CompTIA A+ Core 2 (220-1202) A+ Study Guide & Exam Notes Operating Systems | Security | Software Troubleshooting | Operational Procedures 90 Questions • 90 Minutes • Passing Score 700 / 900 Exam Snapshot Detail Value Exam code 220-1202 (Core 2, V15) Companion exam Must also pass Core 1 (220-1201) for certification Questions Maximum of 90 (multiple-choice + performance-based, PBQs) Time limit 90 minutes Passing score 700 on a scale of 100-900 Recommended experience ~12 months hands-on IT support experience Domain Weighting # Domain Weight 1.0 Operating Systems 28% 2.0 Security 28% 3.0 Software Troubleshooting 23% 4.0 Operational Procedures 21% EXAM TIP: Operating Systems and Security together make up 56% of the exam — anchor your study time there first. How to Use This Guide This guide is organized by the four official Core 2 domains. Each objective lists the concepts you need cold, grouped facts/comparisons, and an exam tip flagging common trick-question traps. Read a domain, then close the PDF and try to rebuild the bullet points from memory — active recall beats re-reading. 1.0 Operating Systems (28%) 1.1 Common OS Types and Their Purposes Workstation OS: • Windows (Home/Pro/Pro for Workstations/Enterprise) — Pro adds BitLocker, Remote Desktop (host), Group Policy Editor, Hyper-V; Enterprise adds volume licensing, AppLocker, BranchCache. • macOS — Unix-based (BSD), uses Finder, APFS file system, Time Machine backups, Keychain for credentials, Gatekeeper for app security. • Linux — Open source, distros (Ubuntu, Fedora, Debian, RHEL), package managers apt/yum/dnf, uses ext4/XFS file systems. • Chrome OS — Lightweight, cloud-centric, Linux-kernel based, runs Android/Linux apps in containers. Mobile & Server OS: • iOS/iPadOS — closed source, single app store, sandboxed apps. • Android — open source (AOSP), side-loading allowed, more customizable, fragmented updates. • Windows Server — Active Directory Domain Services, DNS/DHCP roles, GPOs for centralized management. EXAM TIP: 32-bit systems max out at 4 GB RAM and use x86 architecture; 64-bit (x64) supports far more RAM and is required for modern editions of Windows 10/11. 1.2 OS Installations and Upgrades • Boot methods: USB, optical, PXE (network boot), internet-based (Windows Recovery), external drive. • Types of installation: unattended (answer file), in-place upgrade (keeps files/apps/settings), clean install, repair install, multiboot, remote network install, image deployment. • Partitioning: GPT (GUID Partition Table, supports UEFI, >2 TB drives, up to 128 partitions) vs. MBR (legacy BIOS, 4 primary partitions max, 2 TB limit). • File systems: NTFS (Windows default, permissions + encryption + journaling), FAT32 (4 GB file size limit, cross-platform), exFAT (no file size limit, flash drives), ext4 (Linux), APFS (macOS). • Upgrade considerations: check hardware compatibility, backup first, verify app/driver compatibility, ensure sufficient free space. EXAM TIP: A clean install wipes the drive; an in-place upgrade preserves user data/settings — know which scenario calls for which. 1.3 Features of Microsoft Windows Editions Feature Home Pro Pro for Workstations Enterprise BitLocker No Yes Yes Yes Remote Desktop (host) No Yes Yes Yes Group Policy Editor No Yes Yes Yes Domain Join No Yes Yes Yes Max RAM 128 GB 2 TB 6 TB 6 TB BranchCache/AppLocke r No No No Yes 1.4 macOS & Linux Features and Tools • macOS tools: Finder, Spotlight (search), Time Machine (backup), Disk Utility, Force Quit, Terminal, System Settings, Keychain Access, FileVault (full-disk encryption), Screen Sharing, iCloud, Migration Assistant, Boot Camp. • macOS gestures: multi-touch trackpad gestures, Mission Control, Launchpad, Dock. • Linux tools: shell/terminal, package managers (apt, yum, dnf, pacman), file editors (vi/vim, nano). Common Linux commands: Command Purpose ls list directory contents pwd print working directory cd change directory cp / mv / rm copy / move / remove files chmod change file permissions (rwx) chown change file owner/group ps / top view running processes grep search text within files sudo run command as superuser apt / yum / dnf install/update packages man display manual/help for a command EXAM TIP: chmod 755 = owner rwx, group r-x, other r-x. Memorize: read=4, write=2, execute=1 (added together). 