CompTIA A+ Core 2 — All Questions

Which practice helps protect users from entering credentials on a fraudulent website that mimics a real one?

• a.Turning off automatic updates
• b.Disabling the firewall
• c.Reusing the same password everywhere
• d.Verifying the site's URL and valid HTTPS certificate✓

Checking the exact domain and confirming a valid HTTPS certificate helps users detect lookalike phishing sites before entering credentials. Disabling the firewall or reusing passwords increases risk rather than reducing it.

Which control ensures that a mobile device's data can be erased remotely if the device is lost or stolen?

• a.Disabling encryption
• b.Turning off the passcode
• c.A louder ringtone
• d.Remote wipe capability✓

Remote wipe lets an administrator or user erase a lost or stolen device's data over the network. Disabling encryption or the passcode would weaken protection, and ringtones are irrelevant to data safety.

A Windows PC repeatedly shows a blue screen (stop error) shortly after installing a new device driver. What is the best first troubleshooting step?

• a.Disable the antivirus permanently
• b.Immediately replace the motherboard
• c.Reinstall all applications
• d.Boot into Safe Mode and roll back or update the driver✓

Because the crashes began right after a driver install, booting into Safe Mode and rolling back or updating that driver directly targets the likely cause. Replacing hardware or reinstalling all apps is premature and disproportionate.

An application launches but immediately closes without an error message. Which tool can reveal a logged reason for the crash?

• a.Character Map
• b.Disk Cleanup
• c.Event Viewer✓
• d.Magnifier

Event Viewer records application and system errors, often capturing the faulting module or error code behind a silent crash. Disk Cleanup, Character Map, and Magnifier do not provide diagnostic crash logs.

A smartphone's battery drains unusually fast and the device runs hot even when idle. Which is a likely software-related cause to investigate first?

• a.A misbehaving or malicious app running in the background✓
• b.The screen resolution setting
• c.The charger cable color
• d.The phone case brand

A rogue or poorly optimized background app can consume CPU and radios continuously, draining the battery and generating heat. Checking battery usage stats to find the offending app is the logical first step.

Windows fails to reach the desktop and boots into automatic repair loops. Which recovery option lets a technician restore the system to an earlier known-good configuration without deleting personal files?

• a.Replace the CPU
• b.Reinstall Windows from scratch
• c.Format the drive
• d.System Restore✓

System Restore reverts system files, drivers, and registry settings to an earlier restore point while leaving personal files intact. A full reinstall or format would be more destructive and time-consuming.

A user reports that their web browser constantly redirects to unwanted sites and shows new toolbars they did not install. What is the most likely cause?

• a.A failing power supply
• b.A dead CMOS battery
• c.A browser hijacker or adware infection✓
• d.An incorrect monitor refresh rate

Unwanted redirects and unfamiliar toolbars are classic signs of a browser hijacker or adware. Hardware issues like a power supply, refresh rate, or CMOS battery would not cause browser redirection behavior.

A Windows computer is extremely slow, and Task Manager shows an unknown process using nearly 100% CPU. What should the technician do first?

• a.Reinstall Windows
• b.Research the process, then end it and run a malware scan✓
• c.Replace the hard drive
• d.Add more RAM immediately

Identifying the process and confirming whether it is legitimate, then ending it and scanning for malware, addresses the actual cause of high CPU use. Hardware changes or a reinstall are premature before diagnosing the process.

After a Windows update, a specific application no longer opens. Which approach best isolates whether the update caused the problem?

• a.Uninstall the recent update or use System Restore, then test the app✓
• b.Replace the RAM
• c.Reset the BIOS
• d.Buy a new computer

Removing the recent update or rolling back with System Restore and retesting directly tests the hypothesis that the update broke the app. This targeted change isolates the cause without unnecessary hardware work.

A mobile app repeatedly crashes on launch after the user has plenty of storage and a good connection. Which sequence of steps is most appropriate first?

• a.Root the device
• b.Factory reset the phone right away
• c.Force stop the app, clear its cache, then update or reinstall it✓
• d.Replace the battery

Force stopping, clearing the app cache, and updating or reinstalling resolves most single-app crashes with minimal disruption. A factory reset or rooting is far more drastic and should not be the first response.

