A customer’s smartphone has been overheating frequently and becoming unresponsive since installing an OS update. A technician has already performed a soft reboot of the device. Which of the following should the technician perform NEXT? (Choose two.)

Roll back the OS update
Update the PRL
Force stop running applications
Enable airplane mode
Perform a factory reset
Run application updates
Reset network settings

Answer(s): A,F

Show Answer Next Question

QUESTION: 42

Joe, a user, cannot read encrypted email messages on a corporate smartphone, but he has been able to read them in the past. A technician restarts Joe's smartphone, but the issue remains. The technician deletes the corporate email account and has Joe re-add it, verifying all settings are correct. Despite these steps, the issue persists.

Which of the following is MOST likely causing the issue?

The certificate is expired.
The TPM is bad.
The phone is not encrypted.
The incorrect mail server is selected in settings.

Answer(s): A

Show Answer Next Question

QUESTION: 43

A user moves a file from one NTFS disk to another NTFS disk. Which of the following describes the changes to the file permissions?

The file has both the source and destination permissions
The file keeps the source permissions
The file permissions have to be set manually
The file receives the destination permissions

Answer(s): D

Show Answer Next Question

QUESTION: 44

A technician has enabled port security on a switchport.

Which of the following BEST describes the effect this will have?

Devices must match a list of allowed MAC addresses before accessing the network.
Devices need to conform to the policies set forth by the MDM software.
Data loss prevention software will be monitoring for data exfiltration on the port.
A firewall is actively monitoring the network traffic using heuristic analysis.

Answer(s): A

Show Answer Next Question

Download PDF Next Page

Viewing page 13 of 64
Viewing questions 49 - 52 out of 701 questions

Post your Comments and Discuss CompTIA 220-1002 exam prep with other Community members:

Comments:

Name:

220-1002 Exam Discussions & Posts
220-1002 AI Verifications

anon on: March 04, 2025
Anyone use the free version to help them pass the test? Can't really afford the pdf version right now.
UNITED STATES

senan on: March 02, 2025
salam bu ne suallardi bele
AZERBAIJAN

HCipher on: February 12, 2025
i can certify for anyone planning to take the exam that these questions are up to date and representative of the actual exam, but i strongly urge you to read, and understand the material as comprehensively as you could ensuring you learned as best as you possibly could. before learning the dumps, as acquiring the certificate without any knowledge gained is a futile endeavor for your career progression and the likes
PORTUGAL

The Professor on: December 21, 2024
Passed the A+ today. Many of these questions are valid but be careful to read your questions first because the answer may change based on the conditions in the question
UNITED STATES

CompTIA on: December 03, 2024
These questions are valid but you can't rely on them. We do not use these questions no more. On god.
UNITED STATES

Jury on: April 10, 2024
i just passed my A+ core 2 today. 4 of my PBQ was exactly the same with this practice test. it6 is really worth understanding all the questions here. big help!! thank you so much!! Aiming for my Sec+ now before 601series expires in July
Anonymous

Marc on: March 14, 2024
This exam dumps is valid in US as of yesterday. I can say that it helped a lot with my exam. A lot of relevant topics.
UNITED STATES

Jacob on: February 12, 2024
This exam is one of the hardest ones. You cannot pass without using these exam dumps. Just an FYI to others, majority of these questions are in the exam.
Italy

GetGo on: August 11, 2023
It was pretty easy to pass this exam with the help of this exam dumps PDF. Free version is not complete. I paid for the full version with 50% sale.
Anonymous

AI Explanation - verified by francis4fnc on: August 23, 2026
Question 10:
Correct answer: B. The ARN contains the mrk- prefix, identifying a multi-Region AWS KMS key. Multi-Region keys have related key material in multiple Regions, and each regional key must be handled separately.
To remove the key as quickly as possible:

Identify every Region containing a replica.

Schedule deletion of the KMS key in each Region.

Use the minimum KMS waiting period: 7 days.

Scheduling deletion in only one Region does not remove the replicas elsewhere.
Why the other options are wrong:

A — Use the root user: Root access does not eliminate the need to schedule deletion for every regional replica. The problem is the multi-Region structure, not insufficient administrative permissions.

C — Update the key policy: The policy already grants kms:* to IAM principals. Changing permissions does not delete the key or its replicas.

D — Disable the key and schedule deletion in 30 days: Disabling can stop cryptographic use, but 30 days is slower than the permitted 7-day waiting period. It also does not address replicas in other Regions.

The key policy allowing IAM principals does not override KMS deletion procedures or the requirement to manage each regional key separately.
Lagos, Nigeria

AI Explanation - verified by User8565 on: August 30, 2026
Question 4:
Correct answer: C — Ability to meet data residency requirements
A hybrid cloud combines private/on-premises infrastructure with public-cloud services. An organization can keep sensitive or regulated data in a required country, region, or private environment while using the public cloud for less-sensitive workloads.
Why the others are less suitable:

A: Reduce management overhead — This is generally an advantage of public cloud, not hybrid cloud. Hybrid environments can increase management complexity.

B: Cross-platform virtualization — Not the defining advantage of hybrid cloud.

D: Leverage IaaS and PaaS — Public clouds commonly provide both IaaS and PaaS, so this is not unique to hybrid cloud.

