220-1202 Practice Test 5 — 25 Questions

Question 1

During a software deployment, a technician needs to ensure that a company-issued Android device automatically connects to the corporate Wi-Fi network and disables the camera for security. Which mobile OS tool should be used to enforce these policies?

Accepted Answer

Deploy a Mobile Device Management (MDM) profile. Mobile Device Management (MDM) solutions allow administrators to push configuration profiles and restrictions, such as Wi-Fi settings and camera disablement. This is the standard enterprise tool for managing multiple devices centrally.

Answer

Use the Android Debug Bridge (ADB) to manually set Wi-Fi and camera permissions

Answer

Configure the device's built-in Guest Mode

Answer

Install a third-party camera-blocking app from the Play Store

Question 2

A company uses a cloud-based SaaS application for customer relationship management (CRM). Several employees report that they cannot access the CRM this morning, but internet connectivity is working. The IT support team checks the cloud provider's status page and finds no reported outages. What should the technician check next?

Accepted Answer

Check if the users' accounts have expired or if passwords need to be reset.. When a cloud service is accessible to some but not others, the issue is often local authentication or configuration. Expired credentials or browser cache problems are common causes. The cloud provider's status page shows no outage, so the issue is likely client-side. DNS and firewall settings would affect all users if misconfigured.

Answer

Verify that the DNS server is resolving the CRM URL correctly.

Answer

Reboot the company's firewall to clear any temporary blocks.

Answer

Reinstall the CRM application on the affected workstations.

Question 3

A company is considering moving its email system from an on-premises Exchange server to a cloud-based solution. Which cloud service model would best fit this migration?

Accepted Answer

SaaS (Software as a Service). SaaS (Software as a Service) is the correct model because it delivers fully functional email applications (e.g., Microsoft 365 Exchange Online) over the internet, eliminating the need for the company to manage the underlying infrastructure, platform, or software. The cloud provider handles all maintenance, updates, and availability, making it ideal for migrating an existing email system without re-architecting the application itself.

Answer

IaaS (Infrastructure as a Service)

Answer

PaaS (Platform as a Service)

Answer

DaaS (Desktop as a Service)

Question 4

A user reports that their cloud-synced files are not appearing on their laptop after a recent OS reinstall. The technician verifies that the cloud storage account is active and the internet connection works. Which of the following is the most likely reason for the missing files?

Accepted Answer

The local sync client is configured for selective sync and not downloading all folders. Cloud storage clients use a local cache to sync files. After an OS reinstall, the client must re-download files from the cloud, but if selective sync is enabled, only certain folders are synced. The user may need to adjust sync settings to restore all files. This tests understanding of cloud storage synchronization behavior.

Answer

The cloud storage provider has deleted the files due to inactivity

Answer

The user's account is not licensed for the cloud service

Answer

The laptop's hard drive is full

Question 5

A technician is tasked with migrating a physical server running a legacy OS that does not support virtualization drivers. The technician needs to ensure the OS can boot and run in a virtual machine. Which of the following steps is most critical before performing the physical-to-virtual (P2V) conversion?

Accepted Answer

Use a P2V tool that can inject the correct HAL and storage drivers for the hypervisor. Legacy OSes often lack drivers for virtualized hardware, so using a P2V tool that can inject the necessary HAL and storage drivers during conversion is essential. Without this, the VM will likely blue screen on boot. This tests advanced knowledge of P2V migration challenges and driver injection.

Answer

Increase the physical server's RAM before conversion

Answer

Ensure the legacy OS has the latest service pack installed

Answer

Create a full backup of the physical server

Question 6

A user reports that their cloud-based virtual desktop (VDI) is disconnecting frequently. The user's internet connection is stable, and other cloud services work fine. The technician checks the VDI's resource usage and finds that the virtual machine's RAM is consistently at 95% usage. What should the technician do to resolve the disconnections?

Accepted Answer

Increase the amount of RAM allocated to the VDI.. This scenario tests advanced troubleshooting of VDI performance. High memory usage can cause the VM to become unresponsive, leading to disconnections. Increasing the VM's RAM allocation directly addresses the resource bottleneck. Reducing RAM would worsen the problem, and network or GPU issues are not indicated.

