Every Exam PrepFREE EXAM PREP
Ask AI

CompTIA A+ Practice Test

303 free CompTIA A+ practice questions with answers and explanations.

No signup required.

The CompTIA A+ exam is administered by CompTIA, with 90 scored questions and a time limit of 1 hour 30 minutes.

About these practice questions
Verified against the official content outline

These are original study questions written from published exam objectives—not recalled, copied, or confidential live-exam items. Always confirm current coverage with the official sources linked on this page.

Difficulty
QUESTION 1 / 100HardwareEasy0/0
A technician needs to install RAM into a modern desktop that uses dual-channel memory. To enable dual-channel operation with two identical modules, how should the modules be installed?
0/0session
Browse all questions & answers

Loading the remaining 203 questions…

Hardware

6 questions
  1. 1. A technician needs to install RAM into a modern desktop that uses dual-channel memory. To enable dual-channel operation with two identical modules, how should the modules be installed?

    • A. Both modules placed in adjacent slots regardless of color
    • B. In the matched (usually same-colored) slots specified by the motherboard manual
    • C. One module per channel is impossible; dual-channel requires four modules
    • D. Both modules in the two slots farthest from the CPU socket
    Show answer & explanation

    Answer: B
    Dual-channel requires a matched pair populated in the correct paired slots, which motherboards typically color-code and document in the manual, so B is correct. Adjacent slots (A) are often the SAME channel and give only single-channel. Dual-channel works with two modules, not four (C). A fixed 'farthest from CPU' rule (D) is not universal and ignores the board's specific pairing.

  2. 2. A technician must install RAM in a dual-channel motherboard with four slots. What placement is generally required to enable dual-channel operation?

    • A. Matched modules in the slot pairs the board designates for each channel, typically alternating slots rather than adjacent ones
    • B. Both modules in the two slots nearest the CPU regardless of colour coding
    • C. Any two slots, since the board configures channels automatically
    • D. All four slots populated, since dual-channel requires four modules
    Show answer & explanation

    Answer: A
    Dual-channel requires one module per channel, and boards indicate the correct pairs through colour coding or silkscreen labels, commonly meaning slots one and three rather than one and two. Populating the wrong pair leaves the system working in single-channel mode with reduced memory bandwidth and no error message to indicate it.

  3. 3. A technician replaces a mechanical hard drive with a solid-state drive. Which practice should be avoided on the new drive?

    • A. Running a traditional defragmentation routine, which adds write wear without improving performance on flash storage
    • B. Enabling TRIM support
    • C. Keeping the firmware updated
    • D. Leaving some free space unallocated for over-provisioning
    Show answer & explanation

    Answer: A
    Flash storage has no seek penalty, so rearranging data provides no benefit while consuming a finite write endurance budget. TRIM tells the drive which blocks are no longer in use so garbage collection can operate efficiently, which is the maintenance mechanism that actually matters for solid-state drives.

  4. 4. A printer produces pages with a repeating smudge at consistent intervals down the page. What does this indicate on a laser printer?

    • A. A defect on a rotating component such as the drum or a roller, with the interval corresponding to its circumference
    • B. An incorrect paper size setting in the driver
    • C. A network connectivity problem
    • D. An outdated printer driver
    Show answer & explanation

    Answer: A
    Regularly spaced defects map to a rotating part, and measuring the interval identifies which component since each has a distinct circumference. Driver and network issues produce garbled output, incorrect formatting or failed jobs rather than a physical mark repeating at a fixed pitch.

  5. 5. A technician is installing a new NVMe SSD into a laptop's M.2 slot and notices two keying notches align differently from the socket. Which factor determines compatibility between the M.2 module and the socket?

    • A. The connector key type (e.g., M-key vs B-key) must match the socket wiring for the module to fit and function correctly.
    • B. The color of the printed circuit board must match the motherboard chipset color scheme.
    • C. The physical length of the module in millimeters is irrelevant as long as the connector is present.
    • D. Any M.2 module works in any M.2 slot as long as the screw hole is present.
    Show answer & explanation

    Answer: A
    The M-key/B-key notch configuration on an M.2 module indicates which bus (SATA vs PCIe/NVMe) and pin layout the module supports, so a mismatched key will not align with the socket's corresponding pins; length matters for the standoff screw position but does not by itself guarantee electrical compatibility, and PCB color has no functional bearing.

  6. 6. A technician is upgrading a desktop's graphics card to a model that requires an 8-pin PCIe power connector, but the existing power supply only has 6-pin PCIe connectors available. What should the technician do?

    • A. Force the 6-pin connector into the 8-pin socket since two of the pins are only for grounding.
    • B. Replace the power supply with one that provides a native 8-pin PCIe connector rated for the card's power draw.
    • C. Connect two 6-pin connectors together with electrical tape to create an 8-pin connector.
    • D. Power the card from a SATA power connector using a generic splitter regardless of current rating.
    Show answer & explanation

    Answer: B
    A GPU requiring an 8-pin PCIe connector needs the correct pin count and current-carrying capacity that a properly rated power supply provides natively; improvised adapters or forcing mismatched connectors risk insufficient power delivery, overheating connectors, or damaging the card and power supply, so replacing the supply with a compatible unit is the correct and safe approach.

Mobile devices

12 questions
  1. 7. A user reports that their laptop runs fine on AC power but the battery drains within minutes and the reported charge percentage jumps erratically. Which component is the most likely cause?

    • A. A failing/degraded battery that can no longer hold an accurate charge
    • B. A corrupted GPU driver
    • C. A failing Wi-Fi antenna
    • D. An overheating CPU
    Show answer & explanation

    Answer: A
    Rapid drain plus erratic percentage readings are classic symptoms of a worn lithium-ion battery whose cells and fuel-gauge calibration have degraded, so A is correct. A GPU driver (B) affects display, not charge behavior. A Wi-Fi antenna (C) affects connectivity. An overheating CPU (D) causes throttling/shutdowns, not erratic charge reporting.

  2. 8. A user's smartphone gets very hot, drains quickly, and uses far more data than usual, even when idle. Which is the most likely explanation a technician should investigate first?

    • A. A rogue or malicious app running in the background
    • B. The screen brightness set too high
    • C. A cracked screen protector
    • D. Bluetooth being enabled
    Show answer & explanation

    Answer: A
    Simultaneous overheating, fast battery drain, and unexpected background data are hallmark signs of a malicious or misbehaving app, so A is correct. High brightness (B) drains battery but does not spike data usage. A screen protector (C) is cosmetic. Bluetooth alone (D) uses minimal power and no cellular data.

  3. 9. A technician is asked to connect a laptop to an external 4K display and also charge the laptop through a single cable on a modern ultrabook. Which port supports video output, data, and power delivery simultaneously?

    • A. USB-C with DisplayPort Alt Mode and Power Delivery
    • B. RJ45
    • C. Legacy VGA
    • D. 3.5mm TRS
    Show answer & explanation

    Answer: A
    USB-C supporting DisplayPort Alt Mode plus Power Delivery carries video, data, and charging over one connector, so A is correct. RJ45 (B) is Ethernet only. VGA (C) is analog video only and cannot carry power or data. A 3.5mm TRS jack (D) is for audio.

  4. 10. When configuring corporate email on employee mobile devices, the IT team wants the ability to remotely wipe only company data if a device is lost. Which approach best meets this requirement?

    • A. Enrolling devices in a Mobile Device Management (MDM) solution with containerization
    • B. Emailing each user the company password policy
    • C. Disabling Wi-Fi on all devices
    • D. Requiring users to back up to a personal cloud account
    Show answer & explanation

    Answer: A
    MDM with a managed container lets IT enforce policy and selectively wipe corporate data without touching personal data, so A is correct. Emailing a policy (B) enforces nothing technically. Disabling Wi-Fi (C) harms usability and doesn't protect lost-device data. Personal cloud backups (D) increase, not reduce, corporate-data exposure.

  5. 11. A user reports their laptop battery drains quickly and the chassis is unusually warm. What should be checked before replacing the battery?

    • A. Whether a runaway process is consuming CPU continuously, since sustained load explains both symptoms
    • B. The screen resolution setting
    • C. The number of files on the desktop
    • D. Whether the keyboard backlight is enabled
    Show answer & explanation

    Answer: A
    Heat and battery drain together point at sustained power draw rather than at battery degradation, which produces reduced runtime without extra heat. Checking resource usage costs nothing and frequently identifies malware, a stuck update process or a misbehaving application as the actual cause.

  6. 12. A mobile device user reports that the touchscreen responds in the wrong locations. What should be attempted before hardware replacement?

