A+ Core 2: security weighs as much as Windows, so learn the removal order

Security is not a short appendix to Windows any more.

The four domains

That is 100% and 36 objectives. Operating systems and security are level. Software troubleshooting has only four objectives but nearly a quarter of the marks.

Seventy hours, split by weight

For a 70-hour Core 2 plan: operating systems 20, security 20, software troubleshooting 16 and operational procedures 14. They add to 70.

Move hours towards your weakest ratings, but do not take them from security to pay for Windows.

The malware removal order

This is a sequence candidates skim, and then miss. The order is:

1. Investigate and verify the symptoms.
2. Quarantine the infected system.
3. Disable System Restore.
4. Remediate.
5. Schedule scans and updates.
6. Re-enable System Restore and create a new restore point.
7. Educate the user.

The catch is step 3. A question may ask what to do after quarantine, and "update the antivirus" will look appealing. But the order puts disabling System Restore directly after quarantine, and updating comes later. Reconnecting a quarantined machine early risks spreading the infection.

The AI data rule

Objective 4.10 is new in V15. A short example shows what it asks. A technician pastes a log containing a customer name and account number into a public AI chatbot to help read an error. The main risk is not speed or accuracy. It is that sensitive customer data has left the company's control.

Learn the rule as a habit: never paste sensitive data into a public AI tool.

Windows tools: recall, not recognition

Many candidates know the look of a Windows tool on a screenshot but cannot name it from a description. Practise the other way round. Read a task, such as checking why a service failed, and say which tool you would open before you look at the options. Event Viewer is one tool to rehearse like this.

Professional communication

Operational procedures cover documentation, safety and communication. Candidates dismiss them as common sense and then answer carelessly. Read the scenario for the customer's state as well as the technical fix. Choose the answer that serves the customer and the record, not only the quickest fix.

Hours and hands

Core 2 has more to do than to memorise, so hands-on work should stay at least a quarter of the week. Give the procedures domain a regular slot in the week.

Spear phishing and its relatives

Know the social engineering vocabulary precisely. A message tailored to a person and a real context is spear phishing. Smishing is phishing by text message. Questions use the distinction to separate runner-up answers from correct ones.

Practise as a set

Take three security questions and three operating-system questions in the same sitting, and note how often the right answer depends on the order of steps.