Data residency means data must remain in a particular geographic location to satisfy legal, regulatory, or organizational requirements.
Lilongwe, Malawi

AI Explanation - verified by User7926 on: September 03, 2026
Question 93:
Correct answer: A — Developing the security strategy.
The information security manager’s primary role is to develop the information security strategy so that it supports the organization’s business objectives and risk appetite. This is typically done with input from business process owners and other stakeholders.
Why the other options are less appropriate:

B — Reviewing the strategy: Usually performed by a security steering committee or other governance body.

C — Communicating the strategy: The security manager may help communicate it, but communication is not the primary governance responsibility tested here.

D — Approving the strategy: Approval belongs to executive management or the appropriate governing authority, not the person who develops it.

A useful exam distinction is: management develops and recommends; governance bodies review, direct, and approve.
Bengaluru, India

AI Explanation - verified by User8074 on: August 29, 2026
Question 38:
Correct answers: A and F

A — Increasing the minimum password length to 14 characters: Longer passwords have more possible combinations, making them harder to guess or crack through brute force.

F — Requiring at least one special character: This increases password complexity and expands the possible character combinations.

Why the others are incorrect:

MD5 to SHA-512: Improves password-hash resistance, but does not stop users from choosing easy-to-guess passwords. Also, modern systems should use a password-specific hashing algorithm such as bcrypt, scrypt, or Argon2.

Increasing maximum age to 120 days: Leaves weak passwords in use longer.

Reducing minimum length to 10: Makes guessing easier.

Reducing minimum age to zero: Allows immediate password changes but does not make the password itself harder to guess.

The answer key’s A, F is correct.
Weston, Canada

AI Explanation - verified by User8074 on: August 28, 2026
Question 1:
Correct answer: B. Transfer
Purchasing cyber insurance shifts some of the financial risk to a third party—the insurance provider. This is a risk transfer strategy.

Accept: Acknowledge the risk and choose not to take additional action.

Transfer: Shift the risk or its financial impact to another party, such as through insurance or outsourcing.

Mitigate: Reduce the likelihood or impact of the risk, such as by implementing security controls.

Avoid: Eliminate the activity or condition that creates the risk.

The company is not removing the cyber risk entirely; it is transferring the potential financial consequences.
Weston, Canada

AI Explanation - verified by User2714 on: August 24, 2026
Question 27:
Correct answer: A) Trusted devices
Trusted-device authentication associates access with a managed device—such as a company laptop or phone—using device certificates, security policies, or hardware-backed credentials.
Why it fits:

Remote and global access: Employees can authenticate from anywhere, not just a specific location.

Seamless login: The device can authenticate in the background, reducing repeated password or MFA prompts.

Minimal equipment: It uses devices employees already have, rather than requiring separate hardware.

Why the others are weaker:

Geotagging: Identifies location but is not a complete authentication method and can be spoofed.

Smart cards: Can provide strong authentication, but require cards and often readers, adding equipment and user steps.

Time-based logins: Restrict access by time but do not verify the user or device adequately.

For the exam, associate trusted devices with convenient, device-based authentication that supports a distributed workforce.
Bengaluru, India

AI Explanation - verified by User2745 on: August 31, 2026
Question 12:
Correct answer: B — AWS Service Catalog
AWS Service Catalog lets organizations:

Create and manage approved IT services as products

Control which users can deploy those products

Apply governance, permissions, and constraints

Use and manage infrastructure-as-code templates, such as AWS CloudFormation templates

Why the others are incorrect:

AWS Resource Explorer: Helps find and browse AWS resources; it does not govern IaC deployments.

AWS Organizations: Manages accounts, consolidated billing, and organization-wide policies.

AWS Systems Manager: Provides operational management, such as patching, automation, and parameter storage, but it is not primarily used to catalog and govern IaC-based service deployments.

The key clue is “manage deployed IT services” and “govern infrastructure as code templates.” That combination points to AWS Service Catalog.
Indore, India

AI Explanation - verified by ravi.chidananda on: August 20, 2026
thanks. pls exit
You’re welcome. Goodbye!
Bengaluru, India

AI Explanation - verified by User9771 on: August 31, 2026
Question 53:
Correct answer: A. Disk encryption
Disk encryption protects data at rest on a corporate laptop. If the laptop is stolen, an attacker could remove the drive or access it using another operating system, but encryption makes the stored data unreadable without the decryption key or credentials.
Why the others are less suitable:

Data loss prevention (DLP): Helps detect or prevent sensitive data from being copied or transmitted, but it does not primarily protect a stolen laptop’s stored data.

Operating system hardening: Reduces vulnerabilities and attack surface but does not encrypt files if the device is stolen.

Boot security: Helps ensure that only trusted software starts, but it does not fully protect the drive if an attacker accesses it offline.

For this scenario, use full-disk encryption, ideally with secure key management and an authentication mechanism such as a hardware security module or trusted platform module.
Atlanta, United States

AI Explanation - verified by inwakor.2501037 on: August 25, 2026
Question 82:
Answer: Yes.
This solution creates three role-playing copies of the date dimension:

Due Date

Order Date

Delivery Date

The original date query is renamed Due Date. Then DAX calculated tables are created from it, for example:

DAX Order Date = 'Due Date' Delivery Date = 'Due Date'

Each date table should have its own relationship to the matching column in Sales:

Due Date[Date] ? Sales[Due Date]

Order Date[Date] ? Sales[Order Date]

Delivery Date[Date] ? Sales[Delivery Date]

This is necessary because a single date table cannot normally have all three relationships active at the same time. Separate copies allow users to analyze sales independently by due date, order date, and delivery date.
The answer key’s Yes is correct.
Lagos, Nigeria

AI Explanation - verified by User4985 on: September 05, 2026
Question 12:
Correct answer: 5 network interfaces (A).
Reasoning:

Each Azure VM must have at least one network interface (NIC).

