220-1202 CompTIA A+ Core 2 (2026 Exam Update) Questions and Answers

The correct answer is C. ping 10.203.10.1. The technician should test whether the computer can communicate with its default gateway. Quentin Docter’s Complete Study Guide explains that the ping command verifies network connectivity using ICMP packets and that a common troubleshooting step is to ping the default gateway. If the gateway responds, the system has basic connectivity to that device. The All-in-One Exam Guide also states that ping is a great way to determine whether a computer can talk to another system by sending packets to an IP address or DNS name. ipconfig is used to view TCP/IP configuration, not to ping an address in that syntax. nslookup checks DNS resolution, which is not the first test for reaching the gateway. net use maps or manages network resources, but it does not directly test gateway communication.

This scenario involves a mismatch in device time settings, which can affect synchronization and authentication across the network. Using a Network Time Protocol (NTP) server ensures all networked devices maintain accurate and synchronized clocks.

From Travis Everett – All-in-One Exam Guide:

“NTP servers keep all devices on a network in sync. This prevents time drift, which can cause authentication issues with domain logins, certificates, and applications.” .

An MSDS providessafety and emergency procedures, such as what to do if a battery leaks or catches fire. It is not a technical or setup guide.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“An MSDS contains safety information, including handling, storage, and emergency procedures related to potentially hazardous components like UPS batteries.”

A repeated failure to open Task Manager —a core Windows troubleshooting utility—strongly suggests the system is compromised and critical tools are being interfered with. In malware-response methodology, Quentin Docter emphasizes that the first step is to “identify and verify the malware symptoms” before proceeding to containment and remediation. If Task Manager cannot be launched at all, that behavior itself is a highly suspicious symptom consistent with malicious activity attempting to prevent the administrator from viewing or stopping processes.

Docter also explains that when systems are compromised by a virus or other malware, the threat agent may embed persistent access methods, and in some cases the only way to be sure it’s fully removed is to reinstall the OS—highlighting how deeply malware can integrate and disrupt normal tools.

The other options do not plausibly block Task Manager: a developer application may increase CPU/RAM usage but typically won’t prevent Task Manager from opening; Windows Update set to manual affects patching behavior; and moving the pagefile can affect performance but not usually stop Task Manager from launching.

The correct answer is B. Kerberos token, because Kerberos authentication relies heavily on precise system time synchronization between clients, servers, and the Key Distribution Center (KDC). Kerberos uses time-stamped tickets to prevent replay attacks, and even small time discrepancies can cause authentication failures.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, Kerberos requires clocks on all participating systems to be synchronized within a narrow tolerance (typically five minutes). If system time is inaccurate, Kerberos will reject authentication requests, resulting in login failures and access denial.

The Travis Everett & Andrew Hutz – CompTIA A+ All-in-One Exam Guide explains that Kerberos tokens include timestamps to ensure tickets are valid only for a short time window. This security design protects against attackers reusing captured authentication data.

The Mike Meyers / Mark Soper Lab Manual reinforces that time synchronization issues are a common cause of Kerberos-related login problems in domain environments. Services like TACACS+, RADIUS, and WPA do not depend on strict system time synchronization in the same way Kerberos does.

Because Kerberos authentication cannot function correctly without accurate system time, B is the correct answer.

The correct answer is C. SAML. Security Assertion Markup Language is commonly used for single sign-on between an identity provider and a service provider, especially when an organization wants a third-party application to trust its existing identity service. The CompTIA A+ objectives include SSO, meaning single sign-on, and the objectives’ acronym list identifies SSO as a relevant exam term. In this scenario, the organization wants users to authenticate through its existing identity system rather than maintaining separate credentials for the third-party application. SAML is the best match because it passes authentication assertions between trusted parties. OTP means one-time password and is an authentication factor, not an SSO federation standard. ACL means access control list and controls permissions to resources. UAC is Windows User Account Control, which prompts for administrative approval on a local system. Therefore, SAML is the correct technology for third-party SSO integration.

This scenario describes a rogue access point — a malicious or unauthorized wireless access point that uses the same SSID as the legitimate network. Users may connect to it unknowingly, which can result in limited network access, data interception, or redirection of traffic. The inability to reach internal file servers supports this being an unauthorized AP with no connection to internal resources.

