220-1102 - Operational Procedures (22% of the exam) - Section 4.5

Summarize environmental controls, prohibited content and privacy concepts, and proper communication and professionalism.

Apply environmental controls - temperature and humidity management, proper battery and toner disposal, and reference to material safety data sheets - and follow the correct incident-response chain of custody when prohibited content or activity is discovered, including first response, documentation, and reporting through the proper channels. Demonstrate professional communication: clear language without jargon, active listening, setting and meeting expectations, and protecting customer privacy and confidential data.

Chain of custodyMaterial safety data sheetIncident responseProfessional communicationPrivacy

Practice question for this objective

Free sampleOperational Procedureseasy

A technician discovers prohibited content on a company device while performing an unrelated repair. Which action reflects the correct role of a first responder?

AImmediately delete the prohibited content to stop it from spreading.
BConfront the employee directly and demand an explanation for the files.
CFinish the assigned repair and mention the finding informally later on.
DIdentify what was found, report through proper channels, and preserve it. Correct

A first responder identifies prohibited content, reports it through proper channels, and preserves the data and device without altering it. Incident response for a first responder centres on identify, report, and preserve, because acting on or destroying the material would compromise evidence and exceed the technician's authority.

Why A is wrong: Deleting seems responsible, but it destroys evidence and oversteps the technician's role. Preservation, not removal, is the first responder's duty.

Why B is wrong: Confrontation feels like accountability, but it can compromise an investigation and is a matter for management or HR, not the technician who found the content.

Why C is wrong: Continuing quietly avoids conflict, but delaying or downplaying the report through informal channels breaks the required reporting and preservation duties of a first responder.

Why D is correct: First-responder duties are to identify the material, report it through the correct chain of command, and preserve the data and device so evidence stays intact.

See more 220-1102 practice questions, answers explained.

Exam traps in Operational Procedures

Answers that look right on this material and are not. Each one is a distractor from a different question in the 220-1102 bank for this domain.

Delete the files at once to remove the prohibited content from company property.
Why it is wrong: Removing the content feels like the responsible fix, but deleting it destroys evidence and oversteps the technician's role in the response process.
The purchase price, supplier, and warranty terms for reordering it.
Why it is wrong: This is procurement information kept on an invoice or purchase order. It is tempting because technicians do reorder consumables, but an SDS covers safety, not commercial ordering details.
Interrupt to explain the technical cause quickly so the customer stops repeating the earlier story again.
Why it is wrong: Cutting in seems efficient, but interrupting an upset customer is dismissive and damages the working relationship.

Examworthy is not affiliated with or endorsed by CompTIA. Original, blueprint-aligned practice material only.