    • A. Removing any screen protector or case interfering with the digitizer, and restarting the device to clear a software fault
    • B. Reinstalling every application individually
    • C. Replacing the battery
    • D. Changing the device's language settings
    Show answer & explanation

    Answer: A
    Digitizer misregistration is often caused by a poorly fitted protector, moisture or a transient software fault, all of which are quick to rule out before condemning the assembly. Working from least invasive and least expensive toward most is the general troubleshooting economy for mobile hardware, where the screen assembly is typically the costliest part.

  7. 13. A company issues mobile devices and wants to enforce encryption, passcode policy and the ability to wipe a lost device. What technology provides this?

    • A. Mobile device management, which enrolls devices and applies and enforces policy centrally
    • B. A group policy object applied from the domain controller
    • C. The device manufacturer's consumer find-my-device service
    • D. An antivirus application installed on each device
    Show answer & explanation

    Answer: A
    Mobile device management provides enrollment, policy enforcement and remote actions including selective wipe of corporate data on personally owned devices. Group policy targets domain-joined Windows systems rather than mobile platforms, and consumer location services offer no central policy enforcement or reporting.

  8. 14. While replacing a cracked screen, a technician notices the smartphone's battery is visibly swollen and pushing against the case. What is the safest immediate action?

    • A. Continue the repair as planned since a swollen battery still functions normally.
    • B. Puncture the battery to release trapped gas before continuing the repair.
    • C. Stop work, avoid puncturing or bending the battery, and replace it following safe lithium-ion handling procedures.
    • D. Charge the device fully first to verify the battery still holds a charge.
    Show answer & explanation

    Answer: C
    A swollen lithium-ion battery indicates internal cell breakdown and a risk of fire or chemical burns if punctured, bent, or short-circuited, so the safe practice is to stop work, handle it carefully without piercing the casing, and replace it per proper disposal and safety procedures rather than continuing normal repair steps or attempting to charge or vent it.

  9. 15. A laptop has three individual keys that no longer register keystrokes, while the rest of the keyboard works normally. What is the most likely repair approach on most consumer laptops?

    • A. Reflow the solder joints on the motherboard beneath the affected keys.
    • B. Reinstall the operating system to restore the keyboard driver for those specific keys.
    • C. Swap the laptop's RAM modules, since faulty memory commonly causes isolated key failures.
    • D. Replace the entire keyboard or top case assembly, since individual keys are typically not sold as separate field-replaceable parts.
    Show answer & explanation

    Answer: D
    Consumer laptop keyboards are usually built as a single membrane or scissor-switch assembly, often integrated into the top case, so a hardware fault affecting a few keys typically requires replacing the whole keyboard or top case rather than sourcing individual keycap parts; a driver reinstall would not explain a physical, localized failure, and RAM issues do not selectively disable specific keys.

  10. 16. A tablet fails to charge when plugged into its charging cable, but the same cable successfully charges another identical tablet model. What should the technician check first?

    • A. Inspect and clean the tablet's charging port for lint, debris, or corrosion that could block the connector.
    • B. Replace the tablet's battery immediately, since a battery is the only possible cause.
    • C. Reinstall the tablet's operating system to fix the charging circuit.
    • D. Assume the wall outlet is faulty even though the same outlet charges other devices normally.
    Show answer & explanation

    Answer: A
    Since the cable works fine on an identical device, the fault is isolated to the individual tablet rather than the cable or outlet; debris, lint, or corrosion inside the charging port is a common and easily checked cause of failed charging, making port inspection the logical first step before assuming a battery failure or reinstalling software, which would not affect physical charging contact.

  11. 17. A user wants more memory installed in a thin laptop that has one user-accessible memory slot. Which module form factor should the technician order for this upgrade?

    • A. SODIMM
    • B. Full-size desktop DIMM
    • C. Registered ECC server DIMM
    • D. SIMM
    Show answer & explanation

    Answer: A
    Laptops use the small outline DIMM form factor because it is roughly half the length of a desktop module and fits the compact slot layout of portable boards. A full-size DIMM is physically too large, registered ECC modules are built for servers and are both the wrong size and electrically incompatible, and SIMM is an obsolete standard from decades-old systems.

  12. 18. A technician is upgrading storage in a laptop whose M.2 slot supports PCIe. Which drive type will deliver the fastest performance in that slot?

    • A. An M.2 SATA SSD
    • B. An NVMe SSD that communicates over PCIe lanes
    • C. An mSATA SSD with an adapter
    • D. A 7200 rpm 2.5-inch hard drive
    Show answer & explanation

    Answer: B
    NVMe drives talk directly over PCIe lanes and dramatically outrun the SATA interface ceiling of roughly 600 MB per second. An M.2 SATA drive fits the same slot but is still bound by SATA speeds, an mSATA drive on an adapter has the same limitation with added compatibility risk, and a spinning hard drive is the slowest of all and does not fit an M.2 slot anyway.

Networking

12 questions
  1. 19. A workstation on a /24 subnet has IP 192.168.1.50 with mask 255.255.255.0. Which of the following addresses is on the SAME local subnet and reachable without a router?

    • A. 192.168.2.50
    • B. 192.168.1.200
    • C. 10.0.1.50
    • D. 192.168.0.50
    Show answer & explanation

    Answer: B
    With mask 255.255.255.0 the network is 192.168.1.0/24, so only hosts whose first three octets are 192.168.1.x share the subnet — 192.168.1.200 (B) qualifies. 192.168.2.50 (A) and 192.168.0.50 (D) differ in the third octet, and 10.0.1.50 (C) is an entirely different network; all three require a router.

  2. 20. A remote user cannot reach an internal web server by its hostname, but pinging the server's IP address succeeds. Which service should the technician troubleshoot first?

    • A. DHCP
    • B. DNS
    • C. NAT
    • D. SMTP
    Show answer & explanation

    Answer: B
    The IP works but the name does not, so name-to-address resolution is failing — that is DNS (B). DHCP (A) assigns addresses and here the host already has connectivity. NAT (C) translates addresses for internet traffic, not name resolution. SMTP (D) is for email delivery and is unrelated.

  3. 21. Which port and protocol pairing is correct for secure, encrypted remote command-line administration of a Linux server?

    • A. Telnet over TCP 23
    • B. SSH over TCP 22
    • C. RDP over TCP 3389
    • D. HTTPS over TCP 443
    Show answer & explanation

    Answer: B
    SSH (Secure Shell) on TCP 22 provides encrypted command-line access, so B is correct. Telnet on 23 (A) is command-line but unencrypted. RDP on 3389 (C) is a graphical remote desktop protocol, typically for Windows. HTTPS on 443 (D) secures web traffic, not shell sessions.

  4. 22. A small office wants wireless clients to authenticate against a central RADIUS server rather than sharing a single passphrase. Which Wi-Fi security mode should be configured?

    • A. WPA2-Personal (PSK)
    • B. WPA2/WPA3-Enterprise
    • C. WEP
    • D. Open with MAC filtering
    Show answer & explanation

    Answer: B
    Enterprise mode uses 802.1X with a RADIUS server so each user authenticates with individual credentials, making B correct. Personal/PSK (A) uses one shared passphrase. WEP (C) is obsolete and easily cracked. Open with MAC filtering (D) provides no real authentication and MACs are easily spoofed.

  5. 23. A technician wants to power a device such as a wireless access point using the same cable that carries its network data, avoiding a separate electrical outlet. Which technology enables this?

    • A. USB-C Power Delivery
    • B. Power over Ethernet (PoE)
    • C. Wake-on-LAN
    • D. Uninterruptible power supply (UPS)
    Show answer & explanation

    Answer: B
    PoE delivers electrical power and data over a single Ethernet cable, ideal for APs and IP cameras, so B is correct. USB-C PD (A) powers over USB, not Ethernet. Wake-on-LAN (C) remotely powers on a PC but does not supply operating power. A UPS (D) provides battery backup, not power over the network cable.

  6. 24. A workstation on a corporate network cannot reach any internal or external resource, and shows an address beginning 169.254. What does this indicate?

    • A. The client failed to obtain an address from DHCP and self-assigned a link-local address
    • B. The client received a valid address from the corporate DHCP server
    • C. The client is using a static address configured by the administrator
    • D. The client's firewall is blocking outbound traffic only
    Show answer & explanation

    Answer: A
    The 169.254 range is automatic private addressing assigned when no DHCP response arrives, so the fault lies between the client and the DHCP service rather than in the client's IP stack. Cable, switch port, VLAN assignment, DHCP scope exhaustion and a failed relay are the usual causes to check in that order.

  7. 25. A workstation can communicate with other devices on its local subnet but cannot reach any external websites, even though DNS resolves names correctly. The IP configuration shows a subnet mask and IP address that appear correct. What should the technician check next?