A. A DNS issue would impact name resolution, not connectivity to file servers directly.

B. VLAN issues generally affect segmentation, not mimic SSID problems.

C. An incorrect IP address could cause connectivity issues, but not in the presence of a malicious AP broadcasting the same SSID.

Before you can accurately understand impact (what will break, what will change, what dependencies exist), you should validate the change in a controlled environment. Mike Meyers’ Lab Manual defines sandbox testing as using a safe place “where you can experiment without messing up the primary system,” typically a virtualized environment that isolates the test machine and enables restore from snapshots. It states sandbox testing “entails checking out new and updated applications without putting the systems and data you depend on at risk.”

The All-in-One guide mirrors this exact best practice for change management, emphasizing that you don’t roll changes into production for many users/systems without “thorough testing and analysis,” and highlights sandbox testing as a documented business process used to evaluate changes safely. In this scenario, the scope is known, so the next “first” practical procedure to evaluate effect is to test it in a sandbox so you can then measure and document impacts based on evidence. A rollback/backup plan is critical, but sandbox testing comes first to determine what safeguards are required.

The correct answer is C. RDP (Remote Desktop Protocol), because RDP is the default remote access technology for Windows servers. It allows technicians to remotely connect to the graphical desktop environment of a Windows server to verify services, logs, and system status.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, RDP is built into Windows operating systems and is commonly used by administrators to manage Windows servers and workstations. It provides full access to the desktop, making it ideal for checking whether services such as IIS (Internet Information Services) are running properly.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while SSH is commonly used for Linux and network devices, Windows servers typically rely on RDP for administrative access. VNC is a third-party remote desktop solution and is not enabled by default on Windows systems.

The Mike Meyers / Mark Soper Lab Manual reinforces that SPICE is primarily used in virtualized environments and is not a standard Windows remote access tool.

Because the technician needs to verify a Windows web server’s operational status using a built-in method, RDP is the most appropriate and likely technology, making C the correct answer.

The correct answer is B. diskmgmt.msc, which opens the Disk Management console in Windows. Disk Management is the primary built-in tool used to create, delete, resize, and format disk partitions.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that disk partitioning is commonly used to separate data for organizational, security, and backup purposes. Disk Management allows technicians to divide a single physical drive into multiple logical volumes, such as one partition for the operating system and another for user data.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide states that diskmgmt.msc provides a graphical interface for managing partitions, drive letters, file systems, and volumes without requiring third-party tools. This makes it the preferred and safest option for partitioning tasks on Windows systems.

The Mike Meyers / Mark Soper Lab Manual clarifies that tools like perfmon.msc monitor performance, lusrmgr.msc manages user accounts, and devmgmt.msc handles hardware devices. None of these tools can modify disk partitions.

Because the task specifically involves creating partitions, Disk Management is the correct and only appropriate tool, making B the correct answer.

Videoconferencingplatforms allow real-time face-to-face communication and are ideal for collaborative training sessions involving remote employees.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Videoconferencing tools such as Zoom or Microsoft Teams are specifically designed for real-time communication and training, making them ideal for executive or large-group meetings.”

The best first step is to leverage existing documentation: check whether the issue was previously recorded and resolved, and reuse that known fix (or confirm conditions). Mike Meyers explains ticketing systems capture key information needed to resolve issues, including “ problem description ,” “ progress notes ,” and “ problem resolution ,” and stresses that “ Clear, concise writing is critical ” because you “won’t be the only tech responding to every ticket.” That is exactly why you review prior tickets first—so you can quickly see what was done previously and apply it consistently.

The All-in-One guide reinforces the same ticketing-system concept and lists the same essential elements (description, notes, resolution) used to streamline troubleshooting and escalation. Consulting the prior technician (A) may be impossible (the employee is gone) and slower than checking documented history. Opening a new case (D) is important, but the question asks what to do first —review the prior occurrence details, then document your current case using what you find.

Virtualization settings are typically found within the BIOS/UEFI firmware configuration. To prevent unauthorized users from changing these settings, the technician should set a BIOS password. This ensures only administrators with the password can access or modify BIOS settings, including virtualization support.

