CompTIA A+ Concept Review
Checked 10/28/26
Summary notes
Section 1 · Core 1 (220-1201)45 questions
1-1. Mobile Devices
★★★☆☆ 13% (estimate)
Overview
This chapter is about laptops, phones, and tablets: which parts a technician can replace, which accessories and ports they use, and how they connect to networks and to each other. Questions are usually short scenarios, such as a user who cannot pair a headset or a laptop that needs more memory.
Many laptop parts can be swapped, such as the battery, keyboard, memory (small SO-DIMM modules), and M.2 storage drives. The Wi-Fi antenna wires usually run through the display, which is why a damaged lid can cause weak wireless signal. Always follow the maker's service steps, because laptop parts are small and often held by hidden screws and ribbon cables.
Mobile devices connect in several ways. Bluetooth links nearby accessories after a pairing step. NFC works only when devices nearly touch and is used for tap-to-pay. A hotspot shares a phone's cellular data connection with other devices over Wi-Fi. Companies use mobile device management (MDM) to push settings, apps, and security rules to phones they manage.
Key notes
- SO-DIMM
- — The small memory module used in most laptops and small PCs. It does the same job as a desktop DIMM but is shorter.
- M.2
- — A small card-shaped slot and drive format used for SSDs in laptops and desktops. Some M.2 drives are SATA and some are faster NVMe drives.
- Bluetooth pairing
- — The one-time step that links two Bluetooth devices so they trust each other. The accessory must be in pairing (discoverable) mode.
- NFC
- — Near-field communication: a very short-range wireless link (a few centimeters) used for contactless payment and quick tap-to-share.
- Hotspot (tethering)
- — A phone shares its cellular data connection with other devices, usually over Wi-Fi.
- MDM
- — Mobile device management: software a company uses to enroll phones and tablets and push settings, apps, and security rules to them, including remote wipe.
- Docking station
- — A base that connects a laptop to monitors, a keyboard, a mouse, a network, and power through one connection.
★ Exam points
- A swollen laptop or phone battery is a safety risk: stop using it and replace it.
- Weak Wi-Fi on only one laptop after a screen repair can mean the antenna wires in the lid were damaged or disconnected.
- Airplane mode turns off the device's wireless radios.
- Bluetooth is for nearby accessories; NFC is for touch-range actions; cellular is for wide-area data.
1-2. Networking
★★★★☆ 23% (estimate)
Overview
This chapter covers how devices talk to each other on a network. You need to know common port numbers, the job of each network device, Wi-Fi basics, IP addressing, and the services that make a network work, such as DHCP and DNS. It is a big part of Core 1, and it is also the base for the troubleshooting chapter.
Each network service listens on a port number. For example, SSH uses 22, DNS uses 53, HTTP uses 80, HTTPS uses 443, and Remote Desktop uses 3389. TCP checks that data arrives and resends lost pieces, while UDP is faster but does not check, which suits things like streaming and DNS lookups.
DHCP hands out IP addresses automatically, and DNS turns names like www.example.com into IP addresses. If a Windows PC cannot reach a DHCP server, it gives itself an APIPA address that starts with 169.254 and can only talk to the local network. Private address ranges such as 192.168.x.x, 10.x.x.x, and 172.16.x.x to 172.31.x.x are used inside homes and offices.
Devices each have a role: a switch connects devices inside one network, a router connects different networks, an access point adds Wi-Fi, and a firewall filters traffic. Technicians use tools such as a cable tester, a crimper, a punchdown tool, a toner probe, and a Wi-Fi analyzer to build and check networks.
Key notes
- TCP vs. UDP
- — TCP is connection-based and resends lost data. UDP sends without checking delivery, so it is faster with less overhead.
- DHCP
- — A service that gives devices an IP address, subnet mask, default gateway, and DNS server automatically. Uses UDP ports 67 and 68.
- DNS
- — A service that translates host names into IP addresses. Uses port 53.
- APIPA
- — Automatic Private IP Addressing. A Windows PC that cannot get a DHCP address gives itself an address in 169.254.0.0/16.
- Switch vs. router
- — A switch forwards traffic between devices on the same network using MAC addresses. A router forwards traffic between different networks using IP addresses.
