Scripting on A+ Core 2: What You Need to Know (and What You Don't)

What objective 4.8 actually lists

Scripting sits in Operational Procedures, the smallest Core 2 domain at 21%. The objective's verb is "explain," and its bullets are three short lists: script file types, use cases, and other considerations. There is no list of programming constructs. CompTIA notes that its bulleted examples are not exhaustive, so being able to read a comment, a variable, and a simple command sequence is a sensible margin. Writing a program from scratch is not what this objective describes.

Six file types, and how to recognize each one

Two current facts change how these behave on Windows:

• PowerShell execution policy. On a Windows client where no policy has been set, Windows PowerShell's effective policy is Restricted, which "permits individual commands, but doesn't allow scripts." Windows Server defaults to RemoteSigned. Microsoft is explicit that the execution policy "isn't a security boundary," so it does not replace judgment about what a script does.
• VBScript is deprecated. Microsoft announced the deprecation in October 2023 and says VBScript will be available as a feature on demand before it is removed from Windows. Old logon scripts written in VBScript are a migration task, not a pattern for new work.

Read these, don't memorize them

Each example is short, read-only, and safe to run on your own machine. The point is recognition: name the language and say in one sentence what the script does.

Batch (.bat)

@echo off
REM Show who is signed in and this PC's network settings
whoami
hostname
ipconfig /all

PowerShell (.ps1)

<# List services that are stopped right now #>
Get-Service | Where-Object Status -eq 'Stopped'

VBScript (.vbs)

' Show this computer's name
Set objNetwork = CreateObject("WScript.Network")
WScript.Echo objNetwork.ComputerName

Shell (.sh)

#!/bin/bash
du -sh "$HOME"   # space used in the home folder
df -h            # free space on each filesystem

JavaScript (.js), in a browser console or Node.js

// Print today's date
console.log(new Date().toDateString());

Python (.py)

"""Show the PC's network name and Python version."""
import platform
print(platform.node())
print(platform.python_version())

Match the script to the support job

Core 2 objective 2.2 also lists "assigning log-in script" as an Active Directory task, which is the domain version of the drive-mapping row.

The risks CompTIA lists, as five checks before you run anything

The 4.8 considerations are unintentionally introducing malware, inadvertently changing system settings, and browser or system crashes from mishandled resources. Turn them into checks:

1. Where did it come from? A script from a forum, an email, or an AI chat is untrusted until you have read every line.
2. What does it change? Look for commands that delete, overwrite, change the registry, change services, or change permissions. A misplaced path in a delete command is how a cleanup script empties the wrong folder.
3. Does it mirror or purge? Microsoft's robocopy reference says /mir mirrors a tree and is equivalent to /e plus /purge, which "deletes destination files and directories that no longer exist in the source." Point a mirror at the wrong destination and it deletes files. Robocopy's /l option lists what would happen without copying or deleting anything, which makes it a safe dry run.
4. Does it download and run something else? A script that fetches code from the internet and executes it inherits every risk of that code.
5. Does it loop or grow without limit? A loop with no exit, or a log file that grows forever, is how a "simple" script crashes a browser or fills a disk.

Then test it on one machine or in a virtual machine before you run it on many. That is also what change management expects, as the operational procedures guide explains.

What you can safely skip

You do not need to memorize PowerShell parameters, write functions, or debug Python. You do need to know which interpreter runs which file, why a .sh script needs execute permission on Linux (see the chmod section of the macOS and Linux guide), and why a script that runs as administrator deserves more scrutiny than one that runs as a standard user. Many of the commands inside these scripts are the ones in the Windows command line guide.

Cover the file names above each example and name the language from the code alone, then keep practicing the Core 2 domain that includes scripting with Passy →.