Medium 220-1202 practice questions

A company wants to track exactly which employee logged into any workstation and when, using a single centralized set of credentials rather than local accounts on each machine. The IT manager also wants failed and successful login attempts recorded in one place for auditing. Which approach best meets these requirements?

A small office wants to allow only a specific set of company laptops and printers to connect to its wireless network. The manager does not want to purchase a RADIUS server and only has about a dozen devices to manage. Which additional wireless setting can the technician configure on the SOHO router to help restrict access to only these known devices?

A company receives a shipment of 40 new laptops that will be distributed to employees over the next few weeks. Before the devices leave the IT storage room, the manager wants a reliable way to track each unit's location, assigned user, warranty status, and configuration throughout its lifecycle. Which action best supports this requirement?

A small accounting firm currently keeps nightly backups on an external USB drive that stays connected to the server in the same office. After a recent ransomware near-miss, the IT technician is asked to redesign the backup strategy to follow the 3-2-1 rule. Which change would BEST bring the firm into compliance with that rule?

A company runs automated nightly backups to a network-attached storage device, and the backup software reports 'success' every morning. During a recent server failure, the IT team discovered that several restored files were corrupted and unusable. Which change to their backup procedures would most directly prevent this situation in the future?

A company wants to strengthen logon security on shared workstations in a lab. Currently users log in with a username and password. Management asks IT to add a second authentication factor that verifies 'something you are.' Which additional authentication method should IT deploy to meet this requirement?

A technician is enabling BitLocker on the C: drive of a Windows 11 Pro laptop that has a TPM 2.0 chip. The company policy requires that if the drive is ever moved to another machine or the TPM detects tampering, the data must remain recoverable by IT but not by the end user. Where should the technician store the BitLocker recovery key to best meet this policy?

A user reports that their web browser suddenly displays constant pop-up ads, redirects searches to an unfamiliar engine, and shows a new toolbar they never installed. A full Windows Defender scan comes back clean. Which action should the technician take FIRST to resolve the issue?

A user reports that while browsing, a full-screen popup appeared claiming the computer is infected with 47 viruses and displaying a phone number to call for immediate 'Microsoft-certified' removal support. The browser will not close normally. What is the BEST first action for the technician to take?

A systems administrator wants to deploy a major firmware update to all network switches during business hours. Before making the change, which step should occur FIRST according to change-management best practices?

A technician has completed testing a major ERP software upgrade in a sandbox environment and the change advisory board has approved it. Before the change request can be formally closed as successful after deployment to production, which step should be performed to confirm the change achieved its intended goal?

A technician has prepared a request to upgrade the firmware on the company's core switch during the weekend maintenance window. The change advisory board reviews the request and approves the purpose, scope, and scheduled time, but returns it because one critical component of a complete change-management plan is missing. Which element should the technician add before the change can proceed?

A technician is preparing a formal change request to migrate a department's file server to new hardware over the weekend. The change board asks the technician to complete a section that precisely defines which systems, users, and services will be affected by the migration, and what is explicitly excluded. Which section of the change request is the technician being asked to complete?

A retail company wants to deploy 50 inexpensive devices at store entrances that will only run a single web-based check-in application. The IT manager wants devices that boot quickly, require minimal maintenance, receive automatic updates, and store almost nothing locally since everything runs in the browser. Which operating system best fits these requirements?

A technician is performing a clean installation of Windows 11 on a new internal SSD in a workstation. During setup, the technician wants to ensure the primary partition uses the file system that supports features like file-level permissions, encryption (EFS), and journaling. Which file system should the technician select when formatting the partition?

A technician resolves a slow-boot issue for a non-technical accountant by disabling several unnecessary startup entries. When the user asks what was done, the technician wants to maintain professionalism and ensure the user understands. Which approach best reflects proper communication techniques?

A company is decommissioning several old servers that contain mechanical hard drives storing highly sensitive financial records. Policy requires that the drives be rendered permanently unusable and unrecoverable before disposal, but the IT team does not have time to run multi-pass software wipes on each drive. Which method BEST meets this requirement?

While hardening a new Windows 10 Pro workstation for a small accounting firm, a technician reviews the Local Users and Groups console. Company policy requires that only named, authenticated employees can access the system and that all activity be traceable to an individual. Which action should the technician take to best support this requirement?

A user on a shared Windows 10 Pro workstation wants to protect a single sensitive spreadsheet so that other standard users who log into the same PC cannot open it, even though they can browse to the folder. The drive is not encrypted with BitLocker and the company does not want to encrypt the whole volume. Which built-in Windows feature should the technician use to encrypt just that file?

A technician is preparing to install new RAM modules into a desktop computer at a customer's office. The room has carpeted floors and low humidity. Which action should the technician take FIRST to minimize the risk of damaging the components?

A company is retiring 40 Android smartphones that will be sold to a third-party recycler. The devices contain corporate email, cached credentials, and saved documents. Management wants to ensure that no company data can be recovered by the new owners while keeping the devices fully functional for resale. Which action best meets these requirements?

A technician at a company that sells products online receives a written request from a customer in Germany asking that all of their personal data be permanently deleted from the company's systems. The company processes orders and stores customer records in a database. Which regulation most directly governs how the company must respond to this request?

A user reports that a web application server on their Windows workstation fails to start, showing an error that port 8080 is already in use. You need to identify which running process is currently bound to that port so you can stop it. Which command should you run from the command prompt?

A technician needs to move a group of workstations from Windows 10 Pro to Windows 11 Pro. Management requires that all installed applications, user files, and system settings remain intact after the migration, with minimal user downtime. The hardware already meets the Windows 11 requirements. Which installation method should the technician use?

A technician is dispatched to a workstation suspected of being involved in the leak of confidential company files. As the technician investigates, which action is the MOST important to perform throughout the incident-response process to protect the integrity of any future investigation or legal proceedings?