A single NIC can have:

- A private IP address in the virtual network. - A public IP address associated with its IP configuration.

Therefore, each of the five VMs needs only one NIC:

5 VMs × 1 NIC = 5 NICs
The requirement for identical inbound and outbound security rules does not require additional NICs. You can apply the same network security group (NSG) to all five NICs, or associate one NSG with the subnet containing the VMs.
The options suggesting 10, 20, or 40 NICs incorrectly assume that public and private IP addresses each require separate NICs. They do not.
Guangzhou, China

AI Explanation - verified by User6359 on: August 28, 2026
Question 6:
Pytanie 6
Który z ponizszych rodzajów umów okresla ramy czasowe, w których dostawca musi udzielic odpowiedzi?

SOW

SLA

MOA

MOU

Odpowiedz: B — SLA
Gdansk, Poland

AI Explanation - verified by User6753 on: August 30, 2026
Question 58:
Correct answer: A — Amazon Macie
Amazon Macie is a data security and privacy service that:

Discovers sensitive data in Amazon S3 buckets

Uses machine learning and pattern matching to identify data such as personally identifiable information (PII)

Helps assess S3 security and privacy risks

Generates findings for potentially sensitive or exposed data

Why the others are incorrect:

Amazon Detective: Investigates security findings and performs root-cause analysis.

Amazon GuardDuty: Detects threats and suspicious activity across AWS accounts and workloads.

AWS IAM Access Analyzer: Identifies resources that are accessible from outside their intended trust zone, such as publicly accessible S3 buckets.

The key phrase is “discover and protect sensitive data stored in S3”, which directly points to Macie.
Abbotsford British Columbia, Canada

AI Explanation - verified by User9935 on: August 31, 2026
Question 8:
The answer key appears incorrect. The stronger answer is A, D, and E.

A — Correct: Flow Builder is declarative and visual, so administrators and other non-developers can participate in designing and improving business processes without writing Apex.

D — Correct: Flow Builder provides visual debugging tools, allowing an admin to test paths, inspect variable values, and identify where a specific business case fails.

E — Correct: A flow’s visual structure documents the logic and makes later maintenance easier than reading and updating custom Apex code.

Why the key’s B is problematic:

B — Incorrect: Flow debugging does not attach a debugger to live customer sessions. The admin uses Flow Builder’s debug functionality with test inputs; this is not live-session debugging and should not be used to monitor real customer transactions.

C is also incorrect because Flow Builder does not automatically notify an admin that a third-party integration’s data interface has changed. Such monitoring requires integration controls or external processes.
Evora, Portugal

AI Explanation - verified by User4094 on: August 23, 2026
Question 12:
The answer key B and D appears incorrect. The best answer is A:
Customer Community Plus for Regional Leads and External Identity for Capacity Planners.

Regional leads — Customer Community Plus

- Need access to Cases to report damaged goods. - Need access to reports and dashboards for regional shipping KPIs. - Customer Community Plus is designed for external users who need enhanced reporting and dashboard capabilities.

Capacity planners — External Identity

- They only need to authenticate to the third-party analytics tool. - They do not need access to Salesforce records or community functionality. - An External Identity license supports external users authenticating through Salesforce as an identity provider for other applications.
Why the key’s choices are problematic:

Customer Community does not provide the enhanced reporting/dashboard access required by regional leads.

An Identity license is generally for internal Salesforce identity use and does not fit the external capacity-planning users as well as External Identity.

Zagreb, Croatia

AI Explanation - verified by User4925 on: August 24, 2026
Question 7:
The answer key shows A and D, but the wording is ambiguous and may be outdated.

A — Custom Button: A button can launch a flow, typically by passing the flow’s URL and record context.

D — From a Process: A Process can invoke a flow using an Apex action configured for flow invocation. However, this is automation-triggered, not directly accessed by a user.

B — Quick Action: In current Salesforce functionality, a Flow Quick Action can launch a screen flow directly from a record page. This makes B a valid modern method.

C — Visual Workflow Launcher: This is not generally listed as a standard access method in current Salesforce terminology; Salesforce commonly uses the Flow component on Lightning pages instead.

For the likely older exam context, memorize custom button and process-triggered flow as the intended answers. For current Salesforce configuration, remember that Flow Quick Actions are also supported.
Sofia, Bulgaria

AI Explanation - verified by User5804 on: August 20, 2026
Question 3:
Na questão 3, a resposta é A — Árvores de decisão, porque o requisito principal é documentar como o modelo chega ao resultado.

Árvores de decisão: usam regras sequenciais, como “se característica X > valor, siga para este ramo”. São fáceis de visualizar e explicar. Atendem bem a problemas de classificação e regressão com alta interpretabilidade.

Regressão linear: prevê um valor numérico contínuo, como preço, custo ou temperatura. Não é a escolha principal para classificar genes em categorias.

Regressão logística: calcula a probabilidade de uma categoria. Pode atender à classificação, inclusive multiclasses, mas sua explicação costuma ser menos intuitiva que uma árvore para documentar decisões.

