CompTIA A+ Core 2 (220-1202) flashcards

Software that automatically displays or downloads unwanted advertisements when a user is online, often bundled with legitimate software.

• Generates revenue for its creator through advertising.
• Can hijack browser settings (homepage, search engine).
• Often causes system slowdowns and pop-up windows.

Memory trick: Ads mean adware, ransom means ransomware, spying means spyware.

The centralized utility in macOS for managing system-wide preferences and configurations.

• Accesses display, network, sound, user, and security settings.
• Formerly known as System Preferences.
• Organized into categories for easy navigation.

Memory trick: Settings Control Everything My Mac Operates.

After verifying an infection, the infected system must be quarantined (isolated from the network) to stop the malware from spreading before remediation begins.

• Follows verification, precedes disabling System Restore
• Typically done by disconnecting network access
• Prevents lateral spread to other systems

Memory trick: Quarantine the sick patient before starting treatment

When a service level agreement deadline is at risk, technicians should escalate promptly and proactively communicate status and timelines to maintain transparency.

• Escalate before an SLA breach occurs, not after
• Update ticket documentation honestly and in real time
• Proactive communication builds customer trust

Memory trick: Don't wait for the clock to run out—speak up first.

A documented process that tracks the handling, control, and transfer of evidence to maintain its integrity for legal or investigative purposes.

• Evidence must not be altered or transferred outside authorized channels
• Proper documentation includes who, what, when, and how evidence was handled
• Failure to maintain chain of custody can invalidate evidence in legal proceedings

Memory trick: Don't touch, just track — preserve and report.

A modern copy-on-write (CoW) Linux file system designed to address limitations of older Linux file systems, offering advanced features like snapshots, checksums, data and metadata integrity, and integrated volume management.

• Supports snapshots for creating point-in-time copies of the file system.
• Implements checksums for both data and metadata to detect and prevent silent data corruption.
• Includes built-in volume management for spanning multiple devices.
• Offers self-healing capabilities for RAID configurations.

Memory trick: Btrfs: 'Better' than the rest for 'Big' server features!

A documented procedure describing how to restore a system to its prior state if a planned change fails.

• Required component of formal change management documentation
• Should be tested/verified when possible before implementation
• Reduces downtime risk if an upgrade or change causes failures

Memory trick: If it breaks, roll it back.

A Microsoft proprietary file system designed to maximize data availability, scale efficiently to large data sets, and provide data integrity across various workloads.

• Optimized for virtualization workloads.
• Features integrity streams for data corruption detection and correction.
• Supports very large volumes (up to 256 TB in Windows Server 2019/2022).

Memory trick: ReFS is resilient and ready for big servers.

A documented, searchable article describing a problem and its resolution so future technicians can solve similar issues efficiently.

• Improves consistency and speeds up resolution
• Should be searchable by symptom and error code
• Part of good documentation and ticketing practices

Memory trick: Write it once, help everyone twice.

A backup strategy requiring 3 total copies of data, on 2 different media types, with 1 copy stored offsite to protect against data loss.

• 3 copies total (original + 2 backups)
• 2 different storage media types
• 1 copy offsite for disaster recovery

Memory trick: Three, Two, One: Triple copies, Two media, One away from home.

Windows 11 Pro is an advanced edition designed for business and power users, offering enhanced security, management, and networking capabilities.

• Includes Group Policy Editor (gpedit.msc) for local policy management.
• Supports BitLocker drive encryption for full disk encryption.
• Allows hosting Remote Desktop connections, enabling remote access to the PC.

Memory trick: Pro Users Need Group Policy, Remote Desktop, and BitLocker.

A type of brute-force attack that attempts to guess a password by trying all words in a dictionary (or a predefined list of common passwords and phrases).

• More efficient than pure brute-force for common passwords.
• Relies on users choosing weak, identifiable passwords.
• Can be combined with other techniques like appending numbers.

Memory trick: Dictionary checks words, brute force checks everything.

A type of malicious software designed to gain unauthorized access to a computer or network and often hides its presence and the presence of other malware, making it difficult to detect.

