A customer’s smartphone has been overheating frequently and becoming unresponsive since installing an OS update. A technician has already performed a soft reboot of the device. Which of the following should the technician perform NEXT? (Choose two.)

Roll back the OS update
Update the PRL
Force stop running applications
Enable airplane mode
Perform a factory reset
Run application updates
Reset network settings

Answer(s): A,F

Show Answer Next Question

QUESTION: 42

Joe, a user, cannot read encrypted email messages on a corporate smartphone, but he has been able to read them in the past. A technician restarts Joe's smartphone, but the issue remains. The technician deletes the corporate email account and has Joe re-add it, verifying all settings are correct. Despite these steps, the issue persists.

Which of the following is MOST likely causing the issue?

The certificate is expired.
The TPM is bad.
The phone is not encrypted.
The incorrect mail server is selected in settings.

Answer(s): A

Show Answer Next Question

QUESTION: 43

A user moves a file from one NTFS disk to another NTFS disk. Which of the following describes the changes to the file permissions?

The file has both the source and destination permissions
The file keeps the source permissions
The file permissions have to be set manually
The file receives the destination permissions

Answer(s): D

Show Answer Next Question

QUESTION: 44

A technician has enabled port security on a switchport.

Which of the following BEST describes the effect this will have?

Devices must match a list of allowed MAC addresses before accessing the network.
Devices need to conform to the policies set forth by the MDM software.
Data loss prevention software will be monitoring for data exfiltration on the port.
A firewall is actively monitoring the network traffic using heuristic analysis.

Answer(s): A

Show Answer Next Question

Download PDF Next Page

Viewing page 25 of 64
Viewing questions 97 - 100 out of 701 questions

Post your Comments and Discuss CompTIA 220-1002 exam prep with other Community members:

Comments:

Name:

220-1002 Exam Discussions & Posts
220-1002 AI Verifications

anon on: March 04, 2025
Anyone use the free version to help them pass the test? Can't really afford the pdf version right now.
UNITED STATES

senan on: March 02, 2025
salam bu ne suallardi bele
AZERBAIJAN

HCipher on: February 12, 2025
i can certify for anyone planning to take the exam that these questions are up to date and representative of the actual exam, but i strongly urge you to read, and understand the material as comprehensively as you could ensuring you learned as best as you possibly could. before learning the dumps, as acquiring the certificate without any knowledge gained is a futile endeavor for your career progression and the likes
PORTUGAL

The Professor on: December 21, 2024
Passed the A+ today. Many of these questions are valid but be careful to read your questions first because the answer may change based on the conditions in the question
UNITED STATES

CompTIA on: December 03, 2024
These questions are valid but you can't rely on them. We do not use these questions no more. On god.
UNITED STATES

Jury on: April 10, 2024
i just passed my A+ core 2 today. 4 of my PBQ was exactly the same with this practice test. it6 is really worth understanding all the questions here. big help!! thank you so much!! Aiming for my Sec+ now before 601series expires in July
Anonymous

Marc on: March 14, 2024
This exam dumps is valid in US as of yesterday. I can say that it helped a lot with my exam. A lot of relevant topics.
UNITED STATES

Jacob on: February 12, 2024
This exam is one of the hardest ones. You cannot pass without using these exam dumps. Just an FYI to others, majority of these questions are in the exam.
Italy

GetGo on: August 11, 2023
It was pretty easy to pass this exam with the help of this exam dumps PDF. Free version is not complete. I paid for the full version with 50% sale.
Anonymous

AI Explanation - verified by nanrany on: July 29, 2026
Question 176:
The correct answer is AWS Application Discovery Service.

Why: ADS is designed to collect information about on-premises environments to plan migrations. It inventories details like hostname, IP address, MAC address, OS, hardware, and installed software, plus dependency mappings. This data helps you understand your current environment before moving to AWS.

How it differs from the other options:

- AWS DataSync focuses on transferring data between on-prem and AWS, not providing a network/inventory view. - AWS Application Migration Service (MGN) helps migrate workloads but isn’t primarily used for discovering on-prem inventory. - AWS Database Migration Service moves databases, not general host information.

Practical use: Install the ADS agent on on-prem hosts to collect data, then view the inventory in Migration Hub to inform migration planning and sequencing.

Busan, South Korea

AI Explanation - verified by koyaglorex2021 on: August 04, 2026
Question 32:
Here's a focused explanation of Question 32.

What the scenario asks: You have a Power BI semantic model that pulls from multiple sources (Azure SQL Database and SharePoint Online), must support a single dataset for three reports, keep data current (daily refresh by 7 AM PT), and apply RLS to limit sales data by region. You need to choose a storage mode for the tables.

Correct choice: Dual storage mode.

Why Dual fits:

- Dual allows a table to behave as both Import and DirectQuery. This supports a composite model across heterogeneous sources, which is exactly your setup (Azure SQL + SharePoint). - It lets you cache data for fast queries (Import benefits) while still enabling direct queries to source data when up-to-date freshness is required. - You can optimize dataset size and performance by selectively using Import for some tables and DirectQuery for others, while still presenting a single dataset to all reports. - RLS can be applied in the model with Dual tables, helping enforce row-level security for the sales department.

Key concepts:

- Storage modes per table: Import, DirectQuery, or Dual (Composite models). - Composite models enable mixing sources and query strategies. - Daily refresh meets the “current data” requirement; DirectQuery helps with freshness, Import helps performance and size.
If you’d like, I can walk through a concrete configuration plan (which tables to Import vs. Dual, and how to set up relationships and RLS).
Lagos, Nigeria

AI Explanation - verified by User1689 on: August 12, 2026
Question 400:
This page shows only questions 113–120, so I can’t see questions beyond the content provided here. I also can’t generate additional questions.
For access to the full question bank with verified answers, you would need the premium/full version. I can still explain any of questions 113–120 or review the related CompTIA Security+ concepts.
Yangon, Myanmar

AI Explanation - verified by sivatheanalyst007 on: July 27, 2026
Question 17:
Here’s why Question 17’s answer is E.

