CompTIA Updated 220-1202 Exam Questions and Answers by zaynah

Maintaining integrity in a forensic investigation means ensuring evidence remains in its original, untampered state and that you can prove who handled it, when, and what was done to it. That is exactly what chain of custody provides. Mike Meyers’ Lab Manual defines chain of custody as an “end-to-end process” that establishes “a continuous accounting of where the evidence is at all times, who has possessed it, what activities were performed on it, and the details of its storage, use, and transfer.” It explicitly states this process “helps to ensure the integrity of evidence and minimizes the possibility that it has been altered or tampered with,” and it contributes to the admissibility and value of evidence in court.

The All-in-One Exam Guide provides the same explanation and ties chain of custody to accountability for “data integrity… and data preservation,” documenting possession and activities performed on evidence from collection through transfer. Acceptable use policy is a rules document, compliance requirements define obligations, and an after-action report summarizes events afterward—none of these directly preserve and prove evidence integrity throughout handling like chain of custody does.

Virtualizationallows the legacy OS to be run in a virtual machine (VM) on top of the newer OS. This method provides backward compatibility without requiring outdated operating systems on physical hardware.

FromQuentin Docter – CompTIA A+ Complete Study Guide:

“Using virtualization is a preferred method when legacy applications are needed after migrating to newer operating systems. It allows legacy environments to exist securely within a modern OS framework.”

The requirement is secure remote access to both Linux and Windows servers while working from home. A VPN is designed to securely extend internal network access across the public Internet. Quentin Docter states that a “virtual private network (VPN) extends your company’s internal network across the Internet,” allowing clients to connect “securely and privately,” and that it creates a secure tunnel “through the process of encryption and encapsulation,” making the remote host appear as part of the internal network with an internal IP.

Mike Meyers’ Lab Manual reinforces that VPNs work by “setting up an encrypted tunnel between the two points—over the open Internet—creating what we call a virtual private network (VPN),” enabling remote users to function as if they were plugged into the office LAN.

FTP is not secure by default and is file-transfer-only (not full network access). RDP is Windows-focused and provides a remote desktop session, not generalized secure access to mixed OS servers. RMM is a management platform for IT monitoring/maintenance, not the primary secure access method for end users. Therefore, VPN (B) best meets the requirement.

Smishing (SMS phishing) is a type of social engineering attack where attackers send fraudulent text messages to trick users into revealing sensitive information or downloading malware. These messages often impersonate banks, delivery services, or official institutions to lure the victim into clicking malicious links.

A. Impersonation is an in-person or voice-based tactic.

B. Vishing refers to voice phishing over phone calls.

C. Spear phishing is a targeted email-based phishing method.