Redes neurais: atendem a tarefas complexas, como imagens, texto e padrões não lineares. Porém, são menos interpretáveis, funcionando mais como uma “caixa-preta”.

Resumo: como a empresa precisa entender e documentar o mecanismo interno do modelo, a árvore de decisão é a opção mais adequada.
Itu, Brazil

AI Explanation - verified by User6290 on: August 19, 2026
Question 8:
Answer: A — Get data from a SharePoint folder, enter the site URL, select Transform, then filter by the folder path.
Why:

The files are stored in a document library, which is exposed through the SharePoint Folder connector.

The connector returns file metadata, including Folder Path, Name, and Content.

In Power Query, filter Folder Path so only files in the manufacturing reports folder are retained.

You can then combine the remaining Excel files because they all have the same structure.

Why the other choices are wrong:

SharePoint List is for SharePoint lists, not document-library files.

Combine & Load combines files immediately, before you filter to the required folder, and may include unwanted files.

Transform gives you the opportunity to filter the file list first, which is more efficient and targeted.

Kuala Lumpur, Malaysia

AI Explanation - verified by User2538 on: August 19, 2026
Question 4:
Correct answer: No.
Azure virtual machines are an example of Infrastructure as a Service (IaaS), not Software as a Service (SaaS).

IaaS: You manage the virtual machine’s operating system, configuration, applications, and data. Azure manages the physical infrastructure and virtualization platform.

PaaS: You deploy applications without managing the underlying operating system or servers.

SaaS: You consume a complete application managed by the provider, such as Microsoft 365.

Because the requirement is to deploy and manage Azure virtual machines, the appropriate model is IaaS. The proposed SaaS solution does not meet the goal, so No is correct.
Pune, India

AI Explanation - verified by deanswalsh on: August 16, 2026
Question 112:
Yes—the displayed name Document.xml is exactly why this question is confusing. If Hide extensions for known file types is enabled, Windows hides the real .txt extension:

Actual filename: Document.xml.txt

Explorer displays: Document.xml

File type: Text Document (.txt)

When the user “renames” the displayed name to Document.xml, they are only changing the visible base name. Windows still retains the hidden .txt extension, so the file remains a text document.
The correct answer is D: Hide extensions—more precisely, disable Hide extensions for known file types in File Explorer’s Folder Options. Then the user can see and replace the complete filename:

text Document.txt ? Document.xml

The file type shown in Properties confirms that .txt is still the actual extension. Note that changing an extension does not convert the file’s contents; it only changes how Windows and applications identify it.
Anonymous

AI Explanation - verified by User5231 on: September 04, 2026
Question 127:
Correct answer: D

10 TB with maximum I/O performance: Use EC2 instance store. It provides very high-throughput, low-latency local storage suitable for temporary video-processing data. The application must tolerate data loss because instance store is ephemeral.

300 TB of highly durable media: Use Amazon S3, which is designed for highly durable object storage and can scale to this size.

900 TB of inactive archival media: Use S3 Glacier, which provides lower-cost storage for data that is rarely accessed.

Why the other options are weaker:

A: Amazon EBS offers high performance but is not the best fit for the question’s “maximum possible I/O” requirement compared with local instance store.

B: Amazon EFS is durable and shared, but is generally more expensive and less suitable for very large archival storage.

C: Uses EC2 instance store for performance, but incorrectly uses EFS for the 300-TB durable tier and S3 rather than Glacier for archival data.

The key distinction is: instance store for temporary high-speed processing, S3 for durable active content, and S3 Glacier for low-cost archival storage.
Stuttgart, Germany

AI Explanation - verified by User2519 on: August 16, 2026
Question 6:
Correct answer: Governance (C)
The AWS Cloud Adoption Framework (AWS CAF) organizes guidance into six perspectives:

Business

People

Governance

Platform

Security

Operations

The Governance perspective includes foundational capabilities needed to manage and control cloud adoption, such as:

Cloud financial management

Portfolio and program management

Risk management

Data governance

Compliance and oversight

Sustainability, Performance efficiency, and Reliability are AWS Well-Architected Framework design principles or pillars—not AWS CAF perspectives.
Kuala Lumpur, Malaysia

AI Explanation - verified by User8434 on: August 29, 2026
Question 1:
Correct answer: D. TTP provides useful insights on the strategy and behavior of an attacker.
Tactics, techniques, and procedures (TTPs) describe how an attacker operates:

Tactics: The attacker’s overall goal, such as gaining persistence or exfiltrating data

Techniques: The methods used to achieve that goal

Procedures: The specific implementation or sequence of actions

TTPs are valuable because they focus on behavior, which is often more stable than specific indicators. An attacker can change an IP address, hash, or tool relatively easily, but changing the underlying methods and objectives may be more difficult.
Why the others are weaker:

IP addresses and hash values: Useful indicators, but they can change quickly.

Indicators of compromise: TTPs may help identify IOCs, but their main value is describing behavior.

Tools: Attackers can replace tools or use legitimate administrative utilities.

This allows defenders to detect similar attacks even when the exact malware or infrastructure is new.
Santa Clara, United States

AI Explanation - verified by User4094 on: August 26, 2026
Question 21:
Question 21: Answer D — Confirm performance considerations with Salesforce Customer Support due to high peaks.
The key detail is the requirement for more than 1,000 logins per minute. Even if the identity architecture is technically valid, that login volume may exceed normal platform limits or require capacity planning. The architect should validate the design and expected peak load with Salesforce before implementation.
Why the other options are weaker:

A: Using an external OAuth 2.0 identity provider could provide unified identity, but it does not specifically address Salesforce capacity or high-volume login limits.

