220-1202 Sample Questions Answers

The correct answer is C. Perform a clean installation . When ransomware has encrypted files and the organization does not pay the ransom, the priority is to remove all traces of malware and rebuild the system from a trusted state. Quentin Docter’s Complete Study Guide explains that in ransomware situations, remediation may not be possible because user files are encrypted. It further states that in cases where no one can be certain what the malware payload has done, the proper remediation might be to sanitize the drive and reinstall the operating system from an image or manually reinstall it. A recovery partition or Windows Recovery Environment repair may leave infected files, settings, persistence mechanisms, or damaged user data behind. Upgrading to Windows 11 does not guarantee malware removal. A clean installation removes the existing compromised OS and provides the best path to full operation, followed by restoring clean data from known-good backups.

A .bat file (batch file) is a script file in DOS, OS/2, and Microsoft Windows. It contains a series of commands that are executed by the command-line interpreter. In Windows environments, batch files are commonly used to automate log-in tasks, such as mapping network drives, launching applications, or setting environment variables during the user ' s logon process.

B. .sh is a shell script used in Linux/Unix environments.

C. .py is a Python script, which can be used for automation but is not commonly run directly at user logon in standard Windows environments.

D. .js is JavaScript, used mainly in web development and not for system-level scripting in Windows logon automation.

In AI terminology,hallucinationrefers to generated output that appears plausible but is factually incorrect.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“AI hallucination describes output that is fluent and coherent but includes information that is entirely fabricated or inaccurate.”

Standard Operating Procedures (SOPs)guide technicians through consistent and complete processes, including documentation.

FromTravis Everett – All-in-One Exam Guide:

“SOPs ensure that all required steps—such as data collection and issue description—are followed in every support interaction.”

A blue screen or sudden shutdown generates diagnostic records that persist after reboot, and the primary Windows tool to review those records is Event Viewer . Quentin Docter states: “ Event Viewer should be the first place you look when you are trying to solve a problem whose solution is not evident ,” because the system and applications “will often create an entry… that can be used to… diagnose problems.” He also specifically notes for unexpected shutdowns: “ The first place to check is Event Viewer on the System tab ,” where kernel and EventLog entries help determine whether the system lost power or shut down abnormally.

Mike Meyers reinforces that Event Viewer is how you read Windows logs (Application, Security, Setup, System) and that the details pane shows information about the selected event, which is exactly what you need when the on-screen error flashes too quickly. Performance Monitor is for counters/trends, Device Manager focuses on hardware status/drivers, and System Information shows configuration—not the crash/shutdown event details. Hence, Event Viewer (C) is correct.

When an OS is no longer receiving updates, it is generally because it has reachedend of life (EOL), meaning the vendor has ceased support.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“End-of-life refers to the point when an OS vendor no longer issues updates or support. Systems at EOL pose security risks and must be upgraded or isolated.”

Mobile OS updates can sometimes cause compatibility issues with specific apps, including corporate email clients. The most likely resolution is to check for and apply an update to the affected application, especially if it hasn’t been updated to support the latest OS version.

B. Registering with MDM might be required for access but wouldn’t address app crashes due to incompatibility.

C. A third-party client might help, but it’s not the best first step if the default app is expected to work.

D. Clearing the cache can help resolve some minor issues, but updating the app directly addresses compatibility concerns.

BSOD after driver installation suggests a compatibility issue.Safe Mode allows rollback of driversthat may be causing the crash.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“If a BSOD occurs after a driver update, boot into Safe Mode and roll back to the previous driver version to restore system stability.”

The correct answer is B. SSID configuration, because controlling SSID visibility and behavior directly affects which wireless networks devices can see and attempt to join. In shared office environments, multiple Wi-Fi networks may be present, increasing the risk of users accidentally connecting to the wrong network.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, SSIDs define how wireless networks are advertised and discovered. By modifying SSID settings—such as disabling broadcast or restricting auto-join behavior—technicians can prevent devices from attempting to connect to unauthorized or unintended networks.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that MDM solutions often preconfigure approved wireless profiles. Adjusting SSID configuration ensures devices only recognize and connect to sanctioned networks, reducing accidental associations and security risks.