• Operates at a low level of the operating system.
• Can modify system files and processes to conceal its activities.
• Often difficult to detect with traditional antivirus software.

Memory trick: Rootkits dig deep to hide, like roots under a tree.

An operating system installation method where the hard drive is formatted, removing all existing data and operating system files, before a fresh copy of the OS is installed.

• Provides a fresh, stable OS environment.
• Resolves deep-seated software issues.
• Requires backing up essential user data beforehand.

Memory trick: Clean Install: Start 'Clean' and 'Fresh'.

Best practices for remote access security include tunneling protocols like RDP through a VPN, enabling multifactor authentication, and avoiding direct internet exposure of remote access ports.

• Direct internet-facing RDP is a common attack vector
• VPN restricts remote access to authenticated network members
• MFA adds a critical second layer of authentication

Memory trick: Tunnel Through, Then Prove Twice: VPN plus MFA.

A small memory dump file Windows generates after each crash, stored in C:\Windows\Minidump, which can be analyzed with WinDbg to identify the faulting driver or module.

• Located in C:\Windows\Minidump
• Analyzed with WinDbg or WhoCrashed
• Contains stop code and loaded driver list

Memory trick: 'Mini clues in Minidump' solve the crash mystery.

The final step of the malware removal best-practice procedure, where the technician informs the user about safe practices to prevent future infections.

• Last of the 7 documented remediation steps
• Covers phishing, safe browsing, updates
• Reduces likelihood of reinfection

Memory trick: 'Investigate, Quarantine, Disable, Remediate, Schedule, Enable, Educate' — IQDRSEE ends in teaching.

A component of change management defining the criteria stakeholders use to confirm a change was implemented successfully.

• Provides formal sign-off before closing a change
• Distinct from rollback plan and risk analysis
• Ensures the change met business requirements

Memory trick: Acceptance is the thumbs-up that closes the change.

Key differences between Windows Home and Pro editions, particularly concerning business-oriented features like Group Policy, BitLocker, and Remote Desktop Host.

• Windows Home lacks Group Policy Management Editor (gpedit.msc).
• Windows Home does not include BitLocker for full-disk encryption.
• Windows Home cannot act as a Remote Desktop host (can only be a client).
• Pro/Enterprise editions offer advanced security, networking, and management features.

Memory trick: Home vs. Pro: 'Home' is 'Happier' but 'Pro' is for 'Policies'!

An authentication method that requires a user to provide two or more verification factors to gain access to a resource.

• Combines different categories of factors (knowledge, possession, inherence).
• Significantly increases security against credential theft.
• Common factors include passwords, tokens, biometrics.

Memory trick: MFA mixes what you know, have, and are to confirm identity.

A command-line utility in Linux (part of the iproute2 suite) used to display and configure network interfaces, including IP addresses, MAC addresses, and interface status.

• Replaced 'ifconfig' on most modern Linux distributions.
• Provides detailed information about all network interfaces.
• Can also be used to add/delete IP addresses and configure interfaces.

Memory trick: IP Addresses Are Directly Displayed.

An installed iOS profile that can silently change device settings such as VPN, proxy, or DNS, often used to redirect or monitor traffic.

• Often installed via 'free Wi-Fi' or phishing prompts
• Found and removed under Settings > General > VPN & Device Management
• Can override network settings without visible symptoms until traffic behaves oddly

Memory trick: Free Wi-Fi profile = a Trojan horse hiding a proxy spy

When a Blue Screen of Death occurs immediately after installing new hardware or a driver, rolling back the driver in Safe Mode is the standard first troubleshooting step.

• Stop codes often point to a specific driver or hardware subsystem.
• Safe Mode loads only essential drivers, allowing changes to be made.
• Device Manager's 'Roll Back Driver' option reverts to the previous version.

Memory trick: 'New Driver, New Problem — Roll It Back'

The standard file system for Windows NT and later operating systems, known for its advanced features including security, journaling, compression, and support for very large files and partitions.

• Supports file sizes up to 16 EB (Exabytes).
• Implements Access Control Lists (ACLs) for granular security.
• Uses journaling for quick recovery from power failures and system crashes.

Memory trick: NTFS: 'N' for New, 'T' for Technology, 'F' for Features, 'S' for Security.

