Objective 2.6

220-1202

Given a scenario, implement procedures for basic small office/home office (SOHO) malware removal.

Objective 2.6 sits in Security, which carries 28% of the A+ Core 2 exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-6Security

A technician finishes remediating an infected workstation and needs to limit which employees can open a shared folder that once stored the malicious files. Which feature should the technician configure to set per-user read, write, and modify permissions on that folder?

BitLocker Drive Encryption applied across the entire volumeBitLocker encrypts an entire volume so data is unreadable if the drive is removed, but it does not set per-user folder permissions.
Self-healing NTFS background corruption repair process runningSelf-healing NTFS repairs minor file system corruption automatically; it does not control who can access a folder.
Access control lists (ACLs) defined in the folder's security descriptorCorrect · your answerCorrect: ACLs are the NTFS mechanism for assigning per-user or per-group permissions.
Volume Shadow Copy Service previous versions snapshot featureVolume Shadow Copy Service provides previous-version snapshots for recovery, not access permissions.
NTFS transaction log replay performed during system startupThe transaction log restores file system consistency after a crash; it plays no role in restricting folder access.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Once malware is gone the useful question is who was able to put it there. A file system offers several protections that are easy to confuse because they all sound like safety: one decides who may open an object, one makes data unreadable if the disk leaves, one keeps earlier copies for recovery, and one keeps the structure consistent after a crash. Only the first is expressed per person, and only the first changes what a named employee can do tomorrow.

Why C

Assigning ACLs on the folder is the correct way to restrict which users can access it, which is exactly what NTFS security descriptors are designed to do.

Source

Granular access control with ACLs: NTFS enables you to assign detailed permissions to files and folders using Access Control Lists (ACLs). You can specify which users and groups have access, define the type of access such as read, write, or modify, and tailor security to meet organizational requirements.

Microsoft Learn: NTFS overview, checked July 2026
#malware removal#ntfs#acl#remediation#soho security

Now you: objective 2.6 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-6Security

After removing spyware that had captured a user's saved browser passwords, a technician educates the end user on stronger sign-in security. The technician recommends adding a hardware security key as a second verification method. Which authentication factor category does this represent?

Sample question 2 of 3

2-6Security

While remediating a ransomware infection, a technician confirms that the workstation's drive still uses hardware-based protection so its data remains unreadable if the drive is removed and installed in another system. Which NTFS-integrated feature provides this protection?

Sample question 3 of 3

2-6Security

After a phishing attack compromised a user's password, a technician recommends multifactor authentication. The user suggests using two different passwords at sign-in instead. Which addition would actually satisfy multifactor authentication requirements?

Full A+ Core 2 question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security