220-1102

220-1102 practice questions, page 6 of 28, with answer review and explanations.

Question 26

An incident handler needs to preserve evidence for possible litigation. Which of the following will the incident handler MOST likely do to preserve the evidence?

  1. Encrypt the files.
  2. Clone any impacted hard drives.
  3. Contact the cyber insurance company.
  4. Inform law enforcement.

Question 27

A technician needs to recommend the best backup method that will mitigate ransomware attacks. Only a few files are regularly modified; however, storage space is a concern. Which of the following backup methods would BEST address these concerns?

  1. Full
  2. Differential
  3. Off-site
  4. Grandfather-father-son

Question 28

A technician is troubleshooting a customer's PC and receives a phone call. The technician does not take the call and sets the phone to silent. Which of the following BEST describes the technician's actions?

  1. Avoid distractions
  2. Deal appropriately with customer's confidential material
  3. Adhere to user privacy policy
  4. Set and meet timelines

Question 29

A technician needs to transfer a large number of files over an unreliable connection. The technician should be able to resume the process if the connection is interrupted. Which of the following tools can be used?

  1. sfc
  2. chkdsk
  3. git clone
  4. robocopy

Question 30

A company installed a new backup and recovery system. Which of the following types of backups should be completed FIRST?

  1. Full
  2. Non-parity
  3. Differential
  4. Incremental