CompTIA A+ Core 2 220-1202 is the software, security, and operational half of the current CompTIA A+ certification. If Core 1 is largely about understanding devices, hardware, networking, and how systems connect, Core 2 is about what happens after those systems are deployed: configuring operating systems, securing endpoints, diagnosing software problems, supporting users, and following professional IT procedures.
That distinction matters. A technician in the real world rarely receives a ticket saying, “Please demonstrate your knowledge of operating systems.” Instead, the ticket says that a laptop is running slowly, a user cannot access a shared folder, Windows is repeatedly crashing, a mobile application will not update, or a security alert suddenly appeared. The technician has to determine what changed, identify the likely cause, fix the problem without creating another one, and document the work.
That is essentially the mindset behind the 220-1202 exam. It is an entry-level certification exam, but it rewards practical judgment rather than simple memorization. For students, career changers, help desk technicians, and junior IT professionals, preparing for Core 2 can also provide a useful foundation for later work in system administration, networking, cloud computing, and cybersecurity.
What Is the CompTIA A+ Core 2 220-1202 Exam?
The CompTIA A+ 220-1202 exam is Core 2 of the current A+ V15 certification. Candidates must complete both Core 1 (220-1201) and Core 2 (220-1202) from the current certification series to earn the full CompTIA A+ certification.
Core 2 concentrates heavily on operating systems and security, but it also tests software troubleshooting and the operational practices expected from a professional support technician.
| Exam Detail | CompTIA A+ Core 2 |
|---|---|
| Exam Code | 220-1202 |
| Certification Version | CompTIA A+ V15 |
| Number of Questions | Maximum of 90 |
| Question Types | Multiple-choice and performance-based questions |
| Exam Duration | 90 minutes |
| Passing Score | 700 on a scale of 100–900 |
| Recommended Experience | Approximately 12 months of hands-on experience in an IT support specialist role |
Do not interpret the recommended experience as a strict prerequisite. Someone studying IT at school or building a home lab can still prepare successfully. However, candidates who have actually installed operating systems, managed user accounts, worked with permissions, used Windows administrative tools, removed malware, and troubleshot applications generally find scenario-based questions much easier.
If you want to combine this exam guide with structured review material, you can also use our 220-1202 CompTIA A+ Core 2 preparation resources while working through the official objectives.
CompTIA A+ 220-1202 Exam Objectives and Domain Weights
The current 220-1202 exam objectives are divided into four domains. Unlike exams where one topic dominates the blueprint, Core 2 distributes a significant amount of weight across every domain, so completely ignoring any one area is risky.
| Domain | Percentage |
|---|---|
| 1.0 Operating Systems | 28% |
| 2.0 Security | 28% |
| 3.0 Software Troubleshooting | 23% |
| 4.0 Operational Procedures | 21% |
Operating Systems and Security together account for 56 percent of the examination, but Software Troubleshooting and Operational Procedures still represent nearly half of the total exam. A balanced preparation strategy is therefore more effective than studying Windows commands or security terminology alone.
Domain 1: Operating Systems – 28%
Operating Systems is one of the two largest domains on the CompTIA A+ Core 2 220-1202 exam. Windows receives considerable attention because it is widely used in business environments, but candidates should also understand Linux, macOS, Chrome OS, Android, iOS, and iPadOS at the level expected from an entry-level support technician.
Operating System Types and File Systems
You should understand the purpose and basic characteristics of common desktop and mobile operating systems. File systems are equally important. Be comfortable recognizing technologies such as NTFS, ReFS, FAT32, exFAT, ext4, XFS, and APFS, including situations where compatibility between operating systems becomes important.
This is more practical than simply matching a file system with a vendor. For example, an external storage device may need to exchange files between different operating systems. Choosing a technically capable file system that the other system cannot read is still the wrong solution.
Windows Installation and Configuration
The exam expects candidates to understand clean installations, upgrades, recovery installations, imaging, remote installations, zero-touch deployment, partitions, GPT, MBR, hardware requirements, drivers, application compatibility, and operating system life cycles.
You should also understand differences among common Windows editions and features such as domain membership, workgroups, Remote Desktop, Group Policy, BitLocker, TPM, and UEFI.