- 2.4 GHz vs. 5 GHz
- — 2.4 GHz reaches farther and passes walls better but has fewer channels and more interference. 5 GHz is faster with more channels but shorter range.
- Toner probe
- — A two-part tool: the tone generator puts a signal on a cable, and the probe finds which cable or wall jack carries it.
★ Exam points
- Port pairs to know: FTP 20/21, SSH 22, Telnet 23, SMTP 25, DNS 53, DHCP 67/68, HTTP 80, POP3 110, IMAP 143, HTTPS 443, SMB 445, RDP 3389.
- Telnet sends everything, including passwords, in plain text; SSH encrypts the session.
- 127.0.0.1 is the loopback address; pinging it tests the computer's own network stack.
- A punchdown tool seats wires into a patch panel or keystone jack; a crimper attaches RJ45 plugs.
- SNMP (161/162) is used to monitor network devices; LDAP (389) is used to query directory services.
1-3. Hardware
★★★★★ 25% (estimate)
Overview
This chapter covers the parts inside and around a computer: cables and connectors, memory, storage, motherboards, CPUs, power supplies, and printers. Many questions ask which part or cable fits a job, or how to set up storage so data is safe.
Memory (RAM) holds data the computer is working on and is cleared when power is off. Desktop memory modules are DIMMs and laptop modules are SO-DIMMs, and the module type must match the motherboard, such as DDR4 or DDR5. Installing matching modules in the right slots lets the board use dual-channel mode for better speed.
Storage keeps data when power is off. Hard disk drives (HDDs) use spinning platters, while solid-state drives (SSDs) have no moving parts and are much faster. NVMe SSDs use the PCIe bus and are faster than SATA SSDs. RAID combines several drives: RAID 0 stripes data for speed with no protection, RAID 1 mirrors two drives, RAID 5 stripes data with parity across at least three drives, RAID 6 uses two parity blocks across at least four drives, and RAID 10 stripes across mirrored pairs and needs at least four drives.
The power supply turns wall AC power into the DC voltages the parts need, and its wattage must cover all the parts. Firmware (BIOS or UEFI) settings control boot order, Secure Boot, the TPM chip, and virtualization support. Laser printers use a fuser to melt toner onto paper, so pages that smear mean the fuser needs attention.
Key notes
- RAID 0
- — Striping: data is split across two or more drives for speed. There is no redundancy, so one failed drive loses all the data.
- RAID 1
- — Mirroring: the same data is written to two drives. Usable space is one drive's size, and the array survives one drive failure.
- RAID 5
- — Striping with distributed parity across at least 3 drives. Usable space is (number of drives - 1) x drive size. Survives one drive failure.
- RAID 6 and RAID 10
- — RAID 6: two parity blocks, at least 4 drives, usable (n - 2) x size, survives two failures. RAID 10: striped mirrors, at least 4 drives, usable space is half.
- NVMe
- — A fast storage interface for SSDs that uses the PCIe bus, often in an M.2 slot.
- TPM
- — Trusted Platform Module: a chip that stores encryption keys safely. BitLocker uses it, and Windows 11 requires TPM 2.0.
- Fuser
- — The laser printer part that uses heat and pressure to bond toner to paper.
★ Exam points
- RAID is not a backup: deleted files and ransomware damage are copied to every drive in the array.
- Usable RAID space: RAID 0 all, RAID 1 half, RAID 5 (n - 1), RAID 6 (n - 2), RAID 10 half.
- Turn on hardware virtualization (Intel VT-x or AMD-V) in firmware before running virtual machines.
- Choose a power supply with enough wattage for every part, plus some extra headroom.
- Apply thermal paste between a CPU and its cooler so heat moves into the heatsink.
1-4. Virtualization and Cloud Computing
★★☆☆☆ 11% (estimate)
Overview
This chapter explains how one physical computer can run many virtual computers, and how companies rent computing from cloud providers. It is the smallest part of Core 1, but the terms come up often in real help desk work.
A hypervisor is the software that runs virtual machines (VMs). A Type 1 hypervisor runs directly on the hardware and is used in data centers. A Type 2 hypervisor runs as an app on top of a normal operating system and is handy for testing on a desktop. VMs need enough CPU, memory, and storage on the host, and the CPU's virtualization support must be turned on in firmware. Containers are lighter: they share the host's operating system kernel and package only an app and what it needs.
