easyMultiple ChoiceObjective-mapped
220-1202 Practice Question: A company policy requires that all USB flash…
A company policy requires that all USB flash drives be encrypted before use. A technician needs to configure a new drive for a manager who will store confidential client data. Which built-in Windows tool should the technician use?
⚠ Common exam trap
CompTIA often tests the distinction between EFS (file-level encryption) and BitLocker (full-disk encryption), and the trap here is that candidates may confuse EFS with BitLocker To Go because both involve encryption, but EFS cannot encrypt entire removable drives for portable use.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
BitLocker To Go
BitLocker To Go is the correct built-in Windows tool for encrypting removable drives like USB flash drives. It provides full-disk encryption specifically designed for portable storage, ensuring that the confidential client data on the drive is protected if the drive is lost or stolen.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
EFS (Encrypting File System)
Why it's wrong here
EFS (Encrypting File System) is a Windows feature designed to encrypt individual files and folders on NTFS-formatted volumes. While it provides granular data protection, it operates at the file system level and is not intended for whole-drive encryption of removable media like USB flash drives. Implementing EFS would require users to manually encrypt each item, which is impractical and does not fulfill a policy mandating full encryption for the entire portable storage device.
- ✓
BitLocker To Go
Why this is correct
BitLocker To Go is the correct solution because it is specifically engineered to provide full-disk encryption for removable data drives, such as USB flash drives. This robust security feature ensures that all data on the drive is encrypted, protecting sensitive information from unauthorized access if the device is lost or stolen. It supports various authentication methods, including passwords or smart cards, making it ideal for enforcing corporate security policies on portable storage devices.
- ✗
Windows Defender Firewall
Why it's wrong here
Windows Defender Firewall is a network security component integrated into Windows operating systems, primarily responsible for monitoring and controlling network traffic. Its function is to prevent unauthorized access to a computer over a network and to block malicious software from communicating externally. This utility operates exclusively at the network layer and possesses no capabilities or settings related to encrypting local or removable storage devices, rendering it irrelevant for securing USB drives.
- ✗
Device Manager
Why it's wrong here
Device Manager is a system utility within Windows that allows users to view, configure, and troubleshoot hardware components connected to the computer. It provides information about installed devices, their drivers, and enables actions like updating drivers or enabling/disabling hardware. This tool is solely focused on hardware management and configuration, offering no functionalities or controls for implementing or managing data encryption on any type of storage media.
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.