B. The guest account is a user-level feature in Windows and doesn’t control BIOS access.

C. A screen lock prevents casual access to the desktop but doesn’t protect firmware settings.

D. AutoRun controls how media and devices behave when inserted — unrelated to BIOS security.

The correct answer is D. Folder redirection, because folder redirection allows specific user folders—such as Documents, Desktop, and Downloads—to be stored on a network share rather than the local computer. This ensures centralized storage, easier backups, and improved data security.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, folder redirection is commonly used in domain environments to store user data on file servers. This prevents data loss if a workstation fails and allows users to access their files from multiple systems.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that folder redirection works seamlessly with roaming profiles and Group Policy, ensuring that users do not need to manually save files to network drives.

The Mike Meyers / Mark Soper Lab Manual clarifies that file attributes only affect file behavior, UAC controls privilege elevation, and security groups control access permissions—but none of these determine where user folders are stored.

Because the requirement is to store documents on a network location instead of locally, configuring folder redirection is the correct and intended solution, making D the correct answer.

Antivirus/antimalware detection depends heavily on its definitions/signatures. If those are outdated, new malware variants may not be recognized. Quentin Docter explains that the “definitions database” is a core antivirus component and that its effectiveness depends on “the frequency of updates and the comprehensiveness of the database signatures.” He adds that new signatures are discovered frequently and added to the database, meaning stale definitions leave gaps.

Docter is also explicit that security software “is not perfect” and that malware may get around it, “especially a new threat (and especially if you haven’t updated your definitions lately).” That statement directly matches this scenario: the software exists, but it failed to detect the infection—most likely because the detection data wasn’t current.

The other answers don’t fit as well: folder permissions and user permissions can limit what malware can change, but they don’t explain why security software didn’t detect it. Port security relates to network access control, not local signature detection. Therefore, Outdated definitions (B) is the best explanation.

If internal resources (such as intranet or internal apps) can ' t be accessed but external sites work, this often points to aDNS issue, where the system isn ' t resolving internal domain names correctly.

FromAll-in-One Exam Guide:

“When internet access is functional but internal sites fail to load, the issue usually lies with DNS resolution. Internal resources often require internal DNS servers, which may not be configured correctly.”

BitLocker To Go is a Microsoft encryption feature specifically designed for removable drives such as USB flash drives and external hard drives. It allows users to protect the data on these devices by requiring a password to decrypt the contents, thereby preventing unauthorized access in the event the device is lost or stolen.

A is correct because BitLocker To Go is directly tied to password-protecting removable media.

B and C are unrelated to BitLocker To Go; Secure Boot and VPN encryption are entirely different security layers.

D applies to BitLocker (not BitLocker To Go) and full disk encryption on internal drives using TPM.

The best option is to provide temporary elevation rather than permanently increasing a user’s privileges. Quentin Docter explains the principle of least privilege: users should have “the fewest number of privileges that they need to do their job,” because administrative access increases the chance of misconfiguration and security compromise. He also describes how User Account Control (UAC) supports least privilege by logging an administrator in with minimal permissions and then allowing the user to “run as a standard user with the ability to escalate privileges.” That is the practical idea behind just-in-time access—grant admin rights only at the moment they are needed.

The All-in-One guide reinforces this by explaining that if you are logged in with a less-privileged account, you can elevate for installs by entering admin credentials or choosing Run as administrator. Adding the user to the local Administrators group (D) violates least privilege. Assigning Power User (B) is not reliable in modern Windows and still broad. Manual installation (C) doesn’t solve the permission requirement.

The ext4 (Fourth Extended Filesystem) is the most widely used default filesystem in modern Linux distributions. It is designed for high performance, scalability, and reliability, and is supported by all mainstream Linux kernels.

A. exFAT is used for cross-platform external drives, not native Linux systems.

B. APFS is Apple ' s proprietary filesystem for macOS and iOS.

D. NTFS is the default filesystem for Windows, not Linux.

An " OS Not Found " error typically indicates that the computer is attempting to boot from a drive that doesn ' t contain a valid operating system or bootable partition. The presence of a USB drive might be confusing the boot order. Therefore, the first step a technician should take is to verify and adjust the boot sequence in the system’s firmware (BIOS or UEFI). It ' s possible that the USB drive is being prioritized over the internal hard drive, which may cause the system to miss the OS entirely.

A. Running data recovery tools is premature before confirming boot order.

B. Repartitioning the disk would destroy existing data—this should not be done until confirmed the OS is actually missing.