The Mike Meyers / Mark Soper Lab Manual clarifies that IP filtering, content filtering, and port forwarding are network traffic control mechanisms. They do not prevent a device from seeing or attempting to connect to nearby Wi-Fi networks.

Because the goal is to prevent accidental Wi-Fi access, not filter traffic after connection, modifying SSID configuration is the correct and most effective solution.

The correct answer is A. SOP (Standard Operating Procedure) because SOPs are specifically designed to document roles, responsibilities, workflows, and support expectations for systems and applications within an organization. When deploying a new application, clear documentation is essential to ensure consistent support, escalation, maintenance, and troubleshooting.

The Quentin Docter – CompTIA A+ Complete Study Guide defines SOPs as formal documents that outline who performs specific tasks, how tasks are performed, and when escalation is required. SOPs are commonly used by IT departments to standardize support processes and ensure continuity, especially when multiple technicians or teams are involved.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that SOPs are a key component of operational maturity, ensuring that support staff understand their responsibilities and follow approved procedures when responding to incidents or service requests related to an application.

The Mike Meyers / Mark Soper Lab Manual further clarifies that documents such as NDAs focus on confidentiality, EULAs define usage rights for end users, and DRM is a technical mechanism—not a documentation framework. None of those options describe internal support roles.

Because the scenario explicitly mentions documenting roles and responsibilities, the correct and intended document type is a Standard Operating Procedure, making A the correct answer.

Remote wipeis a mobile device management (MDM) feature that allows administrators to erase data remotely if a device is lost or stolen, preventing unauthorized access to corporate or personal information.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Remote wipe features enable a device to be cleared of all sensitive data if it is lost or stolen. This is one of the most effective ways to prevent unauthorized access to corporate resources.”

The best first step is to leverage existing documentation: check whether the issue was previously recorded and resolved, and reuse that known fix (or confirm conditions). Mike Meyers explains ticketing systems capture key information needed to resolve issues, including “ problem description ,” “ progress notes ,” and “ problem resolution ,” and stresses that “ Clear, concise writing is critical ” because you “won’t be the only tech responding to every ticket.” That is exactly why you review prior tickets first—so you can quickly see what was done previously and apply it consistently.

The All-in-One guide reinforces the same ticketing-system concept and lists the same essential elements (description, notes, resolution) used to streamline troubleshooting and escalation. Consulting the prior technician (A) may be impossible (the employee is gone) and slower than checking documented history. Opening a new case (D) is important, but the question asks what to do first —review the prior occurrence details, then document your current case using what you find.

The best answer is B because Linux, macOS, and Windows handle application installation differently, so the technician should use the correct tool or deployment method for each operating system. The A+ Core 2 objectives specifically include diverse OS environments, macOS application installation file types such as .dmg, .pkg, and .app , and Linux tools such as apt-get and yum . The Mike Meyers/Mark Soper material explains that macOS software may be installed from the App Store, a .dmg disk image, or a .pkg installer, while Linux commonly uses package-management tools and distro software stores. The All-in-One Exam Guide also emphasizes that package managers install and update software while handling dependencies, which is especially important in Linux. A single Windows batch script would not properly apply to macOS and Linux. Sending users to the manufacturer’s website bypasses organizational control, and manual installation on every system is inefficient and error-prone.

Because the requirement is defined by a global security policy , the key question is whether the endpoint is actually receiving and applying the correct Group Policy Object (GPO) settings for screensaver timeout and enforcement. The best command to investigate applied policy is gpresult , which produces the Resultant Set of Policy (RSoP) information. Quentin Docter explains: “The gpresult command is used to show the Resultant Set of Policy (RSoP) report/values for a remote user and computer,” and it helps determine “which settings apply” when policies can be set at the local workstation, domain, user, and computer levels. He notes the /r switch provides a summary and /z gives detailed, “super-verbosity” output showing exact settings being applied.

The All-in-One guide similarly states gpresult gives “a quick overview of all security policies applied to a single user or computer,” which is precisely what you need when a policy-driven screensaver setting isn’t behaving as expected. msinfo32 shows system info, sfc repairs corrupted files, and whoami shows identity—none confirm applied GPO settings like gpresult.