Correct answer: only new data added to the eventhouse (option E).

Why: When you enable OneLake availability for the eventhouse, OneLake starts syncing data going forward. It does not automatically backfill or copy over data that already exists in the eventhouse before the enablement.

What that means in practice: Any data added to the eventhouse after you enable OneLake will appear in OneLake (and be visible from OneLake file explorer). Pre-existing data in the eventhouse stays there unless you perform a separate backfill/copy operation outside the standard OneLake enablement.

How to verify: add a small new dataset to the eventhouse after enabling OneLake availability, then check OneLake to confirm the new dataset appears.

Summary: Enabling OneLake availability is incremental for new data; it won’t copy historical data by default.
Singapore, Singapore

AI Explanation - verified by User6160 on: July 26, 2026
Question 43:
Question 43 asks which activity is part of the "continual improvement" practice.

Answer: D: Making business cases for improvement action

Why:

Continual Improvement focuses on identifying and planning improvements and ensuring they’re funded and prioritized. Creating a business case for an improvement action is part of justifying and obtaining support/resources to implement improvements.

A (Identifying the cause of incidents) aligns with Problem Management.

B (Authorizing changes) aligns with Change Enablement.

C (Logging/managing incidents that result in improvement opportunities) aligns with Incident Management, not Continual Improvement.

Brasília, Brazil

AI Explanation - verified by User3575 on: August 05, 2026
Question 29:
Question 29 asks which method should be used to ensure software isn’t tampered with after the final version is complete.

Correct answer: A) Hashing

Why: Hashing produces a fixed-size digest of the software. If the final build is altered in any way, the hash will change, enabling you to detect tampering by comparing the stored digest with a freshly computed one.

Why not the others:

- Encryption (B) protects confidentiality, not integrity. - Baselines (C) define standard configurations but don’t directly provide tamper-evidence for a delivered binary. - Tokenization (D) replaces data with tokens for confidentiality, not for software integrity checking.
Tip: In practice, you might combine hashing with a digital signature (hash signed by a private key) to both verify integrity and authenticate the source.
Norcross, United States

AI Explanation - verified by sangeethasoftengg on: July 22, 2026
Question 43:
Question 43 is asking what must be built before using snippets to create region-specific unsubscribe footers.

Correct answer: A. Email templates

Why:

Snippets are reusable content blocks that you insert into email content, and they require an email template (or at least an email draft) to render.

You can store region-specific footers as snippets and include them in a template, but there would be nothing to render the snippet into without a template.

The other options aren’t prerequisites for using snippets:

- Tokens are placeholders you can use in templates/snippets, but you still need a template. - Segmentation determines who receives what, not whether you can use snippets. - Smart Lists are for grouping leads, not enabling snippet usage.
Tip: To implement per-region footers, create a snippet per region and insert them into an email template (potentially using segmentation or dynamic content to decide which snippet shows).
Coimbatore, India

AI Explanation - verified by User3311 on: July 21, 2026
Question 23:

Answer: C (192.168.0.1-192.168.0.99, 192.168.0.101-192.168.0.254)

Why: The interface is 192.168.0.100/24, so DHCP pools must be within the 192.168.0.0/24 subnet and cannot include the router’s IP (192.168.0.100), the network address (192.168.0.0), or the broadcast (192.168.0.255). Option C provides two ranges that exclude those addresses.

Why the other options are invalid:

- A: 192.168.0.1-192.168.0.255 includes the router’s IP (100) and the broadcast (255). - B: 192.169.0.1-192.169.0.254 is not in the 192.168.0.0/24 subnet. - D: 192.168.0.1-192.168.0.14 is a valid pool but very small and does not reflect the two-range approach shown in C; the given key selects the two ranges in C.
Ipatinga, Brazil

AI Explanation - verified by User5192 on: July 25, 2026
Question 1:
Here’s how to understand and implement Question 1.
Goal

Ensure that only users who manage the production environment sign in to the Azure portal from a hybrid Entra-joined device and authenticate with MFA.

What to configure and why

Use Microsoft Entra ID Protection (Identity Protection) to enforce MFA enrollment:

- Create or enable an MFA registration policy. - Target the users who manage the production environment (or all users if appropriate). - This makes sure those users are enrolled in MFA before they can be prompted to use MFA at sign-in.

Update the existing Capolicy1 (a Conditional Access policy):

- In the policy, add a grant control to Require MFA (in addition to the existing requirement that the device is hybrid joined). - This enforces MFA at sign-in for those users when they access the Azure portal to manage production resources.
How this meets the requirements

Identity Protection MFA registration policy ensures users are enrolled in MFA (Box 1 choice).

CA policy Capolicy1 with aGrant control of “Require MFA” enforces MFA during sign-in (Box 2 choice).

Both work together with the hybrid-joined device requirement to satisfy the authentication/authorization rules.

What to apply to whom

Apply the MFA registration policy to the production-management users.

Apply the MFA grant to Capolicy1 for those same users/groups.

Bishkek, Kyrgyzstan

AI Explanation - verified by User7037 on: August 08, 2026
sample questions
I’m not able to generate new practice questions here — that’s part of the premium/full version, which includes a full question bank with verified answers.
I can still help you review the existing questions on this page, explain Fabric concepts such as lakehouses, pipelines, Direct Lake, Git integration, security, and Spark settings, or check whether a stated answer appears incorrect.
Livermore, United States

AI Explanation - verified by User4569 on: July 31, 2026
Question 6:
Question 6 asks: When auditing a proposed acquisition of new computer hardware, what is the auditor’s PRIMARY concern?