D. Switching between UEFI and BIOS (legacy mode) might help in rare cases, but it is not the first step in standard OS boot issue troubleshooting.

When an iOS device approaches full storage capacity, performance can be significantly impacted. iOS requires a buffer of free space to perform background processes efficiently.

From theAll-in-One Exam Guide:

“iOS devices need several gigabytes of free space to maintain optimal performance. Near-full storage can cause sluggish operation and failures in updates or background tasks.”

An incident report documents key details such as the cause of the outage, steps taken to resolve it, and measures to prevent recurrence. It is a post-mortem analysis often shared with stakeholders to improve future response.

According to the Quentin Docter – CompTIA A+ Complete Study Guide:

“An incident report provides a summary of an event that disrupted normal operations and includes a timeline of what occurred, how the issue was diagnosed and fixed, and who was involved in the resolution”.

This is reaffirmed in Travis Everett’s All-in-One Guide:

“Documentation after an incident helps technical teams and management review the situation and learn from it. This is formalized in an incident report”.

If the system fails to boot after removing the USB installation media, it often means the BIOS is not pointing to the correct boot device. This typically involves an issue with the BIOS settings—such as UEFI being disabled when the OS was installed in UEFI mode.

FromAll-in-One Exam Guideby Travis Everett:

“One of the most common post-installation issues is failing to configure the boot mode correctly in BIOS. If an OS is installed in UEFI mode, the UEFI boot must be enabled, otherwise the system won’t detect the bootloader.”

Disk optimization tools can sometimes corrupt theMaster Boot Record (MBR). If BIOS sees the drive but can ' t boot, repairing the MBR using installation media is the correct next step.

FromAll-in-One Exam Guide:

“When BIOS recognizes the drive but no OS is found, the issue is often with the boot record. Use installation media to access recovery tools and repair the MBR or boot loader.”

The requirement is secure remote access to both Linux and Windows servers while working from home. A VPN is designed to securely extend internal network access across the public Internet. Quentin Docter states that a “virtual private network (VPN) extends your company’s internal network across the Internet,” allowing clients to connect “securely and privately,” and that it creates a secure tunnel “through the process of encryption and encapsulation,” making the remote host appear as part of the internal network with an internal IP.

Mike Meyers’ Lab Manual reinforces that VPNs work by “setting up an encrypted tunnel between the two points—over the open Internet—creating what we call a virtual private network (VPN),” enabling remote users to function as if they were plugged into the office LAN.

FTP is not secure by default and is file-transfer-only (not full network access). RDP is Windows-focused and provides a remote desktop session, not generalized secure access to mixed OS servers. RMM is a management platform for IT monitoring/maintenance, not the primary secure access method for end users. Therefore, VPN (B) best meets the requirement.

The first step the CFO should take is to verify the VPN status. When working remotely, access to internal resources such as databases, file servers, and accounting systems typically requires a secure Virtual Private Network (VPN) connection. Without an active VPN tunnel, the application cannot reach internal database servers, resulting in connection errors.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, database connectivity issues during remote work are most commonly caused by missing or disconnected VPN sessions. Internal applications are often restricted to private IP ranges that are inaccessible over the public internet.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that VPNs are designed to extend the corporate network securely to remote users. If the VPN is disconnected, authentication to internal services will fail even if the application itself launches correctly.

The Mike Meyers / Mark Soper Lab Manual further explains that restarting the PC or updating the application does not resolve network-path issues. Returning to the office is unnecessary if secure remote access is functioning as designed.

Because the error specifically indicates an inability to connect to a database—and not a corrupted application—the most logical and efficient first troubleshooting step is to confirm that the VPN is connected and authenticated.

The correct answer is B. SSID configuration, because controlling SSID visibility and behavior directly affects which wireless networks devices can see and attempt to join. In shared office environments, multiple Wi-Fi networks may be present, increasing the risk of users accidentally connecting to the wrong network.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, SSIDs define how wireless networks are advertised and discovered. By modifying SSID settings—such as disabling broadcast or restricting auto-join behavior—technicians can prevent devices from attempting to connect to unauthorized or unintended networks.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that MDM solutions often preconfigure approved wireless profiles. Adjusting SSID configuration ensures devices only recognize and connect to sanctioned networks, reducing accidental associations and security risks.