Rapid battery drain and unexplained high data usage are common indicators of a malicious app running in the background on a mobile device.

• Malicious apps often exfiltrate data, causing high usage.
• Uninstalling the app is the primary remediation step.
• Reviewing app permissions helps prevent similar issues from other apps.

Memory trick: 'Drained Battery, Deleted App'

On modern UEFI systems with fast boot, Safe Mode is reached through Settings > Recovery > Advanced startup rather than function-key interrupts.

• Advanced startup boots into WinRE
• Startup Settings lists Safe Mode options
• Interrupting boot 3 times also triggers WinRE

Memory trick: 'Settings Saves the Safe Seat' when function keys fail.

The process of tracking and managing an organization's hardware and software inventory throughout its lifecycle.

• Includes serial numbers, purchase dates, assigned users, and warranty info
• Supports budgeting, replacement planning, and audits
• Often tracked using asset tags and centralized databases

Memory trick: Track the tech from purchase to retirement.

Group Policy is a Windows feature allowing centralized management and configuration of operating systems, applications, and users' settings in an Active Directory environment. Folder Redirection is a Group Policy feature that redirects the path of special folders (like Documents, Desktop) to a new location, typically a network share.

• Group Policy objects (GPOs) link to sites, domains, or OUs.
• Folder Redirection ensures data availability and simplifies backups.
• Requires Windows Pro/Enterprise and Active Directory for full functionality.

Memory trick: Group Policies For Enterprise Redirection.

A command-line utility in Windows used to display all current TCP/IP network configuration values and refresh Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) settings.

• Displays IP address, subnet mask, default gateway.
• Can release/renew DHCP leases.
• Essential for network troubleshooting.

Memory trick: IP configuration is your first 'Config' check.

After malware remediation and verification, technicians should schedule ongoing scans, re-enable System Restore with a new restore point, and educate the user before returning the device to service.

• Scheduling scans ensures ongoing protection against reinfection.
• A new restore point captures the clean system state.
• User education is the final step to prevent future infections.

Memory trick: 'Clean, Schedule, Snapshot, Teach'

A backup method that copies all selected data in its entirety every time the backup job runs.

• Simplest and fastest to restore from
• Requires the most storage space and backup time
• Often used as the baseline for incremental/differential backups

Memory trick: Full means everything, every time.

A fire extinguisher rated for electrical fires that uses non-conductive extinguishing agents to safely suppress fires in energized equipment.

• Never use water on electrical fires
• Class C agents are typically CO2 or dry chemical
• Should always disconnect power if safely possible before extinguishing

Memory trick: C is for Circuits — use Class C on electrical fires.

A technique where malware creates a Windows scheduled task to automatically relaunch itself after removal or reboot.

• Task Scheduler entries can be hidden or disguised with legitimate-sounding names
• Persistence mechanisms must be removed for successful remediation
• Other persistence spots include Registry Run keys and startup folders

Memory trick: Task Scheduler = malware's 'alarm clock' to wake back up

A differential backup stores all changes since the last full backup, so restoring requires only the full backup plus the most recent differential.

• Differential backups grow larger each day until next full backup
• Only two backups needed to restore: full + latest differential
• Faster restore than incremental but larger storage use over time

Memory trick: Differential = 'Different from full, but always compares to full.'

Grounding provides a safe path for stray electrical current to travel to earth, protecting equipment and people from shock and fire hazards.

• Never remove or bypass a ground pin on a plug
• Ungrounded outlets should be corrected by a licensed electrician
• Surge protectors and UPS devices do not create grounding

Memory trick: No ground pin, no plan — call the electrician, not the scissors.

Degaussing erases data by disrupting magnetic fields, which is effective only on magnetic media like HDDs; it does not work on SSDs since they use non-magnetic flash memory.

• Degaussing is effective on HDDs and magnetic tape
• SSDs require physical destruction or secure erase/wipe utilities
• Improper sanitization method can leave data recoverable

Memory trick: No magnets, no magic: SSDs laugh at degaussers.