Windows Administrative Tools
Knowing the name of a Windows utility is not enough. You should know when to use it. Important tools include:
- Task Manager for processes, performance, startup applications, users, and services.
- Event Viewer for investigating operating system and application events.
- Device Manager for driver and hardware-related problems.
- Disk Management for partitions and storage configuration.
- Task Scheduler for automated tasks.
- Performance Monitor and Resource Monitor for deeper performance analysis.
- System Configuration for startup and troubleshooting scenarios.
- Registry Editor when appropriate system-level configuration is required.
Command-Line Skills
A+ does not turn you into a command-line administrator, but a support technician should be comfortable working without a graphical interface when necessary.
For Windows, practice commands such as ipconfig, ping, netstat, nslookup, tracert, pathping, chkdsk, diskpart, robocopy, whoami, gpupdate, gpresult, and sfc.
For Linux, understand basic navigation, file manipulation, permissions, networking, process management, configuration files, and administrative concepts such as sudo.
Study tip: When learning a command, do not memorize only its name. Ask three questions: What problem would make me use this command? What information will it return? What should I do after seeing the result?
Cloud-Based Productivity Applications
Modern support jobs increasingly involve cloud-based productivity environments. The current exam objectives include email, synchronized storage, instant messaging, videoconferencing, spreadsheets, presentations, and word-processing tools.
The important skill is understanding how cloud applications affect identity, synchronization, local storage, networking, permissions, and troubleshooting.
Domain 2: Security – 28%
Security represents another 28 percent of the exam. This is one reason A+ has become more relevant to modern IT support: endpoint technicians are often the first people who encounter compromised accounts, suspicious applications, phishing attempts, insecure wireless networks, and malware infections.
Authentication and Access Control
Understand physical and logical security controls as well as concepts such as:
- Principle of least privilege
- Multifactor authentication (MFA)
- Access control lists (ACLs)
- Single sign-on (SSO)
- Identity and access management (IAM)
- Mobile device management (MDM)
- Privileged access management (PAM)
- Zero Trust concepts
- Data loss prevention (DLP)
These topics should be understood as tools for solving security problems rather than isolated vocabulary. If a standard user does not require administrator rights, for example, granting those privileges simply because it is convenient violates least privilege and increases the potential impact of malware or accidental changes.
Windows Security
Windows security is especially important for Core 2. Candidates should understand Microsoft Defender Antivirus, Windows Firewall, user and group configuration, authentication options, NTFS and share permissions, User Account Control (UAC), BitLocker, EFS, and basic Active Directory concepts.
Pay particular attention to permissions. Questions involving local permissions, share permissions, groups, inheritance, and effective access frequently require you to reason through what a user can actually do rather than identify a definition.
Malware and Social Engineering
You should recognize common malware categories, methods of infection, symptoms of compromise, and the appropriate response to an infected workstation. Social engineering topics can include phishing, impersonation, shoulder surfing, tailgating, malicious links, and other techniques designed to manipulate users.
Memorizing threat definitions is useful, but it is more important to recognize the evidence. Unexpected advertisements, browser redirection, unusual network traffic, altered files, fake antivirus warnings, unauthorized applications, disabled security tools, or unexplained account activity should immediately influence your troubleshooting process.
Securing SOHO Networks and Browsers
A support technician should know how to improve the security of a small office or home office network. Typical tasks include changing default router credentials, applying firmware updates, configuring secure wireless encryption, controlling guest access, disabling unnecessary services, managing firewall rules, and protecting administrative interfaces.
Browser security is also part of the current objectives. Candidates should understand secure connections and certificates, trusted and untrusted extensions, browser updates, password managers, pop-up controls, private browsing, cache and browsing-data management, secure DNS, and browser feature management.
Domain 3: Software Troubleshooting – 23%
Software Troubleshooting accounts for 23 percent of the exam and is one of the areas where hands-on practice provides the greatest advantage.
A real technician usually begins with symptoms rather than a diagnosis. The same is true of many Core 2 questions.
Common Windows Problems
You should be prepared to troubleshoot symptoms such as:
- Blue screen errors
- Slow system performance
- Boot failures
- Applications crashing
- Services failing to start
- Frequent shutdowns or reboots
- Low-memory warnings
- Operating system instability
- Connectivity problems
- Failed updates
- Slow user profile loading
The key is following a structured troubleshooting process. Randomly changing settings until something works may occasionally solve a real-world problem, but it is a poor examination strategy and an even worse production support practice.