Correct answer: A — a clear business case has been established.

Why:

The audit focus for IT procurement is ensuring there is a solid economic justification for the investment. A clear business case documents the expected benefits, costs, risks, and alignment with strategic objectives, which governs whether the investment is worth pursuing.

The other options are important controls or project aspects, but they are secondary to ensuring the investment is justified financially and strategically:

- Security standards (important for risk management, but not the primary gating criterion for a purchase). - A full, visible audit trail (necessary for accountability, but not the primary reason to authorize the procurement). - Implementation plan meeting user requirements (essential for project success, but still secondary to the existence of a justified business case).
In short, if there’s no solid business case, the project may not deliver value regardless of security, traceability, or how well the plan matches user needs.
Sarajevo, Bosnia And Herzegovina

AI Explanation - verified by User4159 on: July 24, 2026
Question 57:

Answer: C — Spot Instances

Why: The workload is a test environment that can be interrupted and does not need to run continuously. Spot Instances let you bid on unused EC2 capacity at a deep discount, making them the most cost-effective option for interruptible workloads.

Why not the others:

- On-Demand Instances: Flexible but more expensive over time; not the most cost-efficient for interruptible tests. - Reserved Instances: Require a long-term commitment (1–3 years) and are not suited for short-lived or interruptible testing. - Dedicated Instances: Ensure physical isolation and can be costlier; unnecessary for a test environment.

Quick tips:

- Plan for interruptions (checkpoint progress, save state). - Use orchestration to handle interruptions (fallback to On-Demand if spot capacity is unavailable, or use Spot Fleet/Auto Scaling to diversify instance types). - Be aware of the two-minute interruption notice and design the test to finish or checkpoint before termination.
Gdansk, Poland

AI Explanation - verified by rjbnyc on: August 07, 2026
Question 145:
For Question 145, the selections are:

Storage accounts: storage1, storage2, and storage3

Log Analytics workspace: Analytics3

Why:

Azure Backup reports can send the AzureBackupReports diagnostic log to eligible storage accounts. The storage account’s subscription and region do not have to match the Recovery Services vault, so all three listed storage accounts are valid.

The Log Analytics workspace must be in the same region as the Recovery Services vault for this configuration. Vault1 and Analytics3 are both in West Europe, making Analytics3 the valid workspace.

The subscription containing the workspace can be different from the vault’s subscription; the important restriction here is the regional requirement.
Paducah, United States

AI Explanation - verified by User1584 on: August 14, 2026
Question 109:
Correct answer: B — False.
When test-driving an AppExchange application, you can inspect the application’s configuration, including its S-Control definitions (in the legacy Salesforce context). The test-drive environment is generally read-only, so you may be unable to change or fully administer the components, but that does not mean the S-Control configurations cannot be viewed.
Key distinction:

View/inspect configuration: Possible.

Modify the installed application or its S-Controls: Typically restricted in a test-drive org.

The answer key’s B is consistent with this distinction. S-Controls are now a legacy feature, largely replaced by tools such as Visualforce, Lightning components, and Lightning Web Components.
Milan, Italy

AI Explanation - verified by User3032 on: August 18, 2026
Question 15:
Question 15’s stated answer appears incorrect.
The requirement is to expose file metadata only and not store CSV contents. Selecting Combine Content creates a combined query from the CSV binaries, which imports the file data and violates the requirement.
The correct sequence should be conceptually:

Get Data ? Folder in Power BI Desktop.

In Power Query Editor, expand the Attributes column to expose metadata such as hidden status and other file attributes.

Remove the Content column (and any other data columns you do not need).

The Folder connector returns a table containing metadata columns such as:

Name

Extension

Date accessed

Date modified

Folder Path

Attributes

Content

The Content column contains each CSV as binary data. Removing it ensures that only metadata is loaded into the dataset.
Why the answer key is problematic: it says to combine the Content column, but that action is specifically used to combine the actual CSV files, not merely their metadata.
Zurich, Switzerland

AI Explanation - verified by User3634 on: July 23, 2026
Question 7:

Answer: A

Reason: The Standard web tier is the lowest tier that provides dedicated compute, built-in load balancing across instances, and sufficient storage to host multiple apps with custom domains. Basic may lack the required scalability/storage, while Free/Shared do not offer dedicated compute or proper load balancing.

Gurugram, India

AI Explanation - verified by User3759 on: August 05, 2026
Question 6:
Question 6 answer: B — a data pipeline
You need to copy data from:

Source: on-premises SQL Server Database1

Destination: Fabric Warehouse Warehouse1

Connectivity: on-premises data gateway

A data pipeline is designed for orchestrating data movement between sources and destinations. Its Copy Data activity can use the on-premises gateway to access SQL Server and load the data into the warehouse.
Why the other options are weaker:

Dataflow Gen1: Primarily for Power Query transformations and isn’t the best Fabric-native choice for this copy operation.

KQL queryset: Queries data; it does not orchestrate copying from SQL Server.

Notebook: Could perform custom code-based movement, but it is unnecessary and less direct than a pipeline.

Exam cue: “Copy data from one system to another,” especially with a gateway or scheduled movement ? data pipeline.
Fredericton, Canada

AI Explanation - verified by surbhidwivedi on: August 08, 2026
Question 22:
Correct answer: C.
In Phase A: Architecture Vision, TOGAF recommends using the Business Transformation Readiness Assessment to evaluate whether the organization is prepared to adopt the proposed architecture.
The assessment examines factors such as:

Leadership and stakeholder commitment

Business capability and skills

Organizational culture

Availability of resources

Ability to manage and sustain change

Impact of the proposed transformation

Each factor can be rated using a maturity/readiness scale. This helps identify:

How ready the organization is

Which areas require urgent attention

How difficult each issue may be to resolve

Risks that could affect implementation

Why the other choices are weaker:

A: Places the assessment in Phase B and refers vaguely to creating views; this is not the prescribed technique.