1.5 Application Installation & Management • System requirements: check RAM, storage, OS version, drivers, and dependencies before installing. • Distribution methods: physical media, downloadable/ISO, app store (Microsoft Store, App Store, Play Store), enterprise deployment (SCCM/Intune, MDM). • Other considerations: impact on device (storage/battery/network), impact to network (bandwidth), impact to operation (compatibility with legacy apps). 1.6 Cloud-Based Productivity Tools • Document/spreadsheet/presentation software: Microsoft 365, Google Workspace (cloud-native, real-time collaboration, auto-save/version history). • Cloud file storage: OneDrive, Google Drive, iCloud, Dropbox — sync clients, selective sync, shared links. • Collaboration: Teams, Slack, video conferencing platforms — screen sharing, chat, calendar integration. 1.7 Microsoft Windows Networking Features • Workgroup vs. Domain: Workgroup = peer-to-peer, local accounts, best for ≤20 PCs (SOHO); Domain = centralized Active Directory, single sign-on, GPOs. • HomeGroup (deprecated) replaced by simpler sharing in modern Windows. • Network shares: mapped drives, administrative shares (C$, ADMIN$), UNC paths (\\server\share). • Network types: Public, Private, Domain profile — controls firewall behavior/discoverability. • Firewall settings: inbound/outbound rules, exceptions, port configuration. • Configuring an alternative IP address: static IP, DNS, subnet mask, default gateway; APIPA (169.254.x.x) indicates DHCP failure. • VPN and proxy settings for remote connectivity. • Wireless networking: SSID, WPA2/WPA3 configuration, connecting/troubleshooting adapters. EXAM TIP: An IP address in the 169.254.x.x range (APIPA) means the client could not reach a DHCP server — check the DHCP server/network path first. 1.8 Application Installations and Configurations • System requirements for applications: 32-bit vs. 64-bit, dedicated GPU, RAM, storage type (SSD vs HDD), internet connectivity for licensing/activation. • Installation methods: local (USB/optical), network-based, cloud-based. • Other considerations: licensing (single-use, volume, subscription), storage, security (source verification, digital signatures). 1.9 Common OS Features and Tools (Windows) Tool Purpose Task Manager View/end processes, startup apps, performance (CPU/RAM/GPU/disk), users, services Device Manager View/update/roll back/disable drivers; resolve resource conflicts Disk Management Partition, format, shrink/extend, assign drive letters, initialize new disks Event Viewer Review Application/Security/System logs for errors and warnings services.msc Start/stop/configure Windows services and startup type msconfig (System Configuration) Boot options, services, startup items (legacy) Tool Purpose regedit Edit the Windows Registry (HKLM, HKCU, etc.) — use with caution, back up first Control Panel / Settings app Legacy vs. modern configuration interfaces MMC (Microsoft Management Console) Container for admin snap-ins (Device Mgr, Disk Mgmt, etc.) Performance Monitor / Resource Monitor Detailed real-time and logged performance metrics Group Policy Editor (gpedit.msc) Configure local/domain security & user policies Indexing Options Manage Windows Search index locations EXAM TIP: Know which tool solves which problem: driver conflict → Device Manager; service won't start → services.msc; app crash history → Event Viewer. 1.10 Windows Settings • Time & Language, Update & Security, Accounts, Devices, Network & Internet, Personalization, Apps, Privacy — modern Settings app categories replacing most Control Panel functions. • Ease of Access / Accessibility — Narrator, Magnifier, high contrast, sticky keys. • Windows Update: quality vs. feature updates, pause updates, update history, WSUS in enterprise environments. 1.11 Windows OS Files, Folders, and Commands Command Purpose dir list directory contents cd / chdir change directory md / mkdir make new directory rmdir / rd remove directory copy / xcopy / robocopy copy files (robocopy = robust, resumable copy) del delete file(s) format format a drive/partition diskpart advanced disk/partition management (CLI) chkdsk check and repair file system errors sfc /scannow scan and repair protected system files DISM repair the Windows image/component store ipconfig /all, /release, /renew, /flushdns view/release/renew IP config, clear DNS cache ping / tracert / netstat / nslookup connectivity test / trace route / connections / DNS lookup net use / net user map network drives / manage local user accounts gpupdate /force immediately reapply Group Policy shutdown /r /t 0 restart immediately taskkill / tasklist end / list running processes from CLI EXAM TIP: sfc /scannow checks core system files; DISM repairs the underlying Windows image that sfc pulls from — run DISM first if sfc reports it 'could not fix' errors. 