4.9 - Remote access methods and maintenance windows
CompTIA A+ Core 2 objective 4.9 covers remote access methods and maintenance practices. A UPS (battery backup) keeps a server running briefly and allows a safe shutdown during a power outage. Major maintenance should be scheduled in a defined maintenance window to minimise disruption and warn users of downtime. For remote access, avoid Telnet because it sends data, including credentials, in cleartext; and when exposing RDP for support, restrict it behind a VPN with MFA rather than opening it to the internet. Quick Assist (Microsoft Remote Assistance) lets a helper view or control a Windows PC after the user sends an invitation. Expect scenario questions that describe a remote-support or maintenance situation and ask for the secure method or the correct practice.
Keep server up + safe shutdown in outage = UPS. Big maintenance = scheduled maintenance window. Avoid Telnet (cleartext). Expose RDP = behind VPN + MFA. Invite-based Windows remote help = Quick Assist.
Practice questions
1. Which device keeps a server running briefly and allows a safe shutdown during a power outage?
- A surge protector strip
- A UPS (battery backup) (correct answer)
- A basic power strip
- A KVM switch
A UPS provides battery power during outages for a safe shutdown and protects against sags/surges. A surge protector only clamps spikes.
2. Why schedule major maintenance during a defined maintenance window?
- To deliberately surprise the users
- To minimize disruption and warn of downtime (correct answer)
- To be able to skip the required backups
- To avoid getting formal change approvals
Maintenance windows (off-hours) limit user impact and let you notify stakeholders of expected downtime in advance.
3. Which remote-access method should you AVOID because it sends data in cleartext?
- SSH
- Telnet (correct answer)
- RDP over VPN
- HTTPS
Telnet transmits everything (including passwords) in cleartext — use SSH for encrypted remote CLI.
4. What is a key security consideration when exposing RDP for remote support?
- Open the default RDP port to all
- Restrict RDP behind a VPN with MFA (correct answer)
- Disable all account passwords
- Share one admin account widely
Never expose RDP (3389) directly to the internet — put it behind a VPN/RD Gateway, require MFA, and limit accounts.
5. Which tool lets a helper view/control a Windows PC after the user sends an invitation?
- SMTP outbound mail relay transport
- Quick Assist / Microsoft Remote Assistance (correct answer)
- DHCP dynamic IP address leasing
- FTP plaintext file transfer protocol
Quick Assist/MSRA lets a helper connect after the user shares a code/invitation — good for consented, ad-hoc support.
6. A help desk connects to a user's session to guide them live. Which is a secure remote-access method?
- Plain unencrypted Telnet
- RDP or RMM screen-share over VPN (correct answer)
- Sending the password by plain email
- An open unencrypted FTP session
Use encrypted remote tools (RDP/VPN, RMM, secure screen share, SSH for CLI). Avoid Telnet/unencrypted methods, and require authentication + user consent.