CompTIA A+ Core 2 practice questions

Question 1

A startup is evaluating Android for a new line of fleet-managed devices and must verify that the platform has a robust security posture. Which framing does the Android Open Source Project document for Android platform security?

Accepted Answer

Android incorporates industry-leading security features and has been subject to a rigorous security program through its entire development lifecycle.

Answer

Android avoids any formal security program because openness of the AOSP repositories alone is sufficient to guarantee end-user device security.

Answer

Android security is managed exclusively by individual original equipment manufacturers and is not governed by any AOSP-level program or guidelines.

Answer

Android only enforces security at the kernel layer and intentionally provides no protections at the framework, app sandbox, or update channel layers.

Question 2

An administrator is rolling out passwordless sign-in on managed laptops and is reviewing how Windows Hello replaces traditional passwords. Which authentication design does Microsoft document for Windows Hello?

Accepted Answer

Windows Hello allows users to sign in to their Windows devices using biometric data, or a PIN, instead of a traditional password.

Answer

Windows Hello operates only over an internet connection and refuses to authenticate users on flights, in conference rooms with no internet, or off-network.

Answer

Windows Hello requires every user to keep a written-down password in a desk drawer and provides no biometric, PIN, or hardware authenticator option.

Answer

Windows Hello replaces every Windows authentication channel with a single shared password reused across every endpoint in the organization at all times.

Question 3

An administrator is rolling out a tiered Windows Update remediation playbook. Which initial step does Microsoft document for users running into Windows Update problems?

Accepted Answer

Run the built-in Windows Update troubleshooter to fix common issues as the first step in the documented Windows Update troubleshooting workflow on the endpoint.

Answer

Disconnect the host from power for 24 hours as the first step; Microsoft documents no built-in troubleshooter for any Windows Update problem on any version of Windows.

Answer

Replace the motherboard on the affected endpoint as the first step; Microsoft documents no built-in troubleshooter for any Windows Update problem on any version anywhere.

Answer

Submit a paper service request to a vendor by postal mail as the first step; Microsoft documents no built-in troubleshooter for any Windows Update problem on any version anywhere.

Question 4

An organization is rolling out a recovery program after a string of cybersecurity events. Which scope does NIST SP 800-184 document for the publication?

Accepted Answer

A publication providing tactical and strategic guidance regarding the planning, playbook developing, testing, and improvement of recovery planning.

Answer

A publication providing only HR onboarding paperwork; no tactical, strategic, planning, playbook, testing, or improvement of recovery planning is documented at all anywhere.

Answer

A publication providing only office desk-allocation rules; no tactical, strategic, planning, playbook, testing, or improvement of recovery planning is documented at all anywhere.

Answer

A publication providing only printer toner replenishment schedules; no tactical, strategic, planning, playbook, testing, or improvement of recovery planning is documented at all anywhere.

Question 5

A help desk team needs to confirm whether a junior technician on a workstation can actually run chkdsk against the system volume. Which minimum-membership requirement does Microsoft document for chkdsk?

Accepted Answer

Membership in the local Administrators group, or equivalent, is the minimum required to run the chkdsk command against the volume on the host.

Answer

Membership in the Domain Admins group of the parent forest is the minimum required to run chkdsk against any volume of any modern Windows endpoint.

Answer

Any standard user account can run chkdsk against any local volume because Microsoft documents no privilege requirement for the chkdsk command at all.

Answer

Membership in the Power Users group is required because Power Users is the only group with the right to run any volume-integrity check on Windows now.

Question 6

A team is rolling out passwordless sign-in for supported websites alongside Windows sign-in. Which standard does Microsoft document Windows Hello as integrating with for website sign-in?

Accepted Answer

With FIDO/WebAuthn, Windows Hello can also be used to sign in to supported websites, reducing the need to remember multiple complex passwords on the host.

Answer

Windows Hello requires a third-party paid identity broker to sign in to any website, since FIDO and WebAuthn are explicitly excluded from the Windows Hello design.

Answer

Windows Hello has no website sign-in path of any kind and works only as a local Windows endpoint sign-in surface; web authentication is impossible with Windows Hello.

Answer

Windows Hello supports only Telnet for any kind of remote sign-in and offers no FIDO, WebAuthn, or browser-mediated authentication path on any platform anywhere.

Question 7

A developer is rolling out an application that needs to file an application-specific WER report for a non-crash event. Which Microsoft-documented mechanism does the developer use?

Accepted Answer

Applications use the WER API to generate error reports for application-specific issues that are not related to crashes, non-responses, or kernel faults.

Answer

Applications cannot file any WER report for application-specific events; only kernel-mode drivers with vendor-issued tokens can ever submit any WER record at all.

Answer

Applications can only file WER reports by mailing a paper form to Microsoft; no WER API surface exists on any current Windows version supported by Microsoft anywhere.

Answer

Applications can only file WER reports by reading from a temporary RAM cache that is wiped at every shutdown; no persistent WER API surface exists on any version.

Question 8

A team is rolling out a patching cadence and is reviewing why regular updates are documented as reducing attacker leverage. Which framing does MITRE M1051 document?

Accepted Answer

Regular updates reduce the attack surface and prevent adversaries from exploiting known security gaps across operating systems, applications, drivers, and firmware.

Answer

Regular updates are documented as a desk-allocation timer; no reduction in attack surface or known security gap exposure is documented for any system on any tier of organization.