Cloud services come in three main models. In Infrastructure as a Service (IaaS) you rent virtual servers and storage and manage the operating system yourself. In Platform as a Service (PaaS) you get a ready platform to run your own code. In Software as a Service (SaaS) you simply use finished software over the internet. Clouds can be public, private, hybrid (a mix), or community (shared by groups with the same needs). Key cloud features include rapid elasticity, which adds or removes resources as demand changes, and metered use, where you pay for what you use.
Key notes
- Type 1 hypervisor
- — Runs directly on the physical hardware (bare metal) with no general-purpose operating system underneath.
- Type 2 hypervisor
- — Runs as an application on top of a normal operating system such as Windows or macOS.
- Container
- — A lightweight package that holds an app and its files and shares the host's operating system kernel instead of running a full guest OS.
- IaaS / PaaS / SaaS
- — IaaS rents servers, storage, and networks. PaaS gives a platform to build and run your own apps. SaaS delivers finished software you just use.
- Rapid elasticity
- — The cloud adds resources when demand rises and removes them when demand falls, often automatically.
- VDI
- — Virtual desktop infrastructure: user desktops run as VMs on central servers and users connect to them over the network.
★ Exam points
- A VM will not start on a new PC if hardware virtualization is turned off in firmware.
- Hybrid cloud mixes a private cloud or on-site systems with a public cloud.
- Web email and online office apps are examples of SaaS.
- A sandbox VM is a safe place to test updates or suspicious files without risking the real system.
1-5. Hardware and Network Troubleshooting
★★★★★ 28% (estimate)
Overview
This is the largest part of Core 1. It asks you to use CompTIA's troubleshooting steps on real problems with PCs, laptops, phones, storage, printers, and networks. Most questions describe what a user sees and ask for the most likely cause or the best next step.
The troubleshooting steps are: identify the problem, establish a theory of probable cause, test the theory, establish a plan of action and put the fix in place, verify full system functionality and add preventive measures, and document what you found and did. While identifying the problem, ask the user questions, check for recent changes, and back up data before you change anything. If a theory turns out wrong, form a new one or escalate.
Some symptoms point clearly to a cause. A PC that shuts off after running for a while may be overheating. A clock that resets after power is removed points to the CMOS battery. Grinding or clicking from a hard drive warns of failure, so back up at once. On networks, a 169.254 address points to a DHCP problem, and being able to reach an IP address but not a name points to DNS.
Key notes
- Identify the problem
- — The first step: gather information from the user, find out what changed, duplicate the problem if you can, and back up data before making changes.
- Theory of probable cause
- — Your best guess about the cause. Start with the simple, obvious causes first, such as power and cables.
- Verify and document
- — After the fix, confirm the whole system works and add preventive steps, then record the problem, the actions taken, and the result.
- CMOS battery
- — A small coin battery on the motherboard that keeps the firmware clock and settings when the PC is unplugged.
- Overheating
- — Dust, failed fans, or dried thermal paste can make a PC shut off or slow down under load.
- Loopback plug
- — A connector that sends a port's output straight back into its input to test whether the network port works.
★ Exam points
- If a theory is not confirmed, form a new theory or escalate.
- Faded laser prints usually mean low toner; smeared toner points to the fuser.
- Limited or no connectivity with a 169.254 address: check the DHCP server and the cable or Wi-Fi link.
- A degraded RAID 5 still works after one failed drive; replace the failed drive soon so the array can rebuild.
- No display but the PC powers on: check the monitor input, cable, and that the cable is in the graphics card port.
Section 2 · Core 2 (220-1202)45 questions
2-1. Operating Systems
★★★★★ 28% (estimate)
Overview
This chapter is the largest part of Core 2 along with security. It covers Windows editions and installs, the built-in Windows tools, command-line commands, file systems, and the basics of macOS and Linux. Expect questions that ask which tool or command fits a task.
Windows Home and Pro differ in business features. Pro can join a domain, use Group Policy Editor, host Remote Desktop sessions, and use BitLocker drive encryption, while Home cannot. Useful tools include Task Manager for running apps and startup items, Event Viewer for logs, Device Manager for drivers, Disk Management for partitions, and Services for background services.
