CompTIA A+ Core 2 (220-1202) Practice Exam

What the CompTIA A+ Core 2 (220-1202) exam covers

• Operating Systems196 questions
• Security196 questions
• Software Troubleshooting161 questions
• Operational Procedures147 questions

Free CompTIA A+ Core 2 (220-1202) sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 700.

1. Question 1Operating SystemsSelect all that apply

   Which TWO are operating systems? (Choose TWO)

   • AHDMI
   • BMicrosoft WindowsCorrect
   • CNTFS
   • DLinuxCorrect
   ✓ Correct answer: B, D

   An operating system (OS) is the software layer that manages hardware resources, provides a runtime environment for applications, handles process scheduling, memory management, file systems, and user interfaces. Microsoft Windows is the dominant OS for personal computers and enterprise desktops, while Linux is a family of Unix-like open-source operating systems widely used in servers, embedded systems, Android devices, and development environments. Both manage hardware directly and provide the foundational services all other software depends on.

   Why the other options are wrong

   • AHDMI is incorrect because HDMI (High-Definition Multimedia Interface) is a display and audio connection standard specifying a physical connector and digital signal protocol for carrying video and audio from a source device to a display; it is a hardware/interface specification, not software that manages system resources.
   • CNTFS is incorrect because NTFS (New Technology File System) is a file system - a method of organizing and storing data on a storage volume - that operates as a component within an operating system; NTFS requires Windows to function and is not itself an OS that can boot, schedule processes, or manage hardware independently.
2. Question 2Operating Systems

   Which Windows utility lets a user choose which apps launch automatically at sign-in, and is also reachable from Task Manager?

   • AStartup AppsCorrect
   • BSystem Configuration (msconfig) Services tab
   • CLocal Group Policy Editor
   • DComponent Services
   ✓ Correct answer: A

   Startup Apps in Settings, mirrored by the Startup tab in Task Manager, lets users toggle which installed programs launch automatically when they log on, and shows each app's startup impact. Disabling unneeded startup items is a common way to speed up boot and login.

   Why the other options are wrong

   • BThe msconfig Services tab manages background services, not per-user startup apps, and the Startup tab in msconfig now just redirects to Task Manager.
   • CLocal Group Policy Editor enforces policy but is not the standard place to toggle individual startup apps.
   • DComponent Services administers COM+ applications and DCOM, unrelated to startup programs.
3. Question 3Security

   Which authentication protocol uses tickets issued by a Key Distribution Center and is the default for Active Directory domain logons?

   • AKerberosCorrect
   • BSNMP
   • CSMTP
   • DDHCP
   ✓ Correct answer: A

   Kerberos is a network authentication protocol that uses symmetric-key cryptography and a trusted third party called the Key Distribution Center (KDC) to authenticate users and services without transmitting passwords over the network. When a user logs into an Active Directory domain, the KDC issues a Ticket-Granting Ticket (TGT), which the client then uses to request service tickets for accessing specific resources. This ticket-based system is the default authentication mechanism in Active Directory environments and provides mutual authentication, replay protection, and delegated authentication capabilities.

   Why the other options are wrong

   • BSNMP is incorrect because the Simple Network Management Protocol is used for monitoring and managing network devices such as routers, switches, and servers, and it provides no user authentication or ticket-based logon functionality.
   • CSMTP is incorrect because the Simple Mail Transfer Protocol is used for sending email messages between mail servers and has no role in user authentication, ticket issuance, or domain logon processes.
   • DDHCP is incorrect because the Dynamic Host Configuration Protocol automatically assigns IP addresses and network configuration parameters to devices on a network and does not perform any user authentication or identity verification.
4. Question 4Security

   Employees connect to corporate resources from home over the public internet. The security team wants all traffic between the remote laptop and the corporate network to be encrypted in an authenticated tunnel. Which technology should be deployed?

   • AA VPNCorrect
   • BA proxy server
   • CPort forwarding on the home router
   • DA jump box on the public internet
   ✓ Correct answer: A

   A virtual private network establishes a secure tunnel that encrypts traffic and authenticates the endpoints, so data traveling across untrusted networks like home internet is protected from eavesdropping and tampering. This is the standard solution for secure remote access to corporate resources.

   Why the other options are wrong

   • BA proxy forwards and may filter web requests but does not by itself create an encrypted tunnel for all corporate traffic.
   • CPort forwarding merely exposes an internal service to the internet and adds no encryption or authentication tunnel.
   • DA jump box is a hardened administrative hop point; placing one openly on the public internet increases exposure rather than securing the remote link.
5. Question 5Software Troubleshooting

   An idle workstation shows constant high outbound network traffic even though no applications are visibly open. What should the technician suspect first?

   • AA stuck job in the print queue
   • BMalware sending data over the networkCorrect
   • CA scheduled disk defragmentation task
   • DAn oversized email attachment downloading
   ✓ Correct answer: B

   Malware such as spyware or a bot client frequently generates ongoing outbound traffic to report data, receive commands, or participate in a botnet, and this traffic continues even when the user is not actively working. A stuck print job, disk defrag task, or attachment download would be visible in their respective queues and would not persist indefinitely on a truly idle machine.

