.png&w=3840&q=75)
Question bank
CompTIA A+ (Core 2)
43 CompTIA A+ (Core 2) questions with the correct answer and a written explanation, organised across 4 exam domains.
- 43 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Operating Systems
12 questions in this domain
- Question 1Single Choice
An organization requires its Windows devices to join an Active Directory domain. Which Windows edition natively supports this capability?
- AWindows 11 Home
- BWindows 11 ProCorrect answer
- CWindows 11 S Mode
- DWindows Media Center
Why this is the answer
Windows Pro and Enterprise editions can join Active Directory domains. Home editions lack this capability and are intended for personal use.
- Question 2Multiple Select
A Linux administrator migrates a script from one distribution to another. Which statements about Linux distributions are accurate?
- AAll distributions use the same package manager
- BPython scripts may work differently across distributionsCorrect answer
- CAll Linux distributions are interchangeable
- DPackage names can differ between distributionsCorrect answer
Why this is the answer
Linux distributions are not interchangeable because they use different package managers, package names, and script behavior, so administrators must verify compatibility.
- Question 3Interactive
A technician runs the command shown in the code block to repair system corruption. What limitation should be considered?
- AIt always repairs all corruption
- BIt relies on the local component storeCorrect answer
- CIt requires an internet connection
- DIt replaces the hard drive
Why this is the answer
SFC checks system files against the local component store. If that store is corrupted or incomplete, SFC may not be able to repair all damage.
- Question 4Single Choice
Who is directly responsible for pushing iOS updates to Apple devices?
- AThe user
- BCarrier
- CAppleCorrect answer
- DDevice manufacturer
Why this is the answer
Apple controls the iOS update pipeline and delivers updates directly to devices through its servers, not through carriers or the user.
- Question 5Multiple Select
Which capabilities are part of ChromeOS beyond being a web browser?
- ALocal file storageCorrect answer
- BRunning Linux containersCorrect answer
- CRunning Android appsCorrect answer
- DRunning macOS applications
Why this is the answer
ChromeOS includes local storage, Linux containers, and Android app support, expanding its capabilities beyond the Chrome browser.
- Question 6Interactive
A technician wants to obtain a new DHCP lease. The code block shows two commands. In what order should they be run?
- ARelease the current lease, then request a new leaseCorrect answer
- BRequest a new lease, then release the current lease
- COnly release the current lease
- DOnly request a new lease
Why this is the answer
To obtain a new DHCP lease, the client must first release the current lease with the release command and then request a new lease with the renew command.
- Question 7Single Choice
What happens when a technician runs chkdsk /f on a volume that is currently in use?
- AIt runs immediately in read-only mode
- BIt prompts to schedule the check at next rebootCorrect answer
- CIt locks the volume instantly
- DIt skips the volume
Why this is the answer
chkdsk /f needs exclusive access to a volume. If the volume is in use, Windows schedules the check to run on the next system restart.
- Question 8Multiple Select
Which statements correctly describe netstat -o and netstat -b output?
- A-o displays the process IDCorrect answer
- B-b displays the executable nameCorrect answer
- C-o displays the executable name
- D-b displays the process ID
Why this is the answer
netstat -o displays the process ID of the socket owner, while netstat -b displays the executable name responsible.
- Question 9Interactive
A Windows client displays the IPv4 information shown in the code block. What does this indicate?
- AThe NIC has received an APIPA addressCorrect answer
- BThe NIC has a static public address
- CDNS is broken on the network
- DThe computer is connected to the internet
Why this is the answer
APIPA addresses fall in the 169.254.0.0/16 range and are assigned when DHCP is unavailable, indicating a local address assignment issue.
- Question 10Single Choice
When manually configuring a static IP address, which parameter is required for the host to reach other subnets?
- ADefault gatewayCorrect answer
- BDNS server
- CMAC address
- DDHCP lease
Why this is the answer
The default gateway is required for traffic destined to other subnets. Without it, the host can only reach devices on its local subnet.
- Question 11Multiple Select
What is a best practice when Windows Defender Firewall must allow file sharing or Remote Desktop?
- AKeep the firewall enabledCorrect answer
- BDisable the firewall
- CAllow only necessary apps and portsCorrect answer
- DLeave firewall disabled after testing
Why this is the answer
Windows Defender Firewall should remain enabled; administrators should create allow rules for specific apps and ports rather than disabling the firewall.
- Question 12Interactive
A user accesses a shared folder whose permissions are shown in the code block. What is the user's effective access?
