comptia-aplus-core2

CompTIA A+ Core 2 (220-1202)

CompTIA

CompTIA A+ Core 2 is the second of two exams required to earn the industry-standard A+ certification. Core 2 covers the software side of IT support: operating systems (Windows, macOS, Linux, mobile, including Windows 11 and modern filesystems like ReFS/XFS), security (encryption, access controls, wireless security, plus newly added Zero Trust and authentication protocols), software troubleshooting (OS and application issues including malware), and operational procedures (change management, documentation, communication, professionalism). The V15 refresh adds AI fundamentals in IT support, Zero Trust security frameworks, updated authentication protocols, Windows 11 specifics, and newer filesystems (ReFS/XFS). A+ is widely positioned as the entry credential for help desk and IT support roles; Core 1 (220-1201) and Core 2 (220-1202) must be passed together to earn the credential.

exam: 90 questions · 90 min

Sign up free — practice 5 questions on this cert without a card.

IT SupportOperating SystemsSecuritySoftware Troubleshooting90 min examUp to 90 questions700/900 to pass220-1202 (V15)

Difficulty

Medium

Avg study time

70-130h

1-3 months typical; slightly heavier than Core 1 because the Security domain expanded in V15 (Zero Trust, modern auth) and the passing score is 25 points higher (700 vs 675).

Pass rate

Not published

CompTIA does not publish pass rates. Core 2's 25-point higher pass mark (700 vs Core 1's 675) and the V15-expanded Security domain make it generally treated as the harder of the two A+ Cores — aim for a comfortable margin over the minimum on practice exams before sitting.

Market demand

Very High

Core 2 is the second half of the A+ credential — without it, Core 1 alone does not award A+. Most North-American help-desk and desktop-support postings list A+ explicitly, so the demand mirrors Core 1's.

Exam Domain Breakdown

Operating Systems28%
Security28%
Software Troubleshooting23%
Operational Procedures21%

Difficulty by Topic

Windows command-line and PowerShell tools
ipconfig, ping, tracert, netstat, nslookup, gpupdate, gpresult, sfc, dism, chkdsk, diskpart, robocopy, format, copy/xcopy, shutdown, taskkill, net use. Know which switch does what — the exam loves command-flag distractors (e.g. sfc /scannow vs sfc /verifyonly).
NTFS vs share permissions and inheritance
How explicit deny overrides allow, how share+NTFS combine (most-restrictive wins), how inheritance flows through nested folders, and how moving vs copying changes the inherited ACL. The most-missed Windows topic on Core 2.
Linux command basics
ls, cd, pwd, cp, mv, rm, mkdir, chmod (numeric and symbolic), chown, ps, grep, find, cat, nano/vi, sudo, apt/yum, ip/ifconfig, ssh. Surprises Windows-only candidates; expect 5-10 questions if Linux features in your domain.
macOS-specific tools and features
FileVault (full-disk encryption), Time Machine (backups), Spotlight (search), Mission Control / Spaces, Boot Camp / dual-boot, Apple ID / iCloud Keychain, Gatekeeper, Disk Utility, APFS vs HFS+. Disproportionately weighted given how rarely techs see macOS in the wild.
Modern authentication and Zero Trust (V15 addition)
MFA factors (something you know/have/are/somewhere you are), conditional access policies, passwordless (FIDO2 / passkeys), Zero Trust principles (verify explicitly, least privilege, assume breach), SSO via SAML/OIDC. New in V15 — older study materials skip this entirely.
Malware types and attack vectors
Ransomware (incl. double-extortion), trojan, worm, rootkit, keylogger, spyware, fileless malware, polymorphic, boot sector, cryptominers, plus social-engineering vectors (phishing, spear-phishing, whaling, vishing, smishing, pretexting, tailgating, dumpster diving, shoulder surfing). Know the symptom-to-malware mapping for troubleshooting questions.
Windows 11 specifics and modern filesystems
Settings app vs legacy Control Panel paths, TPM 2.0 requirement, Secure Boot, BitLocker, Windows Hello, supported upgrade paths. Modern filesystems: NTFS vs ReFS (Windows Server) vs FAT32/exFAT (removable/cross-platform) vs ext4/XFS (Linux), with their max file/volume sizes and journaling behavior.
Mobile device security and MDM
Remote wipe, locator services, full-device vs containerization, BYOD vs COPE vs CYOD policies, profile installation, app source restrictions, jailbreaking/rooting symptoms, OTA update mechanics.
Change management and operational procedures
Documented change request → risk analysis → backout plan → approval → scheduled implementation → end-user acceptance → documentation. The 21% Operational Procedures domain is the highest-yield easy points on the exam — drill the change-mgmt workflow and the troubleshooting methodology order verbatim.
Backup methods and disaster-recovery basics
Full vs incremental vs differential vs synthetic-full backups (how each restores, how much storage each consumes), 3-2-1 rule, on-site vs off-site, GFS retention, RTO vs RPO, image-level vs file-level. Math-style questions often appear (e.g. 'how many tapes do you restore?').

