CompTIA 220-1201 Practice Test 22
Question 210
At Harborworks, a technician working in small-office network service desk identifies this issue: An administrator needs secure terminal access to a managed switch over an untrusted support network. The supporting record states that the current remote management procedure uses unencrypted Telnet on TCP 23. The desired outcome is to choose encrypted terminal management over a cleartext terminal protocol. Only approved service procedures and compatible replacement components may be used. How should the solution first be tested on an approved spare or pilot system?
- Issue a permitted test query that triggers a TCP retry after a truncated UDP response
- Open a test SSH session to a lab switch and inspect the encrypted connection
- Pilot guest-to-payroll denial and an authorized remote VPN session independently
- Perform a controlled lease renewal from a test client with packet capture
Explanation
Correct Answer
B:
Open a test SSH session to a lab switch and inspect the encrypted connection. It tests the proposed solution safely on an approved representative system. The relevant observation is that the current remote management procedure uses unencrypted Telnet on TCP 23. The support goal is to choose encrypted terminal management over a cleartext terminal protocol; this pilot action specifically addresses ssh encrypted administration instead of telnet without confusing a different subsystem.
Incorrect Answers
A:
Issue a permitted test query that triggers a TCP retry after a truncated UDP response. This action is appropriate for dns service transport and port 53, normally when a branch resolver answers ordinary UDP name queries but large signed responses fail. Here the observed facts require ssh encrypted administration instead of telnet instead.
C:
Pilot guest-to-payroll denial and an authorized remote VPN session independently. This action is appropriate for vlan segmentation versus vpn encrypted tunneling, normally when a small office needs guest Wi-Fi isolated from payroll devices but also needs secure remote employee access. Here the observed facts require ssh encrypted administration instead of telnet instead.
D:
Perform a controlled lease renewal from a test client with packet capture. This action is appropriate for dhcp client and server port roles, normally when a new PC never receives an IPv4 lease on its office VLAN. Here the observed facts require ssh encrypted administration instead of telnet instead.
Question 211
At Horizon College, a technician working in IT virtualization planning identifies this issue: A small business wants a hosted database platform but not responsibility for patching the underlying database server OS. The supporting record states that the provider offers managed databases, raw virtual machines and a complete customer-facing business app. The desired outcome is to select a service model based on who manages runtime infrastructure. Any configuration change must be reversible and validated on a controlled test device. Which verification result supports the intended technical outcome?
- Verify instances increase under load and decrease after demand subsides
- Verify the stated legacy service stays private while the public component communicates only over approved paths
- Verify the customer can create databases without administering host OS patching
- Verify one tenant cannot view the other's data without assuming the physical servers are dedicated
Explanation
Correct Answer
C:
Verify the customer can create databases without administering host OS patching. It proves the required function with an observable result instead of assuming the change worked. The relevant observation is that the provider offers managed databases, raw virtual machines and a complete customer-facing business app. The support goal is to select a service model based on who manages runtime infrastructure; this validate action specifically addresses iaas versus paas versus saas ownership without confusing a different subsystem.
Incorrect Answers
A:
Verify instances increase under load and decrease after demand subsides. This action is appropriate for cloud elasticity versus fixed provisioning, normally when an online storefront sees traffic triple for two hours and then fall back to normal. Here the observed facts require iaas versus paas versus saas ownership instead.
B:
Verify the stated legacy service stays private while the public component communicates only over approved paths. This action is appropriate for public versus private versus hybrid cloud, normally when an enterprise must keep one legacy regulatory workload in its own datacenter while scaling an unrelated web front end in a public provider. Here the observed facts require iaas versus paas versus saas ownership instead.
D:
Verify one tenant cannot view the other's data without assuming the physical servers are dedicated. This action is appropriate for multitenancy versus dedicated cloud resources, normally when an organization uses a SaaS platform shared with several customer organizations. Here the observed facts require iaas versus paas versus saas ownership instead.
Question 212
A support request at Amberline Finance presents this problem: A laptop screen looks black but a flashlight reveals a faint intact desktop image. The supporting record states that an external display works and the built-in LCD image exists without sufficient illumination. The desired outcome is to distinguish backlight or power-circuit failure from GPU rendering failure. Any configuration change must be reversible and validated on a controlled test device. Which safe pilot action gives the most relevant evidence?