A user cannot install updates and sees low-disk-space warnings on the Windows system drive. Which action most directly addresses the root cause?

• a.Disable the network adapter
• b.Change the desktop wallpaper
• c.Increase the monitor brightness
• d.Free up space with Disk Cleanup and remove unneeded files✓

Update failures tied to low disk space are resolved by freeing storage, for example with Disk Cleanup or by removing unneeded files. The other actions do not affect available disk space.

Several pop-ups appear even when no browser is open, and the antivirus has been mysteriously disabled. What is the most likely explanation?

• a.The monitor cable is loose
• b.The BIOS date is wrong
• c.The system is infected with malware✓
• d.The keyboard is failing

Pop-ups without a browser and a disabled antivirus strongly indicate a malware infection actively defending itself. Hardware or BIOS issues would not disable security software or generate advertising pop-ups.

When following best practices to remediate a malware infection, which step should be performed to prevent the malware from spreading or communicating while it is being removed?

• a.Increase the screen resolution
• b.Quarantine/disconnect the infected system from the network✓
• c.Reinstall Microsoft Office
• d.Defragment the drive

Isolating the machine from the network (quarantine) stops the malware from spreading or contacting command-and-control servers during remediation. Reinstalling Office or changing resolution does nothing to contain an infection.

A user's files suddenly have a strange extension and a note demands payment to restore them. What has most likely happened, and what is the safest recovery path?

• a.A ransomware infection; isolate the system and restore data from clean backups✓
• b.A driver conflict; update the driver
• c.A dead battery; replace it
• d.A failed update; reinstall the update

Renamed files plus a ransom note indicate ransomware. The safest recovery is to isolate the machine and restore from known-clean backups rather than pay. Driver or battery explanations do not match these symptoms.

A laptop touchscreen registers phantom touches and inputs the user did not make. After a reboot the issue persists in every app. What is a reasonable early software step before assuming hardware failure?

• a.Reinstall all user applications
• b.Reset the router
• c.Update or reinstall the touchscreen/digitizer driver and check for OS updates✓
• d.Immediately replace the display panel

Updating or reinstalling the digitizer driver and applying OS updates can resolve ghost-touch issues caused by software or firmware bugs. Only after software steps fail should hardware replacement be considered.

Which log-based Windows tool would best help a technician correlate a recurring application error with the exact time and error code each time it happens?

• a.Paint
• b.Sticky Notes
• c.Calculator
• d.Event Viewer✓

Event Viewer timestamps application and system events with error codes, allowing a technician to correlate a recurring crash with its cause. The other listed tools are simple accessories with no logging capability.

A Windows PC boots to a black screen with only a cursor after login. Which troubleshooting environment lets the technician load a minimal set of drivers to diagnose the issue?

• a.Screen saver settings
• b.Safe Mode✓
• c.UEFI firmware setup
• d.BIOS beep codes

Safe Mode starts Windows with a minimal set of drivers and services, helping determine whether a third-party driver or startup program causes the black screen. Firmware setup and beep codes address hardware, not this OS-level issue.

A user complains that the system time keeps resetting and secure websites report certificate errors. While often hardware-related, which quick check can rule out a simple software/setting cause?

• a.Verify the correct date, time, and time zone settings and enable automatic time sync✓
• b.Replace the RAM
• c.Reinstall the OS
• d.Replace the hard drive

Certificate errors frequently stem from an incorrect clock, so verifying date/time/time zone and enabling automatic synchronization is a fast software check. If the clock still resets after reboots, a dead CMOS battery may be the hardware cause.

An Android user side-loaded an app and now sees excessive ads and unexpected charges. What is the recommended remediation?

• a.Buy a new phone
• b.Upgrade the data plan
• c.Replace the SIM card
• d.Uninstall the suspicious app, run a mobile security scan, and review app permissions✓

Removing the side-loaded app, scanning for malware, and reviewing permissions targets the likely malicious source of ads and charges. Buying new hardware or changing the SIM does not remove the offending software.

A desktop application freezes frequently only when a specific large file is opened, while smaller files work fine. What is a sensible first hypothesis to test?