Answer

Regular updates are documented as exclusively a print-and-pin office calendar entry; no reduction in attack surface or known security gap exposure is documented for any system at all.

Answer

Regular updates are documented as exclusively a printer toner replenishment policy; no reduction in attack surface or known security gap exposure is documented for any system at all.

Question 9

An administrator is rolling out an automated maintenance script and must select between trigger types in Task Scheduler. Which trigger set does Microsoft list as supported by the Task Scheduler?

Accepted Answer

Task Scheduler can trigger tasks when a specific system event occurs, at specific times, on daily/weekly/monthly schedules, on idle, or on user logon.

Answer

Task Scheduler runs only when network connectivity is restored and offers no daily, weekly, monthly, or system-event triggers at all.

Answer

Task Scheduler executes only on user-initiated double-click in Explorer and provides no event-driven, time-driven, or idle-state triggers.

Answer

Task Scheduler depends on a manually polled queue file and cannot react to live system events, scheduled times, or user logon transitions.

Question 10

An administrator is rolling out a Windows Firewall baseline that filters traffic both by network address tuple and by application binding. Which two of the following accurately reflect Microsoft's documented Windows Firewall filtering criteria? (Choose two.)

Accepted Answer

Windows Firewall filters traffic based on criteria such as source and destination IP address, IP protocol, or source and destination port number.

Accepted Answer

Windows Firewall can be configured to block or allow network traffic based on the services and applications that are installed on the device.

Answer

Windows Firewall filters traffic only on time-of-day and only for printers; addresses and ports are not part of any documented filter on the host computer.

Answer

Windows Firewall filters traffic only by Active Directory site code and ignores layer-3 and layer-4 information such as IP addresses, protocols, and ports.

Question 11

A help desk team is rolling out a macOS troubleshooting list and asks what Disk Utility actually fixes. Which symptom set does Apple document for Disk Utility?

Accepted Answer

Disk Utility can fix certain disk problems such as multiple apps quitting unexpectedly, a corrupted file, an external device not working, or the computer not starting up.

Answer

Disk Utility is documented as fixing only Wi-Fi connectivity problems on macOS; no disk-level repair is in scope for the tool on any supported macOS version anywhere.

Answer

Disk Utility is documented as fixing only display brightness problems on macOS; no disk-level repair is in scope for the tool on any supported macOS version anywhere.

Answer

Disk Utility is documented as fixing only the Trash icon position on macOS; no disk-level repair is in scope for the tool on any supported macOS version anywhere at all.

Question 12

A team is rolling out a security program and is reviewing what an organization typically expects the security program to deliver. Which framing does SP 800-100 document for the program?

Accepted Answer

The organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate effectiveness.

Answer

The organization looks to the program only to maintain a vendor support phone book; no responsibility for selecting or implementing controls is documented for any program.

Answer

The organization looks to the program only for evening-event catering coordination; no responsibility for selecting or implementing controls is documented at all anywhere.

Answer

The organization looks to the program only to manage office furniture procurement; no responsibility for selecting or implementing controls is documented at all anywhere.

Question 13

A team is documenting two specific NTFS capabilities to justify it as the default Windows file system on a managed fleet. Which two of the following are documented NTFS advanced features that improve security and data management? (Choose two.)

Accepted Answer

Security descriptors that participate in access control and contribute to NTFS-level enforcement of permissions across files and folders on the volume.

Accepted Answer

Disk quotas that bound per-user storage consumption and contribute to capacity planning across files and folders on the volume mounted by the operating system.

Answer

Mandatory FAT32 short-name fallback that downgrades long file names to 8.3 names whenever the volume is mounted on Windows or scanned by a file utility.

Answer

Boot-loader signing only, with no support for per-file ACLs or volume-level encryption, since NTFS provides no advanced features beyond the bootloader chain.

Question 14

A team is rolling out a sales pitch for migrating to Defender Antivirus and asks which detection technologies Microsoft lists. Which technology set does Microsoft document for Defender Antivirus?

Accepted Answer

Machine learning, big-data analysis, in-depth threat resistance research, and the Microsoft cloud infrastructure protect devices in the organization with Defender.

Answer

Microsoft Defender Antivirus uses only paper-based pattern lookups distributed by postal mail and provides no cloud, ML, or threat-research integration of any kind.

Answer

Microsoft Defender Antivirus uses only static-rule heuristics from 1998 and ignores any cloud, machine learning, or threat-research signal regardless of severity.

Answer

Microsoft Defender Antivirus uses only end-user voting on file reputation and ignores any cloud, machine learning, or threat-research signal regardless of severity.

Question 15

A field technician is rolling out an honest expectation about what Disk Utility can fix on macOS. Which limitation does Apple document?

Accepted Answer

Disk Utility cannot detect or repair all problems that a disk may have; some problems are out of scope for First Aid on the storage device.

Answer

Disk Utility cannot detect any disk problem of any kind on any macOS host; the tool is documented as a cosmetic shortcut on the Dock with no diagnostic surface at all.

Answer

Disk Utility detects and repairs all possible problems on every storage device including bent enclosure pins on physically damaged hardware on any supported macOS host.

Answer

Disk Utility detects every problem and additionally repairs adjacent peripherals such as a connected printer or scanner; the scope of the tool covers the entire desktop.

CompTIA A+ Core 2

Sample questions

Sources

Similar exams