CompTIA A+ (Core 1/2) Practice Exam

What the CompTIA A+ (Core 1/2) exam covers

• Mobile Devices and Hardware74 questions
• Networking133 questions
• Hardware and Network Troubleshooting137 questions
• Operating Systems152 questions
• Security175 questions

Free CompTIA A+ (Core 1/2) sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 671.

1. Question 1Mobile Devices and Hardware

   Which component temporarily stores data and running programs for fast CPU access (volatile)?

   • ARAM (memory)Correct
   • BThe GPU fan
   • CThe power supply
   • DThe hard drive/SSD
   ✓ Correct answer: A

   RAM (Random Access Memory) is the volatile, high-speed memory that the CPU uses to store actively running programs and data. Because it is semiconductor-based and directly addressable by the processor, RAM delivers access times measured in nanoseconds, enabling the CPU to fetch instructions and operands without waiting for a slower storage device. The word volatile means all data is lost when power is removed, distinguishing RAM from persistent storage like HDDs and SSDs.

   Why the other options are wrong

   • BThe GPU fan is incorrect because it is a cooling component that moves air across the graphics processor; it does not store data or programs at all.
   • CThe power supply is incorrect because it converts AC wall power to regulated DC voltages and distributes power to all components; it performs no data storage function.
   • DThe hard drive/SSD is incorrect because both are non-volatile storage devices that retain data after power-off and are used for long-term file and OS storage, not for the fast, temporary working memory the CPU accesses directly.
2. Question 2Networking

   An office of 200 users has only two public IPv4 addresses but needs all clients to reach the internet, avoiding the cost of buying more public IPs. Which technology accomplishes this?

   • AAssigning every client an APIPA (169.254.x.x) address
   • BDeploying IPv6 to give each client a public address
   • CAdding a second DHCP server to hand out more leases
   • DNAT/PAT (network address translation with port overloading)Correct
   ✓ Correct answer: D

   NAT maps private addresses to a public IP, and PAT (NAT overload) extends this by assigning each session a unique source port so many internal hosts can share a single public IP at once. With a translation table keyed on internal IP:port to public IP:port, hundreds of clients reach the internet through just one or two public addresses, exactly solving the address-shortage problem cheaply.

   Why the other options are wrong

   • AAPIPA addresses are non-routable link-local addresses used only when DHCP fails; they cannot reach the internet, so they solve nothing here.
   • BIPv6 could give each host a global address, but it does not let 200 clients share the two existing public IPv4 addresses, which is what the scenario requires.
   • CA second DHCP server only hands out more private leases; it does nothing to let those private hosts share the limited public IPv4 addresses for internet access.
3. Question 3Hardware and Network Troubleshooting

   A critical database server runs on a single SSD with no redundancy. Which architectural change best reduces downtime from a single drive failure while preserving performance?

   • AUse RAID 0 striping across two SSDs for maximum throughput
   • BMove to a RAID 10 array (mirrored stripes) for both redundancy and performanceCorrect
   • CSwitch to a single larger enterprise HDD with a large cache
   • DAdd a hot spare disk next to the existing single boot drive
   ✓ Correct answer: B

   RAID 10 (1+0) mirrors data into pairs and then stripes across the pairs, so it survives a drive failure in each mirror, rebuilds quickly by copying from the surviving mirror, and has no parity-write penalty. For a database with heavy random reads and writes this gives the best mix of redundancy, performance, and fast recovery, eliminating the single-drive single point of failure.

   Why the other options are wrong

   • AUse RAID 0 striping across two SSDs for maximum throughput improves speed by striping but provides zero redundancy, so the failure of either drive destroys the entire array and all data.
   • CSwitch to a single larger enterprise HDD with a large cache still leaves a single point of failure with no redundancy, and it sharply reduces the random IOPS a database depends on.
   • DAdd a hot spare disk next to the existing single boot drive does nothing on its own, because a hot spare only rebuilds into an existing redundant array; with a lone drive there is no array for it to protect.
4. Question 4Networking

   Why is accurate time synchronization (NTP) important for log analysis across multiple devices?