Mobile Operating System and Application Problems
Mobile devices are not excluded from Core 2. You may need to diagnose applications that will not open, close, install, or update; excessive battery consumption; synchronization problems; connectivity problems; operating system update failures; and security-related symptoms.
Also understand the security implications of unofficial application stores, developer mode, root access, jailbreaking, malicious applications, and unexpected application behavior.
Security-Related Troubleshooting
A workstation with a security problem does not always display a clear “malware detected” message. A compromised computer may instead show false antivirus alerts, unexpected notifications, altered files, excessive network activity, browser changes, failed operating system updates, or an inability to access normal resources.
Good candidates learn to connect symptoms with likely causes and then choose the safest next action.
Domain 4: Operational Procedures – 21%
Operational Procedures is sometimes underestimated because it appears less technical than Windows administration or malware analysis. That is a mistake. It represents more than one-fifth of the examination and covers several skills that distinguish a professional technician from someone who simply knows how to fix a computer.
Documentation and Change Management
Enterprise IT depends on documentation. You should understand asset records, ticketing information, network documentation, knowledge bases, standard operating procedures, onboarding and offboarding checklists, service-level agreements, and change management.
A technically correct change performed without approval, rollback planning, documentation, or awareness of affected systems can still become an operational failure.
Backup and Recovery
Understand full, incremental, differential, and synthetic full backups, along with recovery options and backup testing. You should also recognize concepts such as onsite versus offsite backups, grandfather-father-son rotation, and the 3-2-1 backup principle.
Do not study backups as a collection of definitions. Compare how each method affects backup time, restore complexity, storage consumption, and recovery requirements.
Safety, Environment, Privacy, and Licensing
Core 2 includes electrostatic discharge protection, electrical safety, proper component handling, equipment disposal, environmental controls, UPS systems, surge protection, regulated information, licensing, acceptable-use policies, nondisclosure agreements, and incident documentation.
These subjects become especially important in business environments where a technician may handle customer data, corporate systems, or devices involved in a security investigation.
Scripting and Remote Access
The current V15 objectives include basic scripting concepts. Candidates should recognize common script types such as .bat, .ps1, .vbs, .sh, .js, and .py, along with use cases including software installation, backups, information gathering, updates, drive mapping, and basic automation.
Remote support technologies are also relevant. Understand the purpose and security considerations of RDP, VPN, VNC, SSH, RMM platforms, WinRM, screen-sharing tools, file-transfer applications, and other remote management technologies.
Artificial Intelligence in the A+ V15 Objectives
One of the more modern additions to the current CompTIA A+ V15 objectives is basic artificial intelligence awareness.
You are not expected to become a machine-learning engineer. Instead, technicians should understand practical issues surrounding AI integration, appropriate-use policies, plagiarism, data sources, data privacy, public versus private AI systems, and limitations such as bias, hallucinations, and accuracy.
This is increasingly relevant in support environments. An AI assistant may help summarize a ticket, draft a script, or explain an error message, but technicians remain responsible for validating the result before applying it to production systems.
Why Is CompTIA A+ Still Valuable?
CompTIA A+ is often described as an entry-level certification, but “entry-level” should not be confused with “unimportant.” Every advanced IT environment still depends on fundamentals: operating systems, identity, permissions, networking, endpoint security, troubleshooting, documentation, and communication.
The certification can be particularly useful for people targeting roles such as:
- Help Desk Technician
- IT Support Specialist
- Desktop Support Technician
- Field Service Technician
- Technical Support Specialist
- Junior Systems Administrator
- Endpoint Support Technician
A certification cannot replace experience, but it can provide structure to your learning and demonstrate that you have studied a broad baseline of support technologies.
It is also a logical starting point before certifications such as CompTIA Network+, Security+, Linux+, or vendor-specific cloud and infrastructure certifications. The knowledge gained while studying A+ continues to appear later, just in greater depth.
How Difficult Is the 220-1202 Exam?