• a.The monitor is defective
• b.The specific file may be corrupt or too large for available memory✓
• c.The power supply is failing
• d.The keyboard driver is missing

Because only one large file triggers the freeze, testing whether that file is corrupt or exceeds available memory is a logical first step, such as opening a copy or checking resource usage. General hardware failures would affect all files.

During malware remediation best practices, when should the technician re-enable System Restore and create a fresh restore point?

• a.After the system is verified clean, to establish a new known-good point✓
• b.Before scanning, so restore points are preserved
• c.Never, System Restore must stay off
• d.Only if the antivirus fails

Best practice is to disable System Restore during cleanup so infected restore points are purged, then re-enable it and create a new restore point once the system is confirmed clean. Preserving infected restore points risks reinfection.

A user reports their phone's data usage spiked dramatically with no change in habits, and unfamiliar apps appeared. What is the most appropriate investigation?

• a.Replace the charging port
• b.Check data-usage per app, remove unknown apps, and scan for malware✓
• c.Turn off Bluetooth permanently
• d.Increase screen timeout

Reviewing per-app data usage, removing unrecognized apps, and scanning for malware targets a likely compromise causing the spike. Charging-port or Bluetooth changes are unrelated to unexplained data consumption.

A Windows system shows the message 'No boot device found' after being powered off normally. Which is the most appropriate first diagnostic step?

• a.Check boot order in firmware and verify the drive is detected✓
• b.Change the desktop theme
• c.Update the web browser
• d.Reinstall Microsoft Office

Verifying the firmware boot order and confirming the drive is detected isolates whether the boot device is missing or misordered before assuming corruption or hardware failure. Application or theme changes are irrelevant to booting.

Why is it important to maintain accurate, up-to-date documentation such as network diagrams and asset inventories?

• a.It speeds troubleshooting and supports consistent, informed decisions✓
• b.It replaces the need for backups
• c.It encrypts all network traffic
• d.It increases the monitor refresh rate

Accurate documentation helps technicians understand the environment quickly, reducing troubleshooting time and supporting good decisions. It does not encrypt traffic, change hardware behavior, or substitute for backups.

In a formal change-management process, what should be prepared in case a change causes unexpected problems in production?

• a.A faster CPU
• b.A rollback (back-out) plan✓
• c.A brighter display
• d.A louder alarm

A rollback or back-out plan defines how to revert a change safely if it fails, minimizing downtime. It is a core part of responsible change management and unrelated to hardware upgrades or alarms.

Which safety practice protects sensitive electronic components from static discharge while a technician works inside a computer?

• a.Turning up the room heat
• b.Working on a carpet
• c.Wearing rubber-soled shoes only
• d.Using an anti-static (ESD) wrist strap connected to ground✓

An ESD wrist strap connected to ground equalizes charge and prevents static from damaging components. Carpet actually increases static risk, and shoe type or room temperature does not provide reliable ESD protection.

According to standard change management, what must typically happen before a significant change is implemented in a production environment?

• a.A social media post
• b.Documented request, risk analysis, and approval by the change board✓
• c.Only the technician's verbal note
• d.Nothing; changes are made immediately

Significant changes generally require a documented request, risk assessment, and formal approval before implementation to control impact. Making changes without review or approval undermines stability and accountability.

Which document defines the acceptable ways employees may use company computers, networks, and internet access?

• a.Bill of materials
• b.Purchase order
• c.Acceptable Use Policy (AUP)✓
• d.Network diagram

An Acceptable Use Policy specifies permitted and prohibited uses of company IT resources. A network diagram maps topology and a bill of materials lists parts, neither of which governs user behavior.

When handling a customer's confidential data during a repair, which behavior best respects privacy and professional conduct?

• a.Posting screenshots online
• b.Sharing interesting files with coworkers
• c.Accessing only what is necessary and keeping the data confidential✓
• d.Copying personal photos for yourself

Professionals should access only the data required for the task and keep customer information confidential. Sharing, posting, or copying personal data violates privacy expectations and ethical standards.

Which fire extinguisher class is appropriate for electrical fires involving energized equipment?