Answer

Reduce the amount of RAM allocated to the VDI.

Answer

Reinstall the VDI client software on the user's device.

Answer

Enable GPU acceleration for the VDI.

Question 7

A small office wants to restrict access to the server room to only authorized IT staff. They need a solution that does not require keys or cards that can be lost. Which physical security control should they implement?

Accepted Answer

Biometric lock. Biometric locks use unique physical characteristics like fingerprints, eliminating the need for keys or cards that can be lost or stolen. This question tests knowledge of access control methods that combine security with convenience.

Answer

Keyed lock

Answer

Proximity card reader

Answer

Cipher lock

Question 8

A company is implementing a new policy to prevent tailgating at the main entrance. Which physical security control should they deploy?

Accepted Answer

Mantrap. A mantrap uses two interlocking doors to ensure only one person can enter at a time, effectively preventing tailgating. This tests understanding of specialized access controls designed to enforce one-person-per-authentication.

Answer

Security cameras

Answer

Biometric reader

Answer

Badge reader

Question 9

A company's server room has a door with a proximity card reader. Employees report that the door sometimes does not close fully, allowing it to be pushed open without a card. What is the best solution?

Accepted Answer

Install a door closer mechanism. The core issue is that the door fails to close fully, bypassing the proximity card reader's access control. A door closer mechanism is a mechanical device that automatically pulls the door shut, ensuring it latches and requires card authentication to re-enter. This directly addresses the physical vulnerability without changing the authentication method.

Answer

Replace the proximity card reader with a biometric reader

Answer

Add a security camera to monitor the door

Answer

Increase the frequency of badge audits

Question 10

A technician is troubleshooting why a smart card reader at a secure entrance fails intermittently. Users can sometimes enter, but other times the reader does not respond. What should the technician check first?

Accepted Answer

Check the cabling and connections to the reader. Intermittent failures in a smart card reader are most often caused by physical connection issues, such as loose or damaged cabling, rather than software or firmware problems. Checking cabling and connections is the first step in a structured troubleshooting approach because it addresses the most common and easily verifiable cause of intermittent behavior.

Answer

Update the smart card reader firmware

Answer

Replace the smart cards for all users

Answer

Reconfigure the access control software

Question 11

A customer reports that their laptop was stolen from a locked office over the weekend. The office door uses a standard key lock, and the laptop was not physically secured. Which physical security control would have most likely prevented this theft?

Accepted Answer

Attach a cable lock to the laptop. This question tests knowledge of physical security controls that deter theft. A cable lock physically attaches the laptop to a desk, making it difficult to remove quickly. Key locks on doors alone are insufficient if someone gains access; cable locks provide a secondary layer of defense.

Answer

Use a smart card reader on the door

Answer

Install a security camera in the hallway

Answer

Enable BitLocker on the laptop

Question 12

A small business wants to prevent unauthorized individuals from following employees through a secure entrance after badge access is granted. Which physical security control is specifically designed to address this threat?

Accepted Answer

Deploy a mantrap. A mantrap is a physical security control consisting of two interlocking doors with a small vestibule between them. It prevents tailgating by allowing only one person to enter at a time; the first door must close and lock before the second door can open, ensuring that only the authenticated individual passes through.

Answer

Install a biometric fingerprint scanner

Answer

Use a proximity card reader

Answer

Add a security guard

Question 13

A technician is configuring a new server room and needs to ensure that only authorized personnel can physically access it. The company wants a solution that does not require replacement of keys or cards if one is lost. Which access control method best meets this requirement?

Accepted Answer

Implement a biometric fingerprint reader. Biometric systems use unique physical traits (fingerprint, retina) that cannot be lost or easily duplicated. This eliminates the need to reissue credentials if a card or key is lost, though biometrics have their own management challenges.

Answer

Use a combination lock

Answer

Install a smart card system

Answer

Use a keypad with a PIN code

Question 14

During a security audit, you find that a server room door has a standard key lock, but the key is kept in an unlocked drawer nearby. Which physical security principle is being violated?