1.12 Windows OS: Control Panel & Boot Recovery • Advanced Startup Options (WinRE): Startup Repair, System Restore, System Image Recovery, Command Prompt, Uninstall Updates, UEFI Firmware Settings, Safe Mode. • Safe Mode variants: Safe Mode, Safe Mode with Networking, Safe Mode with Command Prompt. • Boot Configuration Data (BCD): managed via bcdedit or msconfig's Boot tab. • System Restore: reverts system files/settings/registry to a restore point (does not affect personal files). EXAM TIP: System Restore ≠ backup: it rolls back system state/settings, not personal documents. 2.0 Security (28%) 2.1 Physical Security Measures • Access control: badge readers, biometrics (fingerprint, retina, facial), locking racks/cabinets, mantraps, access control vestibules. • Video/monitoring: CCTV/security cameras, motion sensors. • Other: door locks (key, cipher, smart), guards, alarm systems, asset tags, cable locks (laptops), privacy/anti-glare screens, key fobs, USB port locks. 2.2 Logical Security Concepts • AAA: Authentication (who you are), Authorization (what you can access), Accounting (logging actions). • MFA factors: something you know (password/PIN), something you have (token/smart card), something you are (biometric), somewhere you are (geolocation). • Principle of least privilege: grant only the minimum access needed. • Access control lists (ACLs), zero trust, mobile device management (MDM), certificates, directory permissions, VPN, encryption (full disk, file-level), hashing. • Firewalls (host-based) and antivirus/anti-malware as endpoint controls. EXAM TIP: Least privilege and zero trust are frequently tested concepts — remember: zero trust means 'never trust, always verify,' regardless of network location. 2.3 Wireless Security Protocols & Authentication Protocol Notes WEP Obsolete/insecure — never use WPA Improved over WEP, uses TKIP — still weak, deprecated WPA2 AES/CCMP encryption — long-time standard WPA3 Current standard — SAE replaces PSK handshake, stronger against offline attacks 802.1X / RADIUS Enterprise authentication — per-user credentials via a AAA server EAP / PEAP Extensible Authentication Protocol methods used with 802.1X EXAM TIP: WPA2/WPA3-Personal use a Pre-Shared Key (PSK); WPA2/WPA3-Enterprise use 802.1X with a RADIUS server for per-user auth — know the distinction. 2.4 Malware Types, Detection, Removal, Prevention • Types: virus, worm (self-replicating, no host file needed), trojan (disguised as legit software), ransomware (encrypts data for payment), keylogger, rootkit (kernel-level, hides from OS), spyware, cryptomining malware, boot sector virus, fileless malware. • Detection/removal tools: anti-malware/antivirus (signature + heuristic scanning), Windows Defender, rootkit removal (may require boot media), pre-boot scans. • 7-step malware removal process (know this order!): 1. Investigate/verify malware symptoms → 2. Quarantine infected system → 3. Disable System Restore → 4. Remediate (update AV, scan/remove) → 5. Schedule scans and run updates → 6. Enable System Restore, create restore point → 7. Educate the end user EXAM TIP: This 7-step sequence is a classic exam question — memorize the exact order, especially that System Restore is disabled BEFORE remediation and re-enabled AFTER. 2.5 Social Engineering, Threats, and Vulnerabilities • Phishing — fraudulent email; spear phishing — targeted at a specific person; whaling — targets executives. • Vishing — voice/phone-based phishing; smishing — SMS-based phishing. • Shoulder surfing — visually observing credentials; tailgating/piggybacking — following someone through a secured door. • Impersonation, dumpster diving, pretexting, watering hole attack, evil twin (rogue AP mimicking legit SSID). • Threats/vulnerabilities: zero-day, DDoS, on-path (man-in-the-middle), brute force, dictionary attack, insider threat, non-compliant systems (unpatched), zombie/botnet, SQL injection, cross-site scripting. EXAM TIP: Social engineering exploits human trust, not technical flaws — the fix is user education and verification procedures, not just software. 