A feature of Microsoft Windows Active Directory that controls the working environment of user accounts and computer accounts. Group Policy provides centralized management and configuration of operating systems, applications, and users' settings.

• Used for centralized management in Active Directory domains.
• Enforces security settings, software installations, and user configurations.
• Policies are applied to Organizational Units (OUs), domains, or sites.

Memory trick: Group Policy manages groups, local policy manages locally.

Removing a recently installed update via Settings > Windows Update > Update history > Uninstall updates to resolve issues introduced by that update.

• Least disruptive first step for post-update issues
• Located in Update history in Settings
• Should precede System Restore or Reset this PC

Memory trick: 'Undo the update before you undo the OS.'

An advanced startup option in Windows that loads the operating system using the registry and driver configuration that was saved the last time the computer successfully booted.

• Useful for resolving boot issues caused by incorrect driver installations.
• Reverts system settings to a known stable state.
• Does not affect user data files.

Memory trick: Safe Boot always knows the last good config.

When personally identifiable information is exposed or compromised, technicians must immediately escalate to security/incident response teams per policy, rather than attempting to resolve it independently.

• PII breaches may have legal/regulatory reporting requirements
• Technicians should preserve evidence, not delete data
• Escalation ensures proper handling and compliance

Memory trick: See a breach? Speak up first, don't clean up first.

Configuration profiles on iOS are used to manage device settings, but malicious ones can be installed by users, often via phishing, to gain unauthorized control, install unwanted software, and push ads.

• Installed through Safari or email attachments.
• Can enable VPNs, Wi-Fi settings, email accounts, and install enterprise apps.
• Managed under Settings > General > VPN & Device Management.

Memory trick: Profiles can be tricky, making your iPhone sickly.

A grounding device worn on the wrist and connected to a grounded point to equalize electrical potential and prevent electrostatic discharge damage to electronic components.

• Protects against invisible ESD damage
• Must be connected to a proper ground
• Should not be used with high-voltage components like CRTs or PSUs

Memory trick: Ground Yourself, Save the Chips.

A disk utility that checks a volume for file system errors and bad sectors, recovering readable data and marking damaged sectors as unusable.

• /f fixes file system errors only
• /r includes /f plus bad sector scanning and recovery
• Often requires a reboot if the volume is in use

Memory trick: 'R' in chkdsk /r = 'Recover' bad sectors

A Windows utility that displays real-time details about CPU, memory, disk, and network usage broken down by individual process.

• Accessible via resmon.exe or through Task Manager's Performance tab link.
• Useful for identifying runaway or malicious processes.
• Shows disk queue length and per-process I/O activity.

Memory trick: 'Resource Monitor Reveals the Real Resource Hog'

Best practices for technician-customer interactions, including active listening, avoiding interruptions, not blaming coworkers, and maintaining a positive, solution-focused tone.

• Avoid interrupting customers
• Never blame other technicians or departments to a customer
• Acknowledge frustration before moving to problem-solving

Memory trick: Listen First, Blame Never, Solve Always.

A system configuration file in Linux that contains descriptive information about the various filesystems the system can mount.

• Used to define static mount points for local and network filesystems.
• Each line in `fstab` represents a filesystem to be mounted.
• Includes options for filesystem type, mount options, and dump/fsck settings.

Memory trick: Linux Files Serve The Administrator's Boot Needs.

The process of verifying the identity of a user, process, or device. It typically involves providing credentials (e.g., username and password) that are then checked against a stored record.

• Verifies identity (who you are)
• Often uses username/password, biometrics, or tokens
• First step in the AAA (Authentication, Authorization, Accounting) process
• Ensures only legitimate users gain access

Memory trick: AAA: You Authenticate to prove who you are, then are Authorized for what you can do, and finally Accounted for what you did.

Malicious software that uses a device's CPU/GPU resources to mine cryptocurrency without the user's consent, causing overheating, battery drain, and sluggish performance.

• Symptom: constant high CPU even when idle
• Causes overheating and rapid battery drain
• Often hides as unfamiliar background process

Memory trick: 'Hot phone, hidden miner' — CPU sweat means crypto theft.

A component of Microsoft Windows that provides the ability to view and change system settings and controls, such as adding or removing hardware and software, controlling user accounts, and changing accessibility options.