Accepted Answer

Defense in depth. The principle of defense in depth requires multiple layers of security. Storing the key in an unlocked drawer negates the door lock, creating a single point of failure. Proper key management is essential.

Answer

Least privilege

Answer

Separation of duties

Answer

Change management

Question 15

During a security audit, you discover that a supply closet containing spare hard drives has a door that can be opened with a standard paperclip. What is the most appropriate recommendation to address this vulnerability?

Accepted Answer

Upgrade the lock to a tamper-resistant electronic lock.. Option C is correct because the vulnerability is a weak physical lock that can be bypassed with a simple tool. Upgrading to a tamper-resistant electronic lock, such as one with a keypad or biometric reader, significantly increases the difficulty of unauthorized entry. This directly addresses the core issue of inadequate access control for sensitive assets like spare hard drives.

Answer

Replace the door with a solid-core door and install a deadbolt.

Answer

Install a privacy filter on the closet door window.

Answer

Place a sign on the door warning of security cameras.

Question 16

A retail store wants to protect its point-of-sale (POS) terminals from unauthorized physical access during off-hours. The terminals are in an open area with no lockable cabinets. Which control should be prioritized?

Accepted Answer

Use tamper-evident seals on the terminal casings.. Tamper-evident seals provide a visible indicator if a device has been opened, deterring unauthorized physical access to internal components. This question tests understanding of physical security for unattended devices.

Answer

Install a privacy screen on each POS terminal.

Answer

Require a smart card to power on the terminal.

Answer

Enable a screensaver with a password.

Question 17

A company is deploying new laptops to remote workers. They need to ensure that if a laptop is stolen, the data on it cannot be accessed. Which two physical security controls should be configured before shipment?

Accepted Answer

Full-disk encryption and a BIOS/UEFI password.. Full-disk encryption protects data at rest, and a BIOS/UEFI password prevents unauthorized booting or tampering with boot settings. This question tests the combination of controls needed for remote device security.

Answer

Cable lock and privacy filter.

Answer

Smart card reader and biometric scanner.

Answer

Asset tracking tag and a Kensington lock slot.

Question 18

A small business wants to secure its network switch located in a shared office area. The switch has no built-in lock. Which combination of physical controls provides the best protection against unauthorized tampering?

Accepted Answer

Place the switch in a lockable cabinet and enable MAC address filtering.. A lockable cabinet prevents physical access to the switch, and port security prevents unauthorized devices from connecting to the network. This question tests layered physical and logical security for network infrastructure.

Answer

Use a cable lock to secure the switch to the desk.

Answer

Install a privacy filter on the switch's LED display.

Answer

Apply tamper-evident tape over the switch's vents.

Question 19

A technician discovers that a user has been sharing their login credentials with coworkers to allow them to access a shared drive. The company's security policy prohibits password sharing. What is the most effective way to prevent this behavior while still allowing necessary access?

Accepted Answer

Configure the shared drive permissions using security groups and add the coworkers to the appropriate group.. The root cause is that the shared drive access is tied to individual accounts, encouraging sharing. Implementing group-based permissions with proper access control lists (ACLs) allows the company to grant access to a group rather than an individual, eliminating the need to share passwords. Additionally, enforcing a policy of non-repudiation and using audit logs can deter sharing.

Answer

Disable the user's account and create a generic shared account for the drive.

Answer

Implement a Group Policy that forces password changes every 30 days.

Answer

Send a company-wide email reminding users not to share passwords.

Question 20

A company is implementing a new policy that requires users to authenticate using both a password and a one-time code sent to their mobile phone. What type of authentication factor is the one-time code?

Accepted Answer

Something you have. Authentication factors are categorized as something you know (password), something you have (token or phone), and something you are (biometrics). A one-time code sent to a mobile phone is considered 'something you have' because access to the phone is required. This question tests the classification of multi-factor authentication components.

Answer

Something you are

Answer

Something you know

Answer

Somewhere you are