B: Making the Experience Cloud community a SAML identity provider and using JIT provisioning is a possible federation pattern, but it may not be appropriate for this scale without Salesforce validation.

C: A default account is unrelated to solving identity unification and high login throughput. Person Accounts can be supported in appropriate B2C Commerce integrations.

The exam focus is recognizing that high authentication peaks require performance and limit validation with Salesforce, making D the best answer.
Zagreb, Croatia

AI Explanation - verified by alaafawzyelbahrawy on: August 26, 2026
Question 121:
Correct answer: C — The total count of records is calculated from the Delta transaction logs.
For a Delta table, each data file added to the table is recorded in the Delta transaction log. The log includes file-level metadata, including the number of records (numRecords) when statistics are available.
For COUNT(*), Databricks SQL can use these metadata values and add them together instead of reading every Parquet data file:

sql SELECT COUNT(*) FROM table;

Why the other options are incorrect:

A: It does not normally need to scan all data files for this operation.

B: Results are not simply reused from a query cache every time. Caching is separate from Delta’s metadata optimization.

D: The relevant metadata is maintained through the Delta transaction log, not directly treated as a Parquet-file metadata operation in this context.

The key exam concept is that Delta Lake transaction logs contain table and file metadata that can accelerate metadata-only operations such as row counts.
Cairo, Egypt

AI Explanation - verified by User2896 on: August 22, 2026
Question 4:
Correct answer: SECURITYADMIN (B).
SECURITYADMIN is intended for security administration, including:

Creating and managing users and roles

Granting and revoking roles and privileges

Managing access-control responsibilities

Why the others are less appropriate:

SYSADMIN: Manages warehouses, databases, schemas, and other objects—not primarily users and roles.

PUBLIC: Automatically granted to every user; it is not an administrative role.

ACCOUNTADMIN: Has the highest level of access, but should be reserved for account-level administration and emergencies rather than routine security tasks.

In practice, Snowflake also provides USERADMIN for user and role creation, but for this exam question, SECURITYADMIN is the recommended choice because it covers broader security and access management.
Hyderabad, India

AI Explanation - verified by User8774 on: September 03, 2026
Question 12:
Correct answer: B — Port security
A MAC flooding attack sends many fake source MAC addresses to a switch. The goal is to overwhelm the switch’s MAC address table, potentially causing it to behave like a hub and forward traffic out multiple ports.
Port security mitigates this by limiting which and how many MAC addresses are allowed on a switch port. It can:

Restrict a port to a defined number of MAC addresses

Use statically configured or “sticky” MAC addresses

Shut down or restrict the port when violations occur

Why the other options are less appropriate:

Load balancer: Distributes application traffic; it does not protect switch MAC tables.

IPS: May detect suspicious traffic but is not the primary control for switch-port MAC limits.

NGFW: Filters routed network traffic, not the switch’s CAM/MAC address table directly.

Reston, United States

AI Explanation - verified by User8074 on: August 31, 2026
Question 107:
Correct answer: D — Select an IdP (Identity Provider).
The organization should first choose or establish an identity provider, such as a centralized directory service. The IdP authenticates users and becomes the trusted source for access to the SaaS applications.
After selecting the IdP, the organization can configure:

SAML: Enables federated authentication and single sign-on between the IdP and SaaS providers.

OAuth tokens: Allow delegated application access; OAuth is not primarily the first step for employee SSO.

Password vaulting: Stores or autofills multiple passwords but does not eliminate the separate credentials or provide true federation.

Exam tip: For a cloud environment with many SaaS logins and a goal of reducing credentials, think centralized identity provider first, followed by SAML-based SSO.
Weston, Canada

AI Explanation - verified by User8413 on: August 21, 2026
Question 54:
Correct answer: D. Replace the keycap.
The technician already checked for debris. The next least expensive step is to inspect and, if necessary, replace the keycap, especially if it is cracked, loose, or not making proper contact with the mechanism beneath it.
Why the others are less appropriate:

Replace the keyboard: More expensive and unnecessary before simpler causes are ruled out.

Replace the key switch: Laptop keyboards generally aren’t designed for individual switch replacement.

Replace the circuit board: Excessive for a single nonworking key and not a cost-effective first step.

The troubleshooting principle is to start with the simplest, least expensive, and most localized repair before replacing an entire component.
Manchester, United Kingdom

AI Explanation - verified by User4811 on: August 23, 2026
Question 53:
Correct answer: A. Disk encryption
The administrator wants to protect data if a corporate laptop is stolen. Full-disk encryption encrypts the data stored on the drive, so an attacker generally cannot read it simply by removing the drive or booting another operating system.

B. Data loss prevention (DLP): Helps prevent sensitive data from being copied, emailed, or exfiltrated. It is not the primary control for protecting a stolen laptop’s stored data.

C. Operating system hardening: Reduces vulnerabilities by disabling unnecessary services and applying secure settings, but it does not necessarily protect the files if the disk is accessed directly.

D. Boot security: Helps ensure the device starts only through trusted software or approved processes. It supports platform integrity but does not itself encrypt stored files.

