220-1102 Practice Test 49 — 15 Questions

Question 1

A company is designing a secure entry for a high-security lab. They need to ensure that only one person can enter at a time and that the person must be authenticated before the second door opens. Which physical security control should be used?

Accepted Answer

Mantrap with smart card and biometric authentication. A mantrap (also called an interlocking door system) is the correct physical security control because it creates a small vestibule with two interlocking doors that prevent more than one person from entering at a time. The requirement for smart card and biometric authentication ensures that the person must be authenticated before the second door opens, providing both identity verification and access control. This design enforces a strict one-person entry sequence and prevents tailgating or piggybacking.

Answer

Turnstile with biometric reader

Answer

Security guard with logbook

Answer

Cipher lock with door alarm

Question 2

A technician is configuring a new server rack in a shared office space. Which physical security measure should be applied to prevent unauthorized physical access to the servers?

Accepted Answer

Use rack-mount locks on each server chassis. Option B is correct because rack-mount locks provide a direct physical barrier that prevents unauthorized individuals from opening the server chassis and accessing internal components, such as hard drives, memory, or cables. In a shared office space, this is the most effective measure to deter tampering, theft, or accidental damage at the rack level.

Answer

Install a door alarm on the office entrance

Answer

Enable BitLocker on all server drives

Answer

Configure a strong BIOS password

Question 3

A data center manager wants to implement a physical security control that can detect if a server chassis has been opened without authorization. Which control should they use?

Accepted Answer

Tamper-evident seals. Tamper-evident seals are a physical security control that provide visual evidence of unauthorized access. When a server chassis is opened, the seal is broken, indicating tampering. This is the correct choice because the question specifically asks for a control that can detect if a chassis has been opened, and tamper-evident seals are designed for this purpose.

Answer

Intrusion detection system (IDS) on the network

Answer

Chassis intrusion switch

Answer

Video surveillance

Question 4

During a routine security audit, you find that an employee has taped their door lock open to avoid using their badge every time they leave for a break. What is the most immediate security concern with this practice?

Accepted Answer

Unauthorized persons can enter without credentials. Option C is correct because propping a door lock open bypasses the physical access control system (PACS), allowing anyone—including unauthorized individuals—to enter the secured area without presenting valid credentials (e.g., a proximity card or PIN). This directly defeats the purpose of the access control mechanism, which is to authenticate and log each entry. The most immediate risk is that an attacker or tailgater can gain unrestricted physical access to sensitive assets, systems, or data.

Answer

The employee might lose their badge

Answer

It violates company badge policy

Answer

The door lock may break from being forced open

Question 5

A user reports that their laptop was stolen from their desk overnight. The security team reviews badge logs and finds no after-hours access to the floor. What physical security control should be implemented to prevent this from recurring?

Accepted Answer

Use a cable lock to secure the laptop to the desk.. Option C is correct because a cable lock physically secures the laptop to a fixed object like a desk, directly preventing theft by requiring physical force or tool removal. Since the breach occurred overnight with no after-hours access, the threat was unauthorized physical removal, not logical access. A cable lock is the only control that addresses the physical theft vector by tethering the device to an immovable anchor.

Answer

Install a biometric fingerprint reader on the laptop.

Answer

Require a smart card to log in to the laptop.

Answer

Enable full-disk encryption on the laptop.

Question 6

A company wants to secure its server room door so that only authorized personnel can enter. They need a system that can be quickly revoked if an employee leaves and that logs entry attempts. Which physical security control best meets these requirements?

Accepted Answer

An electronic key card system.. An electronic key card system meets both requirements: access can be instantly revoked by deactivating the card in the central database, and each entry attempt is logged with a timestamp and card ID. This provides granular, auditable access control without the need to physically change locks or share codes.

Answer

A combination lock with a shared code.

Answer

A biometric fingerprint scanner.

Answer

A physical key and lock system.

Question 7

A company is moving to a new office and wants to secure its server room against both unauthorized entry and environmental hazards. Which combination of physical controls should be implemented?

Accepted Answer

An electronic badge reader and a temperature sensor. Option B is correct because the question requires controls that address both unauthorized entry (electronic badge reader) and environmental hazards (temperature sensor). An electronic badge reader provides access control by authenticating users before entry, while a temperature sensor monitors environmental conditions to detect overheating or fire risks, enabling proactive responses to protect server equipment.

Answer

A key lock and a fire extinguisher

Answer

A biometric scanner and a security camera

Answer

A combination lock and a humidity monitor

Question 8

A user complains that their computer is running slowly and they see a USB drive they don't recognize plugged into the front port. What is the first step a technician should take to address this potential security issue?

Accepted Answer

Ask the user to unplug the USB drive immediately.. Option C is correct because the immediate priority is to contain the potential security threat by physically removing the unknown USB drive. This follows the principle of least privilege and incident response best practices: isolate the suspect device before performing any analysis or remediation. Unplugging the drive stops any ongoing data exfiltration or malware installation, which is the first step in a security incident response.

