Skip to main content
Revy's Tech Journey, powered by Revtek
Exam objectives

CompTIA A+ Core 2 (220-1202) exam objectives

RTJ is an IT certification platform that starts with CompTIA A+, Network+ and Security+.

The CompTIA A+ Core 2 (220-1202) exam objectives list what the exam covers, in 4 domains. RTJ covers 36 objectives below, each with RTJ's short label, a plain summary, and links to a lesson, flashcards, practice questions and any hands-on lab.

Where is the official CompTIA A+ Core 2 objectives list?

CompTIA publishes the official 220-1202 objectives, in its own wording, on the official CompTIA A+ Core 2 page. That is the source to follow for what the exam covers. The objective labels on this page are RTJ's short names, and the summaries are RTJ's own. The domain names and weights below are CompTIA's, from that page.

Domains, weights and exam facts checked against CompTIA's official exam page on 31 October 2026.

CompTIA A+ Core 2 exam quick facts

Questions
Up to 90
Time
90 minutes
Passing score
700 on a scale of 900

CompTIA: "Core 1 and Core 2 exams must be taken from the same version, no mixing allowed."

CompTIA's figures, from the official CompTIA A+ Core 2 page.

Domain 1.0: Operating systems (28% of the exam)

1.1 OS Types and Purposes

You should be able to identify what each common operating system is built for, which devices run it, which filesystems it uses, and when vendor support is going away. You should also be able to predict what breaks when files, apps, or accounts move between operating systems.

1.2 OS Installations and Upgrades

You should be able to choose the right OS installation approach for a given environment, navigate boot methods, pick the right partitioning scheme, format drives, and plan upgrades that don't destroy user data or break critical applications. This is the practical "I have to actually install Windows on this thing" objective. It covers everything from a single-PC USB install to fleet-wide zero-touch deployment.

1.3 Windows Editions

You should be able to select the right Windows edition for a given use case. That means identifying which features are edition-gated, including BitLocker, RDP host, Group Policy Editor, and domain join. You should also be able to determine which upgrade paths are supported between editions and versions and apply hardware requirements.

1.6 Windows Settings

You should know where each setting lives in Control Panel or the Settings app, including its applet or page. You should also know what options each setting offers and when to use it.

1.7 Windows Networking

You should be able to configure a Windows PC's network identity (domain vs workgroup), share and connect to network resources, and set up VPN/Wi-Fi/cellular connections. You should also be able to configure local firewall rules, set IP addressing and DNS, manage proxy settings, and understand the difference between public and private network profiles.

1.8 macOS

You should be able to recognize macOS file types, navigate the macOS folder layout, locate common settings, and use built-in tools like Disk Utility and Terminal. You should also be able to apply macOS best practices for backups, security, and updates.

1.9 Linux

You should recognize the Linux tools named by the objective for file management, network diagnostics, administration, and package management, plus the listed configuration files and components.

1.10 Install Applications

You should be able to verify that the system meets the application's requirements for 32-bit or 64-bit architecture, OS compatibility, CPU, RAM, GPU type, VRAM, and storage. You should be able to choose the right distribution method: physical media, ISO, a downloadable installer, or image deployment. You should also be able to predict the new app's impact on the device, network, operations, and business.

1.11 Cloud Productivity Tools

You should be able to set up cloud productivity suites: Microsoft 365, Google Workspace, and Apple iCloud; configure email and storage with appropriate sync settings; and deploy spreadsheets, docs, videoconferencing, instant messaging, and presentation tools. You should also be able to sync identities between on-prem and cloud directories and assign licenses correctly.

Domain 2.0: Security (28% of the exam)

2.1 Security Measures

You should be able to identify the physical, logical, and access controls that protect IT environments. You should also be able to recognize authentication methods, including the factors used for multifactor authentication (MFA). You should be able to name the categories of identity and access management used in modern organizations.

2.2 Windows Security Settings

You should know how to configure Windows Defender and Windows Defender Firewall, account types and login methods, NTFS and share permissions, UAC, and BitLocker and EFS encryption. You should also know how to join a PC to an Active Directory domain and configure Active Directory users and policies.

2.3 Wireless Security Protocols

You should know the strength ranking of wireless security protocols, the encryption algorithms behind them, and the enterprise authentication systems used with WPA2/WPA3 Enterprise (RADIUS, TACACS+, Kerberos, MFA).

2.4 Malware Types and Detection

You should be able to identify each malware type by behavior. You should be able to distinguish the detection and response platforms EDR, MDR, and XDR. You should also be able to name the layered defenses: AV, anti-malware, email gateway, software firewall, user training, and OS reinstall.

2.5 Social Engineering

You should recognize each social engineering and network attack by behavior, name the vulnerability that enabled the attack, and pick the right preventive control.

2.6 SOHO Malware Removal

You should be able to execute the malware removal procedure in the correct sequence. The order of the steps matters.

2.7 Workstation Hardening

You should be able to apply the standard workstation hardening playbook. It covers data encryption, strong password policy, firmware passwords, user behaviors, account restrictions, and feature disabling.

2.8 Mobile Device Security

RTJ's study guide covers hardening iOS, iPadOS, and Android devices for business use through device encryption, screen locks, biometric or passcode options, configuration profiles, patch management, and endpoint security software. It also covers locator and remote-wipe capabilities and the MDM policy framework.