B: An Implementation Factor Assessment and Deduction Matrix is not the primary TOGAF technique described for business transformation readiness.

D: A Business Scenario helps identify requirements and stakeholder concerns, but it is not the main technique for assessing organizational readiness.

The key exam clue is “adapt to the proposed architecture” and “manage associated risks”—these point directly to the Business Transformation Readiness Assessment.
San Diego, United States

AI Explanation - verified by User9126 on: July 22, 2026
Question 9:

Correct answer: B — A reservation for the server based on the MAC address.

Why this is the best choice:

- A DHCP reservation ties a specific IP address to the server’s MAC address. The server will always receive the same IP while still using DHCP, which is easy to manage and avoids manual static configurations on the server. - This helps prevent IP conflicts and allows DNS/DHCP integration to stay consistent (e.g., dynamic DNS updates you might rely on with DHCP).

Why the other options are less suitable:

- A) A separate scope for the file server using a /32 subnet — A /32 subnet is not practical for IPv4 subnets in a typical DHCP scope; separate scopes aren’t needed just for a single server. - C) A static IP address within the DHCP IP range — This can lead to IP conflicts if another device is assigned the same IP; better to keep a reservation inside the DHCP scope or use an address outside the DHCP pool. - D) SLAAC for the server — SLAAC is IPv6 auto-configuration and doesn’t align with a DHCP-managed IPv4 environment (and servers usually require stable addresses regardless of IPv6 specifics).

Quick takeaway: Use a DHCP reservation to give the file server a fixed IP while still benefiting from centralized DHCP management.

Frankfurt Am Main, Germany

AI Explanation - verified by User9085 on: July 21, 2026
Question 17:
Question 17 asks how to classify unlabeled customer data into tiers for an ad campaign. The correct choice is B) Unsupervised learning.

Why: The data is unlabeled, so you can’t train a model with known input-output pairs. Unsupervised learning discovers structure in the data by grouping similar customers into clusters or tiers without labels.

What it does: Clustering and segmentation (e.g., k-means, hierarchical clustering, DBSCAN, Gaussian mixtures) to form meaningful groups.

Why the other options aren’t as suitable:

- Supervised learning requires labeled data to map inputs to known outputs. - Reinforcement learning learns through trial-and-error with a environment and rewards, not for static clustering. - RLHF involves learning from human feedback to shape outputs, not for unlabeled clustering.
If later you obtain labeled tiers, you could switch to supervised learning or semi-supervised methods.
Kwai Chung, Hong Kong

AI Explanation - verified by User3803 on: August 12, 2026
Question 16:
Correct answer: C — Create a dataflows connection with Import mode selected and schedule a daily refresh.
Why:

Import mode loads the data into the Power BI model. Visuals query the in-memory model, which generally provides faster calculation and rendering than DirectQuery.

Import mode also minimizes online processing because report interactions do not send queries back to the dataflow or SQL Server.

A daily refresh can load data through the previous day, satisfying the freshness requirement without unnecessary hourly processing.

Why the other options are less suitable:

DirectQuery keeps querying the data source or dataflow during report use, increasing online processing and potentially slowing visuals.

Adding a gateway enables connectivity for on-premises sources, but it does not remove the performance disadvantages of DirectQuery.

An hourly Power Automate refresh is unnecessary when the requirement is only data through the previous day and creates additional processing overhead.

The Enhanced Dataflows Compute Engine can improve dataflow query performance, but it does not make DirectQuery preferable when minimizing report query activity and visual rendering time are the priorities.
Toronto, Canada

AI Explanation - verified by ryantherasin on: August 10, 2026
Question 1:
Question 1 is a network-configuration simulation. The goal is to satisfy two requirements:

Remote access to a Windows PC

Full chat and optional game-console functions

The configuration should be reasoned through as follows:

Windows Remote Desktop (RDP) uses TCP 3389. The router needs a port-forwarding rule that sends incoming traffic on that port to the Windows PC’s internal IP address.

The game console should connect through the wireless AP. Using WPA2-PSK provides the required wireless security while allowing normal online, chat, and optional services.

The firewall should separate the internal network from the screened subnet. Its screened-subnet-side address is shown as 10.100.0.1.

Devices must be placed in the correct network locations: the PC behind the router, the console on the wireless AP, and the firewall between the appropriate network segments.

The answer key’s configuration is therefore conceptually correct, although the exact simulation choices depend on the image and dropdown options, which aren’t visible here. In a real network, exposing RDP directly to the internet is risky; a VPN or secure gateway would generally be safer.
Long Branch, United States

AI Explanation - verified by User3907 on: August 17, 2026
Question 28:
The answer key appears incorrect. A and B are the best answers.

A — Add a Path for Stage: A Path lets users update the Opportunity’s Stage directly from the record page, without opening the full edit form. It can also display guidance and key fields.

B — Use a Kanban list view: Users can move Opportunities between stages by dragging records between columns, which is ideal when Stage is the only field they normally change.

Why not C? An auto-launched flow runs automatically or from another automation; it does not provide users with a simpler interface for manually editing the Stage.
Why not D? A simplified page layout might reduce the number of fields shown, but users would still need to open the edit page. It is less targeted than Path or Kanban for changing only Stage.
So, for the wording given, the likely correct answer is A and B, not the stated B and C.
Cairo, Egypt

AI Explanation - verified by User7820 on: August 06, 2026
Question 14:
Question 14: Correct answer — C. Multi-pass wipes
The goal is to securely remove data while keeping the hard drives operational so the vendor will pay the higher resale price.

