220-1102 exam dumps: questions 701 to 800 of 828

Correct answer: A

• A. Correct.

  Correct. A grandfather-father-son (GFS) rotation is designed to balance recovery flexibility, simplicity, and media cost. In practice, the 'son' set is typically daily backups, the 'father' set is weekly backups, and the 'grandfather' set is monthly backups retained longer. This fits the scenario because it improves the ability to recover files deleted weeks ago without requiring an overly complex process.

• B. Incorrect.

  Incorrect. Reusing a single full backup tape every day provides only the most recent recovery point. If a file was deleted or corrupted several days or weeks earlier and the issue was not noticed immediately, earlier versions would be unavailable. Although simple, this approach does not meet the requirement for longer recovery history.

• C. Incorrect.

  Incorrect. RAID 1 provides redundancy for disk failure, not historical versioning or backup retention. If a user deletes a file or ransomware encrypts data, the mirrored copy reflects the same change. This is a common misconception: fault tolerance is not the same as a backup rotation scheme.

• D. Incorrect.

  Incorrect. Incremental backups can reduce backup time and storage use, but using the same tape repeatedly until it is full creates poor retention structure and can complicate restores. It also does not provide a clear rotation plan for daily, weekly, and monthly recovery points. This choice may seem cost-effective, but it does not address the firm's need for practical long-term recovery.

Correct answer: B

• A. Incorrect.

  This is incorrect because malware-related issues do not automatically require onsite support. In many real-world environments, remote support is the preferred first response when the user is offsite and the organization has approved remote tools. An onsite visit would add delay and is not the best first step when time is critical and remote access is permitted.

• B. Correct.

  This is correct because the user is offsite, needs urgent help, and company policy explicitly allows remote assistance with consent. Having the user close or hide sensitive data before screen sharing or remote control aligns with privacy and security best practices. This approach addresses the issue quickly while respecting policy and minimizing exposure of customer information.

• C. Incorrect.

  This is incorrect because screenshots may provide some information, but they are slower and less effective than interactive troubleshooting in an urgent situation. Waiting until the user returns to the office unnecessarily delays support and does not match the need for timely assistance when an approved offsite support method already exists.

• D. Incorrect.

  This is incorrect because disabling antivirus is not an appropriate first step and could increase risk if the system is actually infected. It reflects a common troubleshooting mistake: weakening security controls before gathering evidence or verifying the issue. The technician should use approved remote troubleshooting methods and follow security policy instead.

Correct answer: C

• A. Incorrect.

  Incorrect. A monthly grandfather backup is designed for long-term retention and disaster recovery over longer time periods. It would likely contain a much older version of the spreadsheet than necessary. A technician should usually start with the most recent backup taken before the unwanted change, not the oldest archival copy.

• B. Incorrect.

  Incorrect. The weekly father backup from last Friday was created after the spreadsheet was overwritten late Wednesday of the previous week. That means the overwritten version would most likely already be included in the Friday backup, making it a poor first choice when trying to recover the pre-incident version.

• C. Correct.

  Correct. In a GFS rotation, daily son backups provide the shortest recovery point objective for routine file recovery. Because the overwrite happened late Wednesday of the previous week, the Wednesday night backup from that week is the most recent backup likely to contain the file as it existed before the accidental overwrite. Restoring from the latest backup before the incident is the standard best practice.

• D. Incorrect.

  Incorrect. Monday night's son backup from this week was created several days after the overwrite occurred, so it would almost certainly contain the already-overwritten file. This option reflects a common mistake: choosing the most recent backup overall instead of the most recent backup taken before the problem occurred.

Correct answer: B

• A. Incorrect.

  Incorrect. This does not meet the 3-2-1 rule because the extra partition is not a separate backup medium; it is still on the same system and is vulnerable to the same hardware failure, corruption, or ransomware event. The attached USB drive is also online and accessible to malware, which is exactly what caused the previous backup to be encrypted.

• B. Correct.

  Correct. This plan best matches the 3-2-1 rule: 3 copies of the data (production data plus two backups), on 2 different media/storage types (for example, server storage and a NAS/cloud target), with 1 copy offsite (the cloud backup service). Versioning also improves recovery from accidental deletion or ransomware by allowing restoration of earlier unencrypted versions.

• C. Incorrect.

  Incorrect. Multiple folders on the same server are not separate backups in any meaningful disaster-recovery sense. They rely on the same device and do not satisfy the requirement for different media or an offsite copy. The recycle bin is not a backup archive and is not appropriate for long-term recovery.

• D. Incorrect.

  Incorrect. Although there are multiple backup devices, leaving both connected all the time makes them vulnerable to ransomware and does not satisfy the offsite component of 3-2-1. Two always-connected drives in the same location are still exposed to the same local threats, including theft, fire, and malware.

Correct answer: A

• A. Correct.

  Correct. The technician should first eliminate the immediate electrical and fire risk by powering off and unplugging the device, then ensuring the surrounding area is safe. A burning smell indicates a potential overheating or electrical fault. Because paper and solvent are combustible, checking for flammable materials is an essential first safety step before any internal inspection.

• B. Incorrect.

  Incorrect. Opening the printer right away skips the most important initial safety actions: disconnecting power and controlling environmental hazards. A technician may feel pressure to diagnose quickly, but servicing energized equipment with signs of overheating increases the risk of electrical shock, burns, and ignition.

• C. Incorrect.

  Incorrect. Compressed air is not an appropriate first response to a burning smell, especially while the device is still powered on. It does not address the possible electrical fault and could disturb hot particles or toner. The primary misconception is treating the symptom as a heat issue rather than recognizing the underlying safety hazard.

• D. Incorrect.

  Incorrect. Moving powered equipment that may have an electrical or thermal fault is unsafe. It keeps the hazard energized and could worsen the problem or expose the technician and nearby staff to injury. Business continuity is secondary to safety when a device shows signs of possible overheating or fire risk.