CompTIA A+ Core 2 Study Guide

By EarnITCerts · Written by a university IT & cybersecurity instructor who has passed 50+ certification exams

While Core 1 tests hardware and connectivity, CompTIA A+ Core 2 (220-1202) tests your ability to administer operating systems, lock down endpoints against cyber threats, resolve software/boot failures, and follow enterprise IT service desk procedures. Note that Core 2 requires a slightly higher passing score (700/900) than Core 1.

1. Windows Editions, File Systems & Partitioning

• Windows Pro vs. Enterprise vs. Home:
  • Windows Home: Lacks BitLocker full-disk encryption, Group Policy Editor (gpedit.msc), Active Directory domain join, and Remote Desktop Host.
  • Windows Pro: Adds Active Directory domain join, BitLocker encryption, Hyper-V client, Group Policy, and RDP host capabilities.
  • Windows Enterprise: Adds centralized enterprise deployment tools, AppLocker, BranchCache, and DirectAccess.
• File Systems Comparison:
  • NTFS: Native Windows OS drive format; supports file-level ACL permissions, encryption (EFS), compression, shadow copies, and volumes over 2 TB.
  • exFAT: Modern flash drive format designed for cross-platform compatibility between Windows and macOS without the 4 GB single-file limit of FAT32.
  • ext4: Standard journaling file system for Linux distributions.
  • APFS: Apple File System optimized for SSDs and flash storage on modern macOS and iOS devices (supports snapshots and native encryption).
• GPT vs. MBR Partition Styles: GPT (GUID Partition Table) requires UEFI firmware, supports up to 128 primary partitions and drives larger than 2 TB. MBR (Master Boot Record) uses legacy BIOS, is capped at 2 TB per drive, and allows only 4 primary partitions.

2. Essential Windows Administrative Utilities

• msconfig (System Configuration): Manages boot options (Safe Mode) and selective startup troubleshooting.
• compmgmt.msc / diskmgmt.msc: Initializes drives, shrinks/extends partitions, and assigns drive letters.
• eventvwr.msc (Event Viewer): Inspects Application, Security, Setup, and System logs to pinpoint crash timestamps or failed logins.
• services.msc: Starts, stops, and sets startup types (Automatic, Manual, Disabled) for background Windows services.
• perfmon.msc & resmon.exe: Monitors real-time CPU, disk queue, memory faults, and network throughput.

3. High-Yield Windows & Linux Command-Line Reference

1. Wireless & Network Security Protocols

• WPA2 vs. WPA3: WPA2 uses AES-CCMP encryption with a 4-way handshake (vulnerable to offline dictionary attacks). WPA3 replaces the pre-shared key exchange with SAE (Simultaneous Authentication of Equals / Dragonfly handshake), providing forward secrecy and blocking offline brute-force cracking.
• WPA2/WPA3-Enterprise (802.1X): Replaces shared Wi-Fi passwords with individual user authentication via a RADIUS server using EAP-TLS or PEAP.
• AAA Framework: Authentication (proving identity), Authorization (enforcing permissions), and Accounting (logging actions).

2. Physical Security & Data Destruction

• Access Control Vestibule (Mantrap): Two interlocking doors between which only one door can open at a time; physically prevents tailgating / piggybacking.
• Data Sanitization vs. Destruction:
  • Standard Formatting: Only removes file system pointers—data is easily recoverable.
  • Low-Level Zero-Fill / Overwriting (Shredding): Overwrites every sector with random 1s and 0s so drives can be safely reused internally.
  • Degaussing: Uses a powerful electromagnetic field to destroy magnetic domains on traditional spinning HDDs and magnetic tapes. Note: Degaussing has ZERO effect on SSDs or flash media!
  • Physical Destruction (Incineration, Pulverizing, Shredding, Drilling): Required for disposing of top-secret or failed SSDs and HDDs.

