Free Practice Questions for CompTIA 220-1202 Exam

When an OS is no longer receiving updates, it is generally because it has reachedend of life (EOL), meaning the vendor has ceased support.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“End-of-life refers to the point when an OS vendor no longer issues updates or support. Systems at EOL pose security risks and must be upgraded or isolated.”

A corruptedMaster Boot Record (MBR)is a common issue after disk manipulation. Booting from installation media and using tools like bootrec to repair the MBR can resolve the problem.

Travis Everett – All-in-One Exam Guideexplains:

“A damaged MBR may result in the OS not loading. Booting from recovery or installation media and selecting startup repair or running bootrec commands can restore functionality.”

The correct answer is D. Chain of custody process, because chain of custody ensures that evidence collected during an incident response is tracked, preserved, and legally defensible. It documents who collected the evidence, when it was collected, how it was stored, and who accessed it throughout the investigation.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, chain of custody is essential when evidence may be used in disciplinary actions, audits, or legal proceedings. Any gap in documentation can render evidence inadmissible.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that chain of custody provides accountability and prevents claims of evidence tampering. Each transfer of evidence must be logged and verified.

The Mike Meyers / Mark Soper Lab Manual clarifies that while order of volatility determines the sequence of data collection, it does not track ownership or handling. Data integrity best practices ensure evidence is not altered, but they do not provide a record of custody.

Because the question focuses on handling and accountability, the required process is chain of custody, making D the correct answer.

A Zero-day vulnerability refers to a security flaw in software or hardware that is unknown to the vendor or has not yet been patched. If this vulnerability is exploited before the vendor has issued a fix or patch, it becomes a Zero-day exploit. These attacks are highly dangerous because they take advantage of the absence of defenses due to the lack of awareness or mitigation options.

A. Spoofing is a form of impersonation, not necessarily tied to unpatched vulnerabilities.

B. Brute-force attacks rely on repeatedly guessing credentials and are not related to software flaws.

C. DoS (Denial of Service) attacks are meant to overwhelm systems and don ' t necessarily exploit unknown vulnerabilities.

Multi-Factor Authentication (MFA) requires at least two different types of authentication factors:

Something you know (e.g., password or PIN)

Something you have (e.g., smartphone or hardware token)

Something you are (e.g., fingerprint or facial recognition)

Option A, sending a code to the user’s phone, is an example of " something you have " — a physical device that receives a one-time passcode. Combined with a password, this forms a proper MFA implementation.

B. Date of birth is another knowledge-based factor (like a password), not a second factor type.

C. Solving a math problem is not a recognized authentication factor.

D. A PIN is also " something you know " and does not count as a distinct MFA factor when paired with a password.

Because the requirement is defined by a global security policy , the key question is whether the endpoint is actually receiving and applying the correct Group Policy Object (GPO) settings for screensaver timeout and enforcement. The best command to investigate applied policy is gpresult , which produces the Resultant Set of Policy (RSoP) information. Quentin Docter explains: “The gpresult command is used to show the Resultant Set of Policy (RSoP) report/values for a remote user and computer,” and it helps determine “which settings apply” when policies can be set at the local workstation, domain, user, and computer levels. He notes the /r switch provides a summary and /z gives detailed, “super-verbosity” output showing exact settings being applied.

The All-in-One guide similarly states gpresult gives “a quick overview of all security policies applied to a single user or computer,” which is precisely what you need when a policy-driven screensaver setting isn’t behaving as expected. msinfo32 shows system info, sfc repairs corrupted files, and whoami shows identity—none confirm applied GPO settings like gpresult.

The question asks where to find ownership and business criticality details for a server. That type of “who owns it, what does it support, and how important is it” data is maintained in a Configuration Management Database (CMDB) as part of configuration/asset management. Quentin Docter discusses asset management as lifecycle tracking and emphasizes accountability, including assigning responsibility and tracking who is associated with assets.

The All-in-One guide similarly describes asset management databases as tracking details such as “who has the asset,” “what type of asset,” and “where this asset is located,” which supports the idea that ownership and operational relevance are stored in such systems.

An SLA defines service expectations, an SOP defines procedures, and an EULA covers licensing—none are intended to be the authoritative inventory/ownership record for a specific server. Therefore, CMDB is the correct answer.

In AI terminology,hallucinationrefers to generated output that appears plausible but is factually incorrect.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“AI hallucination describes output that is fluent and coherent but includes information that is entirely fabricated or inaccurate.”

An " OS Not Found " error typically indicates that the computer is attempting to boot from a drive that doesn ' t contain a valid operating system or bootable partition. The presence of a USB drive might be confusing the boot order. Therefore, the first step a technician should take is to verify and adjust the boot sequence in the system’s firmware (BIOS or UEFI). It ' s possible that the USB drive is being prioritized over the internal hard drive, which may cause the system to miss the OS entirely.

A. Running data recovery tools is premature before confirming boot order.

B. Repartitioning the disk would destroy existing data—this should not be done until confirmed the OS is actually missing.

D. Switching between UEFI and BIOS (legacy mode) might help in rare cases, but it is not the first step in standard OS boot issue troubleshooting.

Once a malware incident has been confirmed, the immediate next step is to contain the threat. Quarantining infected systems prevents the malware from spreading to other devices and isolates the malicious code for further analysis or remediation.

B. Educating end users is important but occurs later in the incident response process.

C. Disabling System Restore is part of cleanup, not containment.

D. Updating and scanning should occur after the system is quarantined to prevent further infection or spread.