Everything on the exam, in one place: the four domains and their weights, a four-week study plan, a readiness checklist you can tick off, and Windows commands / file-system / malware cheat sheets — with explained, sourced sample questions throughout.
CompTIA A+ Core 2 (220-1202) validates that you can work with operating systems, security, software troubleshooting, and operational procedures. Here are the numbers that shape how you should study.
A+ is two separate exams — Core 1 (220-1201) and Core 2 (220-1202); you need both to certify. This guide covers Core 2. With up to 90 questions in 90 minutes, that's about a minute per item, and the performance-based questions take longer — so pace yourself. The exam spans four domains, and Operating Systems (31%) and Security (25%) together make up over half the exam, so they deserve the most study time.
What each domain covers, plus one explained, sourced sample question so you can see the depth the exam expects. Expand a domain to dig in.
Which file system should be used on a Windows system drive to support file permissions, encryption (EFS), and journaling?
Malware encrypts a user's files and displays a message demanding payment for the decryption key. What type is this?
In CompTIA's best-practice malware-removal process, what should you do immediately after identifying and verifying malware symptoms?
Which document describes the safe handling, storage, and disposal procedures for a hazardous material such as a leaking battery or toner?
A realistic schedule at roughly 10 hours per week. Adjust to your experience — but keep the heaviest weeks on Operating Systems and Security, since they're the biggest slices of the exam.
Windows editions and features, command-line tools, file systems, and admin utilities (MMC, Control Panel, Settings). Read every answer explanation — even on questions you get right.
Malware types, social engineering and attacks, authentication and MFA, wireless security, and workstation hardening, including NTFS vs share permissions.
OS and application symptoms, and the best-practice malware-removal process in order. Practice reading symptoms → cause.
Safety/ESD, documentation, change management, communication and PII; then take full timed mocks and re-drill weak domains. Keep the last days light.
Tick off each topic as it clicks. Your progress is saved in this browser, so you can come back to it.
Saved only in your browser — nothing leaves this device.
The reference tables worth memorizing cold — Windows command-line tools, file systems, malware types, and the malware-removal process. Bookmark this.
| Command | What it does |
|---|---|
| ipconfig | Show/release/renew IP configuration (/all, /release, /renew, /flushdns) |
| ping | Test reachability and round-trip time to a host |
| sfc /scannow | System File Checker — verify and repair protected system files |
| chkdsk | Check a disk for errors and bad sectors (/f, /r) |
| gpupdate | Refresh Group Policy settings (/force) |
| gpresult | Show the Resultant Set of Policy applied to a user/computer |
| diskpart | Manage disks, partitions, and volumes |
| tasklist / taskkill | List running processes / end a process by name or PID |
| File system | Best for | Notes |
|---|---|---|
| NTFS | Windows system & data drives | Permissions, EFS encryption, journaling, large volumes |
| FAT32 | Legacy / cross-device removable | No permissions; 4 GB per-file and 32 GB volume limits |
| exFAT | Large USB drives & SD cards | No NTFS permissions; handles >4 GB files, broad device support |
| ext4 | Linux | Default Linux file system; journaling |
| APFS | macOS | Apple File System; snapshots & encryption |
| Type | Behavior |
|---|---|
| Virus | Attaches to a file; runs and spreads when that file is executed |
| Worm | Self-replicates across a network with no user action |
| Trojan | Disguised as legitimate software to gain entry |
| Ransomware | Encrypts data or locks the system and demands payment |
| Rootkit | Hides at a privileged level to evade detection |
| Keylogger | Records keystrokes to capture credentials |
| Spyware | Secretly collects user information |
| # | Step |
|---|---|
| 1 | Investigate and verify malware symptoms |
| 2 | Quarantine the infected system |
| 3 | Disable System Restore (in Windows) |
| 4 | Remediate — update anti-malware, scan, and remove |
| 5 | Schedule scans and run updates |
| 6 | Enable System Restore and create a restore point |
| 7 | Educate the end user |
Take a free, explained practice test and see exactly which domains need more work.
Start a practice test