220-1202 Practice Test 25 — 15 Questions

Question 1

A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique MAC address. Which security measure should be implemented on the network switch?

Accepted Answer

Configure MAC filtering. MAC address filtering restricts network access to devices with approved MAC addresses, providing a basic layer of security. This is a simple way to allow only specific laptops to connect to the file server.

Answer

Disable SSID broadcast

Answer

Enable WPA3 encryption

Answer

Change the default admin password

Question 2

A user calls the help desk because they cannot access a shared folder on the network. The user's account is part of the 'Sales' group, which has 'Read' permission, but the user needs to modify files. What is the most efficient way to grant the required access?

Accepted Answer

Add the user to a group that has 'Modify' permission. Adding the user to a group with 'Modify' permissions is efficient because it avoids individual permission assignments and follows the principle of group-based access control. This ensures the user can edit files without overcomplicating permissions.

Answer

Assign 'Full Control' to the user's account directly

Answer

Change the folder's sharing settings to 'Everyone' with 'Read/Write'

Answer

Remove the user from the Sales group and add them to a new group with 'Read' permission

Question 3

During a security audit, you find that a user's workstation has a USB device that automatically logs in to a cloud storage account when inserted. What security best practice is being violated?

Accepted Answer

Disabling auto-run. USB auto-run devices can bypass authentication and pose a security risk. Disabling auto-run prevents unauthorized access and malware from executing automatically, which is a key security practice.

Answer

Password complexity requirements

Answer

Account lockout policies

Answer

Enforcing screen locks

Question 4

A company requires that all sensitive data be encrypted when stored on laptops. Which technology should be implemented to ensure data is protected even if a laptop is stolen?

Accepted Answer

BitLocker Drive Encryption. Full disk encryption (FDE) encrypts the entire drive, making data unreadable without the decryption key. This protects data in case of theft, as the drive cannot be accessed without proper authentication.

Answer

File-level encryption using EFS

Answer

TPM chip only

Answer

Secure Boot

Question 5

A user receives an email from what appears to be their bank, asking them to click a link and verify their account due to suspicious activity. The email contains several spelling errors and the link points to an unfamiliar domain. What type of attack is this?

Accepted Answer

Phishing. Phishing attacks use deceptive emails to trick users into revealing sensitive information. The suspicious link and errors indicate a phishing attempt, not a legitimate bank communication.

Answer

Spear phishing

Answer

Whaling

Answer

Vishing

Question 6

A technician is configuring a new firewall for a small office. They need to allow remote employees to securely access the internal network. Which technology should be enabled on the firewall?

Accepted Answer

VPN server. A VPN creates an encrypted tunnel between a remote user and the internal network, ensuring secure access. This is the standard method for remote employees to connect safely.

Answer

Port forwarding

Answer

VPN passthrough

Answer

DMZ

Question 7

A company's security policy requires that user accounts be disabled after 90 days of inactivity. An administrator needs to implement this automatically. Which feature should they configure?

Accepted Answer

User account expiration. Account expiration policies can be set to automatically disable accounts after a specified period of inactivity. This enforces the security policy without manual intervention.

Answer

Password expiration policy

Answer

Account lockout threshold

Answer

Group Policy refresh interval

Question 8

A server administrator notices that an unauthorized user has been accessing sensitive data by exploiting a vulnerability in a web application. The application was recently updated. What is the most likely cause of this security incident?

Accepted Answer

Zero-day vulnerability. A zero-day vulnerability is a previously unknown flaw that attackers exploit before a patch is available. Even with recent updates, such vulnerabilities can exist, leading to unauthorized access.

Answer

Weak password policy

Answer

Misconfigured firewall

Answer

Social engineering attack

Question 9

A user reports that they can no longer access the internet after installing a new software application. The technician suspects the application modified system settings. Which security feature could have prevented this?

Accepted Answer

User Account Control (UAC). User Account Control (UAC) prompts for permission before allowing changes that affect system settings. If the user had denied the UAC prompt, the application would not have been able to modify network settings.

