Free Practice Questions for CompTIA 220-1202 Exam

The su (substitute user) command is used in Linux to switch to another user account, most commonly to escalate privileges by switching to the root (administrator) account. It allows administrative tasks to be performed in a terminal session.

A. runas is a Windows command for executing a program under another user ' s context.

B. cmcl is not a valid Linux or administrative command.

C. net user is a Windows command for managing local user accounts.

Multi-Factor Authentication (MFA) apps, especially time-based one-time password (TOTP) apps (e.g., Google Authenticator, Authy), rely on accurate time synchronization between the device and the authentication server. If the user recently traveled internationally, the device may have incorrect date/time settings due to time zone changes or failed synchronization, leading to MFA failure.

The most logical and non-intrusive first step is to verify and correct the date and time settings. This aligns with basic troubleshooting principles—start with the simplest and most likely cause before taking more drastic action.

The correct answer is C. DDoS (Distributed Denial-of-Service), because the attack involves thousands of compromised machines, commonly referred to as a botnet, generating fraudulent traffic against an online service. Although the activity includes fake purchases, the scale and distributed nature indicate an attempt to overwhelm or disrupt the service.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, DDoS attacks use multiple systems to flood a target with traffic, exhausting server resources and preventing legitimate users from accessing the service. These attacks often involve compromised devices controlled remotely.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that DDoS attacks can take many forms, including HTTP request floods and application-layer attacks that mimic legitimate user actions, such as fake transactions.

The Mike Meyers / Mark Soper Lab Manual clarifies that brute-force attacks focus on credential guessing, spoofing involves identity falsification, and SQL injection targets database queries. None of those specifically require thousands of compromised machines.

Because the defining characteristics here are scale, distribution, and coordinated malicious activity, the correct classification is a DDoS attack, making C the correct answer.

The requirement is graphical interface access to Linux servers. SSH is excellent for secure command-line access, but it is not a GUI remote desktop by default. Mike Meyers explains this distinction clearly: “The kind of remote command-line access you can get with SSH is great… When you need remote access to the full graphical desktop, you need a remote desktop application. ” He then notes that most remote desktop tools use “either the Remote Desktop Protocol (RDP) or Virtual Network Computing (VNC) ,” and that TightVNC is cross-platform.

The All-in-One guide repeats the same point: for a full graphical desktop, remote desktop applications commonly use RDP or VNC , and VNC solutions are cross-platform. Since the servers are Linux and the employee needs GUI access, VNC is the best answer among the choices. Telnet is insecure (clear-text credentials), and WinRM is Windows-focused management. Therefore, choose VNC (B) .

Before any change is implemented, it must bedocumentedas part of change management procedures. This ensures transparency, review, and tracking.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Documenting a change is the first step in change management. This includes defining the scope, purpose, impact, and implementation plan before approval or scheduling.”

The correct answer is D. Internal wiki, because an internal wiki is specifically designed to store, maintain, and centrally manage organizational knowledge, including deployment procedures, configuration standards, and troubleshooting documentation. Large-scale software deployments require accurate, up-to-date, and version-controlled instructions that can be accessed by multiple technicians.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, organizations commonly use internal knowledge bases or wikis to document standard operating procedures (SOPs), deployment guides, and escalation paths. These platforms allow content to be updated quickly as procedures evolve, which is essential for complex deployments.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide emphasizes that internal wikis support collaboration and consistency. Unlike emails or files stored on individual systems, a wiki provides a single source of truth, reducing the risk of technicians following outdated or incorrect instructions.

The Mike Meyers / Mark Soper Lab Manual further explains that while file servers may store installation files and emails may contain announcements, neither is suitable for maintaining structured, searchable deployment documentation. A user’s desktop is never an appropriate location for organizational procedures.

Because large-scale deployments require centralized, standardized, and continuously updated documentation, the most appropriate reference location is an internal wiki, making D the correct answer.

To prevent unauthorized physical access to a mobile device, the company must ensure the device locks quickly and requires an authentication factor before anyone can use it. PIN authentication directly blocks access by requiring a passcode to unlock the device—Quentin Docter lists PIN lock as one of the primary “screen lock” methods used to secure mobile devices, explaining it as the most common unlock method (typically 4–6 digits, sometimes alphanumeric).

Screen timeout (auto-lock) reduces the window in which an unattended phone remains usable; the All-in-One guide notes that systems can be set to an automatic timeout and screen lock, requiring credentials after a short period of inactivity. Mike Meyers’ Lab Manual reinforces that you should “protect your data from access by putting a good screen lock on the device,” and that these locks commonly require a password/PIN/pattern/biometric to regain access after locking.

Hotspots, VPN, antivirus, and location services are valuable, but they do not primarily stop someone holding the device from opening it and accessing data.

The correct answer is D. Roaming profiles, because roaming profiles allow users to log in to any domain-joined workstation and automatically access their personal settings, documents, and configuration without storing data locally on each machine. This is ideal for environments with hot-desking or shared workstations.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, roaming profiles store user data centrally on a server rather than on individual computers. When a user logs in, their profile is loaded; when they log out, changes are saved back to the server. This minimizes data duplication and reduces the risk of data being left behind on shared systems.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that roaming profiles improve security by preventing sensitive user data from being permanently stored on multiple endpoints. This also simplifies backup and recovery, since user data resides in a centralized location.

The Mike Meyers / Mark Soper Lab Manual clarifies that portable drives introduce data loss risks, cloud email only addresses messaging data, and certificate storage does not manage user profiles or documents.

Because the goal is to maintain data security while allowing mobility and minimizing data transfer, roaming profiles are the most appropriate solution, making D the correct answer.

For persistent printing issues due to spooler service, ensure theprint spooler is started and set to Automatic. This maintains print capability across reboots.

FromMike Meyers ' Lab Manual:

“If users lose printing capabilities on reboot, the print spooler service must be configured to start automatically and be confirmed as running.”

The correct answers are E. Set the view extensions to " on " and F. Check the box to view hidden files, because folders located in the root directory are often hidden or protected system folders by default in Windows operating systems. Windows hides certain files and folders to prevent accidental modification or deletion, especially those critical to system functionality.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, File Explorer includes view options that control whether hidden files, protected operating system files, and file extensions are visible. If these options are disabled, users will not see many system-level folders, even when browsing the root of the drive (such as C:\).

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that enabling “Show hidden files, folders, and drives” allows technicians to view directories that are normally concealed, such as configuration or application folders. Additionally, turning on file name extensions helps identify system folders and files more accurately, especially when troubleshooting or guiding users remotely.

The Mike Meyers / Mark Soper Lab Manual reinforces that simply opening File Explorer or adjusting display resolution does not affect file visibility. The correct fix is to modify File Explorer view settings, specifically enabling hidden items and file extensions.

Therefore, enabling hidden files and file extensions is required, making E and F the correct answers.