Quick Answer
Configure Windows Defender Firewall rules, NTFS permissions, BitLocker, and MFA; identify phishing and ransomware, apply least privilege, and respond to incidents. Get NTFS vs. share permission precedence right, since effective access is the most-tested trap.
This domain covers physical and logical security for endpoints, networks, and data. You must know how to configure Windows Defender Firewall, NTFS permissions, BitLocker, and MFA. The exam tests your ability to identify threats like phishing and ransomware, apply least privilege, and respond to incidents using tools such as Windows Security and Group Policy.
What the exam tests
Common exam traps
Malware Types and Removal
Objective 2.1 · Security
Windows Security Features
Objective 2.2 · Security
Data Destruction and Disposal
Objective 2.3 · Security
SOHO Network Security
Objective 2.4 · Security
Social Engineering for A+
Objective 2.5 · Security
Malware Classification: Virus, Worm, Ransomware, Rootkit
Objective 2.1 · Security
Browser Security Settings and Add-ons
Objective 2.2 · Security
Email Security: Spam and Phishing Detection
Objective 2.2 · Security
MFA Types for Users
Objective 2.2 · Security
Encryption Concepts for A+
Objective 2.2 · Security
TPM and Secure Boot
Objective 2.2 · Security
VPN Client Configuration
Objective 2.2 · Security
Certificate Management for A+
Objective 2.2 · Security
Wireless Encryption: WEP, WPA, WPA2, WPA3
Objective 2.4 · Security
Physical Security: Locks, Cameras, Access Badges
Objective 2.2 · Security
Tailgating and Piggybacking Prevention
Objective 2.5 · Security
Vishing and Smishing Attacks
Objective 2.5 · Security
Data Sanitization: Wipe, Degauss, Shred, Incinerate
Objective 2.3 · Security
Secure Disposal of Electronic Equipment
Objective 2.3 · Security
SOHO Router Security Configuration
Objective 2.4 · Security
Software Patch Management
Objective 2.2 · Security
Principle of Least Privilege
Objective 2.2 · Security
Account Lockout Policies
Objective 2.2 · Security
Audit Logging and Review
Objective 2.2 · Security
Incident Response for A+
Objective 2.2 · Security
Data Classification Levels
Objective 2.2 · Security
Basic Compliance: GDPR, HIPAA, PCI-DSS
Objective 2.2 · Security
Password Managers and Best Practices
Objective 2.2 · Security
Free 220-1102 practice questions with full explanations. Test what you learn chapter by chapter.
220-1102 Practice Questions