   • AIt assigns IP addresses and DNS settings to clients automatically
   • BIt automatically encrypts all log traffic sent between the devices
   • CIt lets events from different systems be correlated on a consistent timelineCorrect
   • DIt increases the usable bandwidth available on the network links
   ✓ Correct answer: C

   When troubleshooting or investigating incidents across multiple systems-firewalls, switches, servers, application logs-the timestamps on individual log entries are the primary mechanism for sequencing events and establishing causality. If each device maintains its clock independently without synchronization, clock drift causes timestamps to diverge by seconds, minutes, or more. This makes it impossible to determine the correct order of events across devices-for example, whether a firewall block occurred before or after a server authentication failure. NTP (Network Time Protocol) synchronizes all devices to a common stratum hierarchy, ensuring timestamps are consistent across the infrastructure and enabling accurate cross-system event correlation.

   Why the other options are wrong

   • AIt assigns IP addresses and DNS settings to clients automatically is incorrect because that is the role of DHCP; NTP deals only with time synchronization and plays no part in address configuration.
   • BIt automatically encrypts all log traffic sent between the devices is incorrect because confidentiality in transit is provided by TLS or IPsec; NTP synchronizes clocks and does not encrypt log data.
   • DIt increases the usable bandwidth available on the network links is incorrect because NTP is a lightweight UDP protocol with negligible traffic; it has no effect on the carrying capacity of the links.
5. Question 5Security

   A shared office PC lets any user read and modify files in another user's profile folder. Which security principle is being violated, and what is the fix?

   • AEncryption-enable BitLocker to block the other users' access
   • BFirewalling-add rules to block the file-sharing ports used
   • CAntivirus-run a full malware scan to remove the access
   • DLeast privilege-tighten NTFS permissions so users see only their own dataCorrect
   ✓ Correct answer: D

   The principle of least privilege requires that users be granted only the minimum permissions necessary to perform their job functions, which includes restricting file-system access so each user can only access their own profile folder. On Windows systems using NTFS, each user profile directory should have permissions set so that only the owning user and administrators have read/write access. When any user can read and modify another user's profile, the NTFS access control lists (ACLs) are misconfigured, and tightening them to enforce proper boundaries resolves the security violation.

   Why the other options are wrong

   • AEncryption-enable BitLocker to block the other users' access is incorrect because full-disk encryption like BitLocker protects data only if the drive is removed or the system is off; it does not restrict which signed-in users can read or modify each other's profile files.
   • BFirewalling-add rules to block the file-sharing ports used is incorrect because a firewall filters network traffic by port and address; it has no control over local NTFS file-system access between user accounts on the same computer.
   • CAntivirus-run a full malware scan to remove the access is incorrect because antivirus detects and removes malware; it plays no role in defining or enforcing file-system permissions between users, so it cannot resolve the improper access.
6. Question 6Mobile Devices and Hardware

   While reassembling a laptop, a technician finds a small flat cable with many fine conductors that connects the keyboard to the motherboard through a flip-up locking connector. What type of cable is this?

   • ARibbon (flex) cableCorrect
   • BSATA data cable
   • CMolex power cable
   • DCoaxial cable
   ✓ Correct answer: A

   Ribbon, or flex, cables are flat with many closely spaced conductors and are used inside laptops for keyboards, trackpads, and displays because they fit in tight spaces. The flip-up or slide latch must be released before the cable can be removed and re-seated without damage.

   Why the other options are wrong

   • BSATA data cables are thicker, have keyed L-shaped connectors, and connect storage drives, not keyboards.
   • CMolex connectors are bulky 4-pin power plugs used in desktops, not laptop keyboard connections.
   • DCoaxial cable is a single-conductor shielded cable used for antennas, not multi-pin data ribbons.
7. Question 7Networking

   A small business runs its phones over the same network as data. Voice quality must remain clear when the link is busy. Which switch feature should be enabled to prioritize voice traffic?