The Mike Meyers / Mark Soper Lab Manual clarifies that IP filtering, content filtering, and port forwarding are network traffic control mechanisms. They do not prevent a device from seeing or attempting to connect to nearby Wi-Fi networks.

Because the goal is to prevent accidental Wi-Fi access, not filter traffic after connection, modifying SSID configuration is the correct and most effective solution.

Before any change is implemented, it must bedocumentedas part of change management procedures. This ensures transparency, review, and tracking.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Documenting a change is the first step in change management. This includes defining the scope, purpose, impact, and implementation plan before approval or scheduling.”

The issue described—“domain cannot be found” despite the ability to ping the server and access the internet—indicates aDNS resolution problem, not a network connectivity issue. The workstation is currently usingpublic DNS servers (8.8.8.8 and 1.1.1.1)whichcannot resolve internal domain names, such as the ones used in Active Directory environments. To resolve this, the technician needs tochange the DNS settings to point to the internal DNS server, which in most domain setups is thedomain controller itself (likely 192.168.1.10 in this case).

Here’s the breakdown of the incorrect options:

B. Assign a static IP address: The IP is already assigned and functioning; the device can ping and reach the network and internet.

C. Configure a subnet mask: The subnet mask is appropriate for the network range (Class C /24).

D. Update the default gateway: The gateway is valid and allows internet access; this is not the issue.

CompTIA A+ 220-1102 Core 2 Objective Reference:

Objective 1.8 – Given a scenario, use features and tools of the operating system.

Under this objective, candidates must know how to troubleshoot OS-based network configurations, includingproper DNS settings in domain environments.

—

A .bat file (batch file) is a script file in DOS, OS/2, and Microsoft Windows. It contains a series of commands that are executed by the command-line interpreter. In Windows environments, batch files are commonly used to automate log-in tasks, such as mapping network drives, launching applications, or setting environment variables during the user ' s logon process.

B. .sh is a shell script used in Linux/Unix environments.

C. .py is a Python script, which can be used for automation but is not commonly run directly at user logon in standard Windows environments.

D. .js is JavaScript, used mainly in web development and not for system-level scripting in Windows logon automation.

FAT32cannot support files larger than 4GB.NTFSsupports large file sizes and is compatible across Windows systems, making it the correct choice for transferring a 4.57GB file.

FromAll-in-One Exam Guide:

“NTFS is the preferred file system for large file transfers within Windows. FAT32 has a 4GB file size limit, which makes it unsuitable for modern use cases involving large files.”

Managed Detection and Response (MDR)involves outsourcing security monitoring to a third-party that uses multiple tools and analytics.

FromTravis Everett – All-in-One Exam Guide:

“MDR providers handle threat detection and response using a combination of advanced tools, analytics, and expert personnel.”

This is likely arogue antivirusor scareware tactic. The user shouldnot click " OK " and instead check Windows Security (or third-party antivirus) status and ensure real-time protection is enabled.

FromMark Soper – Mike Meyers ' Lab Manual:

“Users should verify security center settings if receiving suspicious pop-ups. Clicking unknown software updates can install malware. It’s safer to validate protection through legitimate system tools.”

Once a malware incident has been confirmed, the immediate next step is to contain the threat. Quarantining infected systems prevents the malware from spreading to other devices and isolates the malicious code for further analysis or remediation.

B. Educating end users is important but occurs later in the incident response process.

C. Disabling System Restore is part of cleanup, not containment.

D. Updating and scanning should occur after the system is quarantined to prevent further infection or spread.

For persistent printing issues due to spooler service, ensure theprint spooler is started and set to Automatic. This maintains print capability across reboots.

FromMike Meyers ' Lab Manual:

“If users lose printing capabilities on reboot, the print spooler service must be configured to start automatically and be confirmed as running.”

Because this is a government client with confidential data and a strict requirement to follow regulatory compliance, the best practice is to use a certified third-party destruction service that can provide documented proof of destruction. The All-in-One guide explicitly notes that “professional hard drive disposal services are third-party vendors” that guarantee drives are thoroughly destroyed by issuing a certificate of destruction/recycling, which provides assurance that data will not fall into the wrong hands. Mike Meyers’ Lab Manual repeats the same exam point: third-party vendors “will guarantee they have truly, thoroughly destroyed drives by issuing a certificate of destruction/recycling.”