- AFull Control
- BReadCorrect answer
- CModify
- DNo access
Why this is the answer
Effective permissions for network shares combine share and NTFS permissions and use the most restrictive setting, so the user gets Read access.
Operational Procedures
9 questions in this domain
- Question 13Single Choice
Which of the following statements correctly compares Windows Home and Windows Pro?
- AWindows Home can join a Windows domain; Windows Pro cannot.
- BWindows Pro can join a Windows domain; Windows Home cannot.Correct answer
- CBoth Windows Home and Windows Pro can join a Windows domain.
- DOnly Windows Home supports BitLocker and domain join.
Why this is the answer
Windows Pro supports domain join and advanced management features, while Windows Home is intended for consumer use and cannot join a Windows domain.
- Question 14Multiple Select
Which statements explain why Linux distributions should not be treated as interchangeable? Select all that apply.
- APackage managers and package names can differ between distributions.Correct answer
- BPython scripts may rely on packages that are not installed by default in another distribution.Correct answer
- CAll Linux distributions use the exact same desktop environment.
- DAll distributions package applications only in .deb format.
Why this is the answer
Linux distributions vary in package tools, package names, default software, and commands, so administration is not always identical between distributions.
- Question 15Interactive
The code block shows two Windows command-line commands. What is the purpose of running the first command before the second?
- AIt releases the current DHCP lease and then requests a new lease.Correct answer
- BIt clears the DNS cache and then pings the default gateway.
- CIt disables the network adapter and then re-enables it.
- DIt sets a static IP and then tests Internet connectivity.
Why this is the answer
The ipconfig /release command drops the current DHCP lease, and ipconfig /renew asks the DHCP server for a new IP address.
- Question 16Single Choice
A technician claims Android is automatically secure because it uses the Linux kernel. Which statement best addresses this misconception?
- AAndroid does not use any part of the Linux kernel.
- BAndroid uses the Linux kernel but applies a different permission and sandboxing model than a typical Linux desktop.Correct answer
- CThe Linux kernel guarantees malicious apps cannot be installed on Android.
- DAndroid security is identical to a standard Linux distribution.
Why this is the answer
Android is based on the Linux kernel, but its permission model, app sandboxing, and security controls differ from a traditional Linux desktop distribution.
- Question 17Multiple Select
Which statements about mobile operating system update control are correct? Select all that apply.
- AApple sends iOS updates directly to supported iPhones and iPads.Correct answer
- BAndroid system update availability often depends on the device manufacturer and sometimes the carrier.Correct answer
- CGoogle controls the delivery of every Android OS update to every device model.
- DiOS updates must be approved by the device owner before Apple can release them.
Why this is the answer
Apple directly pushes iOS updates to supported devices, while Android update delivery is frequently managed by device manufacturers and carriers.
- Question 18Interactive
A technician runs the command shown in the code block on a Windows computer. If the C: volume is in use, what will the command likely prompt?
- AAn immediate scan of the volume starts in the background.
- BWindows offers to schedule the check for the next system restart.Correct answer
- CThe command automatically dismounts the volume and continues.
- DThe command cancels all applications using the volume.
Why this is the answer
chkdsk /f needs exclusive access to the volume. If the volume is in use, Windows prompts the user to schedule the check at the next reboot.
- Question 19Single Choice
Which statement correctly describes ChromeOS in addition to running the Chrome browser?
- AChromeOS is limited to web pages and has no local storage.
- BChromeOS includes local storage and can run Linux containers.Correct answer
- CChromeOS can only run applications downloaded from the Chrome Web Store.
- DChromeOS cannot support external USB devices.
Why this is the answer
ChromeOS is a full operating system that provides local storage, supports Linux containers, and goes far beyond acting as a simple web browser.
- Question 20Multiple Select
Which statements are true when determining effective permissions for an NTFS folder shared over the network? Select all that apply.
- ABoth NTFS permissions and share permissions apply when a folder is accessed through the network.Correct answer
- BThe effective permission is the most restrictive of the two permission sets.Correct answer
- CShare permissions are ignored when access is from the network.
- DA user with Full Control share access can bypass restrictive NTFS permissions.
Why this is the answer
For a network share, both share and NTFS permissions apply. Windows combines them by using the most restrictive effective permission.
- Question 21Interactive
The code block shows an enhanced netstat command. What extra information should it display?
- AThe process identifier (PID) associated with each connection.
- BThe executable name that owns each connection.Correct answer
- CThe DNS suffix for each remote address.
- DThe current default gateway address.
Why this is the answer
The netstat -b option displays the executable name associated with each active connection, while netstat -o shows the PID.