• a.Class B (flammable liquids)
• b.Class C (electrical)✓
• c.Class A (ordinary combustibles)
• d.Class K (cooking oils)

Class C extinguishers are rated for fires in energized electrical equipment and use a non-conductive agent. Class A is for ordinary combustibles and Class B for flammable liquids, which are unsafe on live electrical fires.

Which scripting file type is native to Windows and commonly used to automate administrative tasks with cmdlets?

• a..ps1 (PowerShell)✓
• b..py (Python) only
• c.VBScript only
• d..sh (Bash)

PowerShell scripts (.ps1) use cmdlets and are the native automation language for Windows administration. Bash (.sh) is native to Linux/Unix. Python and VBScript can be used but .ps1 is the Windows-native choice described.

What is the primary purpose of a knowledge base or ticketing system in an IT support environment?

• a.To overclock the CPU
• b.To encrypt hard drives
• c.To track issues and share documented solutions for consistency✓
• d.To replace the firewall

A knowledge base and ticketing system record incidents and proven solutions, enabling consistent, efficient support and knowledge sharing. They do not perform encryption, overclocking, or firewall functions.

When lifting a heavy piece of equipment such as a large UPS or printer, which technique reduces the risk of injury?

• a.Bend at the waist and twist while lifting
• b.Lift as quickly as possible
• c.Lift with your legs, keep your back straight, and hold the load close✓
• d.Carry it one-handed

Proper lifting means bending the knees, keeping the back straight, using the leg muscles, and holding the load close to the body. Bending at the waist and twisting greatly increases the chance of back injury.

Which document is typically required before disposing of batteries, toner cartridges, or other chemicals to ensure proper handling?

• a.A network diagram
• b.A change request form
• c.An acceptable use policy
• d.A Safety Data Sheet (SDS)✓

A Safety Data Sheet (SDS) provides handling, storage, and disposal guidance for hazardous materials like batteries and toner. Network diagrams and change requests do not address chemical safety or disposal.

Which regulated data type requires special handling under privacy rules and should never be exposed carelessly during support work?

• a.Public marketing brochures
• b.Press releases
• c.Personally identifiable information (PII) and healthcare data (PHI)✓
• d.Open-source code

PII and PHI are protected categories subject to privacy regulations and must be safeguarded from unauthorized disclosure. Public brochures, open-source code, and press releases are not confidential regulated data.

In change management, what is the purpose of documenting the 'scope' of a proposed change?

• a.To brighten the display
• b.To define exactly what will and will not be affected✓
• c.To disable the firewall
• d.To increase the clock speed

Defining scope clarifies which systems, users, and processes the change affects and which it does not, guiding testing and communication. It has nothing to do with clock speed, firewalls, or display brightness.

Which environmental control helps protect data-center equipment from damage caused by static electricity and overheating?

• a.Removing all air filtration
• b.Maintaining proper temperature and humidity levels✓
• c.Storing equipment in direct sunlight
• d.Increasing dust accumulation

Controlled temperature and humidity reduce both overheating and static-discharge risk, protecting equipment. Excess heat, sunlight, dust, or overly dry air all increase the likelihood of hardware damage.

What is a key reason to use a change board or approval step rather than letting any technician change production systems freely?

• a.It encrypts the network
• b.It reviews risk and reduces unplanned outages✓
• c.It removes the need for backups
• d.It makes the CPU faster

A review or approval step evaluates risk, dependencies, and timing, reducing the chance of unplanned outages from uncoordinated changes. It does not affect CPU speed, backups, or encryption directly.

Which basic scripting construct repeats a block of instructions until a condition is met, and is fundamental to automation?

• a.A comment
• b.A file path
• c.A loop✓
• d.A variable

A loop repeats instructions until a condition is satisfied, letting a script automate repetitive work. A variable stores a value and a comment documents code, but neither performs repetition on its own.

When a customer becomes upset during a support interaction, which professional communication practice is most appropriate?

• a.Listen actively, stay calm, and avoid arguing or being defensive✓
• b.Walk away without explanation
• c.Interrupt and raise your voice
• d.Blame the customer

Active listening, staying calm, and not arguing help de-escalate tension and maintain professionalism. Interrupting, blaming, or abandoning the customer damages trust and violates good conduct standards.