    • A. Verify that the DNS server address matches the subnet mask exactly.
    • B. Verify that the default gateway address is correctly configured and reachable.
    • C. Change the workstation's MAC address to resolve the routing conflict.
    • D. Disable the local subnet's DHCP server to force a new IP lease.
    Show answer & explanation

    Answer: B
    Local subnet communication working but external access failing despite correct DNS resolution points to a routing problem, and the default gateway is the address used to forward traffic outside the local subnet; an incorrect or unreachable gateway would produce exactly this symptom, whereas DNS is already confirmed working and MAC address or DHCP changes would not address a routing failure.

  8. 26. A company needs to connect network switches in two buildings located 2 kilometers apart, beyond the maximum distance supported by copper Ethernet cabling. Which solution is most appropriate?

    • A. Use a longer Cat 6 copper cable run between the buildings with a signal repeater every 50 meters.
    • B. Use a standard RJ45 patch cable rated for outdoor use to span the distance.
    • C. Use fiber optic cabling with SFP transceivers installed in each switch to bridge the connection.
    • D. Use a wireless access point configured in ad hoc mode between the two switches.
    Show answer & explanation

    Answer: C
    Copper Ethernet has a maximum practical segment distance of around 100 meters, far short of 2 kilometers, while fiber optic cabling paired with SFP transceivers supports distances of several kilometers with minimal signal loss, making it the appropriate choice; repeating copper that far is impractical, outdoor-rated copper doesn't change its distance limitation, and ad hoc Wi-Fi is not designed for reliable building-to-building switch interconnects.

  9. 27. A new branch office firewall blocks all outbound traffic by default. Users report they can reach websites by typing IP addresses but every hostname fails to load. Which port should be opened to restore name resolution?

    • A. TCP 80
    • B. UDP 69
    • C. TCP 445
    • D. UDP 53
    Show answer & explanation

    Answer: D
    Working access by IP with failing hostnames is the signature of blocked DNS, which performs standard lookups over UDP port 53. TCP 80 is plain web traffic and is clearly already flowing since IP browsing works, UDP 69 belongs to TFTP used for device config transfers, and TCP 445 carries Windows file sharing rather than name resolution.

  10. 28. An e-commerce administrator wants the public web storefront reachable only over encrypted connections. Which default port should remain open to the internet on the web server?

    • A. 443
    • B. 8080
    • C. 80
    • D. 21
    Show answer & explanation

    Answer: A
    HTTPS encrypts web sessions with TLS and listens on TCP 443 by default, so that is the port a secure-only storefront needs exposed. Port 80 serves unencrypted HTTP, which the administrator explicitly wants closed or redirected, 8080 is a common alternate or proxy port rather than the encrypted default, and 21 is FTP control traffic unrelated to serving web pages.

  11. 29. Employees can receive email in their desktop mail client, but sending through the company server with authentication times out from a hotel network. Which outbound port is the hotel most likely blocking?

    • A. 143
    • B. 110
    • C. 53
    • D. 587
    Show answer & explanation

    Answer: D
    Authenticated mail submission from clients uses TCP 587, so blocking it breaks sending while leaving retrieval untouched. Port 110 is POP3 and 143 is IMAP, both of which handle downloading or synchronizing mail and are evidently working since messages arrive, and port 53 is DNS, which must be functioning because the server's name is resolving at all.

  12. 30. A technician configures a mail client to keep folders synchronized with the server over an encrypted connection using secure IMAP. Which port should the client profile specify?

    • A. 995
    • B. 143
    • C. 993
    • D. 25
    Show answer & explanation

    Answer: C
    IMAP over an implicit TLS connection uses TCP 993, which keeps server-side folders synchronized while encrypting the session. Port 995 is the secure version of POP3, a download-and-delete protocol that does not synchronize folders, 143 is IMAP without encryption, and 25 is the SMTP relay port used between mail servers rather than for mailbox access.

Virtualization and cloud computing

6 questions
  1. 31. A company wants to run several isolated server operating systems directly on a single bare-metal host with no underlying host OS, for maximum performance and density. Which technology fits best?

    • A. A Type 2 (hosted) hypervisor
    • B. A Type 1 (bare-metal) hypervisor
    • C. Application containers on a desktop OS
    • D. A dual-boot configuration
    Show answer & explanation

    Answer: B
    A Type 1 hypervisor runs directly on hardware without a host OS, offering the best performance for multiple production VMs, so B is correct. A Type 2 hypervisor (A) runs atop an existing OS, adding overhead. Containers (C) share one kernel and are not full isolated OSes. Dual-boot (D) runs only one OS at a time.

  2. 32. A customer wants a cloud model where they can rapidly scale storage and compute up during busy periods and pay only for what they consume. Which cloud characteristic does this describe?

    • A. Resource pooling
    • B. Rapid elasticity with measured (metered) service
    • C. High availability
    • D. Data sovereignty
    Show answer & explanation

    Answer: B
    Scaling on demand and paying per use combine rapid elasticity and measured service, so B is correct. Resource pooling (A) describes shared multi-tenant infrastructure, not the pay-per-use scaling itself. High availability (C) is about uptime/redundancy. Data sovereignty (D) concerns where data is legally stored.

  3. 33. A technician sets up a virtual machine on a workstation. Which hardware feature must generally be enabled in firmware?

    • A. CPU virtualization extensions, which the hypervisor requires to run guest instructions efficiently
    • B. Secure boot, which validates the boot chain
    • C. Wake-on-LAN, which permits remote power-on
    • D. Fast startup, which shortens boot time
    Show answer & explanation

    Answer: A
    Hardware virtualization support is commonly disabled by default and its absence produces hypervisor errors that appear unrelated to firmware settings. Secure boot, wake-on-LAN and fast startup address boot integrity, remote power management and startup time respectively, none of which affect a hypervisor's ability to run guests.

  4. 34. An organization moves from on-premises servers to a cloud provider's infrastructure as a service offering. What remains the organization's responsibility?

    • A. The guest operating system, applications, configuration and data, while the provider maintains the physical infrastructure and hypervisor
    • B. Nothing, since the provider assumes full responsibility
    • C. Only the physical security of the data centre
    • D. Only the network cabling within the facility
    Show answer & explanation

    Answer: A
    Infrastructure as a service places the boundary below the guest operating system, so patching, configuration and data protection above that line remain with the customer. The boundary moves upward through platform and software as a service, which is why assuming one model's division applies to another is a frequent source of unaddressed exposure.

  5. 35. A software developer wants to run an isolated test operating system inside a window on their existing Windows desktop, without dedicating separate physical hardware. Which solution is most appropriate?

    • A. Install a bare-metal hypervisor directly on the desktop's hardware in place of Windows.
    • B. Configure the desktop to dual-boot into a second operating system at startup.
    • C. Install the test operating system on a USB drive and boot from it using legacy BIOS.
    • D. Install a type 2 hypervisor application within the existing Windows OS to host the virtual machine.
    Show answer & explanation

    Answer: D
    A type 2 hypervisor runs as an application on top of an existing host operating system, letting a user launch an isolated virtual machine in a window without replacing or repartitioning the current OS; a bare-metal (type 1) hypervisor would require removing the host OS, dual-booting only runs one OS at a time rather than simultaneously, and a bootable USB does not provide the requested windowed, concurrent isolation.

  6. 36. A company subscribes to a web-based email and productivity suite where the vendor manages the servers, operating systems, application code, and updates entirely, leaving the company responsible only for user accounts and data. Which cloud service model does this describe?

    • A. Software as a Service (SaaS)
    • B. Infrastructure as a Service (IaaS)
    • C. Platform as a Service (PaaS)
    • D. Desktop as a Service (DaaS) limited to virtual desktop delivery only
    Show answer & explanation

    Answer: A
    Software as a Service delivers a complete, ready-to-use application, such as web-based email, where the provider manages the entire stack including servers, operating system, and application code, leaving the customer responsible only for their data and user accounts; IaaS would require the customer to manage the OS and application themselves, and PaaS would still require the customer to manage application code and deployment.

Hardware and network troubleshooting

13 questions
  1. 37. A desktop powers on, fans spin, but there is no video output and the system emits a repeating beep code. What is the most appropriate FIRST step consistent with the CompTIA troubleshooting methodology?

    • A. Immediately replace the motherboard
    • B. Identify the problem by consulting the beep-code reference and checking recent changes
    • C. Reinstall the operating system
    • D. Document the outcome and close the ticket
    Show answer & explanation

    Answer: B
    The methodology begins with identifying the problem, which here means interpreting the beep code and asking what changed, so B is correct. Replacing the board (A) skips theory/testing and may be wrong. Reinstalling the OS (C) is pointless with no POST/video. Documenting and closing (D) is the final step, not the first.