The 220-1202 exam is manageable for beginners, but it is broader than many students initially expect. The difficulty does not usually come from advanced mathematics or deeply specialized technology. It comes from the number of technologies you need to recognize and your ability to choose the correct solution when several answers appear technically possible.
For example, you may understand that several Windows tools can provide information about system performance. The exam may ask which tool is most appropriate for a particular symptom. That requires more than memorizing tool names.
Performance-based questions increase this practical emphasis. Candidates may be asked to configure settings, analyze information, match technologies, arrange troubleshooting steps, or work through a simulated support situation.
Hands-On Labs You Should Complete Before the Exam
You do not need an expensive enterprise lab. A Windows computer and one or two virtual machines can provide enough practice for a large portion of Core 2.
Useful lab exercises include:
- Install Windows in a virtual machine and explore partitioning and installation options.
- Create standard and administrator accounts and compare their capabilities.
- Practice NTFS permissions, inheritance, and shared-folder access.
- Use Task Manager, Event Viewer, Device Manager, Disk Management, Resource Monitor, and Task Scheduler.
- Run common Windows networking and troubleshooting commands.
- Configure Windows Defender Firewall rules and review Microsoft Defender settings.
- Enable or review BitLocker where supported and understand recovery-key management.
- Create a Linux virtual machine and practice basic command-line administration.
- Simulate backup and restore procedures.
- Create simple PowerShell, batch, or shell scripts for basic administrative tasks.
- Configure a small wireless router securely if laboratory equipment is available.
- Practice documenting a troubleshooting incident from problem identification through resolution.
The goal is not to memorize every menu location. Interfaces change. Instead, learn what each tool does and why you would choose it.
A Practical 220-1202 Study Strategy
Step 1: Start With the Official Objectives
Download the current exam objectives and use them as your master checklist. Every course, book, video, or practice exam should ultimately map back to that document.
Step 2: Build Operating System Skills First
If you have limited Windows administration experience, spend substantial time working directly with Windows tools and command-line utilities. Reading screenshots is not the same as using the operating system yourself.
Step 3: Study Security Through Scenarios
Rather than memorizing that MFA is “more secure,” ask how it prevents account compromise, where it should be implemented, and what happens when credentials are stolen. Do the same for permissions, encryption, malware controls, browser security, and wireless security.
Step 4: Practice Troubleshooting From Symptoms
Take a symptom such as “Windows is slow after startup” and create several possible causes. Then determine which tool or observation would help eliminate each possibility.
This teaches diagnostic reasoning and prepares you for questions where the answer is the best next step, not simply a technically valid action.
Step 5: Do Not Ignore Operational Procedures
Documentation, backups, change management, safety, scripting, professionalism, remote access, and AI concepts are all legitimate exam material. Saving this entire domain for the night before the exam is unnecessary risk.
Step 6: Use Practice Questions to Identify Weak Areas
A good practice question should teach you why an answer is correct and why the alternatives are wrong. Track your mistakes by objective. If most of your missed questions involve permissions, Windows utilities, or malware-removal procedures, return to those topics instead of simply taking another full practice test.
For candidates who want additional scenario-based review during this stage, the CompTIA A+ Core 2 220-1202 study resources can be used alongside labs and the official exam objectives to identify areas that still require attention.
How to Prepare for Performance-Based Questions
Performance-based questions, or PBQs, are designed to test whether you can apply knowledge rather than simply recognize terminology.
Before exam day, practice tasks such as configuring users, interpreting network settings, choosing appropriate security controls, identifying Windows utilities, troubleshooting operating system symptoms, and placing procedures in the correct sequence.
During the exam, read the objective carefully. A PBQ may provide more information than you actually need. Determine what the task is asking you to accomplish before changing anything.
If a PBQ is consuming too much time, consider marking it for review and returning later. Protecting your time is important because the exam contains both practical and multiple-choice questions within the same 90-minute window.
Common Mistakes When Preparing for Core 2
Several study habits repeatedly cause problems for otherwise capable candidates.
- Studying only Windows: Windows is important, but security, troubleshooting, Linux/macOS concepts, mobile systems, and operational procedures also matter.
- Memorizing answers instead of concepts: Scenario wording can change while the underlying technical principle remains the same.