Answer

Windows Defender Firewall

Answer

BitLocker Drive Encryption

Answer

Windows Defender Antivirus

Question 10

A customer reports that their laptop frequently disconnects from the office Wi-Fi and reconnects after a few seconds. The network uses WPA2-PSK with AES encryption. The technician checks the router logs and sees repeated '4-way handshake timeout' errors. What is the most likely cause of this issue?

Accepted Answer

The laptop is too far from the access point, causing intermittent signal loss.. The 4-way handshake timeout errors indicate that the laptop cannot complete the WPA2 authentication process, often due to signal interference or weak signal strength. While other options could cause connectivity issues, the specific handshake timeout points to a problem with the wireless signal or authentication process.

Answer

The laptop is using an outdated WEP encryption protocol.

Answer

The router's DHCP lease time is set too short.

Answer

The router is configured for WPA2-Enterprise instead of WPA2-PSK.

Question 11

A small business owner wants to replace their old wireless router because guests have been using the network to access inappropriate content. The owner wants to isolate guest traffic from the main business network and enforce content filtering. Which combination of wireless security and features should the technician recommend?

Accepted Answer

WPA2-PSK with a guest network enabled and content filtering via OpenDNS.. WPA2-PSK with a separate guest network and content filtering DNS provides both security and isolation. WPA3 is not yet widely supported on all devices, and MAC filtering is not effective for guest isolation.

Answer

WPA3-Personal with MAC address filtering.

Answer

WPA2-Enterprise with a RADIUS server and no guest network.

Answer

WEP encryption with a hidden SSID.

Question 12

During a security audit, a technician discovers that a company's wireless network uses WEP encryption. The network has been in place for 10 years and still uses the original router. What is the most immediate security risk?

Accepted Answer

WEP keys can be easily cracked using tools like Aircrack-ng.. WEP encryption is fundamentally flawed and can be cracked in minutes with readily available tools. This is the most pressing risk, as it allows attackers to decrypt traffic and potentially access the network.

Answer

The router may not support modern encryption protocols.

Answer

The router's firmware is likely outdated and vulnerable to exploits.

Answer

WEP does not support WPA2-PSK, so clients must use a different protocol.

Question 13

A technician is configuring a wireless network for a new office. The network must support legacy devices that only support WPA-TKIP, but the technician also wants to maximize security for modern devices. Which configuration should the technician use?

Accepted Answer

Set up a separate SSID with WPA-TKIP for legacy devices and another SSID with WPA2-AES for modern devices.. WPA2-PSK with AES is the most secure option, but it is not backward compatible with WPA-TKIP devices. The technician must choose between compatibility and security; the best practice is to upgrade legacy devices or use a separate network for them.

Answer

Enable WPA3-SAE for all devices.

Answer

Use WPA2-PSK with TKIP encryption.

Answer

Configure the router for WPA2-PSK with AES and enable WPA-TKIP as a fallback.

Question 14

A user reports that their smartphone cannot connect to the office Wi-Fi, but other devices can. The network uses WPA2-Enterprise with PEAP-MSCHAPv2. The technician checks the phone's settings and sees that it is configured for WPA2-PSK. What is the most likely reason for the connection failure?

Accepted Answer

The phone is using the wrong security protocol.. WPA2-Enterprise requires a username and password or certificate for authentication, not a pre-shared key. The phone's WPA2-PSK setting is incompatible with the network's authentication method.

Answer

The phone's Wi-Fi antenna is damaged.

Answer

The router's SSID is hidden.

Answer

The phone's MAC address is filtered.

Question 15

A technician is setting up a wireless network for a home office. The client is concerned about neighbors accessing their internet. The technician enables WPA2-PSK with a strong passphrase. Which additional step should the technician take to ensure the network is as secure as possible?

Accepted Answer

Disable WPS on the router.. Disabling WPS prevents attackers from using brute-force attacks to guess the PIN and retrieve the passphrase. WPA2-PSK with a strong passphrase is secure, but WPS can bypass that security.

Answer

Enable WPS for easy device pairing.

Answer

Disable SSID broadcast.

Answer

Enable MAC address filtering.