Multi-pass wipe: Overwrites the drive’s existing data multiple times, making recovery much more difficult while preserving the drive’s functionality.

Single-pass wipe: May be sufficient in some modern sanitization standards, but is presented here as less secure than multiple overwrites.

Degaussing: Uses a strong magnetic field to disrupt data. It can render the drive unusable or unreliable, reducing its resale value.

Pinning: Is not an appropriate data-sanitization method.

Thus, multi-pass wiping best balances secure sanitization and hardware reuse. The answer key’s C is consistent with this reasoning.
Bengaluru, India

AI Explanation - verified by studentagain200 on: August 12, 2026
fechar
Tudo bem. Se precisar de ajuda com alguma questão ou conceito do CompTIA Security+, estarei aqui.
Vitória, Brazil

AI Explanation - verified by User5769 on: August 14, 2026
Question 57:
Correct answer: C — SSH Key
For automated data transfer between hosts, an SSH key pair is best suited:

The connecting host keeps the private key securely.

The destination host stores the corresponding public key in its authorized keys.

Authentication can occur without a person entering credentials each time.

SSH also provides encrypted communication and host authentication.

Why the other options are less suitable:

Biometric: Requires a human user and is difficult to automate.

Smart card: Often requires user interaction or card access.

Hard-coded password: Unsafe because passwords stored in scripts or applications can be exposed, reused, or difficult to manage securely.

The key exam concept is that machine-to-machine automation generally uses key-based authentication rather than human-oriented authentication methods.
Lincoln, United States

AI Explanation - verified by User2066 on: August 02, 2026
Question 23:
Question 23 asks how to make yearly shipment data (on a custom Shipment object) available on the Account record for the Marketing team, without exposing unnecessary shipment details.
Key concepts:

Use a field on Account to show the aggregated yearly shipments (a Roll-Up Summary).

A Master-Detail relationship between Shipment and Account is required for Roll-Up Summary to work (and to ensure access is governed by the parent Account).

OWD and the relationship type determine what users can see. If you want to restrict shipment-level access while still showing a summary on Account, Private OWD on Shipment plus Master-Detail helps, because access to shipments is controlled by the Account record.

Option-by-option reasoning:

A (Public OWD on Shipment with Process Builder and a Lookup to Account): Not ideal. Public access would expose shipments broadly, and a lookup cannot support a built-in roll-up summary.

B (Private OWD on Shipment, Roll-Up Summary, Master-Detail to Account): Best answer. Private shipments, but because of Master-Detail, access and the roll-up are tied to the Account. The Account can show the yearly total via a Roll-Up Summary field.

C (Controlled by Parent on Shipment, Trigger, Master-Detail): Master-Detail is correct, but using a trigger is unnecessary for a straightforward roll-up; roll-ups are the standard, maintainable solution.

D (Private OWD on Shipment, Trigger, Lookup to Account): More complex and not as efficient; no automatic roll-up, and lookup breaks the ease of summarizing by Account.

Likely correct approach: B (primary). If you must pick two, C could be considered as an alternative approach (Master-Detail with a custom trigger), but B is the recommended, maintainable pattern. Note: the page’s listed answer is D, which conflicts wit
Kolkata, India

AI Explanation - verified by User9085 on: July 21, 2026
Question 23:
Question 23 asks which consideration determines how much information can fit into one prompt when building a generative AI app with Bedrock.

Correct answer: B) Context window.

Why: The context window is the number of tokens the foundation model can process in a single inference. It sets the maximum length of the combined input (prompt) and the model’s output. A larger context window allows more content to be included in one prompt.

How to use: Check the FM’s context window value and ensure your prompt length plus the desired completion stays within that limit. If needed, summarize or split input across multiple prompts.

Why the other options aren’t correct:

- Temperature controls randomness, not prompt length. - Batch size affects throughput (how many prompts are processed at once), not per-prompt capacity. - Model size relates to capacity and quality but does not directly fix how many tokens fit in a single prompt.

Quick tip: Verify the specific FM’s context window for Bedrock, since different models have different token limits.

Kwai Chung, Hong Kong

AI Explanation - verified by vivekmadugundu6 on: July 27, 2026
Question 82:
Question 82 asks: What are the four knowledge workflows available in the ServiceNow base instance?
The four workflows listed are:

Approval publish: Request approval from a manager of the knowledge base before moving the article into the publish state.

Instant Publish: Immediately publishes a draft article without requiring an approval.

Instant Retire: Immediately retires a published article without requiring an approval.

Retire Knowledge: Moves a knowledge article to the retired state.

Correct answer: A
Explanation:

These are the base knowledge workflows that control how articles move between states (Draft, Published, Retired) and whether approvals are required.

The other options describe different lifecycle actions, but these four cover the standard publish/retire workflows in ServiceNow.

Hyderabad, India

AI Explanation - verified by User2395 on: August 08, 2026
Question 117:
Correct answer: B — Amazon Inspector
Amazon Inspector automatically scans supported AWS resources, including EC2 instances, for software vulnerabilities and unintended network exposure. It continuously assesses workloads and reports findings based on known vulnerabilities.
Why the other options are incorrect:

Amazon GuardDuty: Detects suspicious activity and threats using security-related data sources; it is not primarily a software vulnerability scanner.

Amazon Detective: Helps investigate and analyze the root cause of security findings after an event.

Amazon Cognito: Provides user authentication and authorization for applications.

