Nail the CompTIA 220-1202: A+ Core 2 Strategy (2026)

This issue happens when Windows is hiding known file extensions. If extensions are hidden, the user may only be changing the visible name (for example, changing “Document” to “Document.xml”), while the real filename remains something like Document.xml.txt. Windows Explorer then displays “Document.xml,” but file properties still show the true type as Text Document (.txt) because the actual extension at the end is still .txt, and Windows determines file type by that extension. The fix is to show file extensions by turning off the “hide extensions” behavior—i.e., uncheck “Hide extensions for known file types” in File Explorer Options/View settings. Quentin Docter specifically calls out that “Hide Extensions For Known File Types” is commonly changed because seeing extensions is “really handy,” and shows steps to deselect “Hide File Extensions For Known File Types.” The All-in-One guide and Mike Meyers’ Lab Manual both reinforce that you toggle extensions by deselecting “Hide extensions for known file types.”

This scenario involves a mismatch in device time settings, which can affect synchronization and authentication across the network. Using a Network Time Protocol (NTP) server ensures all networked devices maintain accurate and synchronized clocks.

From Travis Everett – All-in-One Exam Guide:

“NTP servers keep all devices on a network in sync. This prevents time drift, which can cause authentication issues with domain logins, certificates, and applications.” .

If uploading fails only offsite,mobile data limits or restrictionsare the likely cause. Data caps or network management can interfere with uploads.

FromTravis Everett – All-in-One Exam Guide:

“When mobile users experience network issues, always check if the device has reached a data cap or roaming restriction.”

This scenario is phishing delivered through a QR code (scan an image to reach a portal), which is best described as quishing . Quentin Docter defines phishing as a social engineering method where the attacker makes a message look legitimate and convinces the user to click a link to “correct” an account problem; after the click, the victim is taken to a site controlled by the attacker and asked for credentials. A QR code in a message is simply an alternate way to deliver that same malicious “link” without showing the URL clearly.

The Mike Meyers Lab Manual distinguishes related social engineering types: vishing is done by phone calls, and whaling targets high-level executives. Smishing is phishing delivered via SMS text messages, but the prompt specifically centers on scanning an image (QR-style workflow), not a text-message attack vector.

Docter also notes QR codes are commonly used in authentication workflows (for example, adding accounts to authenticator apps), which is why attackers mimic this behavior to make the scam seem normal. Therefore, QR-based phishing is best labeled quishing .

The correct answer is C. Listen to the customer’s concerns and acknowledge their frustrations, because effective communication and empathy are critical components of professional help desk interactions—especially when customers are upset.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, technicians should always demonstrate active listening, empathy, and professionalism. Acknowledging a user’s frustration helps de-escalate tense situations and builds trust.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide emphasizes that users who feel unheard are less cooperative and more dissatisfied. Before troubleshooting or escalation, technicians should validate the customer’s experience and reassure them that the issue will be addressed.

The Mike Meyers / Mark Soper Lab Manual reinforces that blaming previous technicians or immediately escalating without communication can worsen the situation. Asking technical questions too early may come across as dismissive.

Because the goal is to communicate professionally and effectively, the technician should first listen and acknowledge the user’s frustration, making C the correct answer.

The correct answer is B. Create and assign a security group with adequate permissions, because group-based permission management is the most efficient and scalable way to control access to shared resources. By assigning permissions to a group rather than individual users, administrators reduce administrative overhead and simplify future changes.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, security groups are a best practice for managing access to files, folders, and repositories. Permissions are assigned once to the group, and users inherit those permissions by being members of the group.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that granting administrative permissions is excessive and violates the principle of least privilege. Applying permissions individually increases complexity and the risk of configuration errors, especially as team membership changes.

The Mike Meyers / Mark Soper Lab Manual further clarifies that mapping a network folder does not control permissions; it only provides access to a resource that is already governed by permissions. Group-based access ensures consistency, security, and minimal effort.

Because the requirement is to allow specific actions while preventing deletion—and to do so with the least amount of effort—creating and assigning a properly permissioned security group is the optimal solution, making B the correct answer.

The correct answer is D. Quarantine the infected system. The message describes ransomware because the files are encrypted and the attacker is demanding Bitcoin payment. The Mike Meyers/Mark Soper material explains that ransomware encrypts all accessible data and often demands payment in bitcoins for decryption. Quentin Docter’s Complete Study Guide explains that ransomware can spread quickly across a network and encrypt files in its path. It also states that after malware is confirmed, the infected system should be quarantined to prevent spread to other systems or network resources. Reimaging and restoring data may be required later, and updating/scanning anti-malware is part of remediation. However, the first action after identifying an active ransomware infection is isolation. Quarantining the system protects shared drives, other endpoints, and network resources from further encryption.

Linux commonly uses Linux-native filesystems (such as ext4, XFS, BTRFS, and others). The All-in-One Exam Guide explicitly states: “Linux users have lots to choose from; most use ext4, but you will see others with names like BTRFS, XFS, ZFS, and so on.” That directly links XFS to Linux.

By contrast, the same source identifies NTFS, FAT32, and exFAT as Windows file systems, with exFAT mainly for removable media, showing that FAT32/NTFS are primarily Windows-associated in A+ context. Quentin Docter also explains Linux’s ext-family filesystems (ext3/ext4) as Linux defaults in many distributions, reinforcing that Linux has its own native filesystem ecosystem rather than using NTFS/APFS as its typical format.

APFS is Apple’s filesystem for macOS/iOS devices, not Linux. FAT32 is cross-platform but not “typically associated” with Linux as a primary filesystem. Therefore, XFS (B) is the best answer.

Whalingis a form of phishing that targets high-profile individuals or involves pretending to be them (e.g., CEOs) to trick lower-level employees into transferring funds or sensitive data.

FromQuentin Docter – CompTIA A+ Study Guide:

“Whaling is a phishing tactic targeting executives or masquerading as one. The attacker crafts emails that exploit authority and urgency to manipulate recipients.”