  2. 38. Several users on one floor intermittently lose network connectivity while users on other floors are unaffected. All affected users connect through the same switch. Following the methodology, what is the best next action after identifying the pattern?

    • A. Replace every user's network cable simultaneously
    • B. Establish a theory of probable cause, such as a failing switch or its uplink
    • C. Rebuild all affected computers from a backup image
    • D. Escalate to the vendor before doing any analysis
    Show answer & explanation

    Answer: B
    After identifying that the common factor is one switch, the next methodology step is establishing a theory of probable cause (B). Mass cable replacement (A) is scattershot and ignores the shared-switch clue. Rebuilding PCs (C) is unrelated to a shared network device. Escalating first (D) skips your own analysis.

  3. 39. A newly built PC displays 'No bootable device' after passing POST. The technician confirms the SATA SSD spins up and is detected in firmware. Which is the MOST likely cause?

    • A. The boot order lists a device without an OS ahead of the SSD, or the SSD has no OS installed
    • B. The power supply wattage is too low
    • C. The RAM is running in single-channel mode
    • D. The CPU is not compatible with the chipset
    Show answer & explanation

    Answer: A
    POST passing and the drive being detected point to a boot-configuration issue: either an empty/incorrect boot order or a drive without an OS, so A is correct. Low PSU wattage (B) or CPU incompatibility (D) would prevent POST. Single-channel RAM (C) affects performance, not boot device detection.

  4. 40. A laser printer produces pages with a repeating faint ghost image of previous content appearing at regular intervals down the page. Which component is the most likely cause?

    • A. The imaging drum failing to fully discharge/clean between rotations
    • B. A clogged inkjet nozzle
    • C. A misaligned print head
    • D. Low toner only
    Show answer & explanation

    Answer: A
    Repeating ghost images at a fixed interval correspond to the drum's circumference; a worn or improperly cleaned imaging drum retains residual charge/toner, so A is correct. Inkjet nozzles (B) and print heads (C) belong to inkjet printers, not laser. Simply low toner (D) causes faded, not ghosted, output.

  5. 41. A technician suspects a failing hard drive causing slow reads and occasional read errors on a Windows PC. Which built-in tool most directly checks and repairs file-system and bad-sector issues on the volume?

    • A. sfc /scannow
    • B. chkdsk /r
    • C. ipconfig /all
    • D. diskpart clean
    Show answer & explanation

    Answer: B
    chkdsk /r scans for and attempts to recover data from bad sectors and fixes file-system errors, making B correct. sfc /scannow (A) repairs protected OS files, not disk sectors. ipconfig (C) is a networking tool. diskpart clean (D) erases the disk's partition data — destructive, not diagnostic.

  6. 42. A monitor connected by HDMI shows an image that flickers and occasionally drops to a black screen, but a second known-good cable resolves it. Which troubleshooting step did this action represent?

    • A. Establishing a plan of action
    • B. Testing the theory to determine the cause
    • C. Documenting findings
    • D. Verifying full system functionality
    Show answer & explanation

    Answer: B
    Swapping in a known-good cable to confirm the suspected faulty cable is testing the theory (B). Establishing a plan of action (A) comes after the theory is confirmed. Documentation (C) is the final step. Verifying full functionality (D) happens after the fix is applied and confirmed working.

  7. 43. A technician is called to a workstation that will not power on. Following the standard troubleshooting methodology, what comes after identifying the problem?

    • A. Establish a theory of probable cause, questioning the obvious first
    • B. Implement the solution immediately
    • C. Document the findings and outcome
    • D. Verify full system functionality
    Show answer & explanation

    Answer: A
    The methodology runs identify the problem, establish a theory, test the theory, establish a plan of action, implement, verify full functionality with preventive measures, then document. Skipping to implementation is the most common departure, and it produces fixes that address a symptom while the actual cause remains.

  8. 44. A desktop powers on briefly then shuts down repeatedly. Which cause should be investigated first?

    • A. Overheating from a failed cooling fan or degraded thermal paste triggering thermal shutdown protection
    • B. A corrupted user profile in the operating system
    • C. An expired software licence
    • D. An incorrect display resolution setting
    Show answer & explanation

    Answer: A
    A shutdown occurring seconds after power-on and before the operating system loads points at firmware-level protection, most often thermal or a power supply unable to sustain load. Anything residing in the operating system cannot be the cause when the failure occurs before the operating system has begun to run.

  9. 45. A workstation displays a blinking cursor with no operating system found message. Which check is most productive first?

    • A. The boot order and whether the boot drive is detected in firmware setup
    • B. The monitor's brightness setting
    • C. Whether the network cable is connected
    • D. The installed amount of system memory
    Show answer & explanation

    Answer: A
    The message means firmware completed its self-test and found no bootable device, so the question is whether the drive is present and whether firmware is looking at it. A drive absent from firmware setup indicates a cable, power or drive failure, while a present drive points instead at boot order or a damaged boot record.

  10. 46. A laptop repeatedly disconnects from Wi-Fi every few minutes while wired devices in the same room remain connected. After confirming the theory that the wireless adapter driver is outdated, the technician updates the driver but the problem persists. According to the standard troubleshooting methodology, what should happen next?

    • A. Declare the issue resolved since a plausible cause was already addressed.
    • B. Re-establish a new theory of probable cause and test again.
    • C. Escalate immediately to the ISP without further local testing.
    • D. Replace the laptop's motherboard as the next logical step.
    Show answer & explanation

    Answer: B
    When a theory of probable cause is tested and does not resolve the symptom, the standard troubleshooting methodology calls for establishing a new theory rather than assuming success or jumping to a drastic hardware replacement; escalating to the ISP is premature since wired devices are unaffected, pointing to a local wireless-specific cause that still needs to be identified.

  11. 47. Multiple users in an office report they cannot print to a shared network printer, though the print server itself responds to ping and is powered on. What should the technician check first on the print server?

    • A. Whether the office's internet connection is functioning.
    • B. Whether each user's monitor is displaying correctly.
    • C. Whether the print spooler service is running on the print server.
    • D. Whether the printer's toner cartridge is more than half full.
    Show answer & explanation

    Answer: C
    When a print server is reachable on the network but jobs are not processing for multiple users, a stopped or hung print spooler service is a common and easily verified cause, since the spooler manages queued print jobs; internet connectivity is unrelated to local network printing, monitor display issues would not affect printing, and toner level would typically only affect a single printer's output quality, not a server-wide failure to print for all users.

  12. 48. A desktop computer runs fine at idle but shuts down unexpectedly whenever the user runs a demanding application like video editing software. The technician opens the case and finds the CPU heatsink packed with dust. What is the most likely cause of the shutdowns?

    • A. The power supply is undersized for idle workloads only.
    • B. The video editing software has a licensing conflict that forces a shutdown.
    • C. The RAM is failing only when the CPU is under high load.
    • D. The CPU is overheating under heavy load due to restricted airflow from the dust buildup, triggering thermal protection shutdown.
    Show answer & explanation

    Answer: D
    Dust-clogged heatsinks restrict airflow and reduce cooling efficiency, and this problem only manifests under sustained heavy load, like video editing, when the CPU generates more heat than the impaired cooling can dissipate, triggering a thermal protection shutdown; the system runs fine at idle because heat output is low, ruling out software licensing, and RAM failures typically cause crashes or errors rather than clean shutdowns tied specifically to CPU load.

  13. 49. A technician uses a cable tester on a newly made patch cable and sees that pins 3 and 6 show as open (no continuity) while the other pins test fine. What does this most likely indicate?

    • A. The RJ45 connector was crimped with those two wires not properly seated or terminated.
    • B. The cable is using the wrong category rating for the network speed required.
    • C. The switch port the cable will connect to is faulty.
    • D. The cable is too long and exceeds maximum distance specifications.
    Show answer & explanation

    Answer: A
    An open reading on specific pins during a continuity test indicates a physical break in those wires at the connector, most commonly caused by a wire not being fully seated against the contact during crimping; this is a termination defect specific to the cable itself, not a category rating issue, distance limitation, or a switch port problem, which the tester would not detect independent of the cable.

Operating systems

17 questions
  1. 50. A technician must choose a Windows file system for a 64 GB USB flash drive that will be used to transfer large 8 GB video files between Windows and macOS computers. Which file system is the best fit?

    • A. FAT32
    • B. exFAT
    • C. NTFS
    • D. ext4
    Show answer & explanation

    Answer: B
    exFAT supports files larger than 4 GB and is read/write compatible with both Windows and macOS, so B is correct. FAT32 (A) caps single files at 4 GB, blocking the 8 GB videos. NTFS (C) is natively read-only on macOS. ext4 (D) is a Linux file system not natively supported by Windows or macOS.

  2. 51. A Windows administrator needs to apply a security setting to every computer in a domain automatically, without visiting each machine. Which tool is designed for this?