The key clue is “continuously scan EC2 instances for software vulnerabilities.” That requirement maps directly to Amazon Inspector.
Chennai, India

AI Explanation - verified by User7408 on: August 03, 2026
Question 31:
Question 31: The correct answer is A (Yes).

Network Security Groups (NSGs) control network traffic to and from Azure resources.

By applying NSGs to the web tier and the database tier (subnets or NICs), you can:

- allow traffic from web servers to the database on specific ports/protocols, - and block other traffic, effectively controlling the connection types between web and database servers.

NSGs provide the necessary granularity (source/destination, port, protocol) to enforce the desired traffic patterns between tiers.

For easier management you can use separate subnets for each tier or, optionally, use Application Security Groups to simplify rule management.

Amman, Jordan

AI Explanation - verified by sophielargeaudproust on: July 26, 2026
Question 97:
The correct answer is D.
Why: After deploying an AI model, documentation should capture the model's architecture, performance metrics, and updates. This supports transparency, reproducibility, and ongoing maintenance.
Why the other options are less appropriate as the core deployment documentation:

A (training data, hyperparameters, stakeholder feedback) focuses on training provenance; these details are important but are typically part of pre-deployment/training records, not the primary post-deployment documentation.

B (encountered issues, monitoring process, risks) relates to governance and monitoring rather than the core documentation you’d publish about the deployed model itself.

C (licensing information, the team, business goals) covers governance context but not the technical traceability and performance-based record needed for ongoing maintenance.

Saint-Priest, France

AI Explanation - verified by User8744 on: August 13, 2026
Question 41:
Correct answer: C — The customer's requirements should have been captured in order to meet the customer's standards.
The product may have been technically advanced, but it failed because it did not satisfy the customer’s defined needs. At the beginning of the project, the project manager should have:

Elicited and documented customer requirements

Converted them into clear, measurable specifications

Validated the requirements with the customer

Used them as the basis for design, quality checks, and acceptance

Why the other options are weaker:

A: Requirements should reflect the customer’s needs—not the supplier’s standards.

B: Iteration review planning does not replace proper requirements collection.

D: A retrospective occurs after work is completed and is mainly for process improvement, not initial requirements definition.

This question tests the importance of requirements management and stakeholder engagement before product design and delivery.
Johor Bahru, Malaysia

AI Explanation - verified by User8116 on: August 13, 2026
Question 63:
Correct answer: C — Amazon RDS
Amazon RDS is a managed relational database service that supports PostgreSQL. PostgreSQL is commonly used for online transaction processing (OLTP)—applications that handle frequent, short transactions such as inserts, updates, and queries.
AWS manages tasks such as database provisioning, backups, patching, and maintenance.
Why the others are incorrect:

Amazon DynamoDB — Managed NoSQL database, not PostgreSQL.

Amazon Athena — Serverless service for querying data in S3; intended for analytics, not OLTP.

Amazon EMR — Managed cluster platform for big-data frameworks such as Hadoop and Spark.

Exam memory aid: RDS supports managed relational engines, including PostgreSQL, while OLTP generally uses relational databases.
Sapporo, Japan

AI Explanation - verified by User8963 on: July 26, 2026
Question 13:
Question 13 asks which are the key architecture domains.

The standard Enterprise Architecture domains are: Business, Data, Application, Technology (BDAT).

Option analysis:

A: Business, strategy, application and technology — includes business and application/tech but uses “strategy” instead of data.

B: Zachman, TOGAF, Cobit, and Heath architectures — names frameworks, not domains.

C: Business, data, infrastructure and technology — has business, data, and technology; lacks a distinct application domain (uses “infrastructure” instead).

D: Process, database, software and technology — covers data (database), application (software), and technology, but omits business.

Notes:

The four BDAT domains (business, data, application, technology) is the conventional model you should study.

None of the options perfectly lists all four BDAT domains. The closest are C (if you map infrastructure to technology) and D (data/application/technology but no business).

The answer key here (D) seems questionable; the core concept to know is BDAT.
Nuenen, The Netherlands

AI Explanation - verified by User5852 on: July 26, 2026
Question 5:
No—the solution does not meet the goal.
Explanation:

Transact-SQL (T-SQL) is used to query relational data in Azure SQL Database, not telemetry data from monitoring services.

To analyze monitoring data from Azure SQL Database Intelligent Insights and Azure Application Insights, you should use the Kusto Query Language (KQL) in Azure Monitor Logs/Log Analytics (and in Application Insights Analytics).

Using KQL lets you query telemetry tables such as requests, dependencies, pageViews, and customEvents (from App Insights) and any integrated monitoring data you’ve ingested into Log Analytics.

What to do:

Ensure Intelligent Insights and Application Insights data is available in a Log Analytics workspace or accessible via Application Insights Analytics.

Go to Azure Monitor > Logs (or Application Insights > Analytics) and write KQL queries, e.g.:

- requests | where timestamp > ago(7d) | summarize avg(duration) by bin(timestamp, 1h) - Combine data sources with union if needed.
Key takeaway: use KQL for ad-hoc monitoring queries, not T-SQL.
Bengaluru, India

AI Explanation - verified by is.chan.army on: August 03, 2026
Question 42:
Question 42 is asking you to identify which risk assessment step is being described when Andrew defines the IT system boundaries, resources, and information contained in the systems.

Correct answer: A. System characterization

- Why: System characterization is the step where you define the scope of the systems, identify boundaries, assets, data types, and interdependencies. The description in the question matches this exactly.

Why the other options are not correct:

- B. Control analysis — evaluating existing controls and their effectiveness. - C. Likelihood determination — estimating the probability that threats will exploit vulnerabilities. - D. Control recommendations — proposing mitigations or security controls.
Note: The given answer in the bank shows C, which is not consistent with the defined boundaries and assets. The correct concept here is system characterization.
Tamarac, United States

AI Explanation - verified by dbdrivdahl on: August 15, 2026
Question 261:
The answer key shows C, but I believe the correct answer is B.