   • AQuality of Service (QoS)Correct
   • BPort mirroring
   • CJumbo frames
   • DSpanning Tree Protocol
   ✓ Correct answer: A

   QoS classifies and queues traffic so real-time applications like VoIP get preferential treatment during congestion, reducing latency and jitter. It is a core reason to choose a managed switch when converging voice and data.

   Why the other options are wrong

   • BPort mirroring copies traffic to a monitoring port for analysis; it does not prioritize any traffic.
   • CJumbo frames increase MTU for large bulk transfers and can actually hurt small, latency-sensitive voice packets.
   • DSpanning Tree Protocol prevents Layer 2 loops; it does not classify or prioritize traffic by type.
8. Question 8Hardware and Network TroubleshootingSelect all that apply

   A laptop's touchpad has become erratic, registering phantom clicks and jumpy cursor movement. Which TWO are reasonable troubleshooting steps? (Choose TWO)

   • AUpdate or reinstall the touchpad/pointing-device driverCorrect
   • BClean the touchpad surface and check for moisture or debrisCorrect
   • CReplace the laptop's RAM modules
   • DReset the BIOS administrator password
   ✓ Correct answer: A, B

   Erratic touchpad behavior commonly stems from a corrupt or outdated driver or from surface contamination such as oils, moisture, or debris that the capacitive sensor misreads. Reinstalling/updating the driver and cleaning the surface directly address the two most frequent causes.

   Why the other options are wrong

   • CFaulty RAM produces crashes and instability, not phantom touchpad input.
   • DA BIOS password has no relationship to touchpad sensitivity or cursor behavior.
9. Question 9Operating Systems

   A Windows application installs correctly but fails to launch on a 64-bit system because it requires an older runtime. In which folder does 64-bit Windows place 32-bit application files by default?

   • AC:\Program Files (x86)Correct
   • BC:\Program Files
   • CC:\Windows\System32
   • DC:\Windows\SysWOW64\Programs
   ✓ Correct answer: A

   On a 64-bit edition of Windows, native 64-bit programs go in C:\Program Files, while 32-bit programs are separated into C:\Program Files (x86). This separation prevents file conflicts and lets the WOW64 subsystem run 32-bit code. Knowing which folder holds 32-bit installs helps when troubleshooting application compatibility.

   Why the other options are wrong

   • BC:\Program Files holds native 64-bit applications, not 32-bit ones, on a 64-bit OS.
   • CC:\Windows\System32 contains 64-bit system files on a 64-bit OS (despite the name), not user-installed 32-bit applications.
   • DThere is no standard SysWOW64\Programs folder; SysWOW64 holds 32-bit system DLLs, not installed application directories.
10. Question 10Security

    On a Windows file server, a user belongs to a group with Share permission of Read but an NTFS permission of Full Control on the same folder accessed over the network. What is the user's effective access?

    • ARead, because the most restrictive of the share and NTFS permissions applies over the networkCorrect
    • BFull Control, because NTFS permissions always override share permissions
    • CNo access, because conflicting permissions deny access by default
    • DModify, the average of the two permission levels
    ✓ Correct answer: A

    Windows evaluates share permissions and NTFS permissions separately, then grants the more restrictive of the two results for network access. With Share=Read and NTFS=Full Control, the cumulative effective permission over the network is Read. (Locally, only NTFS would apply.)

    Why the other options are wrong

    • BNTFS does not override share permissions for network access; the more restrictive result wins, so share Read caps the access.
    • CConflicting allow permissions do not result in denial; only an explicit Deny would block access. The result is the most restrictive allow.
    • DEffective access is determined by the most restrictive permission, not by averaging the two levels.

Related Security resources

• CompTIA A+ (Core 1/2) study guideKey concepts
• Security practice examsAll Security
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• (ISC)² CISSP practice examRelated
• (ISC)² Certified in Cybersecurity (CC) practice examRelated
• CompTIA Security+ SY0-701 practice examRelated

CompTIA A+ (Core 1/2) practice exam FAQ