- Swap only the display cable on a known-good test monitor
- Renew a test client's lease after repairing the permitted DHCP relay
- Use a safe test presentation and cycle between known connected projector inputs
- Test a compatible known-good panel with safe power isolation
Explanation
Correct Answer
D:
Test a compatible known-good panel with safe power isolation. It tests the proposed solution safely on an approved representative system. The relevant observation is that an external display works and the built-in LCD image exists without sufficient illumination. The support goal is to distinguish backlight or power-circuit failure from GPU rendering failure; this pilot action specifically addresses backlight failure on laptop lcd without confusing a different subsystem.
Incorrect Answers
A:
Swap only the display cable on a known-good test monitor. This action is appropriate for intermittent monitor image due to video cable, normally when a monitor intermittently goes black when its display cable is moved. Here the observed facts require backlight failure on laptop lcd instead.
B:
Renew a test client's lease after repairing the permitted DHCP relay. This action is appropriate for dhcp failure and 169.254 apipa symptom, normally when an office PC obtains a 169.254 address and cannot reach internet destinations. Here the observed facts require backlight failure on laptop lcd instead.
C:
Use a safe test presentation and cycle between known connected projector inputs. This action is appropriate for projector wrong input versus computer failure, normally when a conference room projector displays a no-signal message while the laptop works locally. Here the observed facts require backlight failure on laptop lcd instead.
Question 213
During Summit Media's small-office network service desk, the technician encounters this condition: A small office workstation has 192.168.10.80/24 and a gateway incorrectly set to 192.168.11.1. The supporting record states that its peers on 192.168.10.0/24 respond but the default router resides at 192.168.10.1. The desired outcome is to select an on-link default gateway matching the client subnet. The customer requires a verified fix rather than a guess based on one symptom. Which planned change most directly resolves the documented issue?
- Deploy an appropriate load balancer with health probes for the supported service
- Restore correct DHCP reachability rather than treating the APIPA address as a routable internet address
- Configure the reachable 192.168.10.1 gateway on the office client
- Use supported WPA3-Personal or appropriate WPA2-AES compatibility with strong credentials and retire WEP
Explanation
Correct Answer
C:
Configure the reachable 192.168.10.1 gateway on the office client. It corrects the documented cause using the compatible technology and support constraints. The relevant observation is that its peers on 192.168.10.0/24 respond but the default router resides at 192.168.10.1. The support goal is to select an on-link default gateway matching the client subnet; this design action specifically addresses ipv4 subnet mask and gateway selection without confusing a different subsystem.
Incorrect Answers
A:
Deploy an appropriate load balancer with health probes for the supported service. This action is appropriate for load balancer versus proxy server functions, normally when a web service needs requests distributed across three application servers with failed nodes removed automatically. Here the observed facts require ipv4 subnet mask and gateway selection instead.
B:
Restore correct DHCP reachability rather than treating the APIPA address as a routable internet address. This action is appropriate for apipa 169.254.x.x missing dhcp lease, normally when a SOHO laptop automatically assigns itself 169.254.42.19 with a 255.255.0.0 mask. Here the observed facts require ipv4 subnet mask and gateway selection instead.
D:
Use supported WPA3-Personal or appropriate WPA2-AES compatibility with strong credentials and retire WEP. This action is appropriate for soho wireless wpa security setup, normally when a small office access point still allows WEP while newer managed clients support WPA3-Personal. Here the observed facts require ipv4 subnet mask and gateway selection instead.
Question 214
On a service ticket for Crescent Operations, the team observes: A support call reveals a default route points to a host outside the user's /24 network. The desired outcome is to select an on-link default gateway matching the client subnet. A safe non-destructive test must be used before replacing additional parts. Which configuration or repair action best addresses the stated requirement?
- Use supported WPA3-Personal or appropriate WPA2-AES compatibility with strong credentials and retire WEP
- Configure the reachable 192.168.10.1 gateway on the office client
- Restore correct DHCP reachability rather than treating the APIPA address as a routable internet address
- Restore DHCP server or relay reachability rather than assigning random static client addresses
Explanation
Correct Answer
B:
Configure the reachable 192.168.10.1 gateway on the office client. It corrects the documented cause using the compatible technology and support constraints. The relevant observation is that a support call reveals a default route points to a host outside the user's /24 network. The support goal is to select an on-link default gateway matching the client subnet; this design action specifically addresses ipv4 subnet mask and gateway selection without confusing a different subsystem.