2.9 Data Destruction and Disposal

You should know the physical destruction methods, the software-based erasure methods, and the difference between standard format and low-level format. You should also know the role of third-party certified destruction.

2.10 SOHO Network Security

You should be able to harden a SOHO router from factory defaults: change defaults, configure filtering, update firmware, set up the screened subnet, lock down management, configure wireless properly, and configure the firewall.

2.11 Browser Security

Browser hardening for business use in Chrome, Edge, Firefox, and Safari covers trusted-source downloads, patching, extensions, passwords, and secure connections. It also covers privacy settings, ad/script blocking, secure DNS, and browser feature toggles.

Domain 3.0: Software troubleshooting (23% of the exam)

3.1 Troubleshoot Windows OS

You should recognize each Windows OS symptom and apply the right diagnostic path. The symptoms covered are BSOD, shutdowns, instability, performance, memory warnings, boot, no-OS-found, slow profiles, services, app crashes, USB warnings, and time drift.

3.2 Troubleshoot Mobile OS and Apps

You should choose low-risk, platform-appropriate checks before destructive recovery, recognize connectivity issue patterns (Bluetooth, Wi-Fi, NFC), and identify autorotate and other OS quirks.

3.3 Troubleshoot Mobile Security

You should recognize mobile security concerns (sideloaded apps, developer mode, root/jailbreak, unauthorized apps, app spoofing) and the symptoms of compromise (high traffic, slow response, data warnings, ads, fake security warnings, file leakage).

3.4 Troubleshoot PC Security

You should recognize PC security symptoms (network access loss, alerts, fake AV, altered files, unwanted notifications, update failures, browser pop-ups, certificate warnings, redirection, slow browser) and apply the malware cleanup procedure when appropriate.

Domain 4.0: Operational procedures (21% of the exam)

4.1 Documentation

You should know what goes in a help-desk ticket, how asset management and CMDB work, what types of operational documents matter, and how SLAs work internally and externally.

4.2 Change Management

You should know how a proper change management process documents a proposed change, plans rollback, and tests in a sandbox. It also covers formal request submission, approval workflow, implementation, and post-change validation.

4.3 Backup and Recovery

RTJ's study guide explains the differences between full, incremental, differential, and synthetic full backups. It also covers recovery destinations (in-place vs alternative), the importance of testing backups, and rotation schemes including 3-2-1 and grandfather-father-son.

4.4 Safety Procedures

This objective covers how to protect equipment and yourself from electrostatic discharge, electrical hazards, lifting injuries, and fire risk. It also covers the personal protective equipment (PPE) used during repairs.

4.5 Environmental Impacts

You should know what an MSDS is and how to dispose of hazardous IT consumables. You should know how to manage environmental conditions for equipment. You should also know how UPS and surge suppressors protect against power events.

4.6 Privacy, Licensing, Policy

You should understand the formal incident response steps: chain of custody, order of volatility, documentation, and drive imaging. The licensing landscape includes EULA, perpetual, personal vs corporate, and open-source. Other concepts are NDA scope, regulated data categories, AUP, and compliance enforcement via splash screens.

4.7 Communication and Professionalism

You should apply professional behavior across customer interactions. The focus is appearance, language, attitude, listening, timeliness, and handling difficult situations. It also covers setting expectations and respecting privacy and confidentiality.

4.8 Scripting Basics

You should recognize each scripting file type and where it lives, name common scripting use cases in IT operations, and identify the risks of running scripts. The focus is recognizing what scripts can do, not writing a script.

4.9 Remote Access

You should know each remote access method and its appropriate use case. These methods include RDP, VPN, VNC, SSH, RMM, SPICE, and WinRM, plus third-party tools for screen sharing, file transfer, videoconferencing, and desktop management.

4.10 AI Concepts

You should recognize how AI integrates into business applications, the policy considerations around appropriate use and plagiarism, the inherent limitations of AI systems (bias, hallucinations, accuracy), and the difference between public and private AI deployments from a data-security perspective.

Questions

Are these CompTIA's official CompTIA A+ Core 2 objective titles?

No. The objective labels on this page are RTJ's short names for each objective, and the summaries are RTJ's own. The domain names and weights are CompTIA's. CompTIA publishes the official 220-1202 objectives on its own site.

Is the practice on this page free?

The lessons, flashcards and practice questions open in RTJ's study mode. Free labs need no account. The other labs are included with Academy, Lifetime, and the teacher and school plans.

Does working through every objective mean I will pass?

No. Covering the objectives is preparation, not a prediction. RTJ does not predict exam results.

Where can I get the official CompTIA A+ Core 2 exam objectives?

From CompTIA, on its official CompTIA A+ Core 2 exam page (https://www.comptia.org/en-us/certifications/a/core-2-v15/).

Do I need to pass Core 1 and Core 2 from the same version?

Yes. CompTIA's exam page says: "Core 1 and Core 2 exams must be taken from the same version, no mixing allowed."

Keep going

Revy's Tech Journey is an independent study platform and is not endorsed by or affiliated with CompTIA. CompTIA names identify the public exam objectives each RTJ track covers.

Start free, no credit card.

A free account keeps your progress and adds one full-length timed practice exam per certification track.

Create a free accountSee what is included