The correct answer is D. Internal wiki, because an internal wiki is specifically designed to store, maintain, and centrally manage organizational knowledge, including deployment procedures, configuration standards, and troubleshooting documentation. Large-scale software deployments require accurate, up-to-date, and version-controlled instructions that can be accessed by multiple technicians.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, organizations commonly use internal knowledge bases or wikis to document standard operating procedures (SOPs), deployment guides, and escalation paths. These platforms allow content to be updated quickly as procedures evolve, which is essential for complex deployments.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide emphasizes that internal wikis support collaboration and consistency. Unlike emails or files stored on individual systems, a wiki provides a single source of truth, reducing the risk of technicians following outdated or incorrect instructions.

The Mike Meyers / Mark Soper Lab Manual further explains that while file servers may store installation files and emails may contain announcements, neither is suitable for maintaining structured, searchable deployment documentation. A user’s desktop is never an appropriate location for organizational procedures.

Because large-scale deployments require centralized, standardized, and continuously updated documentation, the most appropriate reference location is an internal wiki, making D the correct answer.

The correct answer is D. Enabling HTTPS-Only Mode, because HTTPS ensures that all communication between the browser and websites is encrypted using TLS (Transport Layer Security). This protects sensitive information such as usernames, passwords, and payment details from interception.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, HTTPS encrypts data in transit, preventing attackers from eavesdropping or modifying communications. HTTPS-only modes in modern browsers block or warn users when a site does not support secure connections.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that HTTPS is essential for protecting authentication credentials and financial information, especially on public or untrusted networks. Enforcing HTTPS-only connections ensures users cannot accidentally submit data over unencrypted HTTP.

The Mike Meyers / Mark Soper Lab Manual clarifies that disabling cookies or JavaScript may break website functionality but does not guarantee encryption. Pop-up blockers address nuisance behavior, not data security.

Because the objective is to encrypt browser communications and protect sensitive data, enabling HTTPS-Only Mode is the most effective and direct solution, making D the correct answer.

Memory usage is critically high, suggesting many applications or background processes. Closing unnecessary programs will immediately free up RAM.

FromTravis Everett – All-in-One Exam Guide:

“High memory usage with moderate CPU load usually means too many applications are open. Close unnecessary apps or use Task Manager to end processes.”

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple ' s proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

When a Windows service suddenly stops and then fails to start manually, one of the first places to confirm why it cannot start is the service logon context. A very common root cause is that the account configured on the service cannot authenticate anymore—often because the password changed or the account is locked. Quentin Docter notes that if the service fails due to misconfiguration, “the most likely cause is the user account the service is configured to start with,” and you should ensure “the user account is not locked out.” This aligns with standard service troubleshooting: check Event Viewer (Service Control Manager events) for login failures, then validate the service’s Log On tab configuration and the account state.

The All-in-One guide also reinforces validating services via the Services console and correcting service settings when services fail to start.

Therefore, the best cause given the options is that the service account is locked out (C).

Highmemory usage (97%)suggests the system is overloaded with active processes. The technician should close unneeded applications to free up RAM and improve performance.

FromMike Meyers ' Lab Manual:

“When memory usage is near capacity, close all non-essential programs. This can dramatically improve response time without needing hardware upgrades.”

PXE (Preboot Execution Environment) allows workstations to boot over the network and download an OS image from a server. It is ideal for automating mass deployments using baseline images across many machines without the need for physical media.

A. An ISO is a disk image file but requires mounting or physical media.

B. Secure Boot is a security feature, not a method of deploying OS images.

C. USB requires manual installation and is not suitable for automated deployment at scale.

Shoulder surfing is explicitly categorized as a social engineering technique because it relies on human behavior and observation rather than exploiting software flaws or cracking passwords through computation. Quentin Docter defines it directly: “Another form of social engineering is known as shoulder surfing. It involves nothing more than watching someone when they enter their sensitive data,” such as a password or credit card number. Docter also notes that privacy filters can reduce viewing angles, but “privacy filters do not protect you as you are entering a password, since a shoulder surfer will watch your keystrokes,” and the best defense is to “survey your environment before entering personal data.”