Incorrect Answers
A:
Use supported WPA3-Personal or appropriate WPA2-AES compatibility with strong credentials and retire WEP. That action is appropriate for soho wireless wpa security setup, normally when a small office access point still allows WEP while newer managed clients support WPA3-Personal. Here the observed facts require ipv4 subnet mask and gateway selection instead.
C:
Restore correct DHCP reachability rather than treating the APIPA address as a routable internet address. That action is appropriate for apipa 169.254.x.x missing dhcp lease, normally when a SOHO laptop automatically assigns itself 169.254.42.19 with a 255.255.0.0 mask. Here the observed facts require ipv4 subnet mask and gateway selection instead.
D:
Restore DHCP server or relay reachability rather than assigning random static client addresses. This action is appropriate for dhcp client and server port roles, normally when a new PC never receives an IPv4 lease on its office VLAN. Here the observed facts require ipv4 subnet mask and gateway selection instead.
Question 215
During Silverline Travel's small-office network service desk, the technician encounters this condition: A branch resolver answers ordinary UDP name queries but large signed responses fail. The supporting record states that the firewall permits UDP 53 while blocking TCP 53 between clients and the resolver. The desired outcome is to recognize that DNS may require both UDP and TCP transport on port 53. Service work must follow power isolation, ESD, and manufacturer instructions when applicable. How should the solution first be tested on an approved spare or pilot system?
- Issue a permitted test query that triggers a TCP retry after a truncated UDP response
- Open a test SSH session to a lab switch and inspect the encrypted connection
- Perform a controlled lease renewal from a test client with packet capture
- Test TCP 445 and open a harmless authorized file on a staging share
Explanation
Correct Answer
A:
Issue a permitted test query that triggers a TCP retry after a truncated UDP response. It tests the proposed solution safely on an approved representative system. The relevant observation is that the firewall permits UDP 53 while blocking TCP 53 between clients and the resolver. The support goal is to recognize that DNS may require both UDP and TCP transport on port 53; this pilot action specifically addresses dns service transport and port 53 without confusing a different subsystem.
Incorrect Answers
B:
Open a test SSH session to a lab switch and inspect the encrypted connection. This action is appropriate for ssh encrypted administration instead of telnet, normally when an administrator needs secure terminal access to a managed switch over an untrusted support network. Here the observed facts require dns service transport and port 53 instead.
C:
Perform a controlled lease renewal from a test client with packet capture. That action is appropriate for dhcp client and server port roles, normally when a new PC never receives an IPv4 lease on its office VLAN. Here the observed facts require dns service transport and port 53 instead.
D:
Test TCP 445 and open a harmless authorized file on a staging share. That action is appropriate for smb file sharing port versus rdp, normally when a user can ping a shared Windows file server but cannot map a network share. Here the observed facts require dns service transport and port 53 instead.
Question 216
A support request at Beacon Group presents this problem: An artist can tap with a passive stylus but cannot use pressure-sensitive annotation on a tablet. The desired outcome is to select the accessory matching digitizer features rather than the touch surface alone. User data and business service continuity must be preserved. What should the technician verify first to establish the problem?
- Inspect supported app management features, existing policy assignment and ownership model
- Check device and cable specifications for DisplayPort Alternate Mode, Thunderbolt or USB4 video support
- Compare laptop USB-C video modes, dock Power Delivery wattage, and supported display count and resolution
- Check the convertible's active pen standard and supported pressure or hover features
Explanation
Correct Answer
D:
Check the convertible's active pen standard and supported pressure or hover features. It checks the likely failure boundary before altering working parts or settings. The relevant observation is that an artist can tap with a passive stylus but cannot use pressure-sensitive annotation on a tablet. The support goal is to select the accessory matching digitizer features rather than the touch surface alone; this diagnose action specifically addresses active stylus digitizer compatibility without confusing a different subsystem.
Incorrect Answers
A:
Inspect supported app management features, existing policy assignment and ownership model. This action is appropriate for byod mobile application management, normally when staff use personally owned phones to read corporate mail but refuse full device enrollment. Here the observed facts require active stylus digitizer compatibility instead.