Security
12 questions in this domain
- Question 22Single Choice
Which Windows edition can join an Active Directory domain in a typical business environment?
- AWindows 11 Home
- BWindows 11 ProCorrect answer
- CWindows 11 Home Single Language
- DWindows 11 Home in S mode
Why this is the answer
Only Windows Pro and higher editions can join an Active Directory domain. Home editions are consumer-focused and do not support domain membership.
- Question 23Multiple Select
Which statements are correct about differences among Linux distributions?
- AAll Linux distributions use the same package manager.
- BPackage management commands can differ by distribution.Correct answer
- CScripts may depend on packages not present in every distribution.Correct answer
- DAll Linux distributions are completely interchangeable.
Why this is the answer
Linux distributions can use different package managers and package names, so scripts and commands are not always portable across distros.
- Question 24Interactive
A technician runs the command shown on a Windows system. What is a key limitation of that utility?
- AIt relies on the local component store for repairs.Correct answer
- BIt downloads all missing files from Windows Update first.
- CIt automatically repairs APFS file permissions.
- DIt replaces the entire Windows registry.
Why this is the answer
sfc /scannow repairs protected system files from the local component store. If that store is corrupted, DISM may be needed first.
- Question 25Single Choice
Android is based on the Linux kernel. Why is it not automatically as secure as a Linux desktop?
- AAndroid does not use Linux's standard permission model.Correct answer
- BLinux cannot run on ARM processors.
- CAndroid does not use a kernel.
- DApple verifies all Android updates.
Why this is the answer
Android uses the Linux kernel but has its own permission and sandboxing model. It should not be treated as equally secure as a desktop Linux installation.
- Question 26Multiple Select
Which statements accurately describe the iOS update process and delivery?
- AApple pushes updates directly to devices.Correct answer
- BCarriers control iOS update timing.
- CApple sends updates to eligible devices.Correct answer
- DiOS updates require iTunes.
Why this is the answer
Apple pushes iOS updates directly to devices rather than relying on carriers. Users may install them over the air or through Finder on a Mac.
- Question 27Interactive
A technician runs the commands shown on a DHCP client. What should happen if the commands run in order?
- AThe client releases its IPv4 lease and then requests a new lease.Correct answer
- BThe client renews its lease before releasing it.
- CThe client immediately sets a static IP address.
- DBoth commands perform the same action.
Why this is the answer
ipconfig /release drops the current IPv4 lease, and ipconfig /renew asks the DHCP server for a new lease. The order matters.
- Question 28Single Choice
Which netstat option displays the process identifier, or PID, that owns an active network connection?
- A-oCorrect answer
- B-b
- C-n
- D-a
Why this is the answer
netstat -o adds the owning process ID to the output. The -b option displays the executable name, but the PID is shown with -o.
- Question 29Multiple Select
A Windows client has an IP address of 169.254.x.x. Which conclusions are valid?
- AThe client could not obtain a DHCP lease.Correct answer
- BThe address is an APIPA link-local address.Correct answer
- CThe DNS server is definitely down.
- DThe client has received a valid public address.
Why this is the answer
APIPA addresses are used when DHCP is unavailable. The issue is on the local client or network path to DHCP, not necessarily DNS.
- Question 30Interactive
A technician runs the command shown on a Windows volume that is currently in use. What will most likely occur?
- AWindows prompts to schedule the volume check at the next restart.Correct answer
- BThe volume is checked immediately without interruption.
- CThe command only repairs network shares.
- DThe command resets NTFS permissions.
Why this is the answer
chkdsk /f needs exclusive access. If the volume is in use, Windows schedules the check to run at the next system restart.
- Question 31Single Choice
When manually configuring a static IP address, which value is required for reaching hosts outside the local subnet?
- ADefault gatewayCorrect answer
- BMAC address
- CDNS suffix
- DAPIPA address
Why this is the answer
The default gateway identifies the router that forwards packets to remote subnets. Without it, local hosts can communicate only within the local subnet.
- Question 32Multiple Select
Which practices should a technician follow when enabling file sharing or Remote Desktop on Windows?
- ACreate a rule to allow file and printer sharing.Correct answer
- BDisable Windows Defender Firewall completely.
- CAllow Remote Desktop through the firewall.Correct answer
- DTurn off the firewall for private networks.
Why this is the answer
Best practice is to allow the needed traffic through the firewall with rules, not to disable it entirely. This preserves protection while enabling services.
- Question 33Interactive
The commands shown configure both share and NTFS permissions. What is the effective network permission for SalesTeam?