The Mike Meyers Lab Manual reinforces the same classification: “Shoulder surfing is another technique for gathering information and gaining unauthorized access… observing someone’s screen or keyboard to get information, often passwords.” Since this is about manipulating or exploiting a person’s situation (being nearby, watching, taking advantage of inattentiveness), it is not a zero-day, evil twin, or brute-force method. Therefore, Social engineering (C) is correct.

This scenario involves a mismatch in device time settings, which can affect synchronization and authentication across the network. Using a Network Time Protocol (NTP) server ensures all networked devices maintain accurate and synchronized clocks.

From Travis Everett – All-in-One Exam Guide:

“NTP servers keep all devices on a network in sync. This prevents time drift, which can cause authentication issues with domain logins, certificates, and applications.” .

The correct answers are E. Set the view extensions to " on " and F. Check the box to view hidden files, because folders located in the root directory are often hidden or protected system folders by default in Windows operating systems. Windows hides certain files and folders to prevent accidental modification or deletion, especially those critical to system functionality.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, File Explorer includes view options that control whether hidden files, protected operating system files, and file extensions are visible. If these options are disabled, users will not see many system-level folders, even when browsing the root of the drive (such as C:\).

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that enabling “Show hidden files, folders, and drives” allows technicians to view directories that are normally con cealed, such as configuration or application folders. Additionally, turning on file name extensions helps identify system folders and files more accurately, especially when troubleshooting or guiding users remotely.

The Mike Meyers / Mark Soper Lab Manual reinforces that simply opening File Explorer or adjusting display resolution does not affect file visibility. The correct fix is to modify File Explorer view settings, specifically enabling hidden items and file extensions.

Therefore, enabling hidden files and file extensions is required, making E and F the correct answers.

The correct answer is D. Check the sources the AI tool is using for copyrighted content, because legal and ethical use of AI-generated code depends on ensuring the output does not violate copyright or licensing restrictions. Developers are responsible for verifying that code used in their applications complies with intellectual property laws.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, responsible and appropriate use of AI tools includes validating outputs for accuracy, legality, and compliance. AI systems may generate code that resembles copyrighted or licensed material if their training data includes such sources.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that simply crediting an author or adding comments does not automatically grant legal permission to use copyrighted code. Developers must ensure that the generated code is either original, properly licensed, or permitted for use under open-source or fair-use terms.

The Mike Meyers / Mark Soper Lab Manual reinforces that silently using generated code without verification can expose organizations to legal risk, including copyright infringement claims. Ethical AI usage requires due diligence before deploying generated outputs into production systems.

Because the question asks for the best legal choice, verifying the AI tool’s sources and licensing is the most appropriate action, making D the correct answer.

3-D rendering is a graphics-intensive workload, and minimum hardware checks for this type of software commonly fail due to GPU capability (including dedicated vs. integrated GPU support) and VRAM requirements. Quentin Docter explains that application “Display” requirements can include “a graphics processing unit (GPU). A specific GPU may be required if the application will process video or graphics.” He also notes that “VRAM requirements are typically related to applications that are graphic intensive, such as gaming,” which aligns strongly with 3-D rendering workloads.

Mike Meyers’ Lab Manual reinforces that “graphically demanding applications… state specific graphics requirements,” and that CompTIA focuses on “dedicated graphics cards versus integrated ones,” because integrated GPUs are often less capable for demanding graphics tasks. It also reminds that systems with integrated GPUs share RAM with graphics, which can matter when software checks VRAM.

Therefore, the first thing to verify is GPU requirements (B), not USB/NIC/PSU.

The scenario strongly suggests the device has been compromised by malware delivered through a social-engineering message (an “unexpected overdue invoice” attachment). After the attempt, the phone shows system-wide performance issues affecting the browser and other apps, and a restart does not fix it—this matches common mobile malware symptoms such as sluggish response time and abnormal behavior that persists across reboots. When symptoms persist beyond a soft reset, the most reliable remediation is to return the device to a known-good state by performing a factory reset (wipe). Quentin Docter explains that a factory reset is much more effective and will remove malware along with applications, and that when a security symptom indicates malware, the device should be factory reset and then protected with antimalware before reinstalling apps.The All-in-One guide similarly teaches an escalation path: stop/uninstall suspect apps, and if these steps don’t resolve the behavior, use a factory reset to cleanse the device.【turn27file4†L9-L14】 Mike Meyers’ Lab Manual also lists factory resets among the key tools for resolving persistent mobile app security issues.