B:
Check device and cable specifications for DisplayPort Alternate Mode, Thunderbolt or USB4 video support. This action is appropriate for usb-c connector versus supported protocol, normally when a user assumes every laptop USB-C port can send video to a USB-C monitor. Here the observed facts require active stylus digitizer compatibility instead.
C:
Compare laptop USB-C video modes, dock Power Delivery wattage, and supported display count and resolution. This action is appropriate for docking station display and power capability, normally when a small-business employee connects two monitors and power to a laptop through a new USB-C dock. Here the observed facts require active stylus digitizer compatibility instead.
Question 217
During Fountain Transport's laptop and mobile device repair, the technician encounters this condition: Staff use personally owned phones to read corporate mail but refuse full device enrollment. The supporting record states that the employer needs to protect work app data while leaving personal photos and apps outside corporate control. The desired outcome is to apply supported corporate application controls with appropriate privacy scope. The technician must document observations separately from assumptions. Which configuration or repair action best addresses the stated requirement?
- Use available app-level protection policies for corporate data instead of assuming whole-device ownership
- Back up and verify recoverability before replacing with a compatible SSD and re-enabling supported encryption
- Install the authorized eSIM profile and select the correct plan for cellular data
- Configure both clients to use the approved corporate calendar and contacts service
Explanation
Correct Answer
A:
Use available app-level protection policies for corporate data instead of assuming whole-device ownership. It corrects the documented cause using the compatible technology and support constraints. The relevant observation is that the employer needs to protect work app data while leaving personal photos and apps outside corporate control. The support goal is to apply supported corporate application controls with appropriate privacy scope; this design action specifically addresses byod mobile application management without confusing a different subsystem.
Incorrect Answers
B:
Back up and verify recoverability before replacing with a compatible SSD and re-enabling supported encryption. This action is appropriate for laptop ssd replacement and encryption, normally when a laptop SSD is failing SMART health checks and holds company data protected with full-disk encryption. Here the observed facts require byod mobile application management instead.
C:
Install the authorized eSIM profile and select the correct plan for cellular data. This action is appropriate for mobile esim carrier activation, normally when a company phone has cellular signal bars but cannot attach to its assigned business data plan. Here the observed facts require byod mobile application management instead.
D:
Configure both clients to use the approved corporate calendar and contacts service. This action is appropriate for mobile calendar and contact synchronization, normally when a user's phone receives mail but calendar edits never appear on the company laptop. Here the observed facts require byod mobile application management instead.
Question 218
A support request at Lakeside Analytics presents this problem: A new 6 GHz SSID is invisible to several laptops even though 5 GHz works. The supporting record states that the older wireless adapters lack 6 GHz support and some clients are configured for incompatible security modes. The desired outcome is to explain why band and client capabilities must agree before joining 6 GHz Wi-Fi. The technician must document observations separately from assumptions. What observation would verify successful service restoration?
- Confirm edge clients stay connected and dense clients meet throughput targets
- Verify only the supported client discovers and joins the 6 GHz network while the legacy SSID remains usable
- Confirm each device succeeds through its intended radio without conflating protocols
- Verify the client receives an address, gateway and DNS options from the correct scope
Explanation
Correct Answer
B:
Verify only the supported client discovers and joins the 6 GHz network while the legacy SSID remains usable. It proves the required function with an observable result instead of assuming the change worked. The relevant observation is that the older wireless adapters lack 6 GHz support and some clients are configured for incompatible security modes. The support goal is to explain why band and client capabilities must agree before joining 6 GHz Wi-Fi; this validate action specifically addresses 6 ghz wi-fi client compatibility without confusing a different subsystem.
Incorrect Answers
A:
Confirm edge clients stay connected and dense clients meet throughput targets. This action is appropriate for 2.4 ghz versus 5 ghz wi-fi trade-offs, normally when a warehouse needs coverage through walls at modest data rates while a crowded office needs faster nearby links. Here the observed facts require 6 ghz wi-fi client compatibility instead.
C:
Confirm each device succeeds through its intended radio without conflating protocols. This action is appropriate for nfc short-range tap versus bluetooth pairing, normally when a checkout kiosk must read a contactless badge at a few centimeters, not stream audio across a room. Here the observed facts require 6 ghz wi-fi client compatibility instead.