Which purpose does a 'bill of materials' (BOM) or asset inventory serve in IT operations?

• a.It measures Wi-Fi signal strength
• b.It encrypts the hard drive
• c.It configures the firewall
• d.It lists components or assets and their details for tracking and procurement✓

A bill of materials or asset inventory itemizes components or devices with relevant details, supporting tracking, procurement, and lifecycle management. It does not measure signal strength or configure security controls.

Under change management, why should a change include a documented 'end-user acceptance' or verification step after implementation?

• a.To increase RAM automatically
• b.To confirm the change works as intended and the issue is resolved✓
• c.To disable logging
• d.To overclock the GPU

Verifying end-user acceptance confirms the change achieved its goal and did not introduce new problems before the change is closed. It does not alter hardware or logging by itself.

Which environmental and safety consideration applies when using compressed air to clean dust from a computer?

• a.Spray directly into spinning fans at full speed
• b.Use short bursts, keep the can upright, and hold fans still to avoid over-spinning✓
• c.Use it while the unit is powered on and open
• d.Shake and heat the can first

Compressed air should be used in short bursts with the can upright, and fans should be held still so they do not over-spin and get damaged. Powering on the unit or forcing fans to spin can cause damage or injury.

What is the main benefit of following a standardized incident-response and documentation procedure during a security event?

• a.Brighter monitors
• b.Faster internet speeds
• c.Lower electricity bills
• d.Consistent handling, proper evidence preservation, and clear communication✓

A standardized procedure ensures incidents are handled consistently, evidence is preserved for possible investigation, and stakeholders are informed. It is unrelated to internet speed, display brightness, or utility costs.

When disposing of old electronics, which approach aligns with environmental regulations and responsible practice?

• a.Recycle through certified e-waste programs and follow local regulations✓
• b.Throw them in regular household trash
• c.Burn them to save space
• d.Bury them in a backyard

Certified e-waste recycling handles hazardous components properly and complies with regulations. Household trash, burying, or burning electronics can release toxic materials and violate environmental laws.

Which practice best supports accountability when multiple technicians manage the same systems over time?

• a.Using one shared, undocumented login
• b.Keeping a change log and updated documentation of who changed what and when✓
• c.Deleting logs weekly
• d.Skipping all records

A change log and current documentation record who made each change and when, supporting accountability and troubleshooting. Shared undocumented logins and deleted logs destroy the audit trail and hinder accountability.

Before performing maintenance that may cause downtime, what professional step should a technician take regarding affected users?

• a.Disable their accounts permanently
• b.Communicate the planned maintenance window and expected impact in advance✓
• c.Say nothing and hope no one notices
• d.Change the wallpaper first

Notifying affected users of the maintenance window and expected impact sets expectations and reduces disruption complaints. Staying silent or disabling accounts is unprofessional and harms trust.

Which practice ensures that a critical account remains protected even if its password is exposed in a data breach elsewhere?

• a.Enabling multifactor authentication and using a unique password✓
• b.Reusing the same password across sites
• c.Writing the password in a shared document
• d.Disabling the login screen

A unique password combined with multifactor authentication means a password leaked from another site cannot alone unlock the account. Reusing passwords or sharing them in documents spreads the risk of a single breach.

A Windows PC intermittently loses its network connection only over Wi-Fi, while wired devices stay online. Which is a reasonable early software step?

• a.Replace the monitor
• b.Replace the motherboard
• c.Update the wireless adapter driver and check power-management settings for the adapter✓
• d.Reinstall the operating system

Updating the wireless driver and disabling aggressive power-saving on the adapter often resolves intermittent Wi-Fi drops caused by software or firmware. Reinstalling the OS or replacing hardware is premature before these checks.

Which practice best protects customer privacy when a technician must step away from a workstation that displays sensitive information?

• a.Lock the screen so credentials are required to resume✓
• b.Leave it unlocked for convenience
• c.Increase the brightness
• d.Post the password nearby

Locking the screen prevents unauthorized viewing or use of sensitive data while the technician is away. Leaving it unlocked or posting the password exposes confidential information and violates privacy best practices.