Answer

Run a full antivirus scan on the computer.

Answer

Check the USB drive's contents to see what it contains.

Answer

Disable the USB ports in the BIOS.

Question 9

A company policy requires that all sensitive data stored on laptops must be unreadable if the device is lost or stolen. A technician is tasked with implementing a solution that works transparently for users. Which approach should they take?

Accepted Answer

Enable BitLocker drive encryption on each laptop.. BitLocker drive encryption provides full-disk encryption that operates transparently to the user, automatically encrypting all data on the system drive. If the laptop is lost or stolen, the data remains unreadable without the decryption key, satisfying the policy requirement without requiring user intervention.

Answer

Set a BIOS password on each laptop.

Answer

Implement a folder-level password policy using EFS.

Answer

Configure a screensaver password with a 1-minute timeout.

Question 10

A technician is configuring a new employee's laptop and needs to ensure that only approved applications can run. The company wants to prevent users from installing unauthorized software. Which security control should be implemented?

Accepted Answer

Configure an application whitelist using AppLocker.. AppLocker is a Windows security feature that allows administrators to create rules that explicitly permit only approved applications to run, effectively blocking all others. This is the correct control for preventing unauthorized software installation because it enforces an application whitelist at the kernel level, overriding user permissions. Standard User accounts or antivirus alone cannot prevent execution of approved-but-unauthorized binaries, making AppLocker the precise solution for this requirement.

Answer

Enable Windows Defender real-time protection.

Answer

Set the user account as a Standard User.

Answer

Disable the Windows Store.

Question 11

A user calls the help desk saying they cannot access a shared folder on the network. They can access other shares on the same server. The technician verifies the user's account is active and the folder exists. What should the technician check next to resolve the access issue?

Accepted Answer

Review the NTFS permissions on the shared folder.. Since the user can access other shares on the same server, the issue is isolated to a specific shared folder. NTFS permissions control access at the folder level independently of share permissions, and a missing or incorrect NTFS entry for the user would block access even if the share permissions are open. The technician should review the NTFS permissions on that folder to ensure the user or their group has at least Read access.

Answer

Check if the user's password has expired.

Answer

Verify the user has been added to the local Administrators group.

Answer

Reboot the file server to clear any cached permissions.

Question 12

A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique hardware ID. Which logical security method should be implemented to enforce this restriction?

Accepted Answer

Enable MAC address filtering on the network switch or router.. MAC address filtering on the network switch or router allows the administrator to create an access control list (ACL) that permits only specific hardware MAC addresses to connect to the network. Since each laptop has a unique hardware ID (MAC address), this method directly ties network access to the authorized devices, ensuring only those laptops can reach the file server. This is a logical security control implemented at Layer 2 of the OSI model.

Answer

Require a complex password for the file server share.

Answer

Install a host-based firewall on each laptop.

Answer

Disable the guest account on the file server.

Question 13

An employee receives an email that appears to be from the CEO, asking them to urgently wire funds to a new vendor. The email address looks similar to the CEO's but has a slight typo. What type of social engineering attack is this?

Accepted Answer

Whaling. B is correct because whaling is a targeted phishing attack aimed at high-profile individuals like the CEO or CFO, often using a fake but similar email address to request urgent financial transfers. The slight typo in the email address (e.g., ceo@company.com vs. ceo@cornpany.com) is a classic whaling tactic to bypass casual inspection, exploiting the authority of the executive to pressure the victim into bypassing normal verification procedures.

Answer

Phishing

Answer

Spear phishing

Answer

Vishing

Question 14

A technician is setting up a new wireless network for a small office. They want to ensure that only company-issued devices can connect, and that data transmitted over the air is encrypted. Which combination of settings should they use?

Accepted Answer

WPA3 with AES encryption and MAC address filtering.. Option B is correct because WPA3 with AES encryption provides the strongest wireless security standard, ensuring robust data confidentiality and integrity. MAC address filtering adds an additional layer of access control, allowing only company-issued devices (with pre-approved MAC addresses) to connect, which aligns with the requirement to restrict access to authorized devices.

Answer

WPA2 with TKIP encryption and SSID broadcast disabled.

Answer

WEP with 128-bit key and a strong password.

Answer

Open network with a captive portal requiring employee login.

Question 15

A user reports that they can no longer access their encrypted files after a recent password change. The files were encrypted using EFS on a Windows 10 Pro workstation. What is the most likely cause of this issue?

Accepted Answer

The user did not back up their EFS certificate before changing the password.. EFS (Encrypting File System) uses a per-user certificate that is tied to the user's password hash. When a user changes their password without first backing up the EFS certificate, the system may lose access to the private key because the certificate's master key is encrypted with the old password hash. Without a backup of the certificate and private key, the encrypted files become permanently inaccessible.

Answer

The user changed the password via Ctrl+Alt+Del, which invalidates the EFS certificate.

Answer

The user's account was removed from the local Administrators group during the password change.

Answer

The hard drive has a hardware failure that corrupted the encrypted files.