220-1102 Question 20
Single answerEnd-of-life (EOL)A small accounting firm uses several Windows 10 PCs that are approaching the operating system's end-of-life date. One workstation runs a tax application that requires internet access to download updated forms, but the hardware does not meet the requirements for Windows 11. Management wants to reduce security risk while keeping the workstation available for the tax software for the next few months. Which of the following is the BEST recommendation?
- A
Keep using Windows 10 normally because antivirus software will continue to provide full protection after the OS reaches end-of-life
- B
Disconnect the workstation from the network and internet, and create a plan to replace or upgrade the system as soon as possible
- C
Install additional RAM and continue using the workstation on the internet, since hardware upgrades extend the Windows 10 support lifecycle
- D
Disable User Account Control (UAC) so the tax application can run without prompts until a replacement is purchased
Show answer and explanation
Correct answer: B
Explanation
The best answer is to isolate the unsupported system and move toward replacement or upgrade as quickly as possible. In A+ Core 2, end-of-life means a product no longer receives standard vendor support, including security updates. For internet-connected systems, that creates significant risk because newly discovered vulnerabilities may not be patched. Microsoft lifecycle guidance distinguishes between supported and unsupported products, and security best practices generally recommend upgrading, replacing, or at minimum isolating unsupported devices from untrusted networks. Antivirus, performance upgrades, or convenience changes such as disabling UAC do not compensate for the lack of operating system security updates.
- A. Incorrect.
This is incorrect because antivirus software does not replace operating system security updates. After an OS reaches end-of-life, the vendor no longer provides regular security patches, so newly discovered vulnerabilities may remain unpatched even if endpoint protection is installed. A common misconception is that antivirus alone is enough to secure an unsupported OS.
- B. Correct.
This is correct because isolating an end-of-life system from the network and internet is a recognized risk-reduction step when the device must be temporarily retained. Since the tax application requires internet access, the longer-term best practice is to replace the hardware or move the workload to a supported platform as soon as possible. In real environments, unsupported systems should be segmented, retired, or replaced rather than left exposed online.
- C. Incorrect.
This is incorrect because adding RAM may improve performance, but it does not change Microsoft's support policy. End-of-life status is based on the product lifecycle, not minor hardware upgrades. Someone might choose this option by confusing performance improvements with extended vendor support.
- D. Incorrect.
This is incorrect because disabling UAC weakens security and does nothing to address the core issue of the operating system being unsupported. It may reduce prompts, but it increases risk by making privilege escalation and unauthorized changes easier. This is the opposite of what should be done for an end-of-life system.