2.6 SOHO Wired/Wireless Security • Change default credentials on routers/APs immediately. • Disable unused ports/services — UPnP, WPS (vulnerable to brute force), remote administration. • Firmware updates, MAC filtering, disabling SSID broadcast (obscurity only, not real security), guest network isolation. • Content filtering / parental controls, port forwarding vs. port triggering, screened subnet (DMZ) for SOHO edge devices. • Firewall rules: allow/deny lists, stateful vs. stateless inspection. 2.7 Browser Security Settings • Certificate/HTTPS validation, trusted/restricted zones (IE/Edge legacy), pop-up blockers, private/incognito browsing. • Clearing cache/cookies/history, extensions/plug-in management, password managers, ad blockers. • Secure connection indicators: padlock icon, certificate warnings — never bypass invalid cert warnings on sensitive sites. 2.8 Windows OS Security Settings • User account types: Administrator (full control) vs. Standard user (limited, run apps/change some settings but not system-wide changes). • NTFS permissions: Full Control, Modify, Read & Execute, List Folder Contents, Read, Write — permissions are cumulative, but explicit Deny always overrides Allow. • Share permissions: Full Control, Change, Read — when share and NTFS permissions conflict, the MOST RESTRICTIVE wins. • Local Security Policy, User Account Control (UAC), BitLocker/BitLocker To Go, Windows Defender Firewall, Windows Hello (biometric sign-in). • EFS (Encrypting File System) — file/folder-level encryption tied to the user account. EXAM TIP: Classic exam scenario: a user has Share=Read and NTFS=Full Control accessing over the network → effective access is Read (most restrictive of the two applies for network access). 3.0 Software Troubleshooting (23%) Core Process The CompTIA Troubleshooting Methodology 1. Identify the problem → 2. Establish a theory of probable cause (question the obvious) → 3. Test the theory to determine cause → 4. Establish a plan of action & identify potential effects → 5. Implement the solution or escalate → 6. Verify full system functionality & implement preventive measures → 7. Document findings, actions, and outcomes. EXAM TIP: This 6-step (sometimes listed as 7-step) methodology appears in nearly every troubleshooting scenario question — memorize the exact order, it's tested directly. 3.1 Common Windows OS Issues • Blue Screen of Death (BSOD)/Stop errors — often driver or hardware related; check Event Viewer/Reliability Monitor. • Slow performance, freezing, application crashes — check Task Manager for resource hogs, background processes. • Boot problems: missing OS, boot device not found, corrupt boot files — use WinRE/Startup Repair, bootrec commands. • Service/application won't start — check services.msc, dependencies, Event Viewer. • Time drift, print spooler service errors, USB controller resets, blue/black screen, no OS found, RAID failure. • High resource utilization (CPU/RAM/disk/network) — use Task Manager / Resource Monitor to isolate the process. 3.2 Common Mobile OS & App Issues • App fails to launch/close/update, high resource usage, battery drain, overheating. • Connectivity issues: Wi-Fi, Bluetooth, cellular data — toggle radios, check APN settings, reset network settings. • Screen/touch issues, GPS not functioning, sync issues (contacts/calendar/email). • Common fixes: force close app, restart device, clear cache, reinstall app, update OS, factory reset (last resort). 3.3 Mobile OS & App Security Issues • Signs of compromise: unexpected data usage spikes, unauthorized account access, unexpected app permission requests, rapid battery drain, pop-ups, unauthorized purchases. • Unauthorized location tracking, unauthorized camera/mic activation, high network traffic, leaked personal files/data. • Remediation: restrict app permissions, uninstall malicious apps, factory reset if compromised, update OS/apps, enable remote wipe via MDM. 3.4 Common PC Security Issues • Symptoms of infection: pop-ups, browser redirection, security alerts disabled, slow performance, unwanted/renamed system files, unexplained new processes, disappearing files, file permission changes. • Certificate warnings, OS update failures, rogue antivirus, ransomware note/lock screen, unusual network traffic. • Response: isolate the machine from the network, run the 7-step malware removal process (see 2.4), verify functionality, document. EXAM TIP: If a machine shows ransomware symptoms, the FIRST step is to isolate it from the network to stop lateral spread — don't power it off if forensic evidence preservation matters, but for the exam, containment comes first. Bridges into 4.0 Troubleshooting Documentation & Support • Track symptoms precisely, note error codes/messages, and record every action taken before escalating. • Use built-in diagnostic tools first (Event Viewer, Reliability Monitor, Resource Monitor) before third-party utilities. 