Exam Tips

1

Buy V15 (220-1202) materials only. V14 (220-1102) retired September 25, 2025 (English) / December 19, 2025 (other languages) — anything published before March 2025 will be missing AI fundamentals in IT support, Zero Trust, modern auth (FIDO2/passkeys), Windows 11 specifics, and refreshed filesystem coverage (ReFS/XFS). Check the cover/intro page for the 220-1202 code before paying.

2

Core 2's pass mark is 700/900 — that's 25 points higher than Core 1's 675. The exam interface still shows your scaled score immediately after submission, so candidates who barely passed Core 1 should aim for a margin on Core 2 rather than studying to the minimum.

3

Security and Operating Systems together are 56% of the exam. If you have only one weekend before exam day, drill those two — specifically NTFS permissions, command-line tools (Windows + Linux), Windows 11 paths, MFA/Zero Trust, malware-to-symptom mapping, and the social-engineering vocabulary list.

4

Linux and macOS questions trip up Windows-only candidates. Even though you may never touch them at work, the exam treats them as first-class. Memorize the top-20 Linux commands, the chmod numeric-to-symbolic mapping, and the macOS feature names (FileVault = encryption, Time Machine = backup, Mission Control = window switcher, Spotlight = search, Boot Camp = Windows dual-boot).

5

The CompTIA troubleshooting methodology is testable on Core 2 in scenario form (the same six-step order as on Core 1: identify the problem → establish a theory → test the theory → plan and implement the solution → verify functionality → document findings). On Core 2 it most often appears wrapped around malware-removal scenarios — the 220-1202 malware-removal procedure proceeds: investigate and verify malware symptoms → quarantine infected systems → disable System Restore → update anti-malware software → use scan and removal techniques → reimage/reinstall if needed → schedule scans and run updates → re-enable System Restore and create a clean restore point → educate the end user. Memorize the ORDER, not a step number — V15 expanded the procedure from the V14 form most older study guides print.

6

Performance-based questions on Core 2 most often test command-line use, permission assignment, account-policy configuration, and security-setting screens. CompTIA's official guidance: simulation PBQs can be skipped and returned to; virtual-environment PBQs cannot be navigated away from. Treat PBQ scoring details as confidential — focus on completing every PBQ fully rather than optimizing time spent on each.

7

The Operational Procedures domain (21%) is the highest-yield easy-points block on the exam. It covers change management, documentation, safety (ESD, MSDS, lifting technique), environmental controls (humidity, temperature), incident response, communication and professionalism, and the change-management workflow. Most of it is reading comprehension — drill the change-control sequence and the troubleshooting methodology order verbatim.

8

Memorize file paths and command flags exactly. The exam regularly tests subtle distractors like %systemroot% vs %windir% vs %systemdrive%, sfc /scannow vs /verifyonly, gpresult /r vs /v vs /z, robocopy /MIR vs /MOV vs /MOVE. These are pure memorization questions — no shortcut.

9

Both Cores must be from the same version. If you pass 220-1201 you must pair it with 220-1202 — you cannot mix 220-1102 (the retired Core 2) with 220-1201. CompTIA does not let you carry credit across versions. Plan to sit both within the V15 lifetime (estimated 2025-2028).

10

Communication and professionalism questions are softer than the rest of the exam but unforgiving on tone. The 'correct' answer is always: be calm, set realistic expectations, do not minimize the customer's problem, do not use jargon, do not interrupt, follow up, and never blame the user. When in doubt, pick the most empathetic and least-disclosing option.

Study Resources

Who It's Best Suited For

Help desk / IT support candidates

A+ is the dominant entry-level IT cert for help desk, desktop support, and field tech roles. Core 2 is the harder half — the Security and Operating Systems content here is what hiring managers most associate with the credential.

CS self-learners on the roadmap.sh path

Core 2 maps directly to the OS-fundamentals and security-basics nodes of the roadmap.sh CS roadmap (processes, file systems, permissions, account management, common attack categories) — a recognized credential for material a pure-CS curriculum often glosses over.

Career changers entering tech

No formal prerequisites and a vendor-neutral scope make A+ a low-risk first cert for non-technical professionals moving into IT. Core 2's OS/security emphasis is also the most transferable to higher CompTIA certs (Security+, Network+).

DoD / federal contractor staff

A+ is mapped by CompTIA to several DoD 8140 / DCWF work roles, including Technical Support Specialist (411) and System Administrator (451), making it a frequent contractual gate for U.S. federal IT work. 8140 is work-role based and is not a direct continuation of the legacy 8570 baseline categories.

Certification Path