CompTIA 220-1002 Exam Prep
(Retired and replaced with 220-1201) (Page 5 )

 AI Explanation - verified by User9902 on: September 16, 2026
What is this OS Login you keep saying
OS Login is a Google Cloud feature that lets users access Compute Engine VMs using their Google identities and IAM permissions, instead of managing SSH keys separately on every VM.
With OS Login enabled:

• A user connects with their Google account.
• Google associates the user’s SSH key with that identity.
• IAM roles determine whether they can log in.
• Access can be tied to a specific employee for auditing.
• Removing the IAM role removes their login access.

Common roles include:

• compute.osLogin: regular OS login access
• compute.osAdminLogin: OS login with administrative privileges, typically including sudo

OS Login is enabled through instance or project metadata, commonly:

text 
enable-oslogin=TRUE

Without OS Login, Compute Engine commonly uses SSH keys stored in project or instance metadata. Those approaches are harder to manage individually and may not clearly identify which employee used a shared key.
 Lagos, Nigeria

 AI Explanation - verified by User5177 on: September 23, 2026
Question 12:
Question 12 tests data profiling in Power Query Editor, specifically the difference between distinct and unique values.

• Distinct values = 69

There are 69 different state values in the State column. Each value is counted once for this metric, regardless of how many times it appears.

• Unique values = 4

Four state values appear only once in the entire column.
For example, if a column contains:
CA, CA, NY, TX, FL
there are 4 distinct values (CA, NY, TX, FL), but 3 unique values (NY, TX, and FL appear once).
So the selections indicated by the answer key—69 distinct values and 4 unique values—are consistent with Power Query’s column distribution metrics. The column quality area is a separate metric that shows valid, error, and empty values; it does not determine the distinct or unique counts.
 New Delhi, India

 AI Explanation - verified by User4912 on: September 21, 2026
Question 13:
Correct answer: B — table name, parent table name, any table name (wildcard)
ServiceNow evaluates table-level Access Control (ACL) rules from most specific to least specific:

1. The specific table — for example, incident
2. The parent table — for example, task
3. The wildcard table — *, which applies broadly

This ordering allows a specific ACL to override or refine a more general ACL. For example, an ACL on incident is checked before one on its parent task, and both are checked before a wildcard ACL.
The key exam principle is: specific rules are evaluated before inherited or general rules. Note that ACL evaluation also considers the required roles and conditions; simply finding an ACL does not automatically grant access.
 Chennai, India

 AI Explanation - verified by User4712 on: October 01, 2026
Question 41:
Correct answer: A — Configure the External access settings.
External access controls communication between your organization’s Teams users and people in other organizations. You can configure an allow list containing only the five suppliers’ email domains, such as supplier1.com.
Why the others are incorrect:

• Guest access: Controls external users invited into your teams as guests. It is not the primary setting for restricting federated communication by domain.
• Messaging policy: Controls messaging features, such as chat or message editing, rather than which organizations users can communicate with.
• Org-wide Teams settings: Contains broad Teams-wide configuration, but domain-based external communication is configured under External access.

The key distinction is: External access = communication with external organizations; Guest access = collaboration inside your teams and channels.
 Schongau, Germany

 AI Explanation - verified by User1054 on: September 25, 2026
Question 1:
Correct answer: B — Create a custom pool.
A custom Apache Spark pool lets you provision dedicated Spark compute for the bronze and silver workloads. Assigning the workloads to separate pools prevents them from competing for the same shared Spark resources and provides better control over node size, autoscale settings, and workload capacity.
Why the other options are less suitable:

• Disable high concurrency: This changes session-sharing behavior but does not provide dedicated compute or true workload separation.
• Modify the number of executors: Adjusts resources within a Spark job; it does not isolate bronze and silver processes.
• Set the default environment: Controls libraries and runtime configuration, not compute isolation.

Important: The supplied explanation appears incorrect. It discusses isolated compute in Azure Synapse, including an XXXLarge node requirement, rather than explaining the Fabric answer. For this question, the relevant concept is using a custom Spark pool to separate workloads.
 Johannesburg, South Africa

 AI Explanation - verified by swatisharma4781 on: September 21, 2026
Question 93:
Correct answer: B. They must be uppercase.
Splunk recognizes Boolean operators when written in uppercase:

spl 
error AND host=WWW3 
status=404 OR status=500 
NOT source=access.log

Using lowercase words such as and, or, or not may cause Splunk to interpret them as search terms rather than Boolean operators.

• Quotation marks are used for exact phrases or values containing spaces.
• Parentheses group parts of a Boolean expression, but they are not required for every Boolean search.