- AReadCorrect answer
- BModify
- CFull control
- DDeny
Why this is the answer
Combine share and NTFS permissions by using the most restrictive. Everyone has Read on the share, while NTFS grants Modify, so effective network access is Read.
Software Troubleshooting
10 questions in this domain
- Question 34Single Choice
Which statement correctly describes Windows Home edition regarding Active Directory domain join?
- AWindows Home can join a domain using the same wizard as Windows Pro.
- BWindows Home cannot join an Active Directory domain.Correct answer
- CWindows Home can join a domain only after switching to a Microsoft account.
- DDomain join is supported in all Windows editions.
Why this is the answer
Windows Home lacks the domain-join feature, while Windows Pro and higher support it.
- Question 35Multiple Select
Which statements about Linux distribution differences are correct? Select all that apply.
- AAll Linux distributions use identical package managers and commands.
- BPython scripts and package names can differ between distributions.Correct answer
- CLinux distributions should be treated as interchangeable for troubleshooting.
- DA command that works on one distribution may not work on another.Correct answer
Why this is the answer
Distributions vary in package names, tools, and script dependencies, so they are not interchangeable.
- Question 36Interactive
A technician runs the system file checker command shown in the code block and finds that some corrupted files are not repaired. What is the most likely reason?
- AThe command always downloads fresh files from Windows Update.
- BThe command relies on the local component store and may need an additional repair source.Correct answer
- CThe command only scans network adapter settings.
- DThe command requires an active domain controller.
Why this is the answer
SFC compares files against the local component store; if the store is corrupted, DISM or another source is needed.
- Question 37Single Choice
iOS updates are pushed directly by which party?
- AAppleCorrect answer
- BGoogle
- CCarrier
- DDevice manufacturer
Why this is the answer
Apple controls the iOS update pipeline and pushes updates directly to devices.
- Question 38Multiple Select
Which statements about Android security are correct? Select all that apply.
- AAndroid is based on Linux and therefore uses the same standard permission model as desktop Linux.
- BAndroid is based on Linux but does not use Linux's standard permission model.Correct answer
- CAndroid security should not be assumed simply because it is Linux-based.Correct answer
- DBecause Android is open source, it has no permission restrictions.
Why this is the answer
Android shares a kernel lineage with Linux but has its own permission model, so Linux heritage alone does not guarantee security.
- Question 39Interactive
A technician runs the volume check command shown on a drive that is currently in use. What should they expect?
- AThe check runs immediately without interrupting the system.
- BWindows prompts the user to schedule the check at the next restart.Correct answer
- CThe volume is automatically dismounted and locked.
- DThe command fails because chkdsk requires a network share.
Why this is the answer
If the volume is in use, chkdsk cannot lock it and offers to run at the next system restart.
- Question 40Single Choice
Which of the following best describes the difference between netstat -o and netstat -b?
- AThey are identical in output.
- B-o displays executable names, while -b displays PIDs.
- C-o displays the PID, while -b displays the executable name.Correct answer
- D-o displays IP addresses, while -b displays domain names.
Why this is the answer
netstat -o shows the owning process ID; netstat -b shows the executable name.
- Question 41Multiple Select
Which statements about APIPA address 169.254.x.x are correct? Select all that apply.
- AThe client could not reach a DHCP server.Correct answer
- BThe address confirms connectivity to other subnets.
- CThe address is a link-local address used when automatic configuration fails.Correct answer
- DThe entire network beyond the local machine is down.
Why this is the answer
APIPA indicates DHCP failure and supplies a link-local address; it is not proof that the whole network is down.
- Question 42Interactive
A workstation has already run the command shown to request a new IP address, but the address is still invalid. Which command should have been run first?
- Aipconfig /releaseCorrect answer
- Bipconfig /flushdns
- Cipconfig /all
- Dipconfig /registerdns
Why this is the answer
Release the current DHCP lease before renewing it; the typical order is ipconfig /release followed by ipconfig /renew.
- Question 43Single Choice
When manually configuring a static IP address, what problem occurs if the default gateway is omitted?
- AThe computer cannot communicate with any device, including those on the local subnet.
- BThe computer can communicate locally but cannot reach devices on other networks.Correct answer
- CThe computer will automatically use DHCP.
- DThe computer will assign itself an APIPA address.
Why this is the answer
A default gateway is needed to route traffic outside the local subnet; without it, remote network access fails.
Frequently asked questions
Everything about the CompTIA A+ (Core 2) question bank and how to use it.