• Centralized hub for system configuration.
• Accesses various applets for specific settings.
• Being gradually replaced by the 'Settings' app in newer Windows versions.

Memory trick: Control Panel: The 'Control Center' for your PC.

A conductive bag used to store and transport electronic components to protect them from electrostatic discharge.

• Often has a metallic silver or pink anti-static tint
• Used alongside ESD mats and wrist straps
• Should be used when storing spare parts, not just during shipping

Memory trick: Silver bag, safe chip.

A Windows Recovery Environment command that scans all disks for Windows installations not currently listed in the Boot Configuration Data (BCD) store.

• Run before /rebuildbcd if 0 installations are found
• Part of the bootrec toolset
• Doesn't modify boot sector or MBR itself

Memory trick: 'Scan before you Rebuild' — find it, then fix it.

An End User License Agreement defines the terms under which software can be legally installed and used, including restrictions on the number of devices or users.

• Single-user licenses typically restrict installation to one device
• Some EULAs allow a secondary 'portable' installation for the same user
• Violating license terms can expose a business to legal and financial risk

Memory trick: Read the EULA before you Install-Ya.

When a mobile app fails to update, the most common cause after confirming connectivity is inadequate device storage.

• Check available storage first
• Clear cache/unused apps to free space
• Update failures with active Wi-Fi point to storage or OS incompatibility

Memory trick: Storage box overflowing — the update can't fit inside

A malware removal best practice where System Restore is turned off before cleaning a system to prevent existing restore points from reintroducing the infection later.

• Restore points may capture the system while already infected.
• Disabling prevents rollback to an infected state.
• System Restore is re-enabled with a fresh restore point after cleanup.

Memory trick: 'Pause the Time Machine so the Virus Can't Come Back'

WPA3-Personal, also known as WPA3-SAE (Simultaneous Authentication of Equals), is the latest and most secure Wi-Fi Protected Access protocol for personal networks.

• Replaces the pre-shared key (PSK) exchange with SAE for stronger key establishment.
• Protects against offline dictionary attacks.
• Provides opportunistic wireless encryption (OWE) for open networks, enhancing privacy.

Memory trick: WEP is weak, WPA2 is good, WPA3 is great, especially with SAE.

A command-line utility for configuring, viewing, and managing network interfaces on Unix-like operating systems, including Linux.

• Displays IP address, subnet mask, and other interface details.
• Can be used to bring interfaces up or down.
• Often superseded by 'ip' command in modern Linux distributions but still widely recognized.

Memory trick: If you want to see the configuration, just use 'ifconfig'.

Unwanted software, often installed as a browser extension or toolbar, that changes browser settings such as the homepage or default search engine without user consent.

• Often bundled with free downloaded software.
• Removed via browser's extension/add-on manager.
• Resetting browser settings to default can also remove hijacker configurations.

Memory trick: 'Toolbar Trouble = Rogue Extension'

The process of taking software source code, configuring it for the local system, compiling it into executable binaries, and then installing it, typically using a sequence of command-line tools.

• Requires development tools (compiler, libraries).
• Provides flexibility and access to latest versions.
• More complex than installing pre-compiled packages.

Memory trick: Source Code: 'Configure', 'Make', then 'Install'!

Environmental control using filters (e.g., HEPA) to remove dust and particulates from data center air to prevent equipment contamination.

• Dust buildup can cause overheating and component failure
• Filtration is part of broader HVAC environmental controls
• Should be paired with proper humidity and temperature control

Memory trick: Filter the air to save the gear.

Blue Screen of Death (BSOD) stop codes like 'MEMORY_MANAGEMENT' and 'PAGE_FAULT_IN_NONPAGED_AREA' are strong indicators of issues with the system's Random Access Memory (RAM).

• Often caused by faulty RAM modules, incorrect RAM settings, or incompatible RAM.
• Troubleshooting involves running memory diagnostic tools (e.g., Windows Memory Diagnostic).
• Can manifest as intermittent crashes, data corruption, or system instability.

Memory trick: Memory errors scream 'RAM is bad, check the stick!'