Question Q-5594 A technician is following CompTIA's recommended malware removal process. After…
1 comment · last active May 22, 2026
CompTIA A+ Core 2 220-1202 - Domains 3 and 4 Software Troubleshooting and Operational Procedures
By Jordan Blake · Updated May 25, 2026
| Questions | 25 |
| Passing Score | 75% |
| Format | 100% Multiple Choice |
| Sessions Logged | 1,534 |
| Your progress | Log in / Register to track times taken, best score, questions mastered, and coverage on this quiz. |
| Rating |
Topics covered
Uncategorized25 questions
Discussion
Log in to post a comment, reply, or expand a question.
Interrupting the user and assuming the problem = terrible bedside manner. Active listening first.
Broken app after Windows Update = rollback/uninstall update or System Restore before full reinstall.
RTO = how fast you recover. RPO = how much data you can lose. Exam loves mixing them.
Change management = change request/ticket approved BEFORE production change. Not 'just do it at 5pm'.
+1 votes
3-2-1: 3 copies, 2 media types, 1 offsite. Ransomware recovery questions love this.
+1 votes
Upset caller: stay calm, acknowledge, gather info. Never match their volume.
+1 votes
Rollback plan = how you undo a failed change. Required piece of change management.
+1 votes
Trust relationship failed → rejoin domain or reset machine account in AD. Password reset alone won't fix.
Question catalog for this preview
Catalog listing of the 5 preview questions for this quiz.
Question 1
A Windows 10 user reports that after a Windows Update, their specialized medical imaging software no longer works. The technician needs to quickly restore the previous working state without reinstalling Windows. What is the FASTEST resolution?
Explanation
Both B and D are valid, but uninstalling the specific problematic Windows Update is the most targeted approach — it removes only the breaking update without rolling back other system changes. System Restore would work but rolls back more broadly. The question asks for the fastest targeted resolution.
Question 2
A technician's ticket queue shows a "Priority 1" and a "Priority 3" ticket. The P1 ticket is a system outage affecting the entire company. The P3 is a single user's non-critical request. What should the technician do?
Explanation
Ticket prioritization is based on severity and impact. P1 (Critical) incidents affecting many users have highest priority. P3 (Minor/Low) single-user non-critical issues have lower priority. Technicians must always address higher-priority issues first.
Question 3
A Windows 10 system encounters a critical error and displays a Blue Screen of Death. After rebooting, the technician wants to analyze the crash dump file. Where are minidump files located?
Explanation
Windows writes small memory dump files (minidumps) to C:\Windows\Minidump after BSOD events. Full memory dumps go to C:\Windows\MEMORY.DMP. Minidumps can be analyzed with WinDbg or third-party tools like WhoCrashed to identify the failing driver.
Question 4
A user reports that their Windows workstation shows "The trust relationship between this workstation and the primary domain failed." The user cannot log in with domain credentials. What is the MOST likely cause and solution?
Explanation
"Trust relationship failed" means the machine's computer account password (auto-rotated every 30 days) is out of sync with Active Directory. Fix: log in with a local admin account, remove the PC from the domain, rejoin it, and the computer account is re-established.
Question 5
A technician is working in a customer's home office and notices illegal content on the customer's computer monitor. What is the CORRECT course of action?
Explanation
Technicians must follow legal and ethical obligations. If illegal content is observed, the technician should not delete it (which could destroy evidence), not confront the customer, but document the observation and report it to management and/or law enforcement per company policy.
Malware still there after scan? Boot to Safe Mode or offline scan, then disable System Restore before cleanup (old objective still referenced).