The answer key’s B is correct.
 Lexington, United States

 AI Explanation - verified by User1890 on: September 27, 2026
Question 32:
Question 32 is testing storage mode selection for a model using Azure SQL Database and SharePoint data.
Based on the requirements, the best choice is Import, not DirectQuery:

• Data only needs to be current at 7 AM each day, so scheduled refresh is sufficient.
• Import mode provides the fastest report interaction because data is stored in Power BI’s in-memory engine.
• It supports row-level security (RLS), including the USERNAME() filter.
• You can limit the imported data to the current year and previous three years to reduce model size.
• DirectQuery would generally provide slower visual response times and is unnecessary here.
• Dual is mainly useful in composite models where some tables use DirectQuery and others use Import. That is not required by this scenario.
• Live connection is not appropriate because you are creating the semantic model.

Important: The displayed answer key says B, but if B corresponds to Dual in the listed options, I believe the key is incorrect. The scenario points to Import storage mode.
 Hendrik-Ido-Ambacht, The Netherlands

 AI Explanation - verified by nhoxzznhox15 on: September 12, 2026
Question 135:
Correct answer: A

• Create a CodeCommit repository in the secondary Region.
• Use CodeBuild to run a Git mirror operation from the primary repository to the secondary repository.
• Use EventBridge to detect relevant repository events, such as a pull request being merged.
• Invoke a Lambda function, which starts the CodeBuild project.

This provides an automated, near-real-time copy of the repository in the disaster-recovery Region. Developers can then add the secondary repository as another Git remote if they need to operate there.
Why the other options are incorrect:

• B: Amazon S3 is object storage, not a Git repository that developers can use as a CodeCommit remote.
• C: CodeArtifact is intended for packages and artifacts, not source-code repository mirroring.
• D: An AWS Cloud9 environment is not an appropriate automated replication mechanism and would require manual or persistent infrastructure management.

The key concept is that CodeCommit repositories are Region-specific, so disaster recovery requires a second repository and an automated synchronization process.
 Duong Minh Châu, Vietnam

 AI Explanation - verified by User1141 on: September 29, 2026
Question 55:
Correct answer: A. Code repositories
Developers or administrators may accidentally commit cloud credentials, API keys, access tokens, or private keys to source-code repositories. This can happen in public repositories or in private repositories that are later exposed or accessed by an unauthorized user.
Why the others are less appropriate:

• Dark web: A place where leaked credentials may be sold or shared, not usually the original source.
• Threat feeds: Collections of intelligence about threats, not a typical leakage source.
• State actors: A type of attacker, not an accidental corporate disclosure source.
• Vulnerability databases: Track known vulnerabilities, rather than leaked credentials.

Organizations reduce this risk with secret scanning, pre-commit checks, repository access controls, and immediate credential rotation if exposure occurs.
 Atlanta, United States

 AI Explanation - verified by User5302 on: September 09, 2026
Question 77:
Correct answer: C. Channel configuration
Using multiple memory channels—such as dual-channel or quad-channel—allows the memory controller to access multiple RAM modules in parallel. This increases memory bandwidth, which is the amount of data that can be transferred per second.
Why the others are not best:

• Error correction (ECC): Improves data reliability but does not maximize bandwidth.
• RAM voltage: Increasing voltage may affect stability or speed, but it is not the primary method for increasing module bandwidth.
• Physical module size: Refers to the capacity or form factor of the RAM, not its data-transfer bandwidth.

For a gaming system, install compatible modules in the motherboard’s recommended paired slots to enable dual-channel operation. Higher channel counts depend on the platform and motherboard.
 Johannesburg, South Africa

 AI Explanation - verified by puranikatul on: September 26, 2026
Question 146:
The correct answer is B: a spoke.
In IntegrationHub, a spoke is a ServiceNow application that packages integration content for a particular third-party system or business function. A spoke can contain:

• Actions that call external APIs
• Subflows
• Connection and credential aliases
• Supporting integration logic

For example, a Slack spoke may provide actions for sending messages or creating channels.
Why the other choices are less accurate:

• Action — A reusable operation within a flow, such as “Create a record” or “Send email.”
• Connection — Defines how ServiceNow authenticates and communicates with an external system.
• Integration step — A general flow step, not the name for the packaged integration.

Therefore, third-party integrations provided through IntegrationHub are generally called spokes.
 Bengaluru, India

 AI Explanation - verified by User5200 on: September 30, 2026
Question 32:
Question 32: No
A local network gateway does not meet the requirement.

• A local network gateway represents an on-premises network—its address space and VPN device information—for an Azure Site-to-Site VPN connection.
• It does not control which connection types are allowed between Azure web servers and database servers.
• It is also unnecessary when both server groups are in the same Azure virtual network.

The appropriate service is a network security group (NSG). NSGs allow or deny inbound and outbound traffic using rules based on factors such as source, destination, protocol, and port.
Therefore, the answer key’s B (No) is correct.
 Rome, Italy