Primary and core nodes: Use On-Demand Instances because the workload is business-critical. These nodes manage the cluster and store/process HDFS data.

Task nodes: Use Spot Instances in an instance fleet. Task nodes are suitable for interruption because they do not hold essential cluster data and can be replaced or diversified across instance types.

Terminate the entire cluster after processing: The job runs only about six hours each morning, and EMRFS stores data in Amazon S3. Keeping the cluster running for the rest of the day would waste money.

Why the other options are weaker:

A: Using Spot for primary and core nodes risks interruption of the critical cluster.

C: All On-Demand is reliable but unnecessarily expensive; terminating the cluster helps, but Spot task nodes provide greater savings.

D: Leaving primary and core nodes running after the task finishes continues to incur costs. Savings Plans also are less appropriate for this intermittent workload.

Best choice: B.
Yorba Linda, United States

AI Explanation - verified by User4873 on: August 04, 2026
Question 16:
Here’s the reasoning for Question 16.

What the dataflow options mean:

- A/B: Use DirectQuery mode. Queries hit the on-prem SQL Server every time a visual is rendered (and through the dataflow). Even with the Enhanced Dataflows Compute Engine, this keeps online processing and query latency higher, which hurts render times. - C: Use Import mode and schedule a daily refresh. Data is loaded into the Power BI service (cached in memory), so visuals don’t rely on live queries. This minimizes online processing and typically speeds up visuals. A daily refresh can bring in data up to the previous day, meeting the “current year up to yesterday” requirement. - D: Import mode with hourly refresh via Power Automate adds frequent refreshes, increasing processing overhead and isn’t needed to meet the stated goals.

Why C fits best:

- The goal is to minimize online processing and render times. Import mode achieves that by caching data in the service. - To include data up to yesterday, schedule a daily refresh after the end of the day, ensuring the data reflects the current year up to the previous day. - The gateway is still needed to refresh from on-prem sources, but among the options, Import with daily refresh best satisfies all three requirements.
Answer: C
Kuala Lumpur, Malaysia

AI Explanation - verified by User7958 on: August 12, 2026
Question 25:
Correct answer: D — use Amazon SQS between two Lambda functions.
The architecture becomes:

Ingestion Lambda receives requests from API Gateway and places messages in an SQS queue.

Processing Lambda is triggered by the queue and loads records into Aurora PostgreSQL.

Why this works:

Decoupling: API request handling is separated from database loading.

Buffering: SQS absorbs bursts when incoming traffic exceeds the database’s processing capacity.

Controlled concurrency: Configure the SQS-triggered Lambda’s concurrency and batch size to avoid overwhelming Aurora or exhausting database connections.

Automatic retries: Messages that fail processing can return to the queue and be retried. A dead-letter queue can capture persistent failures.

Lower operational effort: The solution remains serverless and avoids managing EC2 servers or Kubernetes clusters.

The answer key’s D is correct.

A: EC2 and Tomcat add server-management overhead.

B: DynamoDB/DAX would require changing the database model and does not solve the Aurora ingestion design.

C: SNS is useful for notifications and fanout, but SQS is better for durable buffering and backpressure in this producer-consumer workflow.

Busan, South Korea

AI Explanation - verified by User2639 on: August 12, 2026
it does not make sense, what is the question?
The question is poorly worded. It means:
> Which device is commonly used to control or block network traffic according to security rules?
The intended answer is Firewall.
A firewall sits between networks or systems and examines traffic. For example, it may allow approved traffic while blocking unauthorized connections.
The options are:

Server — provides services or resources

Endpoint — a user device connected to the network

Ethernet — a networking technology, not a filtering device

Firewall — filters and controls traffic

So the key phrase is “used to filter traffic”.
Ploiesti, Romania

AI Explanation - verified by Poornachander1995 on: July 30, 2026
Question 18:
Question 18 asks when to deploy the Splunk_TA_ForIndexes.spl add-on to indexers in an ES deployment.

Correct answer: C) After installing ES on the search head(s) and running the distributed configuration management tool.

Why:

ES requires the Splunk_TA_ForIndexes.spl add-on on indexers to apply index-time configurations. It should be deployed via the distributed configuration management (DCM) flow after ES is installed on the search heads, so the indexers receive the proper configuration in a controlled, versioned bundle.

Why the other options are not correct:

A) Deploying when adding apps to the deployment server isn’t the ES-specific order; it bypasses the ES-instantiated workflow.

B) Installing Splunk_TA_ForIndexes.spl first isn’t the recommended order; ES needs to be installed on the search heads first.

D) It isn’t limited to indexer cluster sites or cluster master commands; the standard flow uses DCM to push the TA to indexers in general.

Takeaway: install ES on the search heads, run DCM to push configurations, then deploy Splunk_TA_ForIndexes.spl to indexers to complete the ES indexing setup.
Bengaluru, India

AI Explanation - verified by User1676 on: August 18, 2026
Question 37:
The answer key shows A (Apex Trigger), but I believe the best answer is B: Build a Flow on Opportunity.

Create a record-triggered Flow on Opportunity.

Run it when the record is created or updated.

Add entry criteria such as Probability > 50%.

Use Create Records to create the related Sales Demo Request, populating its Opportunity lookup.

Why not the other options?

Apex Trigger: Possible, but unnecessary custom code for a straightforward automation requirement.

Workflow Rule: Cannot create a related custom record.

Process Builder: Could create a record, but Flow is Salesforce’s preferred and more capable declarative automation tool.