4.0 Operational Procedures (21%) 4.1 Documentation & Support Systems Best Practices • Ticketing systems: user info, device info, description of problem, categorization, severity/priority, escalation levels, clear/concise notes, resolution. • Asset management: inventory lists, database/system of record, asset tags/IDs, procurement life cycle, warranty tracking. • Types of documents: knowledge base/articles, SOPs (standard operating procedures), network diagrams, regulatory/compliance policy, splash screens/acceptable use policy (AUP), incident reports. 4.2 Change Management Procedures • Purpose: a documented process to reduce risk when altering systems/configurations. • Key elements: requesting the change, purpose/scope of the change, risk analysis, plan for change, end-user acceptance, change board approval, backout plan, sandbox/test environment before production, documentation of changes. EXAM TIP: Always know the difference between a 'backout plan' (how to revert if a change fails) and 'risk analysis' (evaluating impact before approval) — both are commonly quizzed. 4.3 Workstation Backup and Recovery Methods Backup Type Description Restore Speed Full Backs up all selected data every time Fastest restore, slowest backup, most storage Incremental Backs up changes since the LAST backup (full or incremental) Slower restore (needs full + all increments) Differential Backs up changes since the LAST FULL backup Faster restore than incremental (needs full + latest differential) Synthetic full Combines full + incrementals into a new full without re-reading source Fast, reduces backup window • 3-2-1 backup rule: 3 copies of data, on 2 different media types, with 1 copy off-site. • Backup testing: periodically verify restores actually work. • Cloud backup vs. local (NAS/external drive), image-level vs. file-level backup, version history/snapshots. EXAM TIP: Restoring from incremental backups requires the last full backup PLUS every incremental since — that's why incremental restores take longer than differential restores. 4.4 Common Safety Procedures • ESD (electrostatic discharge) prevention: anti-static wrist straps, anti-static mats, self-grounding, keeping components in anti-static bags. • Equipment grounding, proper power handling (UPS, surge protectors), proper component handling/storage. • Toxic waste handling: batteries, toner/ink cartridges, CRTs — follow local disposal regulations, use SDS (Safety Data Sheets). • Personal safety: disconnect power before repairs, lifting technique, fire safety/fire extinguisher class (Class C for electrical), cable management to avoid trip hazards. EXAM TIP: Class C fire extinguishers are for electrical fires — never use water on live electrical equipment. 4.5 Environmental Impacts & Controls • MSDS/SDS (Safety Data Sheets): document proper handling/disposal of hazardous materials. • Temperature, humidity, and airflow control in server/equipment rooms; proper battery/toner disposal. • Recycling/repurposing of e-waste, compliance with local government regulations. 4.6 Prohibited Content/Activity, Privacy, Licensing, Policy • Incident response: first response = report through proper channels, preserve data/device (chain of custody), document the scene. • Chain of custody: tracking evidence handling to maintain its integrity for legal purposes. • Licensing: open-source vs. commercial, personal vs. enterprise/volume licenses, EULA (End User License Agreement), DRM. • Regulated data: PII (Personally Identifiable Information), PHI (Protected Health Information/HIPAA), PCI-DSS (payment card data), GDPR (EU data privacy). EXAM TIP: Chain of custody questions test whether you preserve evidence and document who handled it, in order, without altering it — think 'legal integrity.' 