- Ignoring command-line practice: Seeing
ipconfigin a study guide is different from knowing how its output helps diagnose a problem. - Skipping permissions: User accounts, groups, NTFS permissions, share permissions, UAC, and access controls deserve serious practice.
- Underestimating operational procedures: This domain is worth 21 percent of the examination.
- Not practicing troubleshooting order: The first action, best action, and final action are not always interchangeable.
- Relying entirely on practice-test scores: A high score is useful only if you understand why your answers are correct.
Core 1 vs. Core 2: What Is the Difference?
A simple way to think about the A+ certification is that Core 1 focuses more heavily on the technology itself, while Core 2 focuses more heavily on operating and supporting that technology.
| Core 1 – 220-1201 | Core 2 – 220-1202 |
|---|---|
| Mobile devices | Operating systems |
| Networking | Security |
| Hardware | Software troubleshooting |
| Virtualization and cloud computing | Operational procedures |
| Hardware and network troubleshooting | Scripting, remote support, and AI basics within operational objectives |
The two exams complement each other. A technician needs to understand both the physical and network environment covered in Core 1 and the software, security, and support environment covered in Core 2.
Frequently Asked Questions About CompTIA A+ 220-1202
What is the passing score for CompTIA A+ 220-1202?
The passing score for Core 2 is 700 on a scale of 100 to 900.
How many questions are on the 220-1202 exam?
The exam contains a maximum of 90 questions, including multiple-choice and performance-based questions.
How long is the 220-1202 exam?
Candidates receive 90 minutes to complete the exam.
Do I need to pass 220-1201 before taking 220-1202?
You do not need to treat Core 1 as a formal prerequisite before sitting Core 2. However, you must satisfy the current A+ Core 1 and Core 2 requirements to earn the full CompTIA A+ certification.
Is 220-1202 mostly Windows?
Windows is an important part of the exam, but Core 2 is not simply a Windows test. It also covers other operating systems, cybersecurity, malware, mobile security, software troubleshooting, documentation, backup and recovery, scripting, remote access, professional procedures, and basic AI concepts.
Does 220-1202 include performance-based questions?
Yes. CompTIA identifies both multiple-choice and performance-based questions as part of the exam format. Candidates should therefore spend time practicing configuration and troubleshooting tasks rather than relying entirely on flashcards.
Where can I find additional 220-1202 study material?
In addition to the official CompTIA objectives, hands-on labs, documentation, and reputable training materials, candidates can review our 220-1202 CompTIA A+ Certification Exam: Core 2 course page for additional exam-focused preparation resources.
Is CompTIA A+ worth earning for beginners?
For someone trying to build a structured foundation in technical support, desktop support, endpoint administration, or general IT infrastructure, A+ can be a useful starting point. Its value is greatest when certification study is combined with hands-on practice.
Final Thoughts
The CompTIA A+ Core 2 220-1202 exam is not designed to prove that you are an expert system administrator or cybersecurity engineer. Its purpose is to verify that you can approach everyday IT support work with a reliable technical foundation.
That means knowing how operating systems work, how endpoints should be secured, how to recognize software and security problems, how to use administrative tools, how to troubleshoot systematically, and how to support users without compromising data or business operations.
The best preparation therefore looks surprisingly similar to the job itself. Install operating systems. Break a virtual machine and repair it. Create users. Change permissions. Examine logs. Run commands. Configure a firewall. Test backups. Write a small script. Document what you changed. Then use practice questions to identify the areas where your reasoning is still weak.
If you study Core 2 this way, passing the exam becomes only one benefit. You also develop a set of habits that will continue to matter long after the certification test is finished. Candidates looking for one more structured resource can also review the 220-1202 Core 2 exam preparation page as part of their overall study plan.
External References and Further Reading
-
CompTIA – A+ Core 2 V15 Certification:
https://www.comptia.org/en/certifications/a/core-2-v15/ -
Microsoft Learn – User Account Control:
https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/ -
Microsoft Learn – Windows 11 Virus and Threat Protection:
https://learn.microsoft.com/en-us/windows/security/book/operating-system-security-virus-and-threat-protection -
Microsoft Learn – BitLocker Documentation:
https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/ -
CISA – Multifactor Authentication Guidance:
https://www.cisa.gov/audiences/small-and-medium-businesses/secure-your-business/require-multifactor-authentication
