CompTIA Updated 220-1202 Exam Questions and Answers by kabir

The requirement is that vendor users can work only during certain times , which is enforced by setting logon-hour restrictions on the accounts. Quentin Docter explicitly describes this control under “Setting Time Restrictions,” stating: “Configure user accounts so that logins can occur only during times that the user can be expected to be working,” and explains that in Active Directory you can open the user account and click Logon Hours to configure permitted and denied hours. This directly matches option D.

Option C (account expiration) is useful for contractors, and Docter even notes account expiration is “best used on contractor accounts,” but that controls the end date of access, not daily working hours . Alerts (B) would only notify after the fact, and timeout policies (A) are about inactivity/session controls rather than restricting when logons are allowed. Mike Meyers also lists “login time restrictions” as an account management best practice, reinforcing that restricting logon times is a valid security control.

To prevent unauthorized physical access to a mobile device, the company must ensure the device locks quickly and requires an authentication factor before anyone can use it. PIN authentication directly blocks access by requiring a passcode to unlock the device—Quentin Docter lists PIN lock as one of the primary “screen lock” methods used to secure mobile devices, explaining it as the most common unlock method (typically 4–6 digits, sometimes alphanumeric).

Screen timeout (auto-lock) reduces the window in which an unattended phone remains usable; the All-in-One guide notes that systems can be set to an automatic timeout and screen lock, requiring credentials after a short period of inactivity. Mike Meyers’ Lab Manual reinforces that you should “protect your data from access by putting a good screen lock on the device,” and that these locks commonly require a password/PIN/pattern/biometric to regain access after locking.

Hotspots, VPN, antivirus, and location services are valuable, but they do not primarily stop someone holding the device from opening it and accessing data.

The correct answer is C. net use, which is the Windows command-line utility used to display, create, and remove mapped network drives and SMB (Server Message Block) connections. When working re motely through command-line interfaces, technicians often rely on net use to quickly verify which network shares are currently connected.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that SMB is the protocol Windows uses for file and printer sharing, and mapped drives are maintained through SMB sessions. The net use command lists all active connections, including the drive letter, remote UNC path, and connection status.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that net use is especially valuable for remote troubleshooting because it does not require a graphical interface. This makes it ideal when administering multiple systems via command prompt or remote shell.

The Mike Meyers / Mark Soper Lab Manual clarifies that systeminfo displays OS and hardware details, hostname only shows the system name, and nslookup is used for DNS queries. None of those commands provide information about mapped SMB shares.

Since the task is to verify existing SMB mappings, net use is the only command that directly fulfills this requirement, making C the correct answer.

Virtualization settings are typically found within the BIOS/UEFI firmware configuration. To prevent unauthorized users from changing these settings, the technician should set a BIOS password. This ensures only administrators with the password can access or modify BIOS settings, including virtualization support.

B. The guest account is a user-level feature in Windows and doesn’t control BIOS access.

C. A screen lock prevents casual access to the desktop but doesn’t protect firmware settings.

D. AutoRun controls how media and devices behave when inserted — unrelated to BIOS security.