220-1202 Practice Test 23 — 15 Questions

Question 1

A company wants to secure its server room door so that only authorized personnel can enter. They need a system that can be quickly revoked if an employee leaves and that logs entry attempts. Which physical security control best meets these requirements?

Accepted Answer

An electronic key card system.. Electronic key card systems provide both access control and audit trails, making them ideal for environments where access needs to be centrally managed and logged. This question tests the ability to match a security requirement to the appropriate control.

Answer

A combination lock with a shared code.

Answer

A biometric fingerprint scanner.

Answer

A physical key and lock system.

Question 2

During a security audit, you discover that a supply closet containing spare hard drives has a door that can be opened with a standard paperclip. What is the most appropriate recommendation to address this vulnerability?

Accepted Answer

Upgrade the lock to a tamper-resistant electronic lock.. A privacy filter prevents shoulder surfing by limiting the viewing angle of a monitor, protecting sensitive data from being seen by unauthorized individuals. This scenario tests knowledge of visual data protection controls.

Answer

Replace the door with a solid-core door and install a deadbolt.

Answer

Install a privacy filter on the closet door window.

Answer

Place a sign on the door warning of security cameras.

Question 3

A helpdesk technician receives a call from an employee who says their smart card stopped working for building access. The employee is in a hurry and asks the technician to remotely disable the card and issue a temporary PIN for the day. What should the technician do first?

Accepted Answer

Ask the employee to visit the security office in person with a photo ID.. Verifying the caller's identity before making any access changes is a critical security practice to prevent social engineering attacks. This scenario tests the balance between customer service and security protocol.

Answer

Disable the smart card and provide a temporary PIN as requested.

Answer

Reset the smart card remotely and test it with a badge reader.

Answer

Send a temporary PIN via email to the employee's company address.

Question 4

A retail store wants to protect its point-of-sale (POS) terminals from unauthorized physical access during off-hours. The terminals are in an open area with no lockable cabinets. Which control should be prioritized?

Accepted Answer

Use tamper-evident seals on the terminal casings.. Tamper-evident seals provide a visible indicator if a device has been opened, deterring unauthorized physical access to internal components. This question tests understanding of physical security for unattended devices.

Answer

Install a privacy screen on each POS terminal.

Answer

Require a smart card to power on the terminal.

Answer

Enable a screensaver with a password.

Question 5

A user complains that their computer is running slowly and they see a USB drive they don't recognize plugged into the front port. What is the first step a technician should take to address this potential security issue?

Accepted Answer

Ask the user to unplug the USB drive immediately.. Immediately removing an unknown USB device is crucial to prevent potential malware infections or data theft. This scenario tests incident response procedures for physical media threats.

Answer

Run a full antivirus scan on the computer.

Answer

Check the USB drive's contents to see what it contains.

Answer

Disable the USB ports in the BIOS.

Question 6

A company is deploying new laptops to remote workers. They need to ensure that if a laptop is stolen, the data on it cannot be accessed. Which two physical security controls should be configured before shipment?

Accepted Answer

Full-disk encryption and a BIOS/UEFI password.. Full-disk encryption protects data at rest, and a BIOS/UEFI password prevents unauthorized booting or tampering with boot settings. This question tests the combination of controls needed for remote device security.

Answer

Cable lock and privacy filter.

Answer

Smart card reader and biometric scanner.

Answer

Asset tracking tag and a Kensington lock slot.

Question 7

During a routine security walkthrough, you notice that an employee has propped open a secured door to the server room with a doorstop to allow easy access for a cleaning crew. What is the most immediate action you should take?

Accepted Answer

Remove the doorstop and close the door.. Propping open a secured door bypasses all physical access controls, creating an immediate security risk. The first step is to close the door to restore security, then address the policy violation.

Answer

Document the incident and report it to the security manager.

Answer

Reprimand the employee who propped the door.

Answer

Install a door alarm that sounds if the door is open too long.

Question 8

A small business wants to secure its network switch located in a shared office area. The switch has no built-in lock. Which combination of physical controls provides the best protection against unauthorized tampering?

Accepted Answer

Place the switch in a lockable cabinet and enable MAC address filtering.. A lockable cabinet prevents physical access to the switch, and port security prevents unauthorized devices from connecting to the network. This question tests layered physical and logical security for network infrastructure.