4.7 Communication Techniques & Professionalism • Be on time (or notify if late), maintain a positive attitude, avoid jargon with end users, actively listen (take notes, ask clarifying questions, avoid interrupting). • Be culturally sensitive, set/meet expectations, offer repair/replacement options, follow up with customers, deal appropriately with confidential materials. • Avoid distractions: no personal calls/texting in front of a customer, no talking to co-workers while helping a customer. • Difficult situations: avoid arguing, avoid being judgmental, don't dismiss customer problems, avoid being condescending, don't act unsure/nervous — maintain confidence and professionalism. EXAM TIP: Soft-skill/communication questions are scenario-based and easy points if you remember: never blame the customer, never minimize the issue, always set clear expectations. 4.8 Basics of Scripting • Script file extensions: .bat (Windows batch), .ps1 (PowerShell), .vbs (VBScript), .sh (Linux/bash shell), .py (Python), .js (JavaScript). • Basic script constructs: variables, loops (for/while), conditionals (if/then), comments. • Use cases: automating repetitive tasks, restarting services, mapping drives, gathering diagnostic info, initiating updates. • Considerations when writing/running scripts: unintentionally changing system settings, browser/system crashes from malformed scripts, data exfiltration risk from untrusted scripts, execution policy restrictions, always test scripts in a controlled environment first. EXAM TIP: Know the file extensions by OS: .bat/.ps1 = Windows, .sh = Linux/macOS, .py and .js are cross-platform. 4.9 Remote Access Technologies • RDP (Remote Desktop Protocol) — Windows-native GUI remote access, port 3389. • VNC (Virtual Network Computing) — cross-platform GUI remote access. • VPN — encrypted tunnel for secure remote network access. • SSH (Secure Shell) — encrypted CLI remote access, port 22. • Remote monitoring and management (RMM), Microsoft Remote Assistance/Quick Assist, third-party tools (TeamViewer, AnyDesk), in-band vs. out-of-band management. • Security considerations: MFA on remote tools, VPN before RDP where possible, session timeouts, encrypted connections only. 4.10 Basics of Artificial Intelligence (AI) • AI use cases in IT support: chatbots for tier-1 triage, predictive maintenance, automated ticket categorization, knowledge base search assistance. • Considerations: data privacy when using AI tools with sensitive info, accuracy/hallucination risk, need for human review of AI-generated output, organizational AI usage policy compliance. Quick-Reference Cheat Sheet Ports to Know Port Protocol 21 FTP 22 SSH 23 Telnet 25 SMTP 53 DNS 80 HTTP 443 HTTPS 389 LDAP 3389 RDP Troubleshooting Methodology (memorize in order) • 1. Identify the problem • 2. Establish a theory of probable cause • 3. Test the theory • 4. Establish a plan of action • 5. Implement the solution • 6. Verify full system functionality + preventive measures • 7. Document findings/actions/outcomes Malware Removal (memorize in order) • 1. Investigate and verify symptoms • 2. Quarantine infected system • 3. Disable System Restore • 4. Remediate (update + scan/remove) • 5. Schedule scans and run updates • 6. Enable System Restore + create restore point • 7. Educate the end user Permissions Rules • NTFS permissions are cumulative across group memberships — EXCEPT explicit Deny always wins. • When accessing a resource over the network, the MOST RESTRICTIVE of Share vs. NTFS permissions applies. • Moving a file within the same NTFS volume keeps its original permissions; copying (or moving to a different volume) inherits the destination folder's permissions. Final Week Study Plan • Days 1-2: Re-read Domain 1.0 (Operating Systems) and drill Windows tools/commands. • Days 3-4: Re-read Domain 2.0 (Security) — focus on malware removal steps and permissions rules. • Day 5: Domain 3.0 (Software Troubleshooting) — memorize the 7-step methodology cold. • Day 6: Domain 4.0 (Operational Procedures) — backup types, safety, and professionalism scenarios. • Day 7: Full practice exam under timed conditions (90 minutes), review every missed question. Good luck! Review this guide alongside official CompTIA objectives (V15) and hands-on lab practice for best results.
0
You can add this document to your study collection(s)
Sign in Available only to authorized usersYou can add this document to your saved list
Sign in Available only to authorized users(For complaints, use another form )