At the command line, ipconfig shows network settings, ping tests reachability, tracert shows the path to a host, chkdsk checks a disk, sfc /scannow repairs system files, and gpupdate /force applies Group Policy right away. NTFS is the main Windows file system and supports permissions and large files. FAT32 is widely compatible but cannot hold one file over 4 GB, and exFAT is a good choice for large files on flash drives.
On macOS, Time Machine makes backups, FileVault encrypts the disk, and Keychain stores passwords. On Linux, ls lists files, cd changes folders, chmod changes permissions, sudo runs a command with administrator rights, and apt or dnf installs software, depending on the distribution.
Key notes
- Home vs. Pro
- — Windows Pro adds business features that Home lacks, such as joining a domain, BitLocker, Group Policy Editor, and hosting Remote Desktop.
- Event Viewer
- — Windows tool that shows system, application, and security logs with errors and warnings.
- sfc /scannow
- — System File Checker scans protected Windows system files and replaces damaged ones.
- NTFS, FAT32, exFAT
- — NTFS: Windows default with permissions and large files. FAT32: very compatible but 4 GB maximum file size. exFAT: for flash drives with large files.
- chmod and sudo
- — On Linux and macOS, chmod changes file permissions and sudo runs a single command with administrator (root) rights.
- Time Machine
- — The built-in macOS backup tool that keeps hourly, daily, and weekly copies on an external drive.
★ Exam points
- ipconfig /release and /renew get a new DHCP address; ipconfig /flushdns clears the DNS cache.
- Windows 11 requires TPM 2.0 and a UEFI system that supports Secure Boot.
- Use Task Manager's Startup tab to stop apps from launching at sign-in.
- gpupdate /force applies Group Policy changes now; gpresult shows which policies apply.
- Disk Management creates, deletes, and formats partitions in Windows.
2-2. Security
★★★★★ 28% (estimate)
Overview
This chapter covers how to keep people, devices, and data safe. It ranges from locks and badges to passwords, multifactor authentication, Wi-Fi security, malware, and social engineering. It is as large as the operating systems chapter on Core 2.
Strong security starts with who you are. Multifactor authentication (MFA) asks for two or more different kinds of proof: something you know (a password), something you have (a phone or token), or something you are (a fingerprint). The principle of least privilege means each user gets only the access needed for the job. For Wi-Fi, use WPA3 or WPA2 with AES, change default router passwords, and keep firmware up to date.
Malware comes in many forms. Ransomware encrypts files and demands payment, a trojan hides inside software that looks useful, a worm spreads by itself across networks, a keylogger records keystrokes, and a rootkit hides deep in the system. Social engineering tricks people instead of machines: phishing by email, vishing by phone, smishing by text, and tailgating by following someone through a secured door.
When removing malware, first confirm the symptoms, then quarantine the infected system from the network. In Windows, turn off System Restore so old restore points do not bring the infection back, then clean the system with updated tools, schedule scans and updates, turn System Restore back on with a fresh restore point, and teach the user how to avoid the problem.
Key notes
- MFA
- — Multifactor authentication: proof from two or more different factor types, such as a password plus a code from a phone app.
- Least privilege
- — Give each user or program only the permissions it needs to do its job, and no more.
- Ransomware
- — Malware that encrypts a victim's files and demands payment for the key.
- Worm vs. virus
- — A virus attaches to files and spreads when they are run or shared. A worm spreads by itself across a network without user action.
- Phishing family
- — Phishing uses fake emails, spear phishing targets one person, whaling targets executives, vishing uses voice calls, and smishing uses text messages.
- Tailgating
- — An unauthorized person follows an authorized person through a secure door.
★ Exam points
- Use WPA3 when every device supports it; avoid WEP and WPA with TKIP.
- Disable System Restore during Windows malware removal so infected restore points are not reused.
- Change default administrator usernames and passwords on routers and other devices.
- Lock your screen (Windows key + L) whenever you leave your desk.
- An evil twin is a fake Wi-Fi access point that copies a real network's name.
2-3. Software Troubleshooting
★★★★☆ 23% (estimate)
Overview
This chapter is about fixing problems with Windows, apps, and mobile software, and spotting signs of malware. Questions describe a symptom, such as a slow PC or a crashing app, and ask what to check or which tool to use first.
For Windows problems, start with the least disruptive fix. Restart the computer or the app, check for updates, and look in Event Viewer for errors. Safe Mode starts Windows with only basic drivers and services, which helps show whether a driver or startup program is the cause. System Restore rolls system files and settings back to an earlier point without touching personal files. If one user's settings are damaged, rebuilding the user profile can help.
Malware often shows itself through browser redirects, pop-ups, a changed home page, missing files, strange accounts, or a security app that has been turned off. Certificate warnings on many trusted sites can mean the computer's date and time are wrong. On phones, apps that crash or drain the battery can often be fixed by updating, clearing the app's cache, or reinstalling the app.
Key notes
- Safe Mode
- — A startup mode that loads only basic drivers and services. If the problem disappears there, a driver or startup item is likely the cause.
- System Restore
- — Rolls Windows system files, drivers, and settings back to a saved restore point. It does not delete personal documents.
- Blue screen (BSOD)
- — A stop error when Windows hits a serious problem, often caused by a bad driver, failing hardware, or damaged system files.
- Browser redirect
- — Searches or pages are sent to sites the user did not choose, a common sign of adware or other malware.
- Rebuild profile
- — Create a fresh user profile when one user's settings are corrupted while other users work fine.
★ Exam points
- A slow PC: check Task Manager for programs using high CPU, memory, or disk.
- Certificate errors on many sites: check the system date and time first.
- If an update causes problems, you can uninstall that update or roll back the driver.
- On mobile devices, force-stop and update a crashing app before resetting the whole device.
2-4. Operational Procedures
★★★★☆ 21% (estimate)
Overview
This chapter covers how a professional technician works: tracking tickets, writing documentation, managing changes, making backups, working safely, protecting the environment and private data, and talking with customers. Many questions ask for the best or most professional action.
Good records make support easier. Tickets record the user, the problem, the steps taken, and the result. Asset tags and an inventory track equipment. Changes to systems follow change management: write a request with the purpose and scope, assess the risk, plan a rollback, get approval, and test before going live.
Backups protect data. A full backup copies everything. An incremental backup copies only what changed since the last backup of any kind, and a differential copies everything that changed since the last full backup. A common rule is 3-2-1: three copies of data, on two kinds of media, with one copy off-site. Test restores, because an untested backup may not work.
Safety comes first. Unplug equipment before opening it, use an ESD wrist strap to protect parts from static, and lift with your legs. Use a safety data sheet (SDS) to learn how to handle chemicals like toner. Protect private data, respect software licenses, explain things without jargon, and do not paste confidential company data into public AI tools.
Key notes
- Change management
- — A formal process for making changes: request, purpose, scope, risk analysis, rollback plan, approval, testing, and user acceptance.
- Incremental vs. differential
- — Incremental copies changes since the last backup of any type. Differential copies all changes since the last full backup.
- 3-2-1 backup rule
- — Keep three copies of data on two different types of media, with one copy off-site.
- ESD
- — Electrostatic discharge: static electricity that can damage computer parts. Use a wrist strap and antistatic mat.
- SDS
- — Safety data sheet: explains how to handle, store, and dispose of a product and what to do after exposure.
- Script file types
- — Common script types: .bat (Windows batch), .ps1 (PowerShell), .vbs (VBScript), .sh (Linux shell), .py (Python), .js (JavaScript).
★ Exam points
- Do not open a power supply; its capacitors can hold a dangerous charge even when unplugged.
- Use a Class C fire extinguisher (or a multipurpose one rated for C) on electrical fires; never water.
- A UPS keeps equipment running briefly during a power outage; a surge suppressor only blocks spikes.
- Recycle batteries and toner cartridges according to local rules.
- Do not put customer or company confidential data into public AI tools, and check AI answers before using them.
The real CompTIA A+ certification (version V15) is two separate exams: Core 1 (exam 220-1201) and Core 2 (exam 220-1202) · 2 sections · 90 questions · 90 min
Pass: 75 points average
Source: CompTIA · as of 2026
AI-written · Verified · Written by AI. Only units that passed a separate AI check (re-reading facts and numbers) are published. Tell us if you find a mistake.