220-1102 practice questions 171–180

1. Question 171 · 683 in bank

   A technician needs to remotely connect to a Linux desktop to assist a user with troubleshooting. The technician needs to make use of a tool natively designed for Linux. Which of the following tools will the technician MOST likely use?

   • AVNC
   • BMFA
   • CMSRA
   • DRDP

   Show answer

   Answer: A

   Explanation

   VNC stands for Virtual Network Computing. It is a cross-platform screen sharing system that was created to remotely control another computer. A is correct.

   Source: Adapted from community discussion — ozil786

   Next question

2. Question 172 · 683 in bank

   A technician is preparing to remediate a Trojan virus that was found on a workstation. Which of the following steps should the technician complete BEFORE removing the virus?

   • ADisable System Restore.
   • BSchedule a malware scan.
   • CEducate the end user.
   • DRun Windows Update.

   Show answer

   Answer: A

   Explanation

   System Restore can restore the files that were erased during the virus removal process, so it is important to disable it before removing the virus.

   Source: Adapted from community discussion — dcv1337

   Next question

3. Question 173 · 683 in bank

   Select 2

   Which of the following options should MOST likely be considered when preserving data from a hard drive for forensic analysis? (Choose two.)

   • ALicensing agreements
   • BChain of custody
   • CIncident management documentation
   • DData integrity
   • EMaterial safety data sheet
   • FRetention requirements

   Show answer

   Answer: BD

   Explanation

   BD, Chain of custody to determine who has touched the evidence. Data integrity for keeping the data safe for evaluation.

   Source: Adapted from community discussion — kekejon

   Next question

4. Question 174 · 683 in bank

   Select 2

   Which of the following would MOST likely be deployed to enhance physical security for a building? (Choose two.)

   • AMultifactor authentication
   • BBadge reader
   • CPersonal identification number
   • DFirewall
   • EMotion sensor
   • FSoft token

   Show answer

   Answer: BE

   Explanation

   B. Badge reader: Badge readers are commonly used for physical access control. They require authorized individuals to present a valid badge or access card to gain entry to a building or specific areas within it. E. Motion sensor: Motion sensors are used to detect movement in and around a building. They can trigger alarms, surveillance systems, or lighting based on detected motion, helping to deter unauthorized access or intruders.

   Source: Adapted from community discussion — Andylove

   Next question

5. Question 175 · 683 in bank

   A technician, who is working at a local office, has found multiple copies of home edition software installed on computers. Which of the following does this MOST likely violate?

   • AEULA
   • BPII
   • CDRM
   • DOpen-source agreement

   Show answer

   Answer: A

   Explanation

   taken from EULA: Under this agreement, we grant you the right to install and run one instance of the software on your device (the licensed device), for use by one person at a time. so answer is A EULA

   Source: Adapted from community discussion — Maghribiya

   Next question

6. Question 176 · 683 in bank

   A user tries to access commonly used web pages but is redirected to unexpected websites. Clearing the web browser cache does not resolve the issue. Which of the following should a technician investigate NEXT to resolve the issue?

   • AEnable firewall ACLs.
   • BExamine the localhost file entries.
   • CVerify the routing tables.
   • DUpdate the antivirus definitions.

   Show answer

   Answer: B

   Explanation

   for resolving the issue of unexpected website redirections is to examine the localhost file entries (option B). The hosts file contains mappings of domain names to IP addresses, and any suspicious or unauthorized entries in this file could be causing the redirection. Investigating and correcting any problematic entries in the hosts file may help resolve the issue.

   Source: Adapted from community discussion — Mamad66

   Next question

7. Question 177 · 683 in bank

   Which of the following features must be configured on a Windows OS desktop in order to encrypt files in a laptop?

   • AHDD drivers
   • BBitLocker
   • CBoot settings
   • DRAID

   Show answer

   Answer: B

   Next question

8. Question 178 · 683 in bank

   A manager called the help desk to ask for assistance with creating a more secure environment for the finance department, which resides in a non-domain environment. Which of the following would be the BEST method to protect against unauthorized use?

   • AImplementing password expiration
   • BRestricting user permissions
   • CUsing screen locks
   • DDisabling unnecessary services

   Show answer

   Answer: B

   Explanation

   B. Restricting user permissions In a non-domain environment where centralized user management and policies are limited, the most effective method to protect against unauthorized use is to restrict user permissions. By employing the principle of least privilege, users are given only the minimum levels of access necessary to perform their job functions. This helps minimize the risk of unauthorized access and potential misuse of sensitive financial data.

   Source: Adapted from community discussion — kekejon

   Next question

9. Question 179 · 683 in bank

   An incident handler needs to preserve evidence for possible litigation. Which of the following will the incident handler MOST likely do to preserve the evidence?

   • AEncrypt the files.
   • BClone any impacted hard drives.
   • CContact the cyber insurance company.
   • DInform law enforcement.

   Show answer

   Answer: B

   Explanation

   B And as the first responder, you may be responsible for collecting any evidence and ensuring that no evidence is destroyed during this process. It’s very common when collecting this evidence to get a copy of any storage drives. When taking this evidence, we’re not simply copying the files, we’re copying every single bit of information from that storage drive. You’ll sometimes hear this referred to as a bit-for-bit copy or a byte-for-byte copy. That means you’re not only collecting all of the files, you’re also collecting anything else that might be on that storage device. We’ll sometimes perform this drive copy by physically removing the drive from the device. We will then connect it to a hardware write blocker that would prevent anything from changing the data that’s on that storage drive. We can then make a copy of that drive by using a hardware copying device or by using software imaging tools that can create the copy for us Professor ¨GOD¨ Messer

   Source: Adapted from community discussion — paobro

   Next question

10. Question 180 · 683 in bank

    A Windows workstation that was recently updated with approved system patches shut down instead of restarting. Upon reboot, the technician notices an alert stating the workstation has malware in the root OS folder. The technician promptly performs a System Restore and reboots the workstation, but the malware is still detected. Which of the following BEST describes why the system still has malware?

    • AA system patch disabled the antivirus protection and host firewall.
    • BThe system updates did not include the latest anti-malware definitions.
    • CThe system restore process was compromised by the malware.
    • DThe malware was installed before the system restore point was created.

    Show answer

    Answer: D

    Explanation

    If the malware was present on the system before the creation of the system restore point, performing a system restore will not remove the malware. System restore points capture a snapshot of the system at a specific point in time, including files and settings. If the malware was already on the system when the restore point was created, it will be retained during the restoration process.

    Source: Adapted from community discussion — sam3210

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

220-1102 practice, question 171. 683 questions available.