   Why the other options are wrong

   • AA stuck print job would appear in the print queue, not as ongoing network use.
   • CDisk defragmentation is a local disk operation, not a network activity.
   • DA large download would eventually finish and stop generating traffic.
6. Question 6Operational Procedures

   A technician needs to move a heavy tower server from the floor to a rack shelf. Which technique reduces the risk of injury?

   • ABend at the knees and lift with the legsCorrect
   • BBend at the waist and lift with the back
   • CTwist the torso quickly while lifting
   • DLift and carry the server at arm's length
   ✓ Correct answer: A

   Proper lifting keeps the load close to the body and uses the strong leg muscles rather than the lower back: bend at the knees, keep the back straight, and rise by straightening the legs. Bending at the waist, twisting under load, or extending the arms away from the body all increase strain and injury risk.

   Why the other options are wrong

   • BBending at the waist shifts the load onto the lower back, the exact injury pattern to avoid.
   • CTwisting the torso while under load stresses the spine and raises strain-injury risk.
   • DHolding a heavy object away from the body increases leverage and strain on the back.
7. Question 7Operating Systems

   A machine must join a domain and use full-disk encryption. What does this require?

   • AA business or professional Windows editionCorrect
   • BA larger storage drive fitted to the machine
   • CA second network adapter in the workstation
   • DAn additional monitor connected to the machine
   ✓ Correct answer: A

   Windows separates consumer and business capability by edition rather than by licence key alone, and the two named features sit on the business side along with group policy support and remote desktop hosting. A machine bought with the home edition therefore cannot be joined to a domain until it is upgraded, which is why edition is checked at purchase and is a common surprise on machines bought from a retailer. Storage, network adapters and displays have no bearing on either feature.

   Why the other options are wrong

   • BCapacity does not determine which features are available.
   • COne adapter is sufficient to join a domain.
   • DDisplays are unrelated to these features.
8. Question 8Software TroubleshootingSelect all that apply

   A problematic update must be handled across an estate. Which TWO steps apply? (Select two.)

   • AHold the update centrally so more machines do not take itCorrect
   • BRecord which machines are affected and what the symptom isCorrect
   • CDisable updating permanently on every machine
   • DRemove it from one machine and say nothing further
   • EWait for users to report it before doing anything
   ✓ Correct answer: A, B

   Holding the update at the deployment point is what turns a growing problem into a bounded one, and it is reversible once a corrected version is published. Recording which machines are affected and what the symptom is gives the scope, which decides how urgent the response is and provides the list to verify against afterwards. The rejected steps disable a control permanently, fix one machine while leaving the rest exposed, or wait for the problem to spread before acting.

   Why the other options are wrong

   • CDisabling updates permanently leaves flaws unpatched.
   • DThis leaves every other machine exposed.
   • EWaiting lets more machines take the update.
9. Question 9SecuritySelect all that apply

   A security incident is being communicated internally. Which TWO principles apply? (Select two.)

   • ASay what is known and what is not yet establishedCorrect
   • BFollow the organization's defined communication planCorrect
   • CSpeculate about the cause to reassure people quickly
   • DDiscuss details informally with anyone who asks
   • EWithhold everything until the investigation ends
   ✓ Correct answer: A, B

   Early information during an incident is incomplete, and saying plainly what is established and what is still being investigated keeps the account credible when it later changes, which speculation does not. Following the plan matters because it defines who speaks, to whom and when, and that is what prevents inconsistent messages, premature disclosure to people outside the response, and legal or regulatory obligations being missed. The rejected principles speculate, leak informally, or leave people with nothing.

   Why the other options are wrong

   • CSpeculation that proves wrong destroys credibility.
   • DInformal disclosure bypasses the plan and leaks.
   • ESilence leaves people unable to protect themselves.
10. Question 10Operating SystemsSelect all that apply

    A standard build is being defined for new machines. Which TWO items belong in it? (Select two.)

    • AThe applications and drivers every machine needsCorrect
    • BThe security settings the organization requiresCorrect
    • CEach individual user's personal documents
    • DEach user's saved browser passwords
    • EThe previous owner's profile and settings
    ✓ Correct answer: A, B

    Defining the applications and drivers once means every machine starts identical and supportable, which is the whole point of a standard build and what makes a rebuild a routine operation rather than a day's work. The security settings belong in it for the same reason: encryption, the firewall, the lock policy and account configuration should be present from first boot rather than applied afterwards if someone remembers. The rejected items are personal data that must never be in a shared image.

    Why the other options are wrong

    • CPersonal documents must never be in a shared image.
    • DCredentials in an image would be issued to everyone.
    • EA previous owner's profile has no place in a build.

Who this CompTIA A+ Core 2 (220-1202) practice exam is for

This practice set is for anyone preparing for the CompTIA A+ Core 2 (220-1202) exam - from first-time candidates building a foundation to experienced IT Support practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this CompTIA A+ Core 2 (220-1202) practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real CompTIA A+ Core 2 (220-1202) exam.

Related IT Support resources

• CompTIA A+ Core 2 (220-1202) study guideKey concepts
• IT Support practice examsAll IT Support
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• CompTIA A+ Core 1 (220-1201) practice examRelated
• CompTIA Network+ (N10-009) practice examRelated

CompTIA A+ Core 2 (220-1202) practice exam FAQ