to cessation of all updates and patches.
• C. Removal of built-in security software is a feature change, not the reason for ceasing security updates to the entire OS.
• D. A new OS version release is independent of the current OS reaching end of life, though they may occur around the same time.

Correct answer: C

Content filtering on a SOHO router allows administrators to block access to websites based on categorical rules. This directly implements the policy requirement to prohibit users from accessing unauthorized websites by categorization.

Why the other options are wrong:

• A. Secure management access protects the router's administrative interface but does not control user internet access.
• B. Group Policy Editor is a Windows domain tool for managing networked computers, not for configuring router-level web restrictions.
• D. A firewall controls network traffic and ports but is not the primary tool for blocking websites by category or content type.

Correct answer: C

Internet Options is the Windows control panel for managing browser settings, including cache and temporary files. When users see outdated images on websites, it's typically because cached versions are not being refreshed. Clearing the browser cache through Internet Options resolves this issue by forcing fresh downloads of current images.

Why the other options are wrong:

• A. Administrative Tools manage system services and performance, not browser cache.
• B. Windows Defender Firewall controls network traffic, not cached browser images.
• D. Ease of Access provides accessibility features, not browser cache management.

Correct answer: A

The Windows Features dialog (accessible through 'Turn Windows features on or off') allows users to install optional Windows components, including .NET Framework 3.5. This is the proper, supported method for resolving .NET Framework dependencies on Windows systems.

Why the other options are wrong:

• B. Third-party repositories are unreliable sources for critical system dependencies and bypass proper Windows package management.
• C. Ignoring a specific version requirement and installing a newer version may cause compatibility issues if the application requires .NET 3.5 specifically.
• D. A missing .NET Framework is not a security risk and does not require escalation to a Security Operations Center team.

Correct answer: B

After verifying that the technical controls (EDR, patching) are working properly and the infected machine has been remediated, the next critical step is to educate the user about the root cause (phishing in this case) and proper security hygiene. This addresses the human vulnerability that allowed the attack to succeed in the first place and prevents recurrence.

Why the other options are wrong:

• A. Network security tools are not the next step when EDR already caught the malware; the issue was user susceptibility to phishing, not file download capability.
• C. Firmware flashing is unnecessary and does not address the phishing vulnerability that caused the incident.
• D. More advanced security software is not needed when current controls (EDR with latest signatures) already successfully quarantined the threat.

Correct answer: A

Batch files (.bat) are the standard Windows native scripting format for automating tasks during user logon. They execute in the Windows command prompt and are commonly used in logon scripts, startup sequences, and scheduled tasks. While other languages can automate Windows tasks, .bat is the most direct and commonly deployed solution for Windows logon automation.

Why the other options are wrong:

• B. .sh files are shell scripts for Unix/Linux systems, not Windows.
• C. .py files require Python interpreter installation and are not Windows-native.
• D. .js files are JavaScript, typically for web browsers or Node.js, not standard Windows logon automation.

Correct answer: D

The 'su' command (substitute user) is the standard Linux administrative command used to switch to another user account, most commonly to root/superuser, enabling administrative tasks. It is the Linux equivalent of elevation of privilege.

Why the other options are wrong:

• A. runas is a Windows command, not Linux.
• B. cmcl is not a recognized standard Linux administrative command.
• C. net user is a Windows command for user account management, not a Linux command.

Correct answer: B

An evil twin is a rogue access point that mimics a legitimate wireless network's SSID and characteristics to trick users into connecting. Attackers use this technique to intercept traffic or perform man-in-the-middle attacks. The name 'evil twin' directly describes this impersonation attack method.

Why the other options are wrong:

• A. Stalkerware is surveillance software installed on a device, not a network attack.
• C. Tailgating involves physical access exploitation, not wireless network impersonation.
• D. Shoulder surfing is observing someone's screen or keyboard, not a wireless attack.