    • A. Group Policy (via Active Directory)
    • B. Task Manager
    • C. Device Manager
    • D. Disk Management
    Show answer & explanation

    Answer: A
    Group Policy centrally pushes configuration and security settings to domain-joined computers and users, so A is correct. Task Manager (B) monitors and ends local processes. Device Manager (C) manages hardware drivers on one machine. Disk Management (D) handles local partitions and volumes.

  3. 52. A technician needs to view real-time CPU, memory, disk, and network utilization and identify which process is consuming the most memory on a Windows 11 PC. Which utility is the most direct choice?

    • A. Task Manager
    • B. Registry Editor
    • C. System Restore
    • D. msconfig Boot tab
    Show answer & explanation

    Answer: A
    Task Manager shows live resource utilization per process, letting you spot the top memory consumer, so A is correct. Registry Editor (B) edits configuration keys, not live performance. System Restore (C) rolls back system state. The msconfig Boot tab (D) controls startup options, not real-time monitoring.

  4. 53. A user with a standard (non-administrator) account needs to install a printer driver that requires elevated privileges. What is the correct, secure way to complete this task?

    • A. Permanently add the user to the local Administrators group
    • B. Use 'Run as administrator' and supply valid administrator credentials via UAC
    • C. Disable User Account Control (UAC) entirely
    • D. Boot into Safe Mode to bypass permissions
    Show answer & explanation

    Answer: B
    Elevating just the install task with admin credentials through UAC follows least privilege, so B is correct. Permanently granting admin rights (A) over-privileges the user. Disabling UAC (C) removes a key security control. Safe Mode (D) does not grant a standard user administrative rights and is not the intended mechanism.

  5. 54. A technician needs to remotely connect to a Windows workstation's full graphical desktop to assist a user. Which built-in Windows feature is intended for this?

    • A. Remote Desktop Protocol (RDP)
    • B. SSH
    • C. FTP
    • D. SNMP
    Show answer & explanation

    Answer: A
    RDP provides a full graphical remote-desktop session to Windows, so A is correct. SSH (B) gives an encrypted command line, not a Windows GUI by default. FTP (C) transfers files. SNMP (D) monitors and manages network device metrics, not interactive desktops.

  6. 55. A macOS user needs a utility to schedule automatic backups to an external drive so they can restore previous file versions. Which native tool should they use?

    • A. Time Machine
    • B. Disk Utility
    • C. Keychain Access
    • D. Spotlight
    Show answer & explanation

    Answer: A
    Time Machine is the built-in macOS backup tool for automatic, versioned backups to an external drive, so A is correct. Disk Utility (B) formats and repairs disks. Keychain Access (C) stores credentials. Spotlight (D) is the search feature, not a backup tool.

  7. 56. A Windows workstation must have a specific service stopped and prevented from restarting after reboot. Which approach accomplishes this?

    • A. Stopping the service and setting its startup type to disabled in the services management console
    • B. Ending the process in task manager only
    • C. Deleting the service's program files
    • D. Removing the user's permission to view the service
    Show answer & explanation

    Answer: A
    Stopping addresses the current session while the startup type governs behaviour at the next boot, so both are needed for a persistent change. Ending the process leaves the startup configuration intact, and deleting program files breaks the service in a way that generates errors rather than cleanly disabling it.

  8. 57. A technician needs to compare NTFS and FAT32 for a drive that will store files larger than 8 GB on a Windows system. Which applies?

    • A. NTFS, because FAT32 imposes a maximum individual file size of 4 GB
    • B. FAT32, because NTFS cannot store files above 4 GB
    • C. Either, since neither imposes a file size limit
    • D. FAT32, because it supports file-level permissions
    Show answer & explanation

    Answer: A
    The 4 GB per-file ceiling is FAT32's defining practical limitation, alongside its lack of journaling, file-level permissions, compression and encryption. FAT32 retains value only for cross-platform removable media where broad device compatibility outweighs those capabilities.

  9. 58. A user's files must be preserved while the operating system is reinstalled on the same drive. What distinguishes an in-place upgrade from a clean install here?

    • A. An in-place upgrade retains applications, settings and files, while a clean install removes them and requires restoring from backup
    • B. A clean install retains user files automatically
    • C. An in-place upgrade requires reformatting the drive
    • D. Neither approach affects user data
    Show answer & explanation

    Answer: A
    In-place upgrades preserve the existing environment but can also carry forward the corruption or misconfiguration that prompted the reinstall, which is why a clean install is preferred when the cause is unclear. Either way a verified backup is taken first, since an interrupted upgrade can leave the system in a state where neither the old nor the new installation boots.

  10. 59. A macOS user needs to force-quit an unresponsive application. Which utility is appropriate?

    • A. The Force Quit dialog or Activity Monitor, which lists running processes and their resource use
    • B. Disk Utility, which manages storage volumes
    • C. Time Machine, which manages backups
    • D. Keychain Access, which manages stored credentials
    Show answer & explanation

    Answer: A
    Activity Monitor is the macOS equivalent of task manager for inspecting and terminating processes. Disk Utility handles volume formatting and repair, Time Machine handles backup and restore, and Keychain Access stores credentials and certificates, each addressing a distinct maintenance area.

  11. 60. A Linux administrator must change a file's permissions so the owner can read, write and execute while the group and others can only read. Which numeric mode applies?

    • A. 744
    • B. 777
    • C. 644
    • D. 755
    Show answer & explanation

    Answer: A
    Read is 4, write is 2 and execute is 1, so read plus write plus execute is 7 for the owner and read alone is 4 for group and others, giving 744. Mode 755 would additionally grant execute to group and others, 644 omits execute for the owner, and 777 grants everything to everyone.

  12. 61. A Windows 11 PC has several system files reported as corrupted, causing intermittent application crashes. The technician wants to scan for and repair corrupted system files using a built-in command-line tool. Which command should be run?

    • A. diskpart clean
    • B. sfc /scannow
    • C. ipconfig /flushdns
    • D. chkdsk /x only
    Show answer & explanation

    Answer: B
    The System File Checker command scans protected system files for corruption and automatically repairs them using a cached copy, directly addressing corrupted system files; diskpart clean would destructively erase a disk's partitions, ipconfig /flushdns only clears the DNS resolver cache, and chkdsk primarily checks the file system and disk surface for errors rather than repairing corrupted Windows system files specifically.

  13. 62. An administrator wants a backup script to run automatically every night at 2 AM on a Windows Server without any manual intervention. Which built-in tool should be used to configure this?

    • A. Task Scheduler
    • B. Local Users and Groups
    • C. Device Manager
    • D. Disk Management
    Show answer & explanation

    Answer: A
    Task Scheduler allows an administrator to configure a script or program to run automatically at specified times or triggers, such as nightly at 2 AM, without manual intervention; Device Manager manages hardware drivers, Disk Management handles partitions and volumes, and Local Users and Groups manages account permissions, none of which provide time-based automated task execution.

  14. 63. An organization requires that every laptop's system drive be encrypted using Windows' native full-disk encryption feature. Which consideration determines whether a given Windows 11 laptop can use this feature natively?

    • A. The laptop must have at least four USB ports available for encryption keys.
    • B. The laptop must be disconnected from any domain or Microsoft account.
    • C. The laptop must be running an edition of Windows that includes BitLocker, such as Pro or Enterprise, rather than Home.
    • D. The laptop must have a mechanical hard drive rather than a solid-state drive.
    Show answer & explanation

    Answer: C
    BitLocker, the native Windows full-disk encryption feature, is included only in Pro, Enterprise, and Education editions of Windows, not in the Home edition, so edition matters when planning a fleet-wide encryption rollout; drive type, domain membership, and USB port count are not requirements for enabling BitLocker on a supported edition.

  15. 64. A Linux administrator needs to view a real-time, continuously updating list of running processes along with their CPU and memory usage from the command line. Which command is designed for this purpose?

    • A. top
    • B. ls -la
    • C. mkdir
    • D. chmod 755
    Show answer & explanation

    Answer: A
    The top command displays a continuously updating, real-time view of running processes along with their CPU and memory consumption, making it suited for live system monitoring; ls -la lists files and directories, mkdir creates a directory, and chmod changes file permissions, none of which provide any process monitoring information.

  16. 65. A Windows user wants to revert recent system changes and driver installations that caused instability, while keeping their personal files, installed applications, and settings intact. Which built-in recovery option best matches this goal?

    • A. Reset this PC with the 'Remove everything' option
    • B. System Restore to a restore point created before the changes
    • C. A clean installation of Windows from bootable media
    • D. Formatting the system drive and reinstalling all applications manually
    Show answer & explanation

    Answer: B
    System Restore reverts system files, installed drivers, and registry settings to an earlier restore point while leaving personal files and most user data untouched, making it ideal for undoing recent driver or system changes without disturbing everything else; 'Remove everything' resets and deletes user data and apps, and a clean install or manual reformat would also erase applications and require full reconfiguration.