1. The Official CompTIA 7-Step Malware Removal Process

Core 2 nearly always includes multiple questions asking what step comes next during a malware or ransomware infection. Memorize the exact order:

1. Investigate and verify malware symptoms: Check for hijacked browsers, disabled AV, strange outbound connections, or missing files.
2. Quarantine the infected system: Immediately unplug the Ethernet cable and disable Wi-Fi to prevent ransomware from encrypting network shares.
3. Disable System Restore (in Windows): Prevents the operating system from backing up malicious trojan files into protected shadow copies (and prevents malware from reinfecting the PC during a restore).
4. Remediate the infected system:
   • Update anti-malware definitions.
   • Boot into Safe Mode or a Pre-installation Environment (WinPE / Live Linux USB) and run full system scans.
5. Schedule scans and run updates: Enable real-time protection and apply all OS security patches.
6. Enable System Restore and create a new restore point: Once verified clean, turn System Restore back on and capture a fresh, clean snapshot.
7. Educate the end user: Train the user on phishing recognition, safe downloads, and password hygiene.

2. Common OS & Mobile Troubleshooting Scenarios

• Boot Failure ("No Bootable Device Found" / Missing Operating System): Verify boot order in UEFI/BIOS first; if the drive is present, boot to Windows Recovery Environment (WinRE) and run bootrec /fixmbr, bootrec /fixboot, and bootrec /rebuildbcd.
• BSOD (Blue Screen of Death / Stop Error): Roll back recently installed device drivers in Safe Mode, check Event Viewer for critical kernel errors, and run Windows Memory Diagnostic or sfc /scannow.
• Mobile App Crashes / Freezing: Force-stop the app → clear the app cache → update the app → uninstall and reinstall the app → factory reset as a last resort.

1. Change Management & Backups

• Change Management Components: Every production change requires a documented Purpose/Scope, Risk Analysis, Date/Time Window, Affected Systems, a Sandbox Test Plan, a Backout / Rollback Plan (how to undo the change if it fails), and formal Change Advisory Board (CAB) approval.
• Backup Types (Speed vs. Storage Trade-offs):
  • Full Backup: Copies all selected data and clears the archive bit. Slowest to back up, fastest to restore (requires only 1 backup set).
  • Incremental Backup: Copies only data modified since the last backup of any type (Full or Incremental) and clears the archive bit. Fastest backup speed, slowest restore (requires the last Full + every single Incremental since then).
  • Differential Backup: Copies all data modified since the last Full backup (does NOT clear the archive bit). Moderate backup speed and fast restore (requires only the last Full + the latest Differential).
• 3-2-1 Backup Rule: Maintain 3 total copies of data, on 2 different media types, with 1 copy stored offsite/immutable.

2. Safety, ESD & Regulated Data

• ESD (Electrostatic Discharge) Prevention: Use an anti-static wrist strap clipped to unpainted metal chassis ground, work on an ESD mat, maintain relative humidity between 40%–60%, and transport components inside anti-static shielding bags. Never wear an ESD wrist strap when working inside a high-voltage CRT monitor or open power supply unit (PSU)!
• MSDS / SDS (Safety Data Sheet): Documents chemical composition, safe handling, spill cleanup, and disposal rules for toner cartridges, lithium-ion batteries, and cleaning solvents.
• Data Privacy Classifications: PII (Personally Identifiable Information), PHI (Protected Health Information—governed by HIPAA), and PCI-DSS (Credit cardholder data).

1. Help Desk Ticketing System PBQs: You will be given 2–3 open support tickets and chat logs. Read the issue carefully, select the least-invasive fix that matches the user's symptoms, verify the resolution, and mark the ticket closed with accurate root-cause notes.
2. Command Prompt / Terminal PBQs: Type help first inside any simulated command prompt! CompTIA simulations only implement the 5 to 8 commands relevant to that specific problem—typing help reveals the exact commands the simulation accepts.
3. Disk Partitioning PBQ: When asked to add a redundant data volume in Disk Management, remember to right-click the unallocated space on a Dynamic Disk to create a Mirrored Volume (RAID 1) or Striped Volume (RAID 0), format with NTFS, and assign the requested drive letter and volume label.