220-1202 Exam Dumps - CompTIA A+ Core 2 (2026 Exam Update)

The first step in the IT change management process is to identify and propose the change. In this case, the technician notices a need (end-of-life network switches), so the appropriate action is to formally propose a change. This proposal would be documented and submitted for approval before any planning or implementation occurs.

According to the CompTIA A+ 220-1102 objectives under Operational Procedures (Domain 4.0), the change management process follows these typical steps:

Submit a change request (Propose the change)

Review and approval (Approve the change)

Planning and scheduling (Schedule the change)

Implementation

Documentation and review

Therefore, proposing the change is the correct first step in accordance with standard ITIL-based change management practices.

The correct answer is B. VNC . The key phrase is graphical interface access . VNC, or Virtual Network Computing, is a remote-control technology used to share and control graphical desktops. Quentin Docter’s Complete Study Guide explains that VNC is a remote control tool for desktop sharing, uses a client-server model, and allows remote control of the host where the VNC server is installed. The Mike Meyers/Mark Soper material also explains that SSH is excellent for command-line administrative tasks, but when full graphical desktop access is needed, a remote desktop application is required; VNC is identified as cross-platform and usable for remote graphical control. SSH provides secure command-line access, not a full graphical interface by default. WinRM is mainly a Windows remote-management technology. Telnet is an insecure text-based remote access protocol and should not be used for secure remote administration.

A low-level format (also referred to as a zero-fill or full format) writes over every sector on a storage device, effectively destroying the existing data and making recovery nearly impossible. Unlike degaussing, which renders the drive unusable, a low-level format maintains the integrity of the device, allowing it to be repurposed or reused.

A. Deleting partitions does not fully erase data; it only removes references in the partition table.

B. EFS (Encrypting File System) encrypts files but does not securely wipe them.

D. Degaussing destroys the magnetic structure of a drive, making it inoperable and not reusable.

This is likely arogue antivirusor scareware tactic. The user shouldnot click " OK " and instead check Windows Security (or third-party antivirus) status and ensure real-time protection is enabled.

FromMark Soper – Mike Meyers ' Lab Manual:

“Users should verify security center settings if receiving suspicious pop-ups. Clicking unknown software updates can install malware. It’s safer to validate protection through legitimate system tools.”

The correct answer is A. Remove account administrative rights, because unauthorized software installation is most commonly possible when users have local administrator privileges. In Windows environments, installing most applications requires elevated permissions. If users are members of the local Administrators group, they can bypass many built-in security controls and install software without IT approval.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, the principle of least privilege is fundamental to endpoint security. Users should only be granted the minimum permissions necessary to perform their job functions. Removing administrative rights prevents users from installing unapproved applications and significantly reduces malware risk.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide explains that while technologies like firewalls, SmartScreen, and Endpoint Detection and Response (EDR) provide important layers of protection, they do not directly stop users from installing software if they already have administrative access. EDR detects and responds to threats, but it does not prevent intentional installation by privileged users.

The Mike Meyers / Mark Soper Lab Manual reinforces that controlling user permissions is the most effective preventive control against unauthorized changes to a system. Removing admin rights stops the root cause rather than reacting after installation occurs.

Therefore, to prevent future unauthorized software installations, removing account administrative rights is the most direct and effective solution, making A the correct answer.

The symptoms suggest abrowser hijacker. Thefirst stepsshould be toremove any malicious extensionsandreset the startup pageto restore normal behavior.

FromAll-in-One Exam Guide:

“Browser hijackers often install as extensions and change homepage settings. Removing these extensions and resetting the startup configuration typically resolves the issue.”

When an OS reaches its end of life (EOL), it no longer receives updates or support, including critical security patches.

From the Quentin Docter Study Guide:

“End-of-life means the manufacturer no longer supports the OS with updates or security patches, which exposes systems to vulnerabilities unless upgraded”.

All-in-One Exam Guide adds:

“End-of-life notifications serve as a final warning that continued use of the OS will be insecure and unsupported. It’s crucial for administrators to plan migration”.

Maintaining integrity in a forensic investigation means ensuring evidence remains in its original, untampered state and that you can prove who handled it, when, and what was done to it. That is exactly what chain of custody provides. Mike Meyers’ Lab Manual defines chain of custody as an “end-to-end process” that establishes “a continuous accounting of where the evidence is at all times, who has possessed it, what activities were performed on it, and the details of its storage, use, and transfer.” It explicitly states this process “helps to ensure the integrity of evidence and minimizes the possibility that it has been altered or tampered with,” and it contributes to the admissibility and value of evidence in court.

The All-in-One Exam Guide provides the same explanation and ties chain of custody to accountability for “data integrity… and data preservation,” documenting possession and activities performed on evidence from collection through transfer. Acceptable use policy is a rules document, compliance requirements define obligations, and an after-action report summarizes events afterward—none of these directly preserve and prove evidence integrity throughout handling like chain of custody does.