  17. 66. A MacBook user wants automatic, ongoing backups of the whole system to an external drive using software already included with macOS. What should the technician set up?

    • A. Boot Camp
    • B. Disk Utility's First Aid
    • C. Mission Control
    • D. Time Machine
    Show answer & explanation

    Answer: D
    Time Machine is the built-in macOS backup service that keeps hourly, daily, and weekly snapshots on a designated external or network drive and restores files or whole systems. Boot Camp partitions the Mac to install Windows, First Aid checks and repairs disk structures without copying data anywhere, and Mission Control is a window and desktop management feature unrelated to backups.

Security

10 questions
  1. 67. A user calls saying a pop-up claims their PC is 'infected' and instructs them to call a phone number for paid support. The user has not run any scan. What should the technician suspect and advise?

    • A. It is a legitimate antivirus alert; the user should call the number
    • B. It is likely a social-engineering/scareware scam; do not call, close the browser and scan
    • C. The hard drive is failing and must be replaced
    • D. The pop-up means Windows Update is running
    Show answer & explanation

    Answer: B
    Unsolicited 'infected — call this number' pop-ups are classic scareware/tech-support scams, so B is correct: don't call, close the browser, and run a legitimate scan. It is not a real AV alert (A). It has nothing to do with drive failure (C) or Windows Update (D), which never demand a phone call.

  2. 68. A company wants to require a fingerprint plus a one-time code from an authenticator app before granting access to a sensitive system. Which security concept does this implement?

    • A. Single sign-on (SSO)
    • B. Multifactor authentication (MFA)
    • C. Least privilege
    • D. Data-at-rest encryption
    Show answer & explanation

    Answer: B
    Combining something you are (fingerprint) with something you have (authenticator code) is multifactor authentication, so B is correct. SSO (A) lets one login access many systems but is not inherently multifactor. Least privilege (C) limits access rights. Data-at-rest encryption (D) protects stored data, not the login method.

  3. 69. An organization is disposing of old hard drives that stored confidential data and must guarantee the data cannot be recovered, but the drives will be donated for reuse. Which method is most appropriate?

    • A. Deleting the files and emptying the Recycle Bin
    • B. A standard quick format
    • C. A secure multi-pass wipe/overwrite (drive sanitization)
    • D. Physically shredding the drives
    Show answer & explanation

    Answer: C
    A secure overwrite/sanitization renders data unrecoverable while keeping the drive usable for donation, so C is correct. Deleting files (A) and quick format (B) leave data recoverable. Physical shredding (D) does destroy the data but also destroys the drive, contradicting the reuse requirement.

  4. 70. To protect against unauthorized access to data if a company laptop is stolen, the technician wants the entire system drive encrypted so it cannot be read without the correct key or credentials. Which Windows feature provides this?

    • A. BitLocker
    • B. Windows Defender Firewall
    • C. User Account Control
    • D. Windows Update
    Show answer & explanation

    Answer: A
    BitLocker provides full-disk encryption, protecting data at rest on a stolen laptop, so A is correct. Windows Defender Firewall (B) filters network traffic. UAC (C) controls privilege elevation. Windows Update (D) patches software; none of these encrypt the drive.

  5. 71. A workstation displays browser pop-ups and redirects even when no browser is open. What is the most likely cause and appropriate first step?

    • A. Malware, which should be addressed by isolating the system from the network before beginning remediation
    • B. An incorrect default browser setting, corrected in system preferences
    • C. A failing hard drive, addressed by replacing the drive
    • D. An outdated graphics driver, addressed by updating it
    Show answer & explanation

    Answer: A
    Activity continuing with no browser running indicates resident malicious software rather than a browser configuration issue. Quarantining the system first prevents spread and stops the malware communicating outward while remediation proceeds, and the remediation sequence continues with scanning in a safe environment, cleaning, updating and educating the user.

  6. 72. A technician must securely dispose of drives containing sensitive data before recycling the hardware. Which method provides the strongest assurance?

    • A. Physical destruction such as shredding or degaussing for magnetic media, with a certificate of destruction retained
    • B. Deleting the files and emptying the recycle bin
    • C. Performing a quick format of the volume
    • D. Renaming the files to obscure their contents
    Show answer & explanation

    Answer: A
    Deletion and quick formatting remove file system references while leaving the data recoverable, so neither constitutes sanitization. Degaussing works on magnetic media but not on solid-state drives, which require cryptographic erase or physical destruction, and the certificate provides the evidence that disposal actually occurred.

  7. 73. A user needs to run a single application that requires administrative rights, on an account that is a standard user. What is the appropriate approach?

    • A. Elevate that specific application when needed, keeping the account a standard user for everyday work
    • B. Add the user to the local administrators group permanently
    • C. Disable user account control so no prompt appears
    • D. Share the built-in administrator account credentials with the user
    Show answer & explanation

    Answer: A
    Per-application elevation preserves least privilege while satisfying the requirement, whereas permanent administrator membership means every process the user runs, including malware, inherits those rights. Disabling the elevation prompt and sharing built-in credentials both remove accountability along with the control.

  8. 74. An employee receives an urgent email appearing to be from the company's CEO, demanding an immediate wire transfer and instructing the employee not to discuss it with anyone else first. Which social engineering technique does this scenario best illustrate?

    • A. A brute-force attack against the employee's email password.
    • B. A denial-of-service attack against the company's mail server.
    • C. Business email compromise using urgency and authority impersonation to pressure quick action.
    • D. A man-in-the-middle attack intercepting the employee's network traffic.
    Show answer & explanation

    Answer: C
    This scenario exhibits classic business email compromise tactics, impersonating an authority figure and creating false urgency plus secrecy to bypass normal verification and pressure the target into acting quickly without questioning the request; it involves no password cracking, server flooding, or traffic interception, which distinguishes it from brute-force, denial-of-service, or man-in-the-middle attacks.

  9. 75. A network administrator configures a firewall to deny all inbound traffic by default and only explicitly allow the specific ports required for approved services. Which security principle does this configuration best demonstrate?

    • A. Non-repudiation, by ensuring actions can be traced to a specific user.
    • B. Redundancy, by providing a backup path if the primary firewall fails.
    • C. Load balancing, by distributing traffic across multiple servers.
    • D. Least privilege, by minimizing exposed attack surface to only what is necessary.
    Show answer & explanation

    Answer: D
    Denying everything by default and allowing only explicitly required ports minimizes the number of open pathways an attacker could exploit, which is the essence of the least-privilege principle applied to network access; this configuration does not address user accountability, provide failover redundancy, or distribute traffic load, so those principles don't describe what is being demonstrated here.

  10. 76. A business wants visiting guests to access the internet over Wi-Fi without being able to reach internal file servers or printers on the corporate network. Which approach best achieves this separation?

    • A. Place guest Wi-Fi on a separate VLAN isolated from the internal corporate network segments.
    • B. Give guests the same SSID and password as employees but a slower bandwidth cap.
    • C. Disable DHCP on the guest network so devices cannot obtain an IP address.
    • D. Require guests to install the corporate VPN client before connecting.
    Show answer & explanation

    Answer: A
    Placing guest Wi-Fi on its own VLAN logically separates guest traffic from internal corporate resources at the network layer, allowing internet access while preventing guests from reaching internal servers and printers; sharing the same network with a bandwidth cap does not isolate traffic, disabling DHCP would prevent guests from connecting at all, and requiring a corporate VPN would actually grant guests access to internal resources, the opposite of the goal.

Software troubleshooting

6 questions
  1. 77. Users report that after clicking a link in an email, their browser homepage changed, ads appear constantly, and searches redirect to unfamiliar sites. Which malware category best describes this behavior?

    • A. Ransomware
    • B. Rootkit
    • C. Browser hijacker / adware (PUP)
    • D. Logic bomb
    Show answer & explanation

    Answer: C
    Changed homepage, constant ads, and search redirection are signature behaviors of a browser hijacker/adware, so C is correct. Ransomware (A) encrypts files and demands payment. A rootkit (B) hides itself for stealthy access. A logic bomb (D) triggers a payload on a condition, not persistent ad redirection.

  2. 78. A Windows PC is confirmed infected with malware. Per the CompTIA best-practice malware-removal steps, what should be done BEFORE running remediation tools?