The Flow should also be designed to avoid creating duplicate Sales Demo Requests—for example, by checking whether one already exists or by using an appropriate triggering condition.
Nagpur, India

AI Explanation - verified by User1075 on: July 20, 2026
Which of the following is an advantage of using VDI? Authentication is not required on a domain. Licensing costs are minimized. Less manual configuration is needed for each workstation. A virus is automatically contained locally.
C. Less manual configuration is needed for each workstation.
Explanation: In a VDI environment, desktops run from centralized images on the server. Updates to the base image apply to all virtual desktops, reducing per-workstation configuration. The other options are not reliable advantages of VDI: authentication still occurs on a domain, licensing can be complex/not minimized, and viruses aren’t automatically contained locally.
Indpls, United States

AI Explanation - verified by User5130 on: July 22, 2026
Quelles sont les deux exigences pour surveiller et signaler toute activité suspecte pour la banque correspondante selon les principes de Wolfsberg ? (Choisis-en deux.) Intégrez la surveillance des activités suspectes dans des examens périodiques Intégrez des résultats de due diligence tels que les évaluations de risque client Utilisez des correspondants en aval pour enquêter et signaler les activités suspectes Enquêter et signaler les activités suspectes uniquement pour les clients de la banque correspondante Réponse(s) : B,C
Réponse: B et C

B: Intégrez des résultats de due diligence tels que les évaluations de risque client.

Explication: L’approche basée sur le risque nécessite d’utiliser les résultats de due diligence (par ex. les profils/évaluations de risque du client) pour guider la surveillance et le signalement des activités suspectes.

C: Utilisez des correspondants en aval pour enquêter et signaler les activités suspectes.

Explication: Les Principes Wolfsberg encouragent la coopération et le partage d’informations avec les correspondants en aval pour faciliter l’investigation et le signalement des activités suspectes.
Lomé, Togo

AI Explanation - verified by User5321 on: July 21, 2026
So when you make the image on prem all you're really doing is making a vhd, then you upload that vhd and then add-azimage targetting that vhd after?
Yes, that’s the right mental model.

On-prem you generalize and capture the VM as a VHD.

Upload the VHD to Azure with Add-AzVhd.

Register the VHD as an image in Azure with Add-AzImage (or New-AzImage) so it appears as a selectable image.

Create new VMs from that image (e.g., with New-AzVM -Image ...).

So the flow is: VHD created on-prem ? upload via Add-AzVhd ? create/register image via Add-AzImage ? deploy VMs from that image. The exam answer for the upload step is Add-AzVhd, but you’ll typically follow with Add-AzImage to actually use it as an image.
Rotherham, United Kingdom

AI Explanation - verified by User7939 on: August 07, 2026
Question 17:
Correct answer: A, B, C, D, and E.
Azure VM backup can protect:

Windows 10 VMs

Windows Server 2012 or later VMs

Running VMs—they do not need to be shut down

Debian 8.2+ VMs, assuming the specific version is supported

Stopped or deallocated VMs

The key concept is that Azure Backup protects supported Azure VM operating systems whether the VM is running or stopped. Shutting down a VM is not a prerequisite for configuring or performing its backup.
For a running VM, Azure Backup can create a restore point while the VM is online. The consistency level depends on the workload and configuration—for example, application-consistent backups may require additional guest configuration.
Oostburg, The Netherlands

AI Explanation - verified by User7851 on: August 05, 2026
Question 8:
Correct answer: A — the Microsoft Defender portal
To review the impact of a phishing incident, use the Microsoft Defender portal (security.microsoft.com). It provides security investigation and threat-response tools, including:

Incidents & alerts — see how the phishing activity was detected, correlated, and investigated.

Threat Explorer — search for the malicious messages, recipients, URLs, attachments, and campaign activity.

Email and collaboration reports — assess how many users or messages were affected.

Remediation details — verify whether messages were quarantined, removed, or otherwise contained.

The other portals are not the best choice:

Microsoft 365 admin center — general tenant administration.

Microsoft Entra admin center — identity and access management.

Exchange admin center — mail-flow and Exchange configuration, rather than full phishing-incident investigation.

The key exam distinction is that security incidents and phishing impact analysis belong in Microsoft Defender, not the general administration portals.
Barrie, Canada

AI Explanation - verified by elisamangano02 on: August 03, 2026
Question 54:
Question 54 shows code with A = 5; Var b = 1; inside a function, then console.log(a); console.log(b);
Key ideas:

A assigned without var becomes a global variable (in non-strict mode). So after myFunction(), a = 5 is accessible.

b is declared with var inside the function, so it’s local to that function (function-scoped). It’s not defined in the outer (global) scope.

Therefore:

console.log(a) prints 5.

console.log(b) throws a ReferenceError: b is not defined.

So the expected outcome is that the first line outputs 5 and the second line throws an error. The correct answer is B.
Note: the snippet has typos (Function vs function, Var vs var), but the scoping idea remains the same. If rewritten with proper syntax: function myFunction() { a = 5; var b = 1; } myFunction(); console.log(a); console.log(b);
Sassari, Italy

AI Explanation - verified by User6967 on: August 03, 2026
Question 1:

Correct answer: Day 3 (Option B)

Why: In Engagement Studio, when the program is paused, the prospects’ wait times are also paused and do not count down. They resume from the same point when the program restarts. Here, the prospect was at day 3 of a 5-day wait when paused, so they resume on day 3 after the 1-day pause.

Pune, India

AI Tutor 👋 I’m here to help!

CompTIA 220-1002 Exam Actual Questions (Retired and replaced with 220-1201) (Page 25 )

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44

CompTIA 220-1002 Exam Actual Questions
(Retired and replaced with 220-1201) (Page 25 )