Exam clue: when the scenario says “laptop is stolen” and asks about protecting data at rest, choose disk encryption.
Atlanta, United States

AI Explanation - verified by User3862 on: September 02, 2026
Question 88:
Correct answer: B — Planned and scheduled tasks and work packages to overcome geographical and time-zone challenges.
The issue is a resource scheduling and coordination problem. When assigning work, the project manager should account for team members’ working hours and arrange dependencies so that progress does not depend on an immediate response from someone in another time zone.
Effective planning might include:

Scheduling overlapping working hours for critical collaboration

Assigning independent tasks that can proceed asynchronously

Adding clear handoffs between offices

Documenting decisions, questions, and required inputs

Building appropriate time into the schedule for responses

Why D is less appropriate: communication tools such as video conferencing can help collaboration, but they do not eliminate time-zone differences or prevent work from stalling. The key preventive action is to design the schedule and work packages around the distributed team.
Shah Alam, Malaysia

AI Explanation - verified by User3443 on: August 27, 2026
Question 13:
Correct answer: C. Jailbreaking
Jailbreaking removes or bypasses restrictions imposed by a smartphone’s manufacturer or operating system. This allows the user to install unauthorized software, access restricted system functions, and enable features not available by default.
Why the other options are incorrect:

SQL injection (SQLi): Attacks databases by inserting malicious SQL commands.

Cross-site scripting (XSS): Injects scripts into web pages viewed by other users.

Sideloading: Installing an application from outside the official app store. It may install unauthorized apps, but it does not generally unlock the operating system or enable restricted system features.

The answer key’s C is correct.
Garland, United States

AI Explanation - verified by User6528 on: August 27, 2026
Question 12:
Question 12: Yes — the solution meets the goal.
The answer key shows A, which is correct.

An Azure pay-as-you-go subscription follows an operational expenditure (OpEx) model.

With OpEx, the organization pays for services as they are used, typically based on consumption.

There is no need to purchase and maintain physical servers upfront.

This contrasts with capital expenditure (CapEx), where the company makes a significant upfront investment in infrastructure, such as on-premises Hyper-V hosts.

Therefore, recommending the operational expenditure model is appropriate for migrating the virtual machines to Azure under a pay-as-you-go subscription.
Singapore, Singapore

AI Explanation - verified by User9972 on: August 28, 2026
Question 38:
Correct answer: B — The definition for each table and column
The ServiceNow System Dictionary stores metadata about database tables and fields (columns), rather than the actual business data in those records.
It includes details such as:

Field name and label

Data type

Reference table

Default value

Whether the field is mandatory or read-only

Field attributes and configuration

Why the other options are incorrect:

A: Labels and translations are handled through documentation and translation-related records.

C: Table relationships may be represented through reference fields, but this is not the primary description of the Dictionary.

D: Spell-checking language data is unrelated to the System Dictionary.

A useful way to remember it: the Dictionary describes how tables and fields are structured, while records contain the actual data.
London, United Kingdom

AI Explanation - verified by User7377 on: September 01, 2026
Question 8:
Correct answer: B — regulatory and legal requirements.
Records should primarily be retained for the period required by applicable:

Laws and regulations

Litigation holds

Industry or contractual obligations

Tax, financial, health, or privacy requirements

An organization must be able to produce records when legally required, but should not retain them indefinitely because unnecessary retention increases storage costs, discovery burden, and privacy risk.
Why the others are weaker:

Business strategy and direction: May influence retention, but cannot override legal requirements.

Storage capacity and longevity: Practical considerations, not the primary driver.

Business ease and value analysis: May support decisions after compliance obligations are identified.

Exam rule: Determine the mandatory legal and regulatory retention period first; then address business and operational requirements.
Islington, United Kingdom

AI Explanation - verified by User9453 on: August 23, 2026
Question 7:
Question 7 answer: B — It buffers and queues packets above the committed rate.
Traffic shaping controls the transmission rate by temporarily storing excess packets in a buffer. When traffic exceeds the configured committed rate, the excess packets are queued and transmitted later when bandwidth becomes available.
Why the other options are incorrect:

Drops packets when traffic exceeds a certain bitrate: This describes traffic policing, not shaping.

Fragments large packets and queues them: Shaping does not fragment packets as its primary congestion-control action.

Drops packets randomly from lower-priority queues: Packet dropping may occur if a shaping queue becomes full, but it is not the defining behavior.

Key distinction:

Shaping: buffers and delays excess traffic.

Policing: drops or marks traffic that exceeds the configured rate.

Ranchi, India

AI Explanation - verified by User7288 on: August 31, 2026
Question 26:
Correct answer: Red team
A red team performs offensive security testing to determine whether identified vulnerabilities can actually be exploited.

Red team: Simulates attackers; exploits weaknesses to test security.

Blue team: Defends systems; monitors, detects, and responds to attacks.

Purple team: Combines red- and blue-team efforts to improve detection and defense.

White team: Oversees or manages the test, defining rules, scope, and authorization.

Because the question asks who determines whether a vulnerability is exploitable, the best choice is the red team.
Imperial Beach, United States

AI Explanation - verified by User1362 on: September 06, 2026
S? d?ng ti?ng vi?t
Ðáp án dúng: D
Gi?i pháp:

T?o m?t Systems Manager Automation runbook d? ch?y l?nh kh?i d?ng l?i ?ng d?ng trên các EC2 instance.