Answer

Use a cable lock to secure the switch to the desk.

Answer

Install a privacy filter on the switch's LED display.

Answer

Apply tamper-evident tape over the switch's vents.

Question 9

An organization experiences a data breach when an attacker physically removes hard drives from a decommissioned server that was placed in a storage area without being properly sanitized. What physical security control should have been implemented?

Accepted Answer

Use a degausser to erase the hard drives before disposal.. Proper disposal procedures, such as degaussing or physical destruction, ensure that data on decommissioned drives cannot be recovered. This scenario tests understanding of the full lifecycle of physical media security.

Answer

Install a surveillance camera in the storage area.

Answer

Require a smart card to access the storage area.

Answer

Apply tamper-evident seals to the server chassis.

Question 10

A user reports that their workstation is running slowly and they see frequent pop-up ads even when no browser is open. They also notice a new toolbar in their system tray that they did not install. What is the most likely security issue?

Accepted Answer

The system has adware installed.. This scenario describes classic symptoms of adware or potentially unwanted program (PUP) infection. Adware displays unsolicited advertisements and often installs toolbars; it degrades performance and can be a vector for more serious malware. The correct answer identifies the issue as adware.

Answer

A rootkit has hidden itself in the kernel.

Answer

A ransomware encryption process has started.

Answer

The user's account has been phished and credentials stolen.

Question 11

A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique hardware ID. Which logical security method should be implemented to enforce this restriction?

Accepted Answer

Enable MAC address filtering on the network switch or router.. MAC address filtering restricts network access based on the unique hardware identifier of a device's network interface. This is a simple logical security control that can be applied at the network level to allow only known laptops. It is not as strong as certificate-based authentication but directly addresses the requirement.

Answer

Require a complex password for the file server share.

Answer

Install a host-based firewall on each laptop.

Answer

Disable the guest account on the file server.

Question 12

A company policy requires that all sensitive data stored on laptops must be unreadable if the device is lost or stolen. A technician is tasked with implementing a solution that works transparently for users. Which approach should they take?

Accepted Answer

Enable BitLocker drive encryption on each laptop.. Full disk encryption (FDE) encrypts the entire drive, making data unreadable without the decryption key. It operates transparently after the user authenticates at boot, meeting the policy requirement. BitLocker is a common implementation for Windows systems.

Answer

Set a BIOS password on each laptop.

Answer

Implement a folder-level password policy using EFS.

Answer

Configure a screensaver password with a 1-minute timeout.

Question 13

An employee receives an email that appears to be from the CEO, asking them to urgently wire funds to a new vendor. The email address looks similar to the CEO's but has a slight typo. What type of social engineering attack is this?

Accepted Answer

Whaling. This is a classic whaling attack, a form of phishing that targets high-level executives or impersonates them to trick employees into performing actions like wire transfers. The spoofed email address and urgent request are typical indicators. Whaling is a specific type of social engineering focused on senior staff.

Answer

Phishing

Answer

Spear phishing

Answer

Vishing

Question 14

A technician is configuring a new employee's laptop and needs to ensure that only approved applications can run. The company wants to prevent users from installing unauthorized software. Which security control should be implemented?

Accepted Answer

Configure an application whitelist using AppLocker.. Application whitelisting allows only pre-approved programs to execute, blocking all others by default. This is the most effective way to prevent unauthorized software installation. Software Restriction Policies or AppLocker in Windows can enforce this.

Answer

Enable Windows Defender real-time protection.

Answer

Set the user account as a Standard User.

Answer

Disable the Windows Store.

Question 15

A user calls the help desk saying they cannot access a shared folder on the network. They can access other shares on the same server. The technician verifies the user's account is active and the folder exists. What should the technician check next to resolve the access issue?

Accepted Answer

Review the NTFS permissions on the shared folder.. NTFS permissions control access at the folder level on the server. Even if share permissions allow access, restrictive NTFS permissions can block a specific user. The technician should check the effective permissions on that folder for the user.

Answer

Check if the user's password has expired.

Answer

Verify the user has been added to the local Administrators group.

Answer

Reboot the file server to clear any cached permissions.