    • A. Immediately reinstall Windows from scratch
    • B. Quarantine the infected system and disable System Restore before remediation
    • C. Enable System Restore to create more restore points
    • D. Connect the machine to the corporate network to update it
    Show answer & explanation

    Answer: B
    The best-practice sequence quarantines the system (to stop spread) and disables System Restore (so malware isn't preserved in restore points) before remediating, so B is correct. Reinstalling immediately (A) is a last resort, not the required prior step. Enabling more restore points (C) can preserve the infection. Reconnecting to the network (D) risks spreading it.

  3. 79. An Android user reports that a specific app repeatedly crashes on launch after a recent update, while other apps work fine. What is the most appropriate first troubleshooting step?

    • A. Factory reset the entire device
    • B. Clear the app's cache/data, then update or reinstall the app
    • C. Replace the device battery
    • D. Flash a custom ROM
    Show answer & explanation

    Answer: B
    For a single misbehaving app, clearing its cache/data and reinstalling addresses corrupt app files with the least disruption, so B is correct. A factory reset (A) is drastic for one app. A battery swap (C) is unrelated to app crashes. Flashing a custom ROM (D) is risky, voids warranties, and is not a support step.

  4. 80. A user's applications launch slowly and the drive activity light is constantly lit on a system with a mechanical hard drive. What should be checked?

    • A. Available free space, drive health indicators and whether excessive paging is occurring due to insufficient memory
    • B. The monitor's refresh rate
    • C. The keyboard layout setting
    • D. The number of installed fonts
    Show answer & explanation

    Answer: A
    Constant drive activity with slow response typically means the system is paging because physical memory is exhausted, or the drive is failing and retrying reads. Checking drive health attributes distinguishes the two, and a nearly full drive compounds both by leaving no room for the page file to expand.

  5. 81. A recently updated application fails to launch on a Windows 10 PC, showing an error that it requires a newer version of the operating system. Reinstalling the application does not resolve the issue. What is the most appropriate next troubleshooting step?

    • A. Run the application in compatibility mode for an older Windows version.
    • B. Check whether the application actually requires a Windows version or feature not present on this PC, and update Windows or use a supported application version.
    • C. Disable the PC's antivirus software permanently to allow the application to run.
    • D. Replace the PC's power supply to resolve the software error.
    Show answer & explanation

    Answer: B
    An explicit error stating the application requires a newer OS version points directly to a compatibility requirement mismatch, so the appropriate step is verifying and addressing that requirement, either by updating Windows or using a version of the application compatible with the current OS; compatibility mode simulates older, not newer, OS behavior, so it would not help here, and antivirus or power supply changes are unrelated to an OS version requirement error.

  6. 82. A user's web browser has become noticeably slow to load pages and occasionally freezes, despite a fast internet connection and no other applications running. What should the technician try first?

    • A. Reinstall the entire operating system to fix the browser's performance.
    • B. Replace the computer's network interface card.
    • C. Clear the browser's cache and disable or remove unnecessary extensions and add-ons.
    • D. Increase the monitor's refresh rate setting.
    Show answer & explanation

    Answer: C
    A slow, freezing browser despite good connectivity and no competing applications commonly results from an overloaded cache or resource-heavy extensions running in the background, so clearing cached data and disabling unnecessary add-ons is a quick, low-risk first step; reinstalling the OS is excessive for a browser-specific issue, and neither the network card nor monitor refresh rate affects browser rendering performance in this scenario.

Operational procedures

18 questions
  1. 83. When a technician arrives at a customer's desk to work on their computer, which behavior best reflects CompTIA's professionalism and communication expectations?

    • A. Use technical jargon to demonstrate expertise
    • B. Set and meet expectations, communicate in clear terms the user understands, and avoid distractions
    • C. Take a personal phone call while working to stay reachable
    • D. Access the user's personal files out of curiosity
    Show answer & explanation

    Answer: B
    Professional conduct means communicating clearly, setting/meeting expectations, and avoiding distractions, so B is correct. Using jargon (A) confuses the customer. Taking personal calls (C) is a distraction and unprofessional. Browsing personal files (D) violates privacy and confidentiality.

  2. 84. A data center technician must handle sensitive circuit boards and memory modules during an upgrade. Which precaution most directly prevents electrostatic discharge (ESD) damage to components?

    • A. Wearing an anti-static wrist strap connected to a proper ground
    • B. Wearing rubber-soled shoes on carpet
    • C. Increasing the room's heating to keep components warm
    • D. Holding boards firmly by their gold edge connectors
    Show answer & explanation

    Answer: A
    A grounded anti-static wrist strap safely equalizes charge between the technician and equipment, preventing ESD, so A is correct. Rubber soles on carpet (B) can build static charge. Higher heat (C) does not prevent ESD (low humidity actually worsens it). Touching gold edge connectors (D) can contaminate/damage contacts and does not prevent ESD.

  3. 85. An organization wants a documented process so that all proposed modifications to production systems are reviewed, approved, and can be rolled back if they cause problems. Which operational practice does this describe?

    • A. Change management
    • B. Incident response
    • C. Asset tagging
    • D. End-user acceptance testing only
    Show answer & explanation

    Answer: A
    A formal review/approval/rollback process for system changes is change management, so A is correct. Incident response (B) handles security events after they occur. Asset tagging (C) tracks inventory. Acceptance testing alone (D) is one activity, not the governing approval-and-rollback process.

  4. 86. Earning the CompTIA A+ certification requires which of the following?

    • A. Passing a single 90-minute exam
    • B. Passing two separate exams, Core 1 (220-1201) and Core 2 (220-1202), which may be taken in any order
    • C. Passing Core 1 before Core 2 in a required order
    • D. Completing an unproctored online course only
    Show answer & explanation

    Answer: B
    A+ requires passing both Core 1 and Core 2, and candidates may take them in any order, so B is correct. It is not a single exam (A). The order is not fixed — Core 1 need not precede Core 2 (C). It is not earned by a course alone (D); exams are required.

  5. 87. Regarding the A+ Core 1 (220-1201) exam format, which statement about the number of questions and time limit is correct?

    • A. A maximum of 90 questions with 90 minutes to complete the exam
    • B. A maximum of 60 questions with 120 minutes
    • C. Exactly 100 questions with 60 minutes
    • D. A maximum of 90 questions with 45 minutes
    Show answer & explanation

    Answer: A
    Core 1 contains a maximum of 90 questions and candidates are given 90 minutes, so A is correct. The other options misstate either the question count or the time limit and contradict the published exam objectives.

  6. 88. On the A+ Core 1 exam, which content domain carries the greatest weight, and approximately what percentage is it?

    • A. Hardware, at 25%
    • B. Networking, at 23%
    • C. Hardware and network troubleshooting, at 28%
    • D. Virtualization and cloud computing, at 11%
    Show answer & explanation

    Answer: C
    Hardware and network troubleshooting is the highest-weighted Core 1 domain at 28%, so C is correct. Hardware is 25% (A), Networking is 23% (B), and Virtualization and cloud computing is only 11% (D) — all lower than troubleshooting.

  7. 89. Toner has spilled inside a laser printer. How should it be cleaned?

    • A. With a standard office vacuum cleaner
    • B. With a vacuum rated for toner, using cold water if it contacts skin or clothing, since heat fuses the particles
    • C. With hot water and detergent
    • D. By blowing it out with compressed air indoors
    Show answer & explanation

    Answer: B
    Toner particles are fine enough to pass through a standard vacuum's filter and can damage the motor, so a toner-rated vacuum is required. Toner is designed to fuse with heat, which is why hot water sets it permanently into fabric, and compressed air disperses it into the air and across the room.

  8. 90. A technician is about to work inside a desktop computer. Which practice addresses electrostatic discharge?

    • A. Using an anti-static wrist strap connected to a proper ground, and handling boards by their edges
    • B. Working on a carpeted floor to insulate the components
    • C. Wearing rubber gloves to prevent any conduction
    • D. Increasing the room temperature to reduce humidity
    Show answer & explanation

    Answer: A
    A wrist strap equalizes potential between the technician and the equipment so no discharge occurs, which insulation does not achieve since the charge simply accumulates instead. Carpet generates static and low humidity increases it, so both listed alternatives worsen the exact risk they claim to address.

  9. 91. A workstation must be disposed of and contains a lithium-ion battery and a CRT monitor. What governs disposal?

    • A. Local regulations and the manufacturer's safety data sheet, since both items are regulated waste that cannot go to general refuse
    • B. Standard office waste procedures, since the equipment is obsolete
    • C. The organization's internal preference alone
    • D. No requirements apply once data has been erased
    Show answer & explanation

    Answer: A
    Batteries and CRT monitors contain hazardous materials subject to disposal regulation independent of any data on the device. The safety data sheet documents handling, storage and disposal requirements for the specific material, and data sanitization is a separate obligation addressing a different risk entirely.

  10. 92. A user calls about an issue while the technician is finishing another task. What is the appropriate professional conduct?