T?o m?t Amazon EventBridge rule ph?n ?ng khi CloudWatch alarm chuy?n sang tr?ng thái ALARM.

Ð?t Automation runbook làm target c?a EventBridge rule.

Lu?ng ho?t d?ng:

Log c?a ?ng d?ng du?c ghi vào CloudWatch Logs.

CloudWatch alarm phát hi?n nhi?u l?i liên quan d?n vi?c restart.

Alarm chuy?n sang tr?ng thái ALARM.

EventBridge nh?n s? ki?n thay d?i tr?ng thái này.

EventBridge g?i Systems Manager Automation runbook.

Runbook restart ?ng d?ng trên các EC2 instance, không restart c? instance.

Vì sao các dáp án khác không phù h?p?

A: SNS không tr?c ti?p g?i Systems Manager Automation runbook nhu m?t target native.

B: Lambda có th? th?c hi?n vi?c restart, nhung ph?i t? x? lý vi?c xác d?nh instance và ch?y l?nh t? xa.

C: Lambda ch? làm trung gian d? g?i runbook, không c?n thi?t vì EventBridge có th? g?i runbook tr?c ti?p.

Ði?m c?n nh?: V?i remediation t? d?ng d?a trên CloudWatch alarm, k?t h?p EventBridge + Systems Manager Automation giúp gi?m code tùy ch?nh và hi?u qu? v?n hành cao nh?t.
Ho Chi Minh City, Vietnam

AI Explanation - verified by User4485 on: August 28, 2026
Question 51:
Answer: A. Denial of service (DoS)
The monitoring information likely shows an unusually high volume of traffic or resource consumption directed at the testing system. A DoS attack overwhelms a server or service so legitimate users cannot access it, even though the server itself remains powered on and reachable from the network.
Why the other options are less likely:

ARP poisoning: Redirects or intercepts local network traffic; it would more likely affect communication paths or cause man-in-the-middle behavior.

Jamming: Interferes with wireless signals. The scenario does not indicate a wireless outage.

Kerberoasting: Attempts to obtain service-account password hashes from Kerberos; it is a credential attack, not typically a direct service outage.

I cannot see the monitoring image, but based on the wording and the provided answer key, DoS is the best answer.
Biloxi, United States

AI Explanation - verified by User3451 on: September 03, 2026
Question 17:
Correct answer: B — Unsupervised learning.
The customer data is unlabeled, meaning there are no predefined tier labels such as “premium,” “standard,” or “basic.” Unsupervised learning can analyze the data and identify natural groups based on similarities, such as purchase history, spending, or engagement. The company can then assign those groups to advertising tiers.
Why the other options are incorrect:

Supervised learning requires labeled examples to learn how to classify customers.

Reinforcement learning learns through actions, rewards, and penalties, which is not the main task here.

RLHF uses human feedback to improve model behavior, typically for generative AI, not customer segmentation.

The key clue is “unlabeled customer data” combined with grouping customers into tiers.
Bengaluru, India

AI Explanation - verified by User4094 on: August 26, 2026
Question 15:
Correct answer: C — The identity provider is correctly preserving the RelayState.
When a user clicks a Salesforce case link and is redirected to SAML SSO, Salesforce includes the original destination in the RelayState parameter. The identity provider must return that value unchanged in the SAML response.
If RelayState is lost, altered, or ignored, Salesforce completes authentication but has no information about the originally requested Case URL, so it typically sends the user to the Salesforce home page.
Why the others are less likely:

A: My Domain is required for many SSO configurations, but if SSO works, it is unlikely to be the cause of losing the target record.

B: HTTP-POST is a valid SAML binding and does not inherently prevent redirection.

D: An incorrect Federation ID generally causes authentication or user-matching failure—not successful login to the home page.

Zagreb, Croatia

AI Explanation - verified by Tholang2016 on: September 01, 2026
Question 126:
The correct answers are A, C and E.
The question is asking for drawbacks of a formal, top-down approach to strategy, where senior management develops a planned strategy and communicates it down through the organisation.

A — Too infrequent: Formal strategies are often reviewed only every three to five years. This can make the organisation slow to respond to rapid changes in technology, competitors, regulation or customer needs.

C — Relies on predicting the future: The approach assumes senior managers can make reasonably reliable forecasts and assumptions. In uncertain environments, these assumptions may quickly become invalid.

E — Can restrict radical innovation: Formal planning tends to favour existing information, established objectives and incremental improvements. This may discourage experimental or highly innovative strategies that emerge from lower levels of the organisation.

Why the others are not selected:

B concerns the difficulty of achieving competitive advantage through core competences when competing with focused specialists. It is not specifically a drawback of the formal top-down planning process.

D is an activity organisations should undertake—continuous monitoring—not a drawback of the approach itself.

Maseru, Lesotho

AI Explanation - verified by User9296 on: September 01, 2026
Question 53:
Correct answer: D — Amazon EC2 Trn series
Trn instances use AWS Trainium chips, which are purpose-built for training deep learning and large language models. They are designed to provide high training performance with improved energy efficiency, helping reduce the environmental impact compared with more general or less specialized options.
Why the others are less suitable:

C series: CPU-optimized instances; not designed primarily for LLM training.

G series: GPU instances generally optimized for graphics and some machine learning workloads, but not specifically large-scale model training efficiency.

P series: Powerful GPU instances for ML training, but typically consume more energy than Trainium-based instances for suitable training workloads.