Correct answer: C

Checking boot options is the first step when encountering an 'OS Not Found' error. The computer may be configured to boot from the wrong device or in the wrong order. With only a USB drive, keyboard, and mouse connected, the system might be attempting to boot from a device that no longer contains a valid OS. Checking and correcting the boot order in BIOS/UEFI is the quickest troubleshooting step before attempting data recovery, disk partitioning, or firmware changes.

Why the other options are wrong:

• A. Data recovery tools are a last resort and should not be attempted first when basic boot configuration may be the issue.
• B. Repartitioning the disk would be destructive and should only be considered after confirming boot configuration issues.
• D. Switching UEFI to BIOS is not a first troubleshooting step and may not be necessary if boot options are correctly configured.

Correct answer: A

Multi-Factor Authentication requires two or more distinct verification methods. Sending a code to the user's phone (such as via SMS or authenticator app) is a common second factor used in addition to a password, providing authentication based on something the user has (their phone).

Why the other options are wrong:

• B. Verifying date of birth is static information that users have and is not truly a separate authentication factor from a password.
• C. Solving a math problem is still something the user knows and doesn't constitute a separate factor from a password.
• D. A PIN is also something the user knows, which is the same category as a password and doesn't add a separate authentication factor.

Correct answer: B

Facial recognition provides biometric authentication that cannot be shared between users, directly addressing the problem of users sharing passcodes. It is inherent to the individual and cannot be easily compromised through code sharing.

Why the other options are wrong:

• A. Pattern lock can still be shared visually or through observation, similar to passcodes.
• C. Device encryption protects data but does not address the screen lock sharing issue.
• D. Multifactor authentication adds security layers but does not prevent passcode sharing; additional factors could still be compromised.

Correct answer: D

Mobile Device Management (MDM) solutions are specifically designed to manage, monitor, and secure company-owned mobile devices. MDM enforces security policies, restricts unauthorized app installations, manages permissions, and can remotely wipe devices-making it the appropriate solution to prevent future unauthorized installations on company cell phones.

Why the other options are wrong:

• A. Group Policy is a Windows domain management tool and cannot manage iOS or Android mobile devices effectively.
• B. PAM (Privileged Access Management) controls administrative access to systems, not app installations on mobile devices.
• C. While anti-malware software helps detect threats, MDM is the comprehensive solution that prevents unauthorized installations through policy enforcement.

Correct answer: A

License assignment through proper account credentials or administrative assignment enables access to features that are locked behind licensing requirements. When an application requires a login to unlock certain features, this typically indicates license- dependent functionality that can be resolved by assigning the appropriate license to the user's account.

Why the other options are wrong:

• B. A VPN connection is for network access and would not unlock application features that require licensing or authentication.
• C. Application repair addresses corrupted files or installation issues, not license-gated features.
• D. Program reinstallation alone will not resolve licensing issues without proper license assignment or credentials.

Correct answer: A

Port mapping (or port forwarding) controls which ports are accessible from external networks. By not mapping the surveillance system's web interface port to the internet- facing router, external login attempts are prevented while the system remains accessible locally on the LAN via the internal IP address.

Why the other options are wrong:

• B. Subnetting divides networks into segments but doesn't inherently prevent external access unless combined with firewall rules; it doesn't block internet login attempts.
• C. A static IP ensures consistent addressing but doesn't prevent external login attempts or restrict access from the internet.
• D. Content filtering controls the type of traffic allowed but is not the primary mechanism for preventing external access to a specific internal service.

Correct answer: B

An MSDS (Material Safety Data Sheet) sheet contains emergency procedures, which is critical information for hazardous materials like batteries. MSDS sheets are designed to provide safety information including hazard identification, first-aid measures, and emergency procedures. This is essential for battery backups due to their potentially hazardous chemical contents. Installation instructions, configuration steps, and voltage specifications are technical product information typically found in user manuals or technical documentation, not MSDS sheets.

Why the other options are wrong:

• A. Installation instructions are found in user manuals or product documentation, not MSDS sheets.
• C. Configuration steps are technical specifications found in product guides, not MSDS sheets.
• D. Voltage specifications are electrical specifications found in technical datasheets, not MSDS sheets.