Low-level formatting (often used to mean overwrite/zero-fill) can sanitize drives, but it may not satisfy the requirement for provable compliance and chain-of-custody documentation, especially for regulated environments. Targeted deletion is ineffective because deleted data can remain recoverable. In-house incineration is extreme and may be restricted, unsafe, or noncompliant without proper facilities and documentation. Therefore, Certified third-party destruction (B) is the best option.

The correct answer is C. XDR (Extended Detection and Response), which is designed to provide holistic security visibility across endpoints, networks, servers, cloud workloads, and email systems. Unlike traditional endpoint-only solutions, XDR correlates data from multiple security layers to detect and respond to advanced threats.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, XDR expands upon EDR by integrating telemetry from network traffic, firewalls, identity systems, and cloud platforms. This enables detection of threats that move laterally or originate outside a single host.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that XDR is specifically designed to detect attacks that bypass endpoint protections by analyzing network-level behavior, command-and-control traffic, and cross-system activity.

The Mike Meyers / Mark Soper Lab Manual contrasts XDR with other options: RADIUS is an authentication protocol, UAC is a local Windows privilege control, and antivirus focuses only on known malware signatures at the host level. None of those provide network-wide visibility and coordinated response.

Because the question explicitly mentions traffic outside the host and at the network level, XDR is the only technology designed to meet that requirement, making C the correct answer.

1st CLI Resolution

copy " C:\Program Files\Testing\msvcp100.dll " " User-PC02\C$\Windows\System32 " /v /y

2nd CLI Resolution

regsvr32 msvcp100.dll

Why These Are the Correct Choices (Exam Logic)

Why the COPY command is first

The error explicitly states MSVCP100.dll is missing

Other users can run the app → the DLL exists on another system

The fastest, least disruptive fix (preferred by CompTIA) is to:

Copy the known-good DLL into C:\Windows\System32

The /v switch verifies the copy, and /y suppresses prompts — both are enterprise-safe defaults

This restores the missing runtime dependency immediately.

Why REGSVR32 is second

After copying a DLL, Windows may not recognize or properly load it

regsvr32 registers the DLL with the operating system

This ensures:

The Testing application can properly call the runtime library

The fix persists after reboot

First Chat Response:When the user mentions setting up a new router, the best initial response to maintain a helpful and professional tone is:

> Select reply: " I am happy to assist you today. "

Second Chat Response:When the user states that they need to set up basic security settings:

> Select reply: " Is this the first router in your office? "

Third Chat Response:After learning it ' s a replacement router and the user is logged into the router ' s web page:

> Select reply: " The first thing you need to do is change the default password. "

Fourth Chat Response:For the response about password settings:

> Select reply: " Create a new password with an uppercase, a lowercase, and a special character. "

Fifth Chat Response:When the router prompts to reboot:

> Select reply: " Yes, reboot please. "

Study Guide Reference: The CompTIA A+ Core 2 guide highlights the importance of changing default credentials and using strong password policies, particularly in SOHO environments where routers are often targeted.

Host 2, Host 3, Host 4 , Host 5 ,Host 6, Host 7, Host 8 , Media Server - Stop All unwanted and malicious service (Persistance.j1zpxn Installer Service) from all the listed host and Media servers

Refer screenshot below on the required service started/stopped on host2, same service to be started and stopped across all host servers.

A screenshot of a computer AI-

A screenshot of a computer AI-

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig

Issue (drop-down)

Limited network connectivity

Why this matches:

“Internet Down” most commonly indicates the workstation has lost valid Layer 3 connectivity (bad/expired DHCP lease, APIPA address, wrong gateway, etc.). In CompTIA A+ terms, this aligns best with limited connectivity symptoms (can’t reach internet resources).

Resolution (drop-down)

Refresh DHCP

Why this is the most efficient fix:

If the client has:

an expired lease

an APIPA address (169.254.x.x) because DHCP failed

an incorrect IP/gateway from a bad lease

…then the fastest first remediation is to renew DHCP to obtain a correct IP address, default gateway, and DNS servers. This is a standard CompTIA A+ troubleshooting action (quick, low-risk, high-success).