The company’s private data affects data security and model-training design, but it does not change which instance type is optimized for energy-efficient LLM training.
Bengaluru Urban, India

AI Explanation - verified by User1551 on: August 30, 2026
Question 17:
Correct answer: B — Enabling malware detection through a UTM
The website accepts user-uploaded PDF files, so the main concern is that an attacker could upload a malicious or weaponized document. A UTM (Unified Threat Management) appliance can inspect files and provide antimalware scanning, helping detect and block malicious uploads.
Why the other options are less appropriate:

A. IDS attack signatures: Primarily detects suspicious network activity, not necessarily malware embedded in uploaded files.

C. Load balancer: Improves availability and distributes traffic; it does not inspect documents for malware.

D. WAF: Protects web applications from attacks such as SQL injection and command injection, but its primary role is not scanning uploaded PDFs for malware.

The key clue is “customers upload PDF documents”—look for a control that performs file/content inspection and malware detection.
Dubai, United Arab Emirates

AI Explanation - verified by User2848 on: August 23, 2026
Question 4:
Correct answer: Merge the Customer and Address tables.
A merge joins tables horizontally by matching values in a common column. Here, both tables contain Address ID:

Start with the Customer table.

Use Merge Queries and select the Address table.

Match Customer[Address ID] to Address[Address ID].

Use a Left Outer join so every customer is retained.

Expand only City, State/Region, and Country.

Because each Customer ID and Address ID is unique, the result has one row per customer with the requested address details.
Why the others are wrong:

Append adds rows vertically; it is for stacking similarly structured tables.

Group By summarizes rows and does not retrieve address columns.

Transpose swaps rows and columns and is unrelated to table relationships.

Chamalières, France

AI Explanation - verified by User1732 on: August 26, 2026
Question 4:
Correct answer: B. Accuracy
The model is performing image classification: it predicts a disease category for each plant image. Accuracy measures the proportion of images classified correctly:
Accuracy = correctly classified images ÷ total images
Why the other options are incorrect:

R-squared: Typically used for regression, not classification.

RMSE: Measures prediction error for continuous numerical values, so it is not the best fit here.

Learning rate: A training hyperparameter that controls how quickly the model updates its weights; it is not an evaluation metric.

A practical caveat: if some diseases are much more common than others, accuracy alone can be misleading. Metrics such as precision, recall, and F1 score may also be useful, but among the listed choices, accuracy is correct.
Shinagawa, Japan

AI Explanation - verified by Tholang2016 on: September 01, 2026
Question 124:
Correct answer: B — “A course of action, including specification of resources required, to achieve a specific objective.”
This is CIMA’s definition of strategy. It highlights that strategy is not merely a broad intention or a list of goals; it explains how an objective will be achieved, including the resources needed.
Why the other options are less suitable:

A: Describes a broad purpose and direction, but is not the specific CIMA definition.

C: “Scoping out” activities is too vague and incomplete.

D: Combines long-term goals, strategies and policies, but describes a wider strategic-planning statement rather than the definition of strategy itself.

In exam questions, distinguish objectives—what the organisation wants to achieve—from strategy—the course of action and resources used to achieve it.
Maseru, Lesotho

AI Explanation - verified by User8039 on: August 24, 2026
Question 11:
Question 11 is testing KQL aggregation functions—specifically how to group event IDs for each virtual machine.
For distinct event IDs per computer, the appropriate query is:

kusto Event | summarize make_set(EventID) by Computer

summarize groups records.

by Computer creates one result row per virtual machine.

make_set(EventID) returns an array containing unique event IDs for that computer.

Important: The answer key appears questionable. It says to use makelist, but:

kusto | summarize make_list(EventID) by Computer

returns a list that can contain duplicate event IDs. make_list is appropriate when you need to preserve occurrences or ordering, whereas make_set is appropriate when the question explicitly asks for distinct values.
Therefore, based on the wording shown, I believe the correct function should be make_set, not make_list.
São Paulo, Brazil

AI Explanation - verified by tofomet731 on: September 04, 2026
Question 36:
The answer is Yes, No, Yes.

File1.png — Yes: User1 can apply Label1 with the Microsoft Purview Information Protection client. The client supports labeling image files such as .png in this scenario.

Folder2 — No: Folder2 is the root folder. The client does not allow labeling the root folder itself. Although the client can label ordinary folders, selecting one applies the label to existing files and subfolders—not automatically to future files.

File1.docx — Yes: .docx is a supported Microsoft Word file type, so User1 can apply Label1 to it.

The label being published to User1 is sufficient. Publication to Group1 does not change User1’s ability to apply the label.
Bangor, United Kingdom

AI Explanation - verified by User1015 on: August 24, 2026
which are correct options
The correct choices are the options that state:

Modify the database subnet NACL inbound rules to allow traffic from the new web subnet’s CIDR block on the MySQL port (3306).

Modify the database subnet NACL outbound rules to allow return traffic to the new web subnet’s CIDR block on the required ephemeral port range.

The answer choices were not included in your message, so I can’t identify the exact letters. Paste the options and I’ll map them precisely.
Pune, India

AI Tutor 👋 I’m here to help!

CompTIA 220-1002 Exam Prep (Retired and replaced with 220-1201) (Page 13 )

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44

CompTIA 220-1002 Exam Prep
(Retired and replaced with 220-1201) (Page 13 )