D:
Verify the client receives an address, gateway and DNS options from the correct scope. This action is appropriate for dhcp client and server port roles, normally when a new PC never receives an IPv4 lease on its office VLAN. Here the observed facts require 6 ghz wi-fi client compatibility instead.
Question 219
During Crescent Operations's small-office network service desk, the technician encounters this condition: A checkout kiosk must read a contactless badge at a few centimeters, not stream audio across a room. The supporting record states that the badge reader uses near-field communication while Bluetooth headphones require their own pairing process. The desired outcome is to match NFC and Bluetooth to their intended interaction distance and purpose. Any configuration change must be reversible and validated on a controlled test device. Which diagnostic check best distinguishes the relevant fault?
- Survey RSSI, interference sources, client capabilities and required throughput on both bands
- Inspect reader specifications, expected distance and supported mobile radio interface
- Check adapter specifications, OS support, channel regulations and required security configuration
- Check subnet masks, default gateways and configured inter-subnet routes
Explanation
Correct Answer
B:
Inspect reader specifications, expected distance and supported mobile radio interface. It checks the likely failure boundary before altering working parts or settings. The relevant observation is that the badge reader uses near-field communication while Bluetooth headphones require their own pairing process. The support goal is to match NFC and Bluetooth to their intended interaction distance and purpose; this diagnose action specifically addresses nfc short-range tap versus bluetooth pairing without confusing a different subsystem.
Incorrect Answers
A:
Survey RSSI, interference sources, client capabilities and required throughput on both bands. That action is appropriate for 2.4 ghz versus 5 ghz wi-fi trade-offs, normally when a warehouse needs coverage through walls at modest data rates while a crowded office needs faster nearby links. Here the observed facts require nfc short-range tap versus bluetooth pairing instead.
C:
Check adapter specifications, OS support, channel regulations and required security configuration. That action is appropriate for 6 ghz wi-fi client compatibility, normally when a new 6 GHz SSID is invisible to several laptops even though 5 GHz works. Here the observed facts require nfc short-range tap versus bluetooth pairing instead.
D:
Check subnet masks, default gateways and configured inter-subnet routes. This action is appropriate for router versus layer 2 switch forwarding, normally when two PCs on separate IPv4 subnets can communicate within their own LANs but not across subnets. Here the observed facts require nfc short-range tap versus bluetooth pairing instead.
Question 220
At Orchard Services, a technician working in IT virtualization planning identifies this issue: A new virtual machine cannot start a 64-bit guest even though the host processor supports virtualization. The supporting record states that firmware currently disables the processor's VT-x or AMD-V virtualization feature. The desired outcome is to identify firmware virtualization prerequisites for a supported VM platform. A safe non-destructive test must be used before replacing additional parts. What observation would verify successful service restoration?
- Verify work executes on the hosted desktop and user policy is enforced centrally
- Verify the 64-bit guest starts normally without host instability
- Confirm the VM can be isolated and removed without reinstalling the laptop host
- Verify the application runs in its container while kernel version comes from the host
Explanation
Correct Answer
B:
Verify the 64-bit guest starts normally without host instability. It proves the required function with an observable result instead of assuming the change worked. The relevant observation is that firmware currently disables the processor's VT-x or AMD-V virtualization feature. The support goal is to identify firmware virtualization prerequisites for a supported VM platform; this validate action specifically addresses virtualization cpu extensions without confusing a different subsystem.
Incorrect Answers
A:
Verify work executes on the hosted desktop and user policy is enforced centrally. This action is appropriate for vdi versus local desktop processing, normally when a company wants centrally managed user desktops accessed from inexpensive endpoints. Here the observed facts require virtualization cpu extensions instead.
C:
Confirm the VM can be isolated and removed without reinstalling the laptop host. This action is appropriate for hosted type 2 virtualization for testing, normally when a help desk engineer needs an isolated test operating system on an existing laptop. Here the observed facts require virtualization cpu extensions instead.
D:
Verify the application runs in its container while kernel version comes from the host. This action is appropriate for container isolation versus full virtual machine, normally when a team needs to package one web service and its dependencies but not another complete guest kernel. Here the observed facts require virtualization cpu extensions instead.