    • A. Acknowledge the user, set a realistic expectation for when the issue will be addressed, and follow through
    • B. Promise immediate attention regardless of current commitments
    • C. Avoid responding until the current task is complete
    • D. Redirect the user to solve the issue themselves
    Show answer & explanation

    Answer: A
    Communication expectations centre on setting and meeting realistic timelines rather than on promising speed that cannot be delivered. An unmet promise damages credibility more than an honest wait time, and silence leaves the user unable to plan around the outage.

  11. 93. A technician discovers apparently illegal content while servicing a user's computer. What is the correct action?

    • A. Preserve the device state, report through the organization's defined chain of custody process, and avoid further examination
    • B. Delete the content and continue the repair
    • C. Investigate further to confirm what was found
    • D. Discuss the finding with colleagues before deciding
    Show answer & explanation

    Answer: A
    Prohibited content triggers a defined escalation with documented custody, and further examination by an unqualified technician can compromise both the evidence and the technician's position. Deleting it destroys evidence and discussing it informally breaches confidentiality around what may become a legal matter.

  12. 94. A technician documents a completed repair. Why does this step matter beyond the individual ticket?

    • A. Because it builds a knowledge base that shortens future diagnosis and reveals recurring patterns across the estate
    • B. Because documentation is required to close the billing record only
    • C. Because it transfers responsibility for the fault to the user
    • D. Because it is required only for warranty claims
    Show answer & explanation

    Answer: A
    Documented findings turn one technician's diagnosis into an organizational asset and surface patterns invisible in any single ticket, such as a batch of failing units or a recurring driver conflict. Without it, the same problem is rediagnosed from scratch each time it recurs.

  13. 95. A change to a production system is proposed. What should a change request include before approval?

    • A. The purpose and scope, a risk analysis, the implementation plan and a rollback plan if the change fails
    • B. Only the name of the technician performing the change
    • C. Only the scheduled date and time
    • D. Only confirmation that a backup exists
    Show answer & explanation

    Answer: A
    The rollback plan is the element most often omitted and the one that matters most when a change goes wrong at three in the morning. Scope and risk analysis let the approver judge whether the change is proportionate, and end-user acceptance criteria define what a successful outcome looks like.

  14. 96. A technician resolves a recurring hardware issue using a novel workaround not found in existing documentation. Beyond closing the ticket, what should the technician do to benefit future support staff facing the same issue?

    • A. Keep the solution informal and share it verbally only if asked.
    • B. Delete the ticket once resolved to keep the system uncluttered.
    • C. Wait for a supervisor to independently discover and document the same solution.
    • D. Document the issue and resolution in the knowledge base so other technicians can reference it for similar future problems.
    Show answer & explanation

    Answer: D
    Recording a novel resolution in a shared knowledge base ensures the organization retains institutional knowledge and allows other technicians to resolve similar issues faster in the future, which is a core best practice in IT support documentation; relying on verbal sharing, deleting records, or waiting for someone else to rediscover the fix all fail to preserve or propagate the solution effectively.

  15. 97. A technician needs to move a heavy tower server from a lower rack position to a higher one by hand. Which practice best reduces the risk of personal injury during this task?

    • A. Bend at the knees, keep the load close to the body, and get help or use a lift for heavy items.
    • B. Lift quickly using the back to minimize the time spent in a bent position.
    • C. Twist at the waist while lifting to place the server directly into position in one motion.
    • D. Lift the server using one hand while holding cables with the other for balance.
    Show answer & explanation

    Answer: A
    Proper lifting technique for heavy equipment involves bending at the knees rather than the back, keeping the load close to the body's center of gravity, and requesting assistance or mechanical aid for items too heavy to lift safely alone, which reduces strain and injury risk; lifting with the back, twisting while loaded, or using only one hand are all recognized unsafe practices that increase the risk of back injury or dropping the equipment.

  16. 98. A technician needs to know the specific first-aid response and safe handling precautions for a chemical cleaning solvent used in the shop before using it on a repair. Where should the technician look for this information?

    • A. The device manufacturer's warranty terms.
    • B. The Safety Data Sheet (SDS) for that specific chemical product.
    • C. The operating system's event viewer logs.
    • D. The company's general employee handbook table of contents.
    Show answer & explanation

    Answer: B
    A Safety Data Sheet provides detailed information specific to a chemical product, including composition, handling precautions, and first-aid measures, making it the authoritative source for this need; a warranty document addresses product coverage, the event viewer records system or software events unrelated to chemical safety, and a general employee handbook typically lacks the detailed chemical-specific safety data provided by an SDS.

  17. 99. While repairing a customer's computer, a technician discovers files that appear to be evidence of illegal activity. After reporting it through proper channels, what is essential regarding how the device is subsequently handled?

    • A. Immediately delete the suspicious files to protect the customer's privacy.
    • B. Return the device to the customer right away so they are not without their computer.
    • C. Continue using the device normally for further repair work since the report has already been filed.
    • D. Maintain a documented chain of custody, limiting access to the device until authorities have addressed the matter.
    Show answer & explanation

    Answer: D
    Once evidence of illegal activity is identified and reported, maintaining a documented chain of custody with restricted access is essential to preserve the integrity of that evidence for any investigation; continuing normal use could alter or destroy evidence, deleting files would constitute tampering and potentially obstruction, and returning the device before authorities address the matter could result in loss of evidence and legal complications for the shop.

  18. 100. A server room's temperature and humidity monitoring system alerts that humidity has dropped significantly below the recommended range during winter. What risk does excessively low humidity primarily introduce to the equipment?

    • A. Increased risk of corrosion from condensation forming on circuit boards.
    • B. Increased risk of mold growth on cabling and connectors.
    • C. Increased risk of the equipment's fans running too loudly.
    • D. Increased risk of electrostatic discharge damaging sensitive components.
    Show answer & explanation

    Answer: D
    Low humidity dries out the air, which increases the buildup and discharge of static electricity, raising the risk of electrostatic discharge damaging sensitive electronic components; condensation and mold risks are associated with high, not low, humidity, and humidity level does not directly affect fan noise, making ESD the primary concern in an overly dry server room environment.

2026 statistics

Key facts: CompTIA A+ exam

Questions
90
Time limit
1h 30m
Passing score
Core 1 (220-1201): 675 on a scale of 900
Governing body
CompTIA

This free CompTIA A+ practice test has 303 original questions written to CompTIA's official content outline, last checked against it on August 6, 2026, 100 of them listed on this page and the rest loaded by the drill. Every question shows a worked explanation, and nothing here requires a signup.

The questions are grouped under nine outline areas: Hardware, Mobile devices, Networking, Virtualization and cloud computing, Hardware and network troubleshooting, Operating systems, Security, Software troubleshooting and Operational procedures.

How the CompTIA A+ practice bank covers the outline

303 questions across 9 outline areas — the same areas the page's sections use.

Counts are the live question bank, grouped by the outline area each question was written to.

303 questions across nine outline areas. The largest, Operating systems, holds 46 questions (15%); the page's sections follow the same split.
Exam format and study resources

Get a free CompTIA A+ study plan

A week-by-week plan plus new practice questions, straight to your inbox.

Official sources

Primary documents used to verify the exam details shown on this page.

Last verified against the official exam content outline:

Frequently asked questions

Do I have to pass two exams to earn CompTIA A+, and can I take them in either order?

Yes. CompTIA A+ certification requires passing two separate exams: Core 1 (220-1201) and Core 2 (220-1202). Candidates may take the two A+ exams in any order. Because Core 1 focuses on hardware and networking while Core 2 focuses on operating systems and security, many candidates schedule them close together but sequence them around whichever domain set they feel more prepared for first.

What score do I need to pass each A+ exam, and are the passing marks the same for both?

No, the two cutoffs differ. The passing score for A+ Core 1 is 675 on a scale of 900, while the passing score for A+ Core 2 is 700 on a scale of 900. Because both exams are scored out of 900, Core 2 requires a slightly higher raw performance to pass, so don't assume a comfortable Core 1 result guarantees the same margin on Core 2.

How many questions are on each A+ exam and how long do I get?

Each A+ exam contains a maximum of 90 questions and allows 90 minutes per exam. That works out to roughly one minute per question if the exam is at its maximum length, so budget your time on performance-based items and flag longer questions to revisit rather than stalling on them.

Once I earn A+, how long is it valid and do I have to retake the exams to keep it?

CompTIA A+ certification is valid for three years from the certification date, and the Continuing Education renewal cycle is three years from the date the certification is earned. You do not have to sit the exams again: A+ may be renewed by earning Continuing Education Units (CEUs) without retaking the exam. Plan to accumulate CEUs across the three-year window rather than scrambling near expiration.