Verify/Resolve (drop-down)

ipconfig

Why this is the correct verification tool:

ipconfig is the primary Windows CLI tool to:

check current IP settings (ipconfig /all)

release/renew DHCP (ipconfig /release and ipconfig /renew)

confirm you received a valid IP + gateway + DNS, which is required for internet access.

What you would do (mapped to those choices)

Using ipconfig to complete “Refresh DHCP” and confirm the fix:

Check current addressing

ipconfig /all

Look for:

Valid IPv4 (not 169.254.x.x)

Valid Default Gateway

DNS servers present

Refresh the DHCP lease

ipconfig /release

ipconfig /renew

Verify outcome

Run ipconfig again to confirm:

You now have a correct IP for the network

Default gateway is populated

If the gateway/DNS populate correctly, internet access typically returns.

Ticket #8675310

Issue: Limited network connectivity

Resolution: Refresh DHCP

Verify/Resolve: ipconfig /renew

For the Low priority ticket #8675310 (“A small yellow triangle appeared in the taskbar. I am no longer able to access network resources.”), the Windows yellow triangle on the network icon is the classic indicator of limited connectivity (often caused by a bad/expired DHCP lease, APIPA address, missing default gateway, or DNS info not being assigned).

Correct PBQ Selections (Ticket #8675310)

Issue

Limited network connectivity

Why (CompTIA logic):

That yellow warning triangle means the NIC is connected at Layer 2 (link is up), but the system likely doesn’t have valid Layer 3 config (IP/gateway/DNS), so it can’t reach network resources.

Resolution

Refresh DHCP

Why this is the most efficient fix:

When a Windows PC can’t access network resources and shows “limited connectivity,” the fastest, lowest-risk fix is to renew DHCP so the PC can pull:

a valid IP address

default gateway

DNS servers

This directly resolves the most common root cause behind that icon.

Verify / Resolve

ipconfig /renew

Why this is the correct verification/remediation command:

ipconfig /renew is the direct command to request a fresh DHCP lease. After renewal, the user should regain access to network resources if DHCP was the issue.

What this fixes (what you’d expect to see)

Before the fix, the attachment (Output.txt) in these PBQs typically shows symptoms like:

169.254.x.x (APIPA) → DHCP failed

Missing/blank Default Gateway

DNS not present or incorrect

After ipconfig /renew, you should see a normal private IP (like 192.168.x.x / 10.x.x.x / 172.16-31.x.x) and a valid gateway/DNS.

The completed configuration:

1. Wireless AP (LAN side)

1. LAN IP: 192.168.10.1

2. Encryption: WPA2 PSK

2. Router (port-forward rule)

1. Allow TCP Any 3389

This forwards inbound RDP traffic (TCP/3389) from the Internet to the Windows PC, enabling Remote Desktop access.

3. Firewall (screened subnet side)

1. LAN IP: 10.100.0.1

4. Device placement

1. PC: place behind the router (where the port-forward rule points).

2. Game console: place on the Wireless AP (so it can use chat and extra services over WPA2 PSK).

3. Firewall: place in front of the screened subnet (with its 10.100.0.1 IP facing that subnet).

The Windows PC is placed in the screened subnet (behind the firewall) for enhanced security. Remote access to this PC requires port forwarding of TCP port 3389 (RDP), which is correctly configured through the router.

The Game Console is placed on the Wireless AP LAN, using WPA2 PSK for a secure wireless connection. Game consoles typically use peer-to-peer chat and online services that require open access without firewall restrictions, which is why the console is not placed behind the firewall.

CompTIA A+ 220-1102 Reference Points:

Objective 3.4: Given a scenario, implement best practices associated with data and device security.

Objective 2.4: Given a scenario, use appropriate tools to support and configure network settings.

Study Guide Reference: CompTIA A+ Core 2 guides recommend using screened subnets (a type of DMZ) for systems needing controlled external access, such as remote desktops, while placing gaming and media devices on less restricted networks for full functionality.

Inbox mail 1 -Account Locked- Phishing - Report email to Information Security

Inbox mail 2 -Share your feedback - Legitimate - Perform no additional actions

Inbox mail 3 –Employee orientation - Legitimate - Perform no additional actions

Inbox mail 4 –Security Update – Spam - Report email to Information Security

Inbox mail 5 –Interview - Legitimate - Perform no additional actions

—