RADIUS (Remote Authentication Dial-In User Service)provides centralized Authentication, Authorization, and Accounting (AAA) for users who connect and use a network service.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“RADIUS is a widely used protocol for implementing AAA in network environments, allowing centralized control over user access and accounting.”

A Zero-day vulnerability refers to a security flaw in software or hardware that is unknown to the vendor or has not yet been patched. If this vulnerability is exploited before the vendor has issued a fix or patch, it becomes a Zero-day exploit. These attacks are highly dangerous because they take advantage of the absence of defenses due to the lack of awareness or mitigation options.

A. Spoofing is a form of impersonation, not necessarily tied to unpatched vulnerabilities.

B. Brute-force attacks rely on repeatedly guessing credentials and are not related to software flaws.

C. DoS (Denial of Service) attacks are meant to overwhelm systems and don ' t necessarily exploit unknown vulnerabilities.

Cloud-based software often enforcesdevice limitsper license. Before reinstallation or switching software, checking license allocations is the most logical first step.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Many cloud apps enforce user or device count restrictions. When an install fails, check licensing before troubleshooting other areas.”

The Linux machine likely formatted the drive in a file system like ext4, which Windows cannot natively read. Reformatting the drive toexFATallows cross-platform compatibility.

FromAll-in-One Exam Guide:

“When migrating data between OSes, using a file system like exFAT ensures compatibility. Windows cannot read Linux-native file systems such as ext4 without third-party tools.”

Windows doesn ' t natively support many Linux file systems (like ext4).Reformatting to exFATmakes the drive readable/writable on both Linux and Windows.

FromAll-in-One Exam Guide:

“For cross-platform compatibility, exFAT is recommended as it supports large files and is recognized by Windows, macOS, and Linux (with exFAT drivers).”

Group Policyis the standard administrative tool for setting user permissions across domain-joined systems.

FromQUENTIN DOCTER – COMPLETE Study Guide:

“Use Group Policy to enforce user rights, including disabling guest account access on domain computers.”

Videoconferencingplatforms allow real-time face-to-face communication and are ideal for collaborative training sessions involving remote employees.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Videoconferencing tools such as Zoom or Microsoft Teams are specifically designed for real-time communication and training, making them ideal for executive or large-group meetings.”

In Windows, accessibility tools such as speech recognition are found under the Ease of Access settings. This section includes options for users who require assistive technologies, including screen readers, magnifiers, and voice control interfaces like speech recognition. Setting up speech recognition allows users to control the system and input text using voice commands.

A. Time and Language is for setting regional preferences and language packs.

B. Personalization adjusts themes, backgrounds, and colors.

C. System includes display, storage, notifications, and power settings, but not accessibility tools.

A “central log-in” means users can authenticate using a centralized account database rather than separate local accounts on each PC—this is a core feature of a Windows domain . Mike Meyers explains that a Windows domain makes it easy for anyone with a domain account to log on to any computer in the domain with a single account , a process called “single sign-on (SSO),” and that users do not need a separate local account stored on every computer. The All-in-One guide reinforces the same: in a domain, the domain controller stores domain accounts and “a user logging on to any computer on the domain may use their one domain account to log on to the entire network.”

Active Directory is the directory service commonly used to implement domains, but the question asks what is required for centralized logon on the workstation side— the computer must be joined to the domain (domain membership). Workgroups use only local accounts, and Local Group Policy Editor manages policies locally, not centralized authentication.

A management profile is used to enforce corporate policies on Apple devices. These profiles are installed via an MDM (Mobile Device Management) solution and control access, restrictions, Wi-Fi settings, app installations, and more. They’re critical for managing devices in a business environment.

A. The App Store allows software downloads but doesn’t control policies.

B. VPN configuration is used for secure remote connections, not enforcement of restrictions.

C. Apple ID is for personal account access to Apple services, not corporate device management.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot