If unauthorized or non-standard applications are appearing on systems and users are receiving licensing prompts, it's likely users are installing software themselves. Removing users from the local administrators group will prevent them from installing software without approval and reduce the likelihood of introducing unapproved or malicious programs.
A). Deploying a PKI helps with secure communications but doesn't address user software installation rights.
C). Blocking suspicious websites is helpful but doesn't prevent local installations.
D). Stricter UAC may add prompts but can still be bypassed by admin users.
Reference:
CompTIA A+ 220-1102 Objective 2.2: Compare and contrast access control methods and user privilege settings.
Study Guide Section: Principle of least privilege and managing local admin rights

The correct answer is D. Hide extensions, because Windows File Explorer hides known file extensions by default, which can cause confusion when renaming files. When extensions are hidden, a user may unknowingly change only the visible filename and not the actual file extension.
The Quentin Docter - CompTIA A+ Complete Study Guide explains that Windows uses file extensions to determine file type associations. If file extensions are hidden, renaming a file from Document.txt to Document.
xml may actually result in Document.xml.txt, even though only Document.xml is displayed.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide states that to properly change a file's extension, users must enable "File name extensions" in File Explorer. This allows the user to see and modify the true extension, ensuring the operating system recognizes the correct file type.
The Mike Meyers / Mark Soper Lab Manual reinforces that options such as indexing, personalization, or formatting do not affect how Windows interprets file types. Only visibility of file extensions allows accurate renaming.
Therefore, disabling the "Hide extensions for known file types" setting is required to correctly change the file type, making D the correct answer.

The best first step is to leverage existing documentation: check whether the issue was previously recorded and resolved, and reuse that known fix (or confirm conditions). Mike Meyers explains ticketing systems capture key information needed to resolve issues, including " problem description ," " progress notes ," and " problem resolution ," and stresses that " Clear, concise writing is critical " because you "won't be the only tech responding to every ticket." That is exactly why you review prior tickets first-so you can quickly see what was done previously and apply it consistently.
The All-in-One guide reinforces the same ticketing-system concept and lists the same essential elements (description, notes, resolution) used to streamline troubleshooting and escalation. Consulting the prior technician (A) may be impossible (the employee is gone) and slower than checking documented history.
Opening a new case (D) is important, but the question asks what to do first -review the prior occurrence details, then document your current case using what you find.

To work remotely without physically transporting a workstation, the user needs:
C). RDP (Remote Desktop Protocol): Allows graphical remote access to a Windows PC at the office.
D). VPN (Virtual Private Network): Establishes a secure tunnel to access the corporate network remotely, making the internal PC reachable.
A). SPICE is used in virtual machine environments and is not typically used for end-user remote desktop access.
B). SSH is a text-based remote access tool used mostly for Linux systems.
E). RMM (Remote Monitoring and Management) is used by IT administrators for support - not end-user remote access.
F). WinRM is used for Windows remote management via PowerShell, not for full desktop access.
Reference:
CompTIA A+ 220-1102 Objectives 2.2 & 4.4: Compare and contrast security tools and remote access methods.
Study Guide Section: Remote access tools - RDP and VPN for secure remote work

Facial recognition is a biometric authentication method that ties access to a unique physical feature of the user. Unlike passcodes or pattern locks-which can be easily shared-facial recognition provides a more secure and non-transferable form of access. It also enhances user convenience and is widely supported by modern smartphones.
A). Pattern locks can still be shared and are less secure.
C). Device encryption protects data but does not prevent screen access if a passcode is shared.
D). Multifactor authentication typically applies to app or account access, not basic phone unlocking.
Reference:
CompTIA A+ 220-1102 Objective 2.2: Compare and contrast common security measures and authentication technologies.
Study Guide Section: